RoamingTraiO
?ImpactDS@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
?PowerUpgrade@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
Static task
static1
Behavioral task
behavioral1
Sample
bcbe802cabe36a18a102957a391fbaf01611c338ea9da37ad00f7ff1e72a94fe.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bcbe802cabe36a18a102957a391fbaf01611c338ea9da37ad00f7ff1e72a94fe.exe
Resource
win10v2004-20220812-en
Target
bcbe802cabe36a18a102957a391fbaf01611c338ea9da37ad00f7ff1e72a94fe
Size
189KB
MD5
0b32422e2c87da2d70effdfb646b4237
SHA1
55adef4d1e3fb9c6e39f1bb6924830b943850ce1
SHA256
bcbe802cabe36a18a102957a391fbaf01611c338ea9da37ad00f7ff1e72a94fe
SHA512
a0d1108e1a008e332bdc9d7777808a5be4c8b2673a7838ffaf1d1cf89b80d095c6b95f92a34b88c7e3c2d0007cc0090d1bbcffb71c7fbee1fbefd343a57af582
SSDEEP
3072:9G15uh/eI/97llrTVlAQE+mk7DFFYnwXhGA6NKnHUc8rY/PkqrEb8I/KIdaHHG:KEvTVlAQ5mkvhGA/nHEYkP8o
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IsCharAlphaNumericW
LineDDA
GetConsoleCP
RoamingTraiO
?ImpactDS@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
?PowerUpgrade@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE