YT����5����V���Fx�p�+<;���s�y��dd-���Xʊ��Z��{/�a�LQ-�+6Q*>����b[jWc%��H�V�|pn_�:r1�o P4�|�K^[�..97��+9I�z���6+fNY��\U�l�O���4D��it�r�=�L�9�X�&Y��U��/��}�,{���ʛHe�QR�����~��¤ �xZ XJ2P ���j��Q�j����V�WQi�ε��%�x��.&F��|�0���6GI�@GG�����[$帓ѐr�l�cm�ԙ��+��� 4JM(�˕~<�VGúC� ���r���=�����X�����s?&�(vQ��w9�����<Q�:�l����<���p&�'j@�Tp#�UWDsT/}�aa�Ξ?C�dѻz�(�1���:���̈́�Qn�veM#�T�;���[��:�EQ��lQ[8�tdٳ���Ҥ���8ZBxGls� (|���=����<���O�.��S~�cb�(��� �u(DW�':a`�ެذ����#�Z���~]Nk4c���2��!�E֢ K�=\G|�.��ܺ�u�|G��#���[�,(9�f���om�-ZZ��D �q��^��fl�gL㏪Sż=��)��t��G�[��}��`Զ��_,���qHF*������8�.�H� �F�N��������+߬~~��k����ۂ���_抹H2��}�����E��jl��P�&?��P������a��{�]P�Q��vu��Bx����nG[��$=ӌK���#����κ�C�e����ry��`L�H5�u�J� ��5@uu�^�J�E�}b)o �D�i7Ѻ4��-�`��1�o<���U���a��u�E�q�$%���ِ��e���U +r;� �'���0>�"j!�%���2h������F��\]X���5�d���9z}����㰀�נB<�}ҩ,#�[Y��Om_���V��~g�^l���I���C�7�y�*�G�����o��`���K0���@�5>_���0��y>Λ+X�9z�!S�fabW�S? `B����B����e��P���2z�r�%-|�YSw��9s�?�����c0��A��l�ì�ބ�� �hu��ݤ��g�<z!]印���Ej��ğV�Q��T5�5� ��4Eޛ��qѶ���(S�9��Y��.=@w`A��/ڷG�[I��Gځԅ����UX�ez���m�S\"Eu�i����0+�2]uDf�p:�]ON �G]����e��@m�[�!ET��y��~����'��N��;���zSg�;j����l{��7�B�d��e��F��=�Dۇ�,�D�>�Z��F��U� a���'L� �?�Z��P�T�|P�6CR�O�0kQ�ީ��?��N���ޟ��i�}~ ��y<~lBpa-n�����"V����,ĒmE":���A�-����`l^�0-gL�������[ȯI�wa�ݺ�t�J�b��Fʔ��wԽ��ks�=z�]s�P��|��W3��I>p?�G�� 14����N!f�O�U3?S4!?ţ����;z7exM��y>�4q�T�p��<R�'�&��Q�Uc'!���H� ;�g�Hl�,��Jk�zNp��N]�9�X�Y�h45Ta̯9�vHGy�=]�_�Gw�q��qj�Y���.\�Y�2ξ�kd� t��2F�E�b��)���E�K㠜z{D�b��.=7���R��7�����lǎ�����4ם�F%3YS�N�@D�B%s:�ܖ��VuB��0?쀋w?pb!���5A(Y~R�;W��w�R�85`U��<�)1���X˔�s�ڌ��ѭ��CFׯ�O�hN�3�c��(г�=�o撚K�i��t(�q ��c0����|C�4�c��l��C����?�j����M��sl��ysǻ=������`�'(k��Jo�5��/n ��>R�.6�@A��X�L�u���Hfo�q�Y��Z�ra'��ǧ�nܸ1����η���t������z�[����){�)��̜XLC�@Q���;� ``^����<ǥ�c���E���#����wPsBzK~�:��y���&��T��Sv5g T�N�s$�01x\ �&WEoߑH)Y�5�3�)jO��|��*���5�6#�I����C���t���9+�����3�,���+�t��U�Ѻ���k G<�Y�U�'X?`����x��%uh>ї<�����3Q�Ca��ŕ��!t�x����Mr�Jsu䦡b^p8�D�O������㓰�������(�f���$���vhW@��]]~�[��H�����<���v�,��@/Y������[���1N�p��j����6��E�i�6���F�%gk��)��r�Bp����ma��x/�aQi~(&Nx.�c�����Ý�{�f�Y��W��Q�����ZW��|X.o��J�Y<[u�Ҵ�ÇX9�(N������h �{�&�p��z�N�D �h�MՇ��=륗�ac���{�����-�Di�����GD�FD�c���BaS�.��.W� }f�ח#�V3�VXS��R�O��Q�g�ݟ�G��2�-H������qy@�@}�a�eF,��/=���1-R���9��i~�z�N~�N�<�)�±Z�v&��fg,�n�I��&���?`3�VRy���cw���������>��KV�d��sW�Iku��@�!}���z�x�CD���eY��&]ˌ��_yu���9��/�7��$C�y��3e�p��Iq�� #6|g���r�r��I�@z*S������9˯�Ð��5����S1/��zJ��?��C�кC�'6� Z�Ba��>�R��9P!cR��G��w� ����@i�'o ���2�rH6(N��G�B�Ak)�C���s7�uqo{}��f^�J�x�ڻJ��37�L�7�df�,�����ǧ���94_FI*��m״�1����kB(�:�r]o8�{a_���U�(ɗ)��9�,A�c�p����W4�e_��͜��|hE*4$A�權�W�58�F/A��:
Static task
static1
Behavioral task
behavioral1
Sample
61d8e542a34f41b5675daf924a6c21322f0a6aaad9a888b23357c85d29a8f87a.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
61d8e542a34f41b5675daf924a6c21322f0a6aaad9a888b23357c85d29a8f87a.exe
Resource
win10-20220414-en
General
-
Target
61d8e542a34f41b5675daf924a6c21322f0a6aaad9a888b23357c85d29a8f87a
-
Size
7.1MB
-
MD5
d2ab3fad87fed404e80333594269a31c
-
SHA1
8cead6f29384eaa846e773c38d69382f4b7061cd
-
SHA256
61d8e542a34f41b5675daf924a6c21322f0a6aaad9a888b23357c85d29a8f87a
-
SHA512
470ea58eb20f52232e2388c2d9f204ceb30ff7c6a67be72f9ebec553169d92c16732c793ec90378ab166f8634987626ebcc291c59c8a9c683dcfaeb185869e3b
-
SSDEEP
196608:BE0E+0tVi43csk/zl2pK5p7ur52jRyN1t0neqrE1WCGJWa9nNnt:B9JCIScPcpKH7uINeq41eJLH
Malware Config
Signatures
Files
-
61d8e542a34f41b5675daf924a6c21322f0a6aaad9a888b23357c85d29a8f87a.exe windows x86
0c8702090f96587df3ef3cf88157ac42
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
advapi32
GetUserNameW
user32
CharUpperBuffW
Exports
Exports
Sections
.text Size: - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uBE Size: - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.~c) Size: 1024B - Virtual size: 884B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.m^g Size: 7.0MB - Virtual size: 7.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ