LowerForY
?RevekFall@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@Y
?ServletKon@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@Y
Static task
static1
Behavioral task
behavioral1
Sample
68faf95782efb0ed75ef3b5ba30ee314c9171599f7a9c04e515e5826dddde709.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
68faf95782efb0ed75ef3b5ba30ee314c9171599f7a9c04e515e5826dddde709.exe
Resource
win10v2004-20220812-en
Target
68faf95782efb0ed75ef3b5ba30ee314c9171599f7a9c04e515e5826dddde709
Size
186KB
MD5
0c8ad9b80e5ae78761eb3e185d2d8ca7
SHA1
99d9c26e0a1be4ca2124b74a95f8e0d568e6a5f6
SHA256
68faf95782efb0ed75ef3b5ba30ee314c9171599f7a9c04e515e5826dddde709
SHA512
b3aefd402655e22e31e78206e16618dd35abbffe699e4533f598b647558a7737034877c6fde852cd118cea78ecd2a6a9652bd9e1dda0c1bc3bb41126bf2c9476
SSDEEP
3072:8Qh8H/P6bDtsAbIIwGsE57klh4HZ8XS7fyRIWoupuLM7WpLW/EQEAQvvFSsiDkmZ:b8fP6bDtsKIIRolhwKbKLoKRW8nAQHFk
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetForegroundWindow
lstrcpyW
StrCSpnIW
LowerForY
?RevekFall@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@Y
?ServletKon@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@Y
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ