RoamingTraiO
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
Static task
static1
Behavioral task
behavioral1
Sample
900d55b548ee6376213385e27ce79473dd97fa13b7aac1cc530e17b4bdc586ad.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
900d55b548ee6376213385e27ce79473dd97fa13b7aac1cc530e17b4bdc586ad.exe
Resource
win10v2004-20220812-en
Target
900d55b548ee6376213385e27ce79473dd97fa13b7aac1cc530e17b4bdc586ad
Size
195KB
MD5
96e6319457096f3a386ba186564af93a
SHA1
660f33a7cb5ef7d527c4b4e8dde7b38093f4066e
SHA256
900d55b548ee6376213385e27ce79473dd97fa13b7aac1cc530e17b4bdc586ad
SHA512
6efe810677285057545f749c51fb800561a71889b7b0cb3532fdf9260dbb2fae3ee0c65c63cb730327edc8e82970907c7941db8c3c6137a4c4f5247ba2b10f36
SSDEEP
6144:CDT1y9E1sbeOolte3mCMXXr72yrDU/66mb:CFyWOo9Ci2yF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreatePatternBrush
IsCharLowerA
lstrcmpiW
RoamingTraiO
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@O
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ