RoamingTraiI
?ImpactDS@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@I
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@I
Static task
static1
Behavioral task
behavioral1
Sample
59fbfc13acf4032be7317ffb7b6e1487e5f829e8b20c1f365ce1bf57178ba16b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
59fbfc13acf4032be7317ffb7b6e1487e5f829e8b20c1f365ce1bf57178ba16b.exe
Resource
win10v2004-20220812-en
Target
59fbfc13acf4032be7317ffb7b6e1487e5f829e8b20c1f365ce1bf57178ba16b
Size
198KB
MD5
5ab2f343d83891c84c86f2c01645b1ca
SHA1
bb2b9a26408c6351cd264dd96be1622cd50cb4e5
SHA256
59fbfc13acf4032be7317ffb7b6e1487e5f829e8b20c1f365ce1bf57178ba16b
SHA512
9ac4cc32f00c749c92ef89fdffbf37652e748b5e2cac60e3604a1c0e97784f22fe8f5f6c4ec72784ce042f8f824f3acdd2931b06f3a3aa2683ce2e5ef3fb7548
SSDEEP
6144:liGMoXJuNnn7M0OAt1x9sMJrTQUks1U1Qa:lXMoANn7ME7xKMFTN16H
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetForegroundWindow
StrPBrkA
IsValidCodePage
RoamingTraiI
?ImpactDS@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@I
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@I
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ