9�㥘1u�����B�Ӗ��k��H�4kb��(E��ؙ�c,$*^��p\� ���PR�[��k��~��s�B���� {8�T�4��[�p9��e�&��Z.��t^����R�*-�I�b��y�Eq�q���\ً����#���"1�����N5�7}��`��t|=�(�H������i?>?�$���7t��i�˯�~چ�¹u�A��H���S\�T%f$Y�&�����w���SG* �1�.a�.;��sPg06�G��=X�P���oQ=��v ��ps�G$M��@��t��R�V����~x3�@��ZA"%��.� tH�'�Y������J���'���а5O��FM{��<�O�j;:|z�r7�(���ٍ�����r�?���J�$��bB��Ɠ��?ԕ��w����0���a����y �!���k���X�zxceK�/W]�`��4��1�D�}�����c6��8� 7��\oM�Iƙ5���06�;6<'��X�^L�J豰V��u����1�F��lxzQ���[���TK�3"��[��o�xx0hL0~w�U�Y�9����Y�ƴ�������G�&������=��T�6_/���|�m~���j�d��s�d�>vG�C��y+A�7_�h �B�x��� ��vSq��]I�L&M\�l&��.,o�W}z�YH����ym��w7��7���*Sw �~W@}���oU'c5uP��-��:��.M@wW�����R�zx��4bByhᾰ��2:߇��w!2PP���NF�m�j�V���:f������`��cb-�=��r���n�5䂠��+�UoQ[/�s�{���Ճ� ��R�����&� ����p���u2zGτ����t"-՚�r��m��q��e�r�Qㆾe��Y��.���v(��Q�%����Y�qGxԠ;C���\��� �������S�&�'�&�cg��`f�%9{�q;d Zn�w��8�4$c�c:jb�S3'��K���1�U�:X��3*,L%�o1ˬJ��a�������nY�� w�14�p<r�.jw6v��< 3;�Z;�DM�+�t���)�ve���)l��vS��$9�u��H���=:�:z�)��a^��)p�"3����*E��m�u:�4�K}��FZ��"� �wh���{�X�9^�'�g�&i�kj �� ��T8�/��]J�z#�-_�6����:*5���TA�E��۾Ⱦ:j��C )�˱�f�u�B�����̝��%�r�N��/{��1��8?����d��A1�Ѯ5L�� �R_W ��+������i/摎�N�.q�D����x�,V�*���Q����!4�{�(�Y��;o ���Y;�����9�r<є�����Mt�<�/�i-߾$u�~)i�Ǽp����[HQ�'��P^�͔�w3��n�oHµ��Hi�}@��w���4��U�J����%w�6��1\�;f#WҨl4;�cBe��_��^�<���1Q�h'�::cj��A�wl_�p��7薐����w�9�0|ڿX1��`C�;�$��Iq>���hf5Tf:��ʒ��h~�3��颞�~�6T��39� ��O���M�[�>�E}*n=B�q!H�%��]����8JXM�d������x鿐���TY:�t�0IL��;�T-��o�LM_٢J<��Z���4r�ܸ�D�(�avs����JS ��b�R"�Gf��IZ2DX��g�!|x12��%E��V�8�v����q��veAA�Ī�*���=VDK ��rNM� >J�i�Bf���8d���܂@?�d���w���6���R���،GO�����s��>��x� �a<���euM��)��W����<�l͂�b��]$�ç�ۉ)T�&���s>���۔B�Y��hT��8�m4ekԉ��N��Bbх��R0 �D�oh��w���FVY�x����#?�,������!I���I���u�/*���(�,y��i�2���|��U���Y���g�<�9<;��X.Iy��{b�lSt��1 Ϧ�����SG��BO��^�hɎyo��*��o� `��DPj��GpRTq��c��481�K���E�&1H>̢\w2�qB��U��fo?�G�pm��g ���}�3%@|I�ҕkAu>�|}r�n�N%N-96�Q�ح �e7�?pc{�:�?.q���L)6�<�j���M<�r��;*C��d�kOq��BtH��h��� My��.ɚyx;?a�g���q9g+.�Xt3�z�6 �;H<~eZ$���M�{ \.����[2Kk;��ۡ���w��\֖X��_��el?2���!�����t�E���q�qs#�F{-��~Τ�ώ���m܀#�7���e�'�����JRiG|���9~���\������[ ��� @�����5�=��2� ��I�e�7�+����ĥ����M�G�JW@v��jo�W���ְ�v�A�Sq���1�c1�'�0�Ѩ���~_�w�(�S��~E-�j ��c�"�o������%�| ��������K�6 �G���s���v��KkK]`��������s5��j'oh���G��r���^�K�)��r��ct����_̡��{�0UG~Z�X ~E���OZ_�+㻡�X"z�h ���˒~�J��1Ƿ���Ɛwlt6s� ��ڷ�,7⠞�2D$�^ T.i%�>�kt��5��_������X[?��U{�F�F�1���2+�~�`,qX����f�k�{W��N-�v�������p�� t <����o���5y:<����mj?��䧽��`J#��=���;���r*ehmr����������g��sX=��Y��_�4��j�`^JФX�J/Tu����f��Mq�b=��bЄ��<� �������Մ�� 0܊�v�26��SXOb�j�6�6�`��6��klT{XAo/=������g\�N'K��K<:)[_�;�x�@�x0K^�Ev}��}i�}J#6�T<��?��a�T��tB��84-K���Y� `
Static task
static1
Behavioral task
behavioral1
Sample
31546191041398930334.bin.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
31546191041398930334.bin.exe
Resource
win10v2004-20220812-en
General
-
Target
31546191041398930334.bin.exe
-
Size
6.1MB
-
MD5
acc42683b97341967abd29bac76c9096
-
SHA1
9345ec57f8ee27ad84202a7c96fc037e91066e7a
-
SHA256
9502d3ee651810358045ca3faab5ce459fbc48b3ac0717f6745ffed0df3a1e58
-
SHA512
7432d30b7ef49126b619cb95e8f00d396cc010443e208248933f0d589b7c61fc6fffdb4e27b887261ed2a191351e606229947b07e83b99f78c2fe6f51809dfa0
-
SSDEEP
98304:sA36RlFf8zSGDRbG8S8ajzxJZNoFmOTCVjy2MbGeIw/VpZ+bcdVjLqvoTRWftr:PGWSGNHajzLZuFDC0599/bZ+GjLqgN2
Malware Config
Signatures
Files
-
31546191041398930334.bin.exe.exe windows x86
d812527b5988192695ea156eae610de1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
shell32
SHGetFolderPathW
user32
CharUpperBuffW
Exports
Exports
Sections
.text Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.i'9 Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.e(& Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. xx Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ