RoamingTraiO
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
Static task
static1
Behavioral task
behavioral1
Sample
5a0eb3688ca4826d63b0919471a4e32e31ac7f30804b6534e21f81b2b179c313.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5a0eb3688ca4826d63b0919471a4e32e31ac7f30804b6534e21f81b2b179c313.exe
Resource
win10v2004-20220812-en
Target
5a0eb3688ca4826d63b0919471a4e32e31ac7f30804b6534e21f81b2b179c313
Size
96KB
MD5
69fff23a8363797cd0375b6b183b4f30
SHA1
632ef84d24ef4143a0c0e4b9edf342e5c4bf504b
SHA256
5a0eb3688ca4826d63b0919471a4e32e31ac7f30804b6534e21f81b2b179c313
SHA512
9bc9019db4fbb575493b4bdece11636135503581abe2f0e4391161a746a42321edd0af813cd58ec23a58c7a27816410ee17a77c3318819201e174c051816695f
SSDEEP
1536:+evWp13nshGO4jmGQieLbpMBtJqtqbYLLJQc4MdFEJKx/URKT6qvuMeT3ew+:ROp13YD4j1QieLbpAqtqmuc4MqMUdMeh
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IsCharLowerA
CreatePatternBrush
lstrcmpiW
RoamingTraiO
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ