RoamingTraiO
?ImpactDS@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
?PowerUpgrade@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
Static task
static1
Behavioral task
behavioral1
Sample
f9a487179e4ae111946d586c13a5ebe2dc5a01576478dd12674830112c11fc7b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f9a487179e4ae111946d586c13a5ebe2dc5a01576478dd12674830112c11fc7b.exe
Resource
win10v2004-20220812-en
Target
f9a487179e4ae111946d586c13a5ebe2dc5a01576478dd12674830112c11fc7b
Size
194KB
MD5
0a7f57f9d2be3dc4ecf96058668af2c3
SHA1
09e98e13908d81639f181457a01a6e5b6166b62d
SHA256
f9a487179e4ae111946d586c13a5ebe2dc5a01576478dd12674830112c11fc7b
SHA512
ca0852b7e7d1364a30ef7dd2a5d155403ccb2b83371fc64a370a3113a1ab3f14be35bf9b3bdcd172cc7ea65a2a20add066bfc97e5da1e458c8f1622669170b9f
SSDEEP
6144:MgG16upF2Oov8ScvGtcd/4ZlmB/Esp76Q:tmz2OokScvBEspz
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LineDDA
IsCharAlphaNumericW
GetConsoleCP
RoamingTraiO
?ImpactDS@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
?PowerUpgrade@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ