WBЎ��!��dž�4Q7��2�K��M�Hu�(�^��]����h�a��eA�eM�LXHF�Sk�|��DB������l��YK�zc*��dV�����;��fFz���������A�P[ ΠF����2���ր���1\����ag��ޮ�^[1-C5�=Sw ���%��դ���5��q��gn呇�����&����}���D��Y-� �r��[`��<f�&���Q��MO3EB�F����������{�T��0��6�p�N))�n�Dފ��#�Y�� ��O�TY�i�rh���h����d����S㡰�Y����4B�+3|ֿ}���.��~ݸ�w�L6��Z���O:b�;؛�co��)����7����b��h�JWƃ�!�� zKbju���� ~�fq[����S�,Oh����yP�g�@;ZCܘ�S�vypys��"̹;�&� /ո���V�LA�����>�o+���t�Q5%���pa=���� �q{^��_a����<{[�i���%}�E�4=���Ԉ1�*����V����A�.��e��/��ZY���X�i�sW#u�\���I���+��30U�M���ܒ��Y}�{�-?g��>��ew�K쳘=�5�qZ����[5���Q�1Msg���./t)�u��^tY�]]BK�by�{�֝���`�F�����hOޓ�\A�w �d$���g����U�1�����Z��Ca8nb�K+?s��i%jBFS��;��� Ko���{����zu��SP2�7{�\w���&%t��m���'�A�!��2D�ňXoi~!�#�� �� ��R%��)wA`o��+]�Zkp��ik̆� ]`9>#��z����y���� 2QA�x�����l�3���r�P�E{~� I�-Q�A/�`ی�A����)�����Qp�xF{����3���z�1F$��l/���Ub��U�~pOoO�@�t��~�8�Nv��a)~μ.�r�)��*���%s������|�0����C,��VA*����E;���;Q��(Q!-�����ѥ� ARTh�����Oc��=�G�" e��+Q��n��X�(���}���?�F��P����(�UY����un���� ��Fh3N��VH \˙+Ҟ�E!���5HAy��D��c"�[/q1l�ͿC�!6�B�/<�Ny���p�-����F�HE�o X�4� _��&/�(60�i`c��5���Z\������dk�<7k 5�O���ڵ����-1��3~i¹�����Rʂ�"�y�c_����z�Xރ7�'N���b�W� �i���t��h����.gA��0$�%^⟺�����v����p��X��M�״�dy�Gն��E0Eu�b�}<�*�o苈�.K�>@�3��!���Vr|.4|[s$ T����v�������k=hth����{a���yc�j�5�nf�m+Q�D+�K7�[P��w�$���5�?���C ς����#1�Q�|:K�6��l*�A����g�A����4��}��� ZK��9������y� [X���2��O�Zd��C+T)/�Ƞt��`��%���~G�<r�A��QuU�jv�R�sڡpp�M{g6rZH��Qx(��w�!<�9L�!ǐf����P�$&�(���괻M�c<DyD�cRf��^|�CPc0��̿�Z���i5�c^� �#oΑ����z,�� *�&;(WȒ?� '�f���jP�:ޭz[T��D���E�6�Uoz+W����i��s� ѻ�7���՚�Tk�!����O`�Hh �y�~��V��K���;�Sl��ut� �/Zq7���f�[�n�z�Y�}�$���h�#f�@W�h_{���tg�>P�*����/�iݵ�Tx�z���C���E#U�t��ݹ@ �V�eY{�6������^�m.$��@�~�b�MFg���jv�NmMe|T��Bl����ab��a�kn�$ \��x�3���K��ç�����;{����h��$x�0����#�vO�ᾰ�c��!�("��&]�TV�}ɵX~�/f-m��&*���UAD1u+Gd��[1����(�+E����%b�0%{b����-ԫG�Nb5wVv ��$hO�w�!AYEѲ�?���M��P>��k���0�A����z� ��7�6�ThX=�����k����qn:�%���Xx#�X%�sEkv;�m{o��R�����0� ������gWY��٨S:j\k��"��,���U��J���;9�b�o�@��35����0��lR�vή����"�qX���Լ�`� �4����k�YE'��+U�̍�%L�p���C; ��1��ydCD0ʐ��H�o��!FHU���3�i�~���ÿ�I�͌�+�O�QM��'��T"Ê�c�.�z(�F��O�������\5 ?�=G^yą/���b�c�-�I��=N��Ƅ7�&�z��A�ظ�����g�����v]s��X���JO��p}@�^���R���?~��A��sᵑ�x#7��� ~�1�V�D^�6�x�9�q�A휱�6b���W���ϴ�ᶱ��5���p��e�$��i���')J'e��S�@����b'��y ���J{b�[�6<=L���$x�������>pOf�M������خssߌDr��`�i��*u���V{��܋��>�מ/�@U�T嶼�Ӈ�hѾzg� ��yK�σ���������n�<�6�d���U!7�5qjc��pm��]�5�z��nXB��/4'�� ^�ItVo�Bi���e�Jh�H��D`���jr�( ��`Y1x%�K��k����n}0� zq�&���c��9��^��P�� �<AR}vC������&�A�-�`�y)�����r��$�#ed�H:N`�F���8�8��m����]J���E��Y�F�� gD��Ro�ђ�3��Q��&�PHp�m��q��Eo�bޙ����� ����1�3Ƣ ��3s�Gus I;��
Static task
static1
General
-
Target
cd7c95c5819fff53a30d5a504ebd26e5d6754d187921fdf51036f3ab8d00f243
-
Size
6.2MB
-
MD5
3af9c6359918d1dc28c7e9856e9faa36
-
SHA1
75c8c3a975bd132f428cb711d58d7ef3c8aba1e6
-
SHA256
cd7c95c5819fff53a30d5a504ebd26e5d6754d187921fdf51036f3ab8d00f243
-
SHA512
4d97be22421f795fd10c5bccdd960cbc90208716ee768b80ec1ac0a707dd01aedbcaa90fa9687ac2974623b1274730de5eb65abb04cd6ee9472fc50af9e5047d
-
SSDEEP
196608:msrSPl88OU9cJqNEMj5wkhpq8cxB636ndBYdfRC:msrM8eMqNEM6yqsKnd6
Malware Config
Signatures
Files
-
cd7c95c5819fff53a30d5a504ebd26e5d6754d187921fdf51036f3ab8d00f243.exe windows x86
615720c251a6d1c6980c06d3fd61b30a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
shell32
ShellExecuteA
crypt32
CryptStringToBinaryA
user32
CharUpperBuffW
Exports
Exports
Sections
.text Size: - Virtual size: 199KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kyT Size: - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.EvY Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wz~ Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ