RoamingTraiO
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
Static task
static1
Behavioral task
behavioral1
Sample
2e5571373910daea772256be5d0f1ac823d20567fddca407c9ee466e57141d8a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2e5571373910daea772256be5d0f1ac823d20567fddca407c9ee466e57141d8a.exe
Resource
win10v2004-20221111-en
Target
2e5571373910daea772256be5d0f1ac823d20567fddca407c9ee466e57141d8a
Size
237KB
MD5
fda04355676ec033746675f5bb102289
SHA1
ae1f6b13b259d08070bd93e7539e9051628dc7b8
SHA256
2e5571373910daea772256be5d0f1ac823d20567fddca407c9ee466e57141d8a
SHA512
30668470bdc969ebcf183300b2113cdaeb86f9c8d76c6cec010c834d3b59ad34ad607d78ed9a5792522083f16e463aa93517a6554a95669430354553643a30d5
SSDEEP
6144:bNJHsKvegsHSWt8eVgZa6KywsURmdTig8Hjbk:xJHnvEHS0zVjyPURmRiguk
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateHatchBrush
IsCharAlphaNumericW
GetTickCount
RoamingTraiO
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ