RoamingTraiO
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
Static task
static1
Behavioral task
behavioral1
Sample
3d38951420b4bb804ca79737ef0b48aea84f9b668617f280c407859a507a9e9e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3d38951420b4bb804ca79737ef0b48aea84f9b668617f280c407859a507a9e9e.exe
Resource
win10v2004-20220812-en
Target
3d38951420b4bb804ca79737ef0b48aea84f9b668617f280c407859a507a9e9e
Size
230KB
MD5
2d2373c59d86c3d1c7a672f37487451e
SHA1
315b44906ffde406b1b5b66fa00097f1d7ab4eb2
SHA256
3d38951420b4bb804ca79737ef0b48aea84f9b668617f280c407859a507a9e9e
SHA512
5754d1f7b21a6b0048b35332bd7181b9b6800b915f17e59bb51e5f18eb78f486070df7b82a2f0cb5f0b92fbacb905789bbd0b81fb8c5cba2069e7521b3d04e1e
SSDEEP
6144:CrlyE1sbPII6YgyqQbvG086WLN2tnjxH6yTwG:m2II6py3lnjxH6cw
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreatePatternBrush
lstrcpyW
IsCharAlphaNumericW
RoamingTraiO
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ