RoamingTraiO
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
Static task
static1
Behavioral task
behavioral1
Sample
1ef40dc8d0c774f553ddd5416086310c023c30635a0c0234c4db7b5750dc1b5d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1ef40dc8d0c774f553ddd5416086310c023c30635a0c0234c4db7b5750dc1b5d.exe
Resource
win10v2004-20220812-en
Target
1ef40dc8d0c774f553ddd5416086310c023c30635a0c0234c4db7b5750dc1b5d
Size
160KB
MD5
6bcd775f30c35e969768b44d0d14285e
SHA1
7df188859bdfb188fcd3c07b372956b4e50ff59d
SHA256
1ef40dc8d0c774f553ddd5416086310c023c30635a0c0234c4db7b5750dc1b5d
SHA512
2e2e003471e02beb1d1fd0b28874aeaff5140e6a2f6efa8c2cb34bd754654c098509b5d6efd29f4616a069154cf7f5096c9635cc47b50622aaeaa1204b74d2a5
SSDEEP
3072:XdOVrR4j1QieLbp9II0GV4mDXH4Re3fTV3kKD5pJpH5wWkE1CHW:tOVrRE1sbXII0s4mDXGe3fTJ5npHSWky
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IsCharAlphaNumericW
lstrcpyW
CreatePatternBrush
RoamingTraiO
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE