�a]uC�E'�a�*V�7)���ț2�9���xCܣ�鼤L�O���e�����˽VtV9zS*��n��p�V�,;�0�.��.2��~͘n�8�z�-���W z�N4��.��c���0����UR'�;������� �B���є+3��F��|)�ܥ��(?�A�Hs����C����̣����扄��mK�E�zS�h����vЇ������Nw���B ������h~�=��;��b���~^����Շ�=� E�gV%^;���� �9�Y��s!6���հ�?����Ht�s��1��������K7����k�97�颲?���0 I�[����<�u���P���Z���k���3�䛧���5 ��s��դ� ���� ����ݮ�$p�mm�3�/Aw�@o�D�k0�b��U��2D��#�IaH�7���յ��Q���t��;�b�An��]� ٽ?<��}P�U���}ɅJ{,ݶ��tU��;�8�)��&�|�O��o� �8&=�%Jo&%k�{@�w��9��P���6��ޒ3��kr�{������<^ӭ��i�M��,�t���E��5�Π�����m���,4d/��)��t@������y��߃mL9�QQG��S�x��v�88J��%�T�6`�~����Mj����W�bց���?�㍪hs�0>�0$�[�ӡ���"�AE*f��Y4�_Rx��I�C�3)V���4�ž�[/�X>���3�B���ʢ�\W����yZ�>����ng����Մ�Czj,�;ΐ7�J���8hm=��:Ӊ=��Kb�c�$S�%���)��+����X`M�(2K&�t�# j�������9M��2� R]m��P�;+=��oD\����Eb�97�o�2z�l�O�#������~��bv���V^rG٧6� q _K0����n�Y���a��d�;�͒�}��� �BC���?ٿ�F��Ht���.!ji��>�e��jBt�כ��?�������$5A6��T�8bЛ�C��nR����)�����bl�z���βh�X�2��L�ͅre�0�~�"���:��ߓ��j� � ���,S/������4��d���l�|q� L{q5'���<����m��U=")B�-j�v���$����g!K&������j�����C^ʜm�o�%uv$tY����{���C���kϬ�4;�Uc�IG������c������Ň�O\P����3�� A~�&�8p���/�� ~�%m6%�Xӕ8sJ��0ሑ!���4i��_~P_e����r -G0�l��X.&�M������h6��I�ZR��vz�9�����Ҙ��I[��A�ů>Uo= �a�oVQhQ� �4����4B��/,�6��Uu������g�t,26�@��'j��b��� l�?�=�O�А6��=� �[:��$��_��՜�Eo�+�/�'/�Y�f�u��O9��̐fv֪���[����,"g�Z�y@8y�L����Q��l���)6=,���L:1/ljH�%�!�������d1�@8}��\��G��w�,c�f�#z`�1���I���7e�Re%)\)��)��$ڶ`/ ��� �X����two�UwY�_4���5�cTb����G�G�+y E��k(mTxh����+�Ӏ%��2R }�M�7w�7���;3�����m�� &�u"�+<��0�E�%\�̗�j�ج *��ݳjx�4L����ߩ�'�a!���C��aK'@��'Q�3~��Ϯ� b�����s������sAE��a���8��v��۞h��:x��h��/����C�(��4=�7#@S��Դ!P�o�\y���Mk"�y����qW���l�?Ncq�xNv#u�����R5����E:��2)�&�*W�i�~J�X�ж-��eɁ5 2����DP�:�ڮ=��nbn��y#v�P���l���k�����z�m�檦I6�����xY�_KRL'���@[�'��3 � �?�Z=n�u)�blZ頱�sM�T�����Y*WQЖ�����±�H�@���і0�5+e|�w!d�<�Չ6�K9q:)��Ub�p R'�U�B���v�L��V���,�&xL�<�K��- ���j\$9�g���c y7�ު"{L"h��f�塏z��:{9f�Iݝ�~x����-���*J�-��X�4�� ��&\I��[�(4�i)2h�7@�@�^1M?{���đ���2�Rh��V�H_ꡭ� �����SոgÐ�����2p�\�#:�lw����K3���5sjṆ�g���Ϳ��M]ڈ̩��q�%p=�� ��֚���~z�S�R1����z83��O���K0� ��SDb.r.�F�� �fg"���F�|� �݇��T�Bt/�{���_JJ��k�˖���y\�L$|�3������BLE�6�c���� xޅwȑ�2�QHڒǤ�`���_b_��z�cx\�}HB���A_��+�����@7��փJ��dIQ���`I]��iBA��]��'�#>� �Ӈ��^ ��J�������w#/��L6S���WDn �^.����T�O��{<I�})m���]�)�p�h�b>/aW{�`c�6�gb���6?��h�?UJ2�M����7۞`����@!�$�e���l���C�]XE�U]l�F�?�P♀��9s`3�؝��k���<S���t]��P�#ר+3%v�/�Jȧ;� d�70�O�M!ή���u,��u�!���?�tr��A�D����:� �.a�:��#f����p>B����)T��� %=l�GCS�? ���$x(����4ϭ��ON��[�~�%��n �`v���"F��~a�rd���c5�[�K��[��P�SL��u�'��rZ�I���1U.'�����ȡ/\��Q� p=��F�rb�R�Ͳ�?tG�I��>��٠����S���$���I5I�N2���J��SMZ�=����vO�ݯ��e%X�M+V���9��̢�z*]�2�^��;�vB����j�r��'�+��8����&��0
Static task
static1
Behavioral task
behavioral1
Sample
1c2b1c9d3b4ef74f76ab9b92154f36be644f681ef7f71e28e2587634dbba02a2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1c2b1c9d3b4ef74f76ab9b92154f36be644f681ef7f71e28e2587634dbba02a2.exe
Resource
win10v2004-20220812-en
General
-
Target
1c2b1c9d3b4ef74f76ab9b92154f36be644f681ef7f71e28e2587634dbba02a2
-
Size
752KB
-
MD5
6284536eb3c94dc3bf65af229692c560
-
SHA1
4d58f3c0b7c6166aa55e736e7b3ec9723208f095
-
SHA256
1c2b1c9d3b4ef74f76ab9b92154f36be644f681ef7f71e28e2587634dbba02a2
-
SHA512
23e83a69a1be65f8dc8b6ad9a12e622b85573ffb01a1554be5c87ae214b72e6fa98f6babc09d9a6d9e93ff516b432d512137898e3056fe5485a7ca6e5bff9417
-
SSDEEP
12288:lJEbMFpRu3jKSfrRciDGB2ei2n24yNFlCGzJLb7vRSoCL26C6F2GVV:Ebj3rRn6Bu224riZb7vRSoCW6FTVV
Malware Config
Signatures
Files
-
1c2b1c9d3b4ef74f76ab9b92154f36be644f681ef7f71e28e2587634dbba02a2.exe windows x86
0f1cfc5b581e39f4f4a3f1c5cabf7d47
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumResourceLanguagesW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
msvbvm60
__vbaStrI2
user32
CharUpperBuffW
Exports
Exports
Sections
h!x$F=uA Size: - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
s5K-Sm,. Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
TtUjd;cA Size: - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_Dd(#o.g Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
953N'f!y Size: - Virtual size: 641KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0P$I4g9e Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
(Fi&b5p: Size: 740KB - Virtual size: 737KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Gp[3!4t* Size: 4KB - Virtual size: 445B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ