��7���&#~Y�#�˧M�Sk3�g\Z�҄�N�W���D-٦`7Ce����#Y2��0Z~4B���u� I"�-����rs�Wv��#�������u#Aܫ���Wd���%B+���]��Tu�%8�v���{��ϧ��P�{Z��@�[|:�i� � +�%��MÍ�`E�Z��~v�ԯ9y_P���� �^�x���DT���l �w��o��͆�>����#�A{�db"�3?7�����/��^wɗ9�|c$� W�:3ĺ�xߧ�6�O_�\3��uJ������B[�! �3��˻���Ջ.%��W1K�s�V\q�tar%M � �����"Lwm����ϗ��5���U����8b ���+]��3k��4��B���`�{"&� �qt�)�<ȣC�vp�(mW�^�#��4J��_��Ǖ���Ɖ�_T���W��R��>�h�g�� -s��G�L�%�w`�%pD��Yǔ�=�-6M , :C�Vўa�ݍ{Y��e�ol�_��<�������m�� 5\�%��W&Q39�gZ���D��oj*��+���*�Ǔ��mb�,*,÷�[�"���ML,9�n���r���4� Pk�s}�ė��OG�üF�9zW���?V����T�|�$$y�_�j��;k/�Ԗ ��Sd��մ%�ĤD�����ĥ����L6��wz`��ֹ���8�s~s���&�W[�$4�2�����Z��"4<N�~?��Q0�9��(�G�f��0��*��)vJu"�V}�MBv�S�"��(S374|����лǹo��` 7I<`����JsS�p�)��?]2�d���OZf��\�L���ɥ����+.�_��j�ΤP��0@�߁��}_T����f��T�,@���\���?�����$D0�Ͻ�N���5��^\��j7( ���J�(���YϦcZȵ�,n�[_�c�JT.קV��2Ua)؊��w_���U��`K4\[��A^��ȋ�9%�2̼϶�N1rU����2G,I�F���ָh2i����c�������YQ�c(��%��Èx�֨ ���f���=����85��f�E�RXy��En>Lt�\�&T��#�����`�{�Q��,��Zbm��s��E�;��ˊW*9��~�� d�b, �ٵ��k3V�j'��7�ޛ�@�f��x��vD��%t�aA"�-l/�j|��j�)@�'MZ��;�����܊�I(��-�%K�ۙ��G_]��G�k�Yd�=4k�N]0�~ɐz+A�?��Hd����@��Τ�s%Rz_�%�b���&*�����+��2�[p+�c{t���C�<&rV��b$�]'[,�;ܮ�����q'�$鋐:cP����Nc�F�����r�J�'�в���(��_��0OJ��jX�q��]����ȯ5�2`bd���:�줗b����^&'w�_��̶H`;�U��_��]��@U��r��w��f��b�٭_�J�6�<�2��t�`�&&[�Q���j8 A���+���3 �v-�������\����ZTX���CIopĂ#D�|�?FIQ����* ��@=�ne�a�f�� t,(�١�תc����4mMz���p��<����i5i��|ic �)��y;�Z,�oo�LT�������d,3���{q���=�����OPp��Dğj�^q���W�Z8H�]`M��=<��}�H�-�G��*�u������kjZ��pQP�|��r��둜�S� �T���5;�B\��jh:DQۻ�����{���H`> ���pA��� ���ˮ�R�a3�T8/ì��xIghkS��H�R���� �06��_���(S���1ġ�+��t@��������Z����^4�u �ۗ�Vo��(��N;��&�����i� `�s.���T��6������4{�c^��$����Ed�n!��_M����r��o�`!?,�c��Op9x҃��|���$k�L.��T��9�H�xP�]��CNu�t'��m�ۏ]��e����F��u͛�̡d���Si���Qbwۂ�s��\�$-���8M�<]B�x���A�k� �*���[�A�9C��f5�|~�����V܄<���UH&�<�y�2Iŕ�*ZC����:��u���_*WR��~��Khs����n��Jaq$�E�V�9c�]"? _и>���+�Z��G�V�<t�e�7��4�?sDR�?T4�$ƕy�\h��K�\�0�ɮ�RSE�>�r?!�WzG����))�]��DuEK4�H�i�k��ޯ���S�I��6{���tEҍ�d��dž�j"c;��2Z�#i�tW]0H���x.q�T�� .���Z�d�G_�;/�����x�+(+���8���KvԱ�f@�G��1laTe��ن������[��N�P��/��'��$��~/[�sŦ+Rz�Y'����g�VZ�?��4�V[ԍ��z��>=6��慨����1��P�d's����i����7��ڈ�`z^�;��j��՚��~���7q�6���I|<��7�&!c�{ܽ�(ǣ�+�v�Q��h�l8��̷SD�0������$�+�[�'�y��V�A�e,$z����E�B�Ͳ����T��$$��&�Ά���hA�O�RZ9 /ݝ��Ʃb|��Y'X�G�����6��\�!l&�Dn��Oh�xѧ��\����X�*Cm���u��}k���o�!�t��)Z�$d��~�E����$��Ck�9�+@�v{ju�v?բ�@\ˠq\��o���q3��&801ċ��j��{M�K̹�0\ø7�`w< �� 4��-h;W��%^ b$�䜂=GI���m�ć:%��(�Ƣ� �P:���q�Z�y&?��Wz�|��؆L�,n���ᓅ5���.�LƁ=?��:5�;.-O�sc� ��Q���<��R��A�L��0Et� �9�9����8N��-�+v4�?�]�yO��=��a\�0<��dVO�̊���9|G�@�ݨ(l��f:&\Q��/�,Q��`Z����?�P��XC�lu�:
Static task
static1
Behavioral task
behavioral1
Sample
ae46253a19c9e846c405b3926655efead40d8f873fef008f896019f34d486dfe.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
ae46253a19c9e846c405b3926655efead40d8f873fef008f896019f34d486dfe.exe
Resource
win10-20220414-en
General
-
Target
ae46253a19c9e846c405b3926655efead40d8f873fef008f896019f34d486dfe
-
Size
7.2MB
-
MD5
fc0c8c94d1c1463033a52735b09b8543
-
SHA1
a389c3e50ad4126db350a8a152a328c6940a45a8
-
SHA256
ae46253a19c9e846c405b3926655efead40d8f873fef008f896019f34d486dfe
-
SHA512
26ff92befc374874331268ba9f39b2cc3b88dd0d102e6f8c5c7fb1147a09f92d5ba039f37a20b7d9a616c5826ccf72e332287c9787ec39e46003a28896a338ce
-
SSDEEP
196608:dOih36o7hZRoxSpZ7eKPXKDD3wOKCq0MvjAFvI:dJ3ysdPXZ0MvjAF
Malware Config
Signatures
Files
-
ae46253a19c9e846c405b3926655efead40d8f873fef008f896019f34d486dfe.exe windows x86
2d328c5abe4a256052fb1546154d88bf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpynA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
advapi32
GetUserNameW
user32
CharUpperBuffW
Exports
Exports
Sections
.text Size: - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.io@ Size: - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.WPr Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.i4p Size: 7.0MB - Virtual size: 7.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ