RoamingTraiO
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
Static task
static1
Behavioral task
behavioral1
Sample
ab34669657855e78ea5f6447e786398a3b718827d2bca3995b367bdf7baf5001.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ab34669657855e78ea5f6447e786398a3b718827d2bca3995b367bdf7baf5001.exe
Resource
win10v2004-20220901-en
Target
ab34669657855e78ea5f6447e786398a3b718827d2bca3995b367bdf7baf5001
Size
218KB
MD5
a87497ca3d02f6f6481ebfd653416934
SHA1
4d1401f82278a3544e6444d7454a5976820ab834
SHA256
ab34669657855e78ea5f6447e786398a3b718827d2bca3995b367bdf7baf5001
SHA512
a3a653c6963de8d24961eab1cd08a565b71cf80e13603b6ced77e7b34a5d1541d95cd1e6be3734398b2d8b3c689c4d3dcaa7273df4fad2476f38301ee5c404ca
SSDEEP
3072:LpweV363LQyOP107pGEhavPUi95BLrP0vno3y7/RrI90Hry13uSP/D26QqRW+8bT:9wyqbsKFLkP7RiLRt+Rxz2fqRxI
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateHatchBrush
IsCharAlphaNumericW
lstrcmpA
RoamingTraiO
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE