f��q����|O����>�pS��f�F���Dzm��1�o]���6ɩ��q{����1�'r,��^� ��@�~�gI쵥�� ��D���N����j�� �z�v�������?���� ��ܨ�s ��pHV��$�{����l"�[�� �LL�j����m�+�<���űt��C��@73(Ĭ��%ʲ$ukɻB��ʫ\���S?�(�U� ��4<�Fѥ0kݫ/S�����%��:\���`�>}��_�H��@ 1]2�=����k���� �"�������ƞof2�ǝ�jm����f�f�&[��!٧欈�D��H���W±�ѩ���%)�!�GW������)<�Cs�kN|��P�*�(X�0ӗ�çM7�e���gk�j6h��m�yv����9�s�W�t0��(�6��<�� �"�/�K�ܫE��(d�Ǐ��F0t�\R_lq�u���?��Z1� �O d �0�ndg��L-��+��r1��v�Y�����'k;�B�)z�&8B��C��̕$.��fv#=��LE���K��$~�XF,�+���kMҚ����J��S��h�geh�~~�fk������e?XӔl4YpT@�3�Co��u �m~.C��̄f)����ۼY�3��k ��$����+�C��Bb3T�ӛ�$1��/�Dȥ���C��|s�z�\%˱�A��+r�<?(a����h ��+n�c':ZTq�V���t���� ܾY��l/��~~3��D�kK����C���,=� i��ό:�%�-���ln����ݥqo:{�Y�$c�]L5: �+v�b�#4_���^�mؽ:� 7�.�V���I]�����М++i��n���!�0c%�Ȣm�����S��$���� �l\���C�K�-rw�Q-8j����[gtc{U>�I�|s��g�����[rwں��cP�d�@ b(q��6F��It�*)��k%���,j��t�L�ķ��Ƨx^ב0p�����4�u=��c�mj7���v��kqE>����2�a�����j�q�Ujr=����F��I�3W����N��-d�àj>�,?��٫��Y" *q�Af����o�W�dy 2~#�u�P�nN���`�PY��U� WކT֜p�r�.)C���1���8F�LA<�wa�[/Sx@FΊ���a�8�/��Α$X0� =����Ș!����/�ս ����n_�x6�ͷ(}�����V'Ʉ��^��j(�G������(㷴�N��EIivY�R�`�3� 歰~�K��]�OWĽg�!���P��j5�G����iz��G����CP*�DӠ�6�,���0QC�����oLW$��8?Eu!�ȏ(V�`Q�J�U5q��6���Y���<�y�vn�} ��]��5�?�s��}7X�ۉH<w�.���q�BS��t���ؽh��QE�S2x�*�@��R� ��߀��v�j�uR����F�c�E�6�K?�ЫZi%E�}Q����|&�����1H]��o"��zQl��f��D2�z(g�e��\rؕ�s|`9Ǻq{|�Xv�YYb ���G��u>nh!�,����^����n#IUx�b�aٌ%kD\~-�����a��_��]�����&�2��o�6�U&�Yۜ�}�B&"Kz*r=vk\å���_�c�o�m7�� Z�=tF��T˛0AJ�赍�@ ��f1�ʵ�Z[��~pQ��_�ȷz�!u��ψ�a�ș,ð�P��N�����2�k�z�^�c,�,oJϭy�����3R���/�XR�a?��b��p糣KOz�D��5���qy�83�Կ'��kO�)�~�H���rW� ~ٴc:t�ty���ԅ@�l�X0�$���5��X�}�4�G�:g��e�¶V����Dە�^�&��9D���Ȩq%���O<z����B����ͣ�5/��N��=';���@�T$s�jE����XK\��a&��xc�auDE|S����w��M>�;�4&��ʾ_�����}�?%V��GZ�����Y�/��)s!Lf����q�����8A��u&S����w�56Z �O�mW7�q>�3s��<���BK���,�Ey�����;)� �vjMB���d�h.���.i��Uze�'&[�����"�7DA�Lv�'���AM��Ɇ1u�K�'� ��/V�8$���˷w!��v���ݳt�/]�+ʡ ���Z%���!Q���P2e��6F�{�e�am�&�I���w��i�0 �Z������r�x�֭�s���ˏ���z>:���n�m�[7�3�$WV��G.����0������qQg���F��a������z��ij@�P-�+Q��'�W���C�&t�3/�,��s��D?����9��hu����\� �����fg��_Q�W�x��[ћ�K��`�Ad�?asFBc/+|˙��jV>I��CX��l�����0��9|ԤRۃ���! ��L�fiV�[ɣ��jX�+$^{��k��b���]�y�"��c���L(]p>0A2��i�ю����4}OxgR�~�Y �<ɴ��Fw�O�� �ʝ~ O ;��6��R�/+9��9 b�g�_hH��K�����,���H��T�n4|��:{h*���hi��F��jP����rR�ș�"��*��L}Z}"�y�6@�r�\����}����(#��m;��OK��<��(����o2V����A$?^3�m��[�d�������>����,b7W�\S�;'*;S2��-�L����N�!^����A5�>��p�,�q�:ű ������1�8o���]C�>��>��������+���l����+ י�%��H�,�p����xw�c�"ė��87k9Y�R�x� ��?��Z(�mߞ�lj���SNz�R��E�DR�{������o������k~�}��Ԝő���g�{���k��:���t!'����e��W��[0�?���DPhcmN+p�Hܩ���=w���.���p�<p̆�`��"����Vq�N�>�2��h�ߞ�����a�VW����KdܼJǕi
Static task
static1
Behavioral task
behavioral1
Sample
1f7f83ed460a6780f3d6e82464a2d93b994e9df639d8a8ceb5a54a5eb8d6f834.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
1f7f83ed460a6780f3d6e82464a2d93b994e9df639d8a8ceb5a54a5eb8d6f834.exe
Resource
win10v2004-20220414-en
General
-
Target
1f7f83ed460a6780f3d6e82464a2d93b994e9df639d8a8ceb5a54a5eb8d6f834
-
Size
7.4MB
-
MD5
8a0dbf93f55ae4345db165d5a2cb3329
-
SHA1
cea9acdfd5efeb41d9bda588bed9423731738a01
-
SHA256
1f7f83ed460a6780f3d6e82464a2d93b994e9df639d8a8ceb5a54a5eb8d6f834
-
SHA512
6c4e0ce6fa84aac4154cf3ae98335324e61245ad66b52303054e0962221fd0b514ba472af526f7eee0f331dc36faab7b6013d666676dd4a9b8981cbe5aab8576
-
SSDEEP
196608:pPZrK+1XbSiAAdjAAIM93oMwF51FfbLH4OfE4gFdW/ISO:1ZrBLSA5iMBFuvrfqdW/u
Malware Config
Signatures
Files
-
1f7f83ed460a6780f3d6e82464a2d93b994e9df639d8a8ceb5a54a5eb8d6f834.exe windows x86
0c8702090f96587df3ef3cf88157ac42
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
advapi32
GetUserNameW
user32
CharUpperBuffW
Exports
Exports
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
..,A Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.!T< Size: 1024B - Virtual size: 884B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.@PI Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ