RoamingTraiO
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
Static task
static1
Behavioral task
behavioral1
Sample
b0ffa3fed31be662fb1540f0ce464f978f842463c2671854e792217d24271bdd.exe
Resource
win7-20220812-en
Target
b0ffa3fed31be662fb1540f0ce464f978f842463c2671854e792217d24271bdd
Size
91KB
MD5
cfe120ac5459e1354471c6e88011470f
SHA1
67b27592d60f3359a63d0b73c61d0da6f971ebea
SHA256
b0ffa3fed31be662fb1540f0ce464f978f842463c2671854e792217d24271bdd
SHA512
db25d55ffe3e7035220c3675a37fb337d66c32cd0d9d12508515795a1ee27e9584a07193e637803e00109155d5e139604a09e1f61ed2a901c354b5922f64b0b1
SSDEEP
1536:YSqnfQyPvciei/DoWXQyhkZP107+yzJGIe97WP/huX3OmrqZbG7DAyB3jAF/8aHH:ub3LQyOP107+yzJGIedWRO+ZZy7Pu8m
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateHatchBrush
lstrcmpA
IsCharAlphaNumericW
RoamingTraiO
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ