U�+�u�϶X�n�SB��Q��14rM k�����P��oo��\�iy�:}G�9�%~��.پ�R!������m�� i���(��bXw(�������R[מ�h���Y'D ��٤t]ސ��v����O��M��{3b�=u����z��U3�O�}58�l��p���=MX�3��[�}�]�s�\l� �_E��L�I�7-%���J��ZR_6��{r��C@��>nb�l ~�q�pM�zc/~�Ȳ�K& ���Bk��<:Ы�7�D��l;��Q<�)ҽݰY�:M �����.������ZsEV�$���`T'r^o0b1�}��۬�.�X-z��gH)�>[dҫأqn�D�%`�{r������!0���A����+J��D�c�> ���!��Ŝ�R'N������ �Sj-~���������G�<��Ղ�$ @;��3��x�Z-/M�/~�9��l���_�Z�8�7���TE�,�w����}bЗ�N�*"}����6�[���=K����������`��=��a�ŸT<J/�k"�pB��š�ĵ�Sz@�pT_Ů���>G* �� �k����ѹ����U��0V���s�,.e��7�RLj��38d�-G}���X�τ�:��Q���n�G`� K��z;\-E#���4�����`}"4vF���}\V��+��* ݉�;�>w��D�̲��,�+�����Lw'�#t��?��0��Y@�_�?�����A���,�tW���2�@Z�-B�JK(�����E1��>�}1�GR��y�5���m��\���A2�9��EIrU���V�d�}�ba��3�x�_n�+��c����3ۘ��e�w�K��� ��oa�+�*�߽����n��`�{���ڬH>8CWػ=���U�v{�MD"C��jU�i�ד� ����"�t/�g�G��|�?����9w{ ЕodIi3Z3��-q>Y١|氉���Ǡ��{ݚ_i��ȝ9�+� ��{�J���o�u���˭����%|M��N)p�k!�{��tn��64��� *�o7�2b���2$�]��zB���H���1�[�K�h6��q��j���a�� /�c� 5�<����;˒J���)W��RLf*|h��7����M��B�"�W/4w��;,��[]�j���O�&�|cg̣3���5�eJX�=B�������ee��O<'�!���������m8���K& �A��ύ��pm�óK���TA=�1�9ݎ�>��6��=�C����NP��Pc��.�����1�yH���/bil����Y����� ���I�c$],�qӻ=�Ǜ�u�"�J���-�����ɥV��k�)V�����&G�;�X/W�f�;4����!'�ĥ�﹊s5�Ӿ�-B�����H�ե�Ih�+��]��m�YeVW� A 0!Pqu#g��F�TX?c��g��]cYm��A7k^���o�ցұ͝�ѓ��-Ϸ�=�cnŃ���J�p���xw ���Mۢ�챻��KJ�z���rj��c*�����&K�~H�+��c�GF��1�$d�F=�ƻ`+u�4i�c�����x�����'oe�>V��J��U�s��&�_�@�iД�����A�x|A������s����>-`¨h�x�� �������v�BVO,�o1#�Qи_��5:;���I��ߕJ�V3�C@�� O]e�nS�z����Y���X(b�f�[q'K4�C���~x�u�A��G8N�V��`�]��"�� �6|m�k�x�4>�ޚG�`���#���j��e7]�R*�=���� ��<P��EW0�" �l�و)�,�k-������i���2t�#�h��1�^;��7���������r? ���%e�{�� eZE�-���-t�0+J���1~�B1>�b�T��Vx��~��Kb�8$,���ϨBl,�[Ύ�>�-{=C ����sI���̓�m{Ȼ�{s7�8��G�6� ��Ug9�v�����L5~bPX�i7�<�"dxl��Řu� ����.r.�������F^V��]�:�>�$#�b��|�9hjO�AZY���n�/k����Av�M7��d��y�i�S��k�KG����hł �{���1E��Y�MP��2S}>��R���Ý/ui0L\ k0u�EY��RubY4�Ĵͯ@�"!���~~4o���P*���EqߎU�)���wY������GSfך��~�WH���#Hn�+��)�/�X��%AX�`J�e ��f���99����B��b��� ���N��p���~m�,�ꇜ/DaփE���8�L��K�>Oؼ�:}�S.�1��>��HM}�,�x2>� ���.��E �H�CJ3`���}W�_V}��\%��4���nFg��fٗ�h�I�~�IdN���T�4Pw�� ����|~\����)��]�,��(ه �H�[٠kIo�W� ��S����Y���i�z4���Sr���+y"�Z݂ȿu�ѠJ,�:QC<�Х:{͛L=X�0|Hn���aS��%;��"B̼�:>��\.�A�咐�C�F�l��&}R��c[�g�Ж�� ���ЃO�.�C��B��2��G�ĺ�<�i���Rͮ�@ �d?���iKa�?�+G���oR@�jCoe���g����q�S�Qulj��3*t.�p�Pƿ���7���G���-�n����|%�h7�������o`¿ɜ� �`��i�U�W���14R���6xU[1ƬĢEm�j�=[f����S}��:���Z�x������c���$��X��Vy�:��L��aT�������;��)�Y���y���pqR�Ml�颚�����J��|�����D]�f+ +!0�F��-��oi'vc�f jSg�E��o�NX�_�rӧ�N�:h���q��X�n�o�k3·��f�,�df#�!����uj��c�8�NmH�wfBk̬(,3ӽC[,%%0� ��4P�T��ҔǛq=r��T
Static task
static1
General
-
Target
mAvjSCI1ZRRlIrVq5MbsX2CgWdjhhA6G9nqmGQaNqP8.bin
-
Size
6.2MB
-
MD5
cec926147dda312ab99ee89d1a962bcd
-
SHA1
3108b21721f7eed0b8fd17b1c0453168a111d50d
-
SHA256
980be348223565146522b56ae4c6ec5f60a059d8e1840e86f67aa619068da8ff
-
SHA512
539149e0541ef197fa4288abac9a0ea43718fb1db10d0a18c865d7a6b791e1da15c74b6efcc160b6c820e01df9a733879a05ec46daae8fdde27639481efc8da1
-
SSDEEP
98304:ala273SypWF7N2ZYooZ64Am4KZ3NJF5RMQKEF1FLB/GknT+42vn/Z8HKdDhIWqk:4L/oF7N2iQm4OFY1EFrT+Vv+HUhIFk
Malware Config
Signatures
Files
-
mAvjSCI1ZRRlIrVq5MbsX2CgWdjhhA6G9nqmGQaNqP8.bin.dll windows x64
7f36ac036f3331ab72e59f2a3e1cff9e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
Sleep
GetVersion
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
CreateWindowExA
CharUpperBuffW
shell32
ShellExecuteA
msvcp140
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
urlmon
URLDownloadToFileA
imm32
ImmGetContext
d3dcompiler_47
D3DCompile
xinput1_4
ord4
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memchr
api-ms-win-crt-stdio-l1-1-0
fflush
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo_noreturn
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-string-l1-1-0
strcmp
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-heap-l1-1-0
_callnewh
api-ms-win-crt-convert-l1-1-0
atof
api-ms-win-crt-math-l1-1-0
floorf
Exports
Exports
Sections
.text Size: - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.s^N Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.:EG Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.r_O Size: 6.2MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 188B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 233B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ