�?��@�J�Z�^zWRQ�\|b#�eaV�<f����Nw�-9hk _?�>Tן1�z���y��)̅d� h�>) L���:TR[�1u�� ^�� ~��s>��,J��U�-����aM>i_ ��M���������f��J��8�����r��ȹ��$�9�K��E���Ab=���b�+�����[(��➮���#��<ʞ*���,ylv$�)�@��-g�'g9�f����}�]�rlͭ�J�|֟��]'��:+����M�;��[�F]}��à��r��l�=�-��{Mř�� *��N�������9�;d{��7+��$K�>���(ٛAMjSr3x�����Fu��^]7�IҼ� �ۊ�G>�:G�r2���r ��f��'e2�m��h��=�Գ���5����3��ȟ\{N���3��������nǑK;)#;��o��U��J�B�<�¥9Ơ#��9 ~3�� i���N��s4�#q����ZR�|��X��%6^UaY�g�n�`�=JS��?d�D����O���;�gs������ 8�l���l Y3�raun߭���Uo}O顤�5�� )���VU�z�>/��7{Q!͙*��Dbb7�K,�)� �<�iP=��g\틉c[�f�.���y�2n��Z�� �(��ouOZ�E��!�B�����ޥ7m��7�!#'WO�fH�B�!Ĺo8�M���E�^-<v�^'�SCp��S��KؗN��8����a@�0��]pV��[1c���x�ױ�s�����r&� |�º�h�mlwejD���v_t���Vlu�/ ���~��K���"�S���qqG�i�n�������ў� �Տ>�cl�[5 ���!�kfWJ3;�k'NM(�m,��7� |�������{������<D&X�������-u`5A�;ԍ^{�hg9Q� K�����X(������BF��q�~0Osn�֪�p���9�F�(9 � ��kE&�����u )Q���r+�up�C��8�ۢ9�<]'ju��R�1i��*����(��bޗ������珜)sga�<��h��d�|�H�������ɺ�{&!����jj�Ri� �:�TU�"����Rtm��ISS��y3�,Aϰ�p�j{<b��=�<���[rs��Wj$��5a��O��+(7��N��>�ao���Ɖ���-�~>)3�Lb�[�h��z�>�ka**����j�Юe�=�Td%8ˈ]<�p��څo��v������|cj�7훏R����2���� {�ՙ�dpm�R7�u��$�e��P���շ�/j��M4N����Y��Z�~0r����r��\�Df�$������UwsKQ���M.���:�k� ��.̸������E<5�u���h6�aJ[ ��-_�bv�e���_`�k���cc��,����H�Fq_�G����t��S��v����zrQ�<���s��{ƗB��O���رPmw�q�K�$����J�.��>�̣��K4��`��(k�lꔝI����Pr�{�4�M�:_g@ V&�`��c��2:��1���ɶ�iF��r�#�K�H�!��n���iJv�ACS����k�i~J��iΪ� �c��$X����N�u'M�k8�Ǭ��qK�����\̀�Ȗo����`�Mj�^��o�> ͝V5��GO�O�iW|ϕ=��#�Q^�gE�)���B�O��)��P ~�ȴO���w�)!i����F�'���$������ḿA O6��f����l�^b�b|�e�J�c*L�ڏ��O���/�7m8�lz/��P�y�qo�C�,�Yts���D�UEN� �;@T�Wo�{�?gξ�����dD��^rG��}�ש�/�T�n��?� ��T���o�yYL�ݶ�8�b� �d��4�R5=��9]�{T����sa/�ͣ�^]���r!`��0o�^ʅ9�����C���w�9Q�4�% B�v��~ Ňq��֣�DEiX]O���\P��ä�l.��e�^���[N��}��;O�㞔D�����'2�2�r��dP�_O6��5��1���ʄ�V�_�ui8ϟ2o/;j�m9�-�Hw�q�Ƒ,�X�����_� uD�Z4����O�<�Pک��[e6-Uh]����mˡ���X�J�p�����5�����(M����*/_ᘺ�j�S�-X���D��+m� (�0}��>�i�Rr���`���iL/��kP���]-kd�p@cN���h�Ry�(s�^z��$��x�ov�����[��æ�8O��lU�6}lj-�d�OSh��]�A2b�?j�{;����o����D��o��� ���&�s�(�Y�a��X��:�\�f��+|��`,�u�o���&�3�����M�3Yhz���~N��@�S�M�3J�v��H�(y�Gj`���Wf��4�����������iNs�n��țmH.w�Ӌ ��^�tkW2]��L�4�Gl�0����|5���~{Ѕij^G��=O��Ů-���R:���(�no'�v����1( �u�ms��טY�ڇ�O������,��q6����fv!�9��/v{�lo4=��%�� � I�Ĵ�4��F�����+�B��z����"�f�;[4��Q�b,��G=E]��A�<d�6 8��}���9χD#��2;�ԵXRl?oyl�u�$l�����X����m}a�/�}���v|���:e�f$�����-�����B,�d�؈��l&���� ���V��IE��' K$x{J7�_~r$�tL�V�O?�{uQX1��x�4�%QbŸ�Ԣ%�ө�E�V��M�g���B������7.���c+iQ�S�I`�}'[��ٙ|�y�l�g�J��+&�wҏ��S�pu�]T*�4�c3�I��m�V�p�@�첋}���UIP��^A�*� 6�bu����рt��� ��c�'�5��r�{��L�P<?jw�������r�q]�#dp<��Q2��=��D� ũq�e"�?�ھ!�DwL�C���A����`��:�,��'�̲��1%{�
Static task
static1
Behavioral task
behavioral1
Sample
24c8f414b6d3ae7bc4b55aa11747d08b3fad7bb781746672cbc7b6125d1e6918.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
24c8f414b6d3ae7bc4b55aa11747d08b3fad7bb781746672cbc7b6125d1e6918.exe
Resource
win10-20220812-en
General
-
Target
24c8f414b6d3ae7bc4b55aa11747d08b3fad7bb781746672cbc7b6125d1e6918
-
Size
6.1MB
-
MD5
6c21ffd81cd2a20891c280fa2a8331e9
-
SHA1
4f51f6f37653765e1974603f5c7a9c4644237d5e
-
SHA256
24c8f414b6d3ae7bc4b55aa11747d08b3fad7bb781746672cbc7b6125d1e6918
-
SHA512
cfad3ce8c669efd39ade88b9406ea4d210d0c5d8abbb912fa7cc9d73939abcca22659d19afd14d3fdfd47197e871eadb04e3681fbaaad22e735f4c14c0d6cdbb
-
SSDEEP
196608:H/cCiSDTdPcQLrnnEn76RwmTy0j41evk0RHAM:HECiSvZDfnEn7ZmmP1ec0
Malware Config
Signatures
Files
-
24c8f414b6d3ae7bc4b55aa11747d08b3fad7bb781746672cbc7b6125d1e6918.exe windows x86
d812527b5988192695ea156eae610de1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
shell32
SHGetFolderPathW
user32
CharUpperBuffW
Exports
Exports
Sections
.text Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. /K Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.[{4 Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pqY Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ