RoamingTraiI
?ImpactDS@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@I
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@I
Static task
static1
Behavioral task
behavioral1
Sample
3e78112a54de7f49376c4b28fc72355f3a6fb0a09fb2fa302296e05e19e4ab90.exe
Resource
win7-20220812-en
Target
3e78112a54de7f49376c4b28fc72355f3a6fb0a09fb2fa302296e05e19e4ab90
Size
92KB
MD5
0514d5f42c19f52095c865d77588e0c5
SHA1
a6e551928ae8d41690cbb4ea52efd6092e6455aa
SHA256
3e78112a54de7f49376c4b28fc72355f3a6fb0a09fb2fa302296e05e19e4ab90
SHA512
43636f8e388b9005da75bc27788a7edb3763ae63ed7e32f9664bc27b15743005849594e95adffdb57149c4849fa5d0b0dc9c8bab58563cd98c12f0d50baf64d4
SSDEEP
1536:uEYwgdCWzqI/rNXvhEIuxTnTAzkylrQ/zc/Vw9FbRRzD333P3NYby:u+g0orNXOIuNn0kylrmzctw9F9RzT3Nh
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetForegroundWindow
IsValidCodePage
StrPBrkA
RoamingTraiI
?ImpactDS@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@I
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@I
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ