RoamingTraiO
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
Static task
static1
Behavioral task
behavioral1
Sample
1531b01f03a861776f403732674c2152d9a76431ff8ca6df0c433653360e7ae2.exe
Resource
win7-20220812-en
Target
1531b01f03a861776f403732674c2152d9a76431ff8ca6df0c433653360e7ae2
Size
90KB
MD5
8cb8eb20751be45961b27ba5675dbb25
SHA1
fd6e51dcbb2d6a29ca6b2e82664e6afc865f234f
SHA256
1531b01f03a861776f403732674c2152d9a76431ff8ca6df0c433653360e7ae2
SHA512
6efbfb79b7c30bd85188829dfc5c0732cdc3a82c5ea4047785130c4dd69babe9235517eac79e0a76a3fb50b03aa6317173857fd6a90523d5e237cbf9ac882523
SSDEEP
1536:/PUjj8nJqjGYO4jmGQieLbpMBnIIgykup+MwtT4Ocour//BOWR3xjBCuFtXRL:3Ujj8gjGx4j1QieLbpcIIgyk3Mwx+r/1
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IsCharAlphaNumericW
CreatePatternBrush
lstrcpyW
RoamingTraiO
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ