RoamingTraiO
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
Static task
static1
Behavioral task
behavioral1
Sample
c6b260611005b67b0899ac1bece6e29ac2ac2eaed177e2c49d997fcf91d30c16.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c6b260611005b67b0899ac1bece6e29ac2ac2eaed177e2c49d997fcf91d30c16.exe
Resource
win10v2004-20220812-en
Target
c6b260611005b67b0899ac1bece6e29ac2ac2eaed177e2c49d997fcf91d30c16
Size
204KB
MD5
eea8f27adf3fbac71ea9fc7ef5dec72d
SHA1
8235073dcd8412adfd3e79efb26f4cf4da53a784
SHA256
c6b260611005b67b0899ac1bece6e29ac2ac2eaed177e2c49d997fcf91d30c16
SHA512
a49735039b5468910440592169501c1729356ed46eda0671fc19fa5a01f93a01ce82663751331a3d4c1ce36be072d45ff6452d9403bc9471b7e0016151ea51eb
SSDEEP
6144:tMrUEsKBLNUWaDk3mEIqiDO9cUNl5ZYmhwgUthT6f:+UEnlGbw3Wa9cUN2mhwgUPGf
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateHatchBrush
IsCharAlphaNumericW
lstrcmpA
RoamingTraiO
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ