!kE���gu��%ctZ-e�ՔO e��ߘs�r����dP�֊f�XkK-�\�Nt��6��Hn%�Cqq��'zfo�O�W�b��b8��- ��!���?ɀ�3{^{��o�}]k�w���j�<ҷt̂���8:}�g")ERך. �`7 \�v�@�<��]5 `��Ħћ_V|��{��^_�qe�o�Fcm���`"z��!f�{Y6ю���r5����uaw��&��r.��> V��݅�4@�4�dr$�LQ�G6�|�����z3l@},��b;�5��aor:=�3�A�:����U��������B�4k5I��0�μ���I)m�lߢ�.d l�#i����ҩL)Q��s7X4��S�\����*"}:����L�iv�"�&�a��+.���Yb�]����ʼ�{���x�|c�5%���ƝS�[��9�UrdlӋ�}����]�q��������I��;�~!�h ��b�K4=��/�-]߂5�ԁ�? 1���Vi�$?��@P=�t��q��X��®��Е�b4wZeJm!�H�#UG �0% xq*ޅ��|��T� ����{�[g6��!��X���s�0�P�(��Bj��,[��{��U���b�g���ٷ�F�2�99L����^ϳ~����UMƏ�17*w>�F���p�d�b��&�x�o�+|m-�� ������{������zm��u��rO���U ���������2��|w0ly�l��'�a�����B� *����c��Q�S�2�3�H��)l��_�����l��4�qpźy�t�uXz������NV ��bO܁\6@�t�V<tH����~"�Ӟ�I/=��:�����ޯLSU9�~"�g��sW7=�!�4���݊"���$Ne���L�Jr���I �Dh��@���K�� Rv�l��څ�� �H��;��p%PVć'�ה�N��Y���������dd�+G`r �&]My�tW�~o�Z�>϶�1.�����|�0���g$���%��:]}Utr���-~�G��-wk�hB���Gz��[Vj�V&���y���y�ӳ�z,����� '!�m�r5a~���[���%'�L`q����`*� @���0ø�Mv+\~�'U1��~�z���Ԡ�ZLp>cK�K��V�d�,���א T/(F���B�0�@/�N��I�E�:�"���l�k8f�tp�t�F�>3�^y��{�#/SfVS߱��x�]� /�E>n�m;[g���aY���i��P$��;���|;�I��o�@_�|ݫ���eK�v���#�'ldB@�mEsaC�v�4�����x��Z����P�>���`$D���^pYƢ��5{������SNy��Q�5�L2� yU\��rM�f`s��R�����U��tS_�O.�|/^жW+�s��'.���e��Bh�~B\��P���a4�mv�{���l�]���9�)�V<�ܯ#gܓJ�}��3�c��7�\t몑���Ɨ���".�]�Ԓ!A�'bH���$�85�q�_��r}&H�`8j�f��,9(������j����@��뤎���<�0Z���_%���G��������u�z�2�_V�gf������L�(�X9u ��{���Zu{)U,l�K?�M��bv4�۴�v��n}SvѡK�}��<�v+m���ȡm����_�Ug����9J�^67��F��tT�GwRfM� ����H�a��HX ��~�܈��,X�R�x�8��2ke^�X����ŪpG1�p���β�q�X4��<*aQ��Ia,dE������ ܘ��k ʴ�$�����A�"��L`���= qg�r/����_��� ���m#�e���rn�C��>T��H�U�au>.0^����e;�q�p<�]*,s���k��6&)B�Ϫo��rX�L&��b�}�A�6Z�!DX��1��Yy�PNj4������!�je&<oƵp��r(��8(�UI�H刕gHd��A�Np�P��� ъ_2����>yV��2(�J�����L5�\�~.�����c���'��l(dݹ�������U���M�/L<ֹhJ��0��B���;��p,��(-A��jD�F(1ـ�P���?���$�c�������+X�,���1W�4��b��[8��{�m���,�|� ���kƍ@,��/Xq�wR<ȳ���T�ٶ�2�����R��F)e/;���e��7��[�1�g4 �������(K ��ν#FX�(�u쿒$Z�4|�����}Ñ��l+y+�ň"A4z��$����.]Jos%CE���~�w,=��>|��n��N6�����rWf+>��NJݚ�5a��{xh-Vq�'��9�X��|�[&��Xw��jlV��h?��Nr���2PU���6S ����/������]?�&"I�4w��Wn�/��^)LL��D��ȩ!��)�r��)'����F+���ʿP2bPK�����J=^y��������;}!X��+Qg�x���_�W�Yo�l��]���v��|�R?�`y����5>��- �B�Z ��8wf��Jea�8����j�mV���`� ��>m{,Y�!g�2��ز�j���|�#�Y�tc�G��q�LH�Ub8���k��a4��"\ѸWZt-S�'9�m�@��39������Q��Ҳ�d6�ߴ�C�ӎLq�"�]9J}�9h,R?)�����O�)�F_��;�5��-����E��0r5��&x�tV>=��ID�@]��N6� E+ �������C��?1��PO�y�|�Mχ&�2�8&g�w~�J����4G�1��h~� Еj a�������77@�7v��N14�Ѿ�����&ɩ56�!�\v�Ò�T=\�t�CҰ)��ԍ1,ϐ���gM��S�`"���B��d�=��ʗxl4t�o�8$��n��ҝ>HW�:��@�i���ȘC��(�5�N����r�=����5���-Ɖ.h��6�s�(�'`.y,ߔl)}���=)�߄�'��;y�rpr=`O �J�v �62�+�ts�B%
Static task
static1
Behavioral task
behavioral1
Sample
8d3a2571b7fb00b61a631d533ebdad8c89f7c419048f8d1e84745c37e37182c1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8d3a2571b7fb00b61a631d533ebdad8c89f7c419048f8d1e84745c37e37182c1.exe
Resource
win10-20220812-en
General
-
Target
8d3a2571b7fb00b61a631d533ebdad8c89f7c419048f8d1e84745c37e37182c1
-
Size
6.0MB
-
MD5
631dfec43025a25dae41c929ffa34ec8
-
SHA1
817c9b8be0f446b4765b97092277decbdde976d3
-
SHA256
8d3a2571b7fb00b61a631d533ebdad8c89f7c419048f8d1e84745c37e37182c1
-
SHA512
402f81064a3931d2218e36e8506a7708cfe60d89a585dcfc58555f4616cdd22f130667d2ea30f6ea1b2820a1b68cf2e85777cfccc055eb9da8f4478890ff1179
-
SSDEEP
196608:Pf+RazMuKqUmCiOnNZ9a2BxDQBTgqT9Cl:3+RcemCiOT2a
Malware Config
Signatures
Files
-
8d3a2571b7fb00b61a631d533ebdad8c89f7c419048f8d1e84745c37e37182c1.exe windows x86
d812527b5988192695ea156eae610de1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
shell32
SHGetFolderPathW
user32
CharUpperBuffW
Exports
Exports
Sections
.text Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.TuB Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ASM Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.X:@ Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ