��)�PYd�˥��~+O���I���kÉ�,)٢�Y�)!��#���;2 ��c���B�k��D����������s�wɪ�_���E�5��ǁSN�����#2������0 �s��#hwL(�_� 7U~���%ڄG%%yh��"���4�Z.�LJ�;Og?N6}*_��vB='�I��.C��H���s q٢V�J� Ƿ�����^D��r��I��'�< ����]hK�$Iۥ����� �d�8BL9?�O%�����n�z,Ζv!�� ��)wu5-�*n�҅h��LX�x��R����u�m��B�,�����sg9����6k$�논��Da�㍑5h-H��N��C�����U���V���G��w���1i�S��C��yN��*wA�&b�b��m�D�5n�O���RN5Hjoj��o�5juV��'���w�u6n����@}� ������^'|G7�ut?��Ʉ���C���������d��=�Iگ���SL&�yt'���+�϶�Iq�TK}�hY�Hb� ����b�#�`p��%О�?@v���v0�`��{��颡�l-T��E:Ӑ)�����Ç#H)/��~�-�A %^�Vp&�*Ju�-�@�����ش������K�@���Ao��12KnT����/y���-�>D~�OA횔�ll`����hj]��aߏ����ZU�$_F��@+�Xu�Nu�\�3z� ݎFV~�Q�����(/�>�ը��#���+_.HU��C+��H9���kx,_y|���'+��6مYV�uT�W����c���{�~�W���]V��B@�x_\�A�����3]�u����-�{�t(�����+E�ܝ�a����2�ή9���x�fT��a�C���� e�G58Z|�m[}��3#Z��\ ��Y$�[�؍���s�!;t�e�����c�<}��U�W����5��9�B0&�2��,��A��Q;����XÙ���r��Q��y�\VY�@��d�`R识p�"]��f�@]���v��������D�p��� 6K�3l&7���#&��?۫���#?%��������,��W�ퟺ�����'���?���LZ%�����|��AW���g.�u��l������r�z�����]m�� �x&1־�a��T������ZD�+�kR��6��H���������wC���jq\)����8$��P��fҒ�Cې#�E� ��FA�����#:��z�*�����S�2��C⨙%.�JS��3J�U��5씮�<<������aź�eg�K�f�AM���czD|�!��zI�XE�Rr1E�1�"jD�߀�L��9�V�_c�_��yK��G��jH�]���� �B�z%x�v��t�E`��y���<����VR3��'oe$:��� F�=3�A�Q�7T��e��X;?B ����j<U+�cX���kU�7���������x9�],��b�K/�$����(ݒ���7�,��%9^}Õ�-ޘm�"�YOݝ�W.@X�h��m;�A����h�.���L�o����&�p�u)�~���M]ԣw����a�� Y�P���;�8Z��F(`��6'G���~��uSzquY��d5Z��f���NAԶ��?{(^!1�� ��� `[�nU{+[� ������|>�X��\rƥ�+T�K،��������-L,Y+$R#Z.TR)A�C�s���� �q$ۗ��G����}�Eh �hӴ� �����i��J�߽�dmo �ٸ1~=>Lvy=�n�p&��H=��_�'�`%�d�ha{�h $n�B�/����^`2[TN)��:)��XK,�Q���(��|�\�x�x�7$��qn��6 �E���--D��j���"H�x,��-��?�<��>W"�mM��u�f�����P�QQ��!�ߺI���qu���xB�{�CA��]e�[1�K:�:��;�x��F%�+���C�|[�͐h���/)n ��qi�Ls閝s� h��C� [��QϚxA.}��P����G���<�;���K��P�0��B*P��虾�?�0i�ղ��`����J�c�zf3���~�/�}�X����٪��N��еxYy�T4g9 �:-�[$�K�0�[(�6[�����]����y5HNE�a���3�w���L����Jt� 7�@�A�7M]=��҂����b�i����Z (CG�`��%�����Z�]���3Af�.v"<�ƙD��.�8�z#� 2"��;2 !���5�>��돽��<)$_��]��*�=9�1U�:�Kp��H�����HaOOG3����`���8�� h-�0�8�u@f�[t�q��}��{˛՚n�i������CĞ���ﰗuL=�W"�o�Ir�x��������d�@d>����3��|�߿�.�\`�D%uHVcy���b�*���&���Z&/���7T� ��Dؾ�Da��;��%&�h��@������+p�3�pL೩h��������|X>��F.:z�X/h���^�K��'�8��l�`�Bg�%C�q���Fʛ3�f|�����ڣiȍm\�mR-����$ )M¤�b��祐�U�� z�-�1����!U���>��� �05����ޔu=�������A�-3�D���'���x�����X!�� )���D� ���U$۴39����*é⭃Y�{eU�ہ��,,�).��@�� �=�t1o�d��D��]��^�8�J��.�Y\��� L~����C�!\����ޖ"��宧 ?t����56e慑f+}���4̒{����@܈{zj��: K3�{��gO��v�]6�M�*$���e;���ޮ�i\� � �r8���V��y�p1�_�S�6��n_[/\y�Yc71���9���ݐp c��=�0�H����ƥ�Zo�Hˇ��q/?ѦQ��O��P<$�#���@(�g���o>B�v�fE�=�/��B�(?wo�Kλ]��W���tLi/��,��̽ ~t���[�9��E��̪Y�ByoU4l�ۀ�,f���|v?뛾��m�{]"ַ@`Z����
Static task
static1
Behavioral task
behavioral1
Sample
3499d32bb1fe8201bc02559e1b352e97ea411bccf4ca651a662d0135566db177.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3499d32bb1fe8201bc02559e1b352e97ea411bccf4ca651a662d0135566db177.exe
Resource
win10-20220901-en
General
-
Target
3499d32bb1fe8201bc02559e1b352e97ea411bccf4ca651a662d0135566db177
-
Size
6.0MB
-
MD5
0a4a6952c4fe113579df7d58470d3413
-
SHA1
a8eb01d5050996c1664ea1f1e4a9eb07a089f928
-
SHA256
3499d32bb1fe8201bc02559e1b352e97ea411bccf4ca651a662d0135566db177
-
SHA512
0810832a47f146594b0e3619094b08da04750e43388106040017847a292a974ddb444a17a332793da48432b23952e046867ac9895c35ca4ca7fab16eaa397668
-
SSDEEP
98304:DEznIBY/V+PrhYeF5hv89culM+uaOK5ZrdW9PaexK6ls04P2xo33xxOyF+LTRXO:DErIbDhY6AcqPuo57MaexK6lXcrORRy
Malware Config
Signatures
Files
-
3499d32bb1fe8201bc02559e1b352e97ea411bccf4ca651a662d0135566db177.exe windows x86
d812527b5988192695ea156eae610de1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
shell32
SHGetFolderPathW
user32
CharUpperBuffW
Exports
Exports
Sections
.text Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oH1 Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.fB" Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.(Ht Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ