-�5_Q=�K՛�J��� V�g�{���� �KD9:%�\���M`r�UԨ���3���� ���>������l� [����^���Yx�tVs��ۖde����˘���w���$���ViîW��l8��B�����_ǐc}cf�.e4�V౺������Aj3���vT�����l�1���LTՏ��LC��- P�=��p�焧62�[�̭}�{��#��6�fR��$Yb�?��T�R6�:x�H-g8��SP4�1�i)� ��c\��g%�O:ni�~GB�6r�B#%XT��mN�#�`[�g����%��DxJ v�� _��Zn^����q����fs���B���Ĭz8���4�|�)Z�hr@��� ��!t�TL�e� ��c���&�XT�~����6=/���Kˏ�!���D]a��Ϫg �z�:]���g�f*B��.s����ٻߦY �x�Il�R���p�e�6�V����"��u2l�*���8��]�$���.[w���5��t��]�f�B�*vw��T�G Y���Jʤ�9䀌P O���D�3��|0��D�?:�Dqux�u�˂��im֡��:Y��%��z��D��dzG�HGR�7����1�rڍ) ��(]� �ɴ���)�W�Oa�˓=��L��c�����x� �WT{�%Ąɇ����I}�~�e���_��h+�ަlZW��aJ�!�JA�h��L��*-��Cy�������D�J����������7!c�<L�X������u�H���5���TaT#'^�̼hDtHD������@ĉva���Nzu&���g�_T]k��Y�y�����{4��iJ��Z��5�X�7%�4�@Zl ��uO��J����l�Q�U�4M?���Ag�#K:���lz�}���7�u�'Y��xo��d$8���i�y�о�7���eT{OEk�a,N�����G� U��dG�G�}�X|��94e���EO 툩N����4��+���6�K��8QE����.{�3KRq�3���v#�S�y�ʘ�mh]���I'y���u��8�2�y͒�w}��dj����= ���4���"&�T�>Lj�0��'�E� X��W��kHQ�g�E�������}b�5��e�1F�;/���M�zW���9����9�8u)~�2\���)�{�Wᐸ��C�.�4O�{��"Ȍ�]��k��</'}u�"��F��wv�ЗOv���?�+��� ��~4M@ &y$��h���*�~��4Q�h����V�D���03TO�H)M�N��Ey�ig������5Ԥ��J����؆|���u�4����Oa��G�u�>G���6��T�w�J�@@��X ��0Nq?�O����q��N��oN/��֩�[=Pg ���|�}i.e�D�ֺ�( ��������n�F�6���J4�o��h���ԂO����+Vz�=����y�J�E��� �n��\�?��F���lO��4�QyD����M�{�KL<�d���1���=*�S��a�w�DL������}[.W�i����^�!U�s�\���}b%$b\'��aE�D��!=3��Gl��[�vq/�4�|ܘ�~�P٘,�1 � 4� -�J1}����^��?m��v>�w�K�| ��`C7�=����6Q f�C恎��y�豞��Ľ�� �שIE���K��A�4��7xge�%Qǭ��4�N5�S�5����8א�������1W]T�~��6,s�<V|X�IM|i<�9�j������2�z[��į���٭IZA2���CW�zR�r�w��(��GЋ���2 ����7����;LxBhj����r�zs��U�k�R�G��Kx��*)�����N�1>�9�����20=����).��~���Y�H�( @TU�|�������%lh�џ��-=9T���f®�7 �����|�רcm���g-��Y�U��z��s�e�w0�a���z��m֏𬕞8~&u?�Z�*�zy���_������������P�w���:K����Jֳ�kb��= 6nt��Z9���T�F���h5:���� ��a���3���0�'M3���P0��{=%L��vZQ�S���)����k�u�[*�����-h���n8 1y~!<4X��ޚ��\�_7��hT*s$����Pv8�ځ@��Ih?���� 3Q�G�s�Α˱�V���mzj�aF�@�g��"8���8ae���pi�qrA�\�O,+���b�Y.����2��T3����ɯ��c����J�&[ 7M���}9d�^Ɗ��S��(��ߧ��_fϮ(�u��<�[�7x��?����ӛa���v�zl��i�+[��16�y��`)��vڎ*f-���>BN�v �D52 � ?������=7�3&���0X��t�ې �w||��חR�mдfckh�����s,�xQdT�;������/Z��J�~V�(-�sl����z�,0�� '�P)��.!+�&�J���9_�ǀ�T�*����fX�r<.���'�dٌV;F.�K�W/��bn%�2~&;�݃��:;��5q0�nD�Cm_XP�jx����_��������8{+��o�/��su3�z�.x���������}cvՃ�����0�n�t�[�Ž˺�E�1a�Q�S�_�|�Y�p�� ��5�������9�|�k�Vb�g���&#�<�`�-���+��{���� D7�z�PeS_�=^�G�/?�I��i=L�ң��:�IEȝ�{\�07�����~���%����4#�pr{= 9�=d_i�sg�׃c��NsFM#���˙n2d�'8K��W��܊���|��ǔ�{� ��5�ح��l�p��j�\������W(����IV�0�*���j��m�J)��<�e���2=��!�,��y9\�Z����#J���ba��$���+-_���X� �&��1<e.�Y��-������0�Z.�-����S�wQ�$Q�ۡ��Q������g���@��/w��//5����ٽ·Na3���1@k0~Cmn�7 ,M,���
Static task
static1
Behavioral task
behavioral1
Sample
408e278445f5f99c8b7710588c08d8b8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
408e278445f5f99c8b7710588c08d8b8.exe
Resource
win10v2004-20220812-en
General
-
Target
408e278445f5f99c8b7710588c08d8b8.exe
-
Size
6.7MB
-
MD5
408e278445f5f99c8b7710588c08d8b8
-
SHA1
f51a410612e83a9f6d7fd3debec6b8b4e99f5079
-
SHA256
08c4a3dc2cc754b6b0b9fcbb2750066d3fe05021aba7d97fcd95b45ecd397bfa
-
SHA512
744e601149c33541817596a7972cce6b88be13316e729d041012c258eae30d96397161113a2a11cd7bd0eb962c27bdda1d2002f2fd2a3f5384984b28aa08655a
-
SSDEEP
196608:WkKfGv5FtWtPhWlzuOO/oox4jTqlIPPGSccxmv:Oejt2pyBoxkTqlIHd9mv
Malware Config
Signatures
Files
-
408e278445f5f99c8b7710588c08d8b8.exe.exe windows x86
b5af53b96a03972def1a5f287c0c1d5c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
ole32
CoInitialize
user32
CharUpperBuffW
Exports
Exports
Sections
.text Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.67~ Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.7@m Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.KG5 Size: 6.2MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 481KB - Virtual size: 480KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ