w����kw�h���P>G,nʞ$"�� ����哓�U���KRs� s�Y�1��m�a�)"����j�l u�U�_�������x���PGl��bU�s5r��|�˞�m�=2���ef?��i���m���� ����;_P�m�4 �}�m������Ֆ��-�uP!3�x1[��ٻc;|}y�Jƒw�I�ҽ�>����5U� �>�@�L��*�ʙ�Hu;�� ���& �*g�u2���Z�O�H�#��uz�5�R|���~S.�ɏ��KHX�:^� �~��h2ƧԀq=ɹ�W�����Nf�ydրøJ���!aI�MnYM�UQd���l��X��6�]����Q#۸��%��@8,tV�w���R,Wf�!j��� �L-t�Xi#�Ɇ��Ѯ�R�E�I�`w�]RMSW_h���B��C�j���tw��c�� ��\�h����ȚxL����;ׇ.�I�@4�:���ŵ���Qs�5�y��ړ���<�qs6&���Ң��#�8�+:Q��"a�W���x����� N߷����r�f|@J4 �@:��r�?�@ުnA�� y8^�ڸo?��%�wY���ⷍ�D���I����|��b�Z�;�ߓ�lo1S�:9+�&"1����v�cϬ�8uU������:��&���!��Ю�� 6�Y�w��DȢ�(�=]G?��ό�q���O'����w>`�R ����4x�� �@5pF�`��,��͜��@<�|�X�a��ϻ�V�m<�@��4DI�\�6n����z�`�Ss�U�Rtcɗ�QdrZk%@Ґ�=���hV�K�#��;_�����r�2�2�$�dWC�$]�$^����0y��U�E��=GiI�"7�.�,�А<�y�C`Al��yKX� a5��9������a3��>�k5������aV10} U~ �'����phK� bpndF�3��a=�k�\hH�$��uѓ�r�c����x���y��� ���W(��pi��F���3�v�����'**3ͪk�k��bt��n��C�g�I��+��&�8��K�4�6��e��mDFOT��Mn�%(mG��{h�Ϸa\�9� ka��� @�`x�����Q������O-��qIbԢ��4x @8����i��z�p�Lf��s�&�L�D�*Pz|m�꿚�Z����x�����m��9��rG�]�!�{^��T�#:` R`�@����F�tUڋ�����dM�d�������aM��X&�¦Ώ��X��\�F�� (��MC��������(Ǘbסr��⼵���c�_͗��V�wǽh.�8$.�)E���Viz��We�N~���_S�~�Ʒj��U'��$ ^8-`qN�@�Ԑ�T,6�����iuR���Ot��ηm������c������8$�oq��H��r�F!��s�I{��;�T$�x� !:�E��\��i�{��7�<S�j�56�2� Q=� 6��608�QRpi�ļ����- 2���:��k��$�_( ���&���a`+#؞��-3�m�р�i#o�k,V���e��������_T����#Vf�<�{���T7�J��n;K��d�B-C0І �����~g�-<.$3$���)RWj��xS�C�TT�@W�2��$xv�З�gUΞ�Y��6��"8Y���Q�uR�Y:qV�[&+8�&�!���^�0ʻ��t�$�WRc����?-�5/m%7d��t����VE��[�t7|H %�����eǃ�����Akp���,�.�)t�Ww�7� cr1/�!;��FD����')��o3^��n�V�C�[�m�[�%����Yć�A�vV��H$�B�9(��R���~,m��6�.c�8����w���"���&0U��.L;�M툶�!m� hSc9��V��k�3��K�ٺԱ�Pv���LH>����j��f(pK�I.P�Sv���++@����9z1�:s3���6n��,�E��{�1���F�s̶پ����}0�K "���S���D�~����(NS�U{܆w�O�*��z���\�g���oHt�Ǣ���gm[J��m��dCj\�ȿ�齔iW oYSjѪt=G=��dc�����P�C?��]^�u���yg��&g�p��g�f"�9Z�-YZ��3%�qKZpc�i��$QpB!�ԉ��>�C�`Y�?��+��#,��zΡ���Gڿ=F����@��X��t��#i�&�w|q2QU�b�H5��'�՚H#���eq�FzfT>%�W_~o�d���X�����;(���.*��p�`=,F�U�� ���-͎�*�QRi�c���K��a4�پp���ւ�9g��HY؎����d��x�[p�6ȍaq� C���:8��f ��{��7r���z���<1��~���k�<Y����'�1<����j��dL�Q�l���-%���ȣ{��8U���-�`�U����3x�2G3�ˍk�4SN��0���ֹ&�/��<��"�/8�T���,�ł܅j�<�F<�X���ޜ���W���0�0٪u2�����NJ��˹��>U��uy�yg�*�����1[�������E���l��*���Ds_�&�rL�������n��k���t��XC�| � �˒�t,nБ6h+�Ǣ"��`���$=������we4�����5����`J�����EA%D֥W�0`��"��݈���;�}=��JW;����L��p ���e�[�4���⭾�hoE�=6?�-l�E�(��v!��5��7�V��%k�U2�t[������9�8r�ܖ�����[_[Z����<�cgi��ף:�1rQ��r����Iyοޔ̣8�A?�� DIheyb��S�AsQL�� ��J�͉Z�ܳ%}�������� ��))�5?R�3B?@,Z����g*k�{wU�N]ǐ��k�׳Ӑ��� ������*�e��"{�l���yY��ׄ�� Z�u�4alc��R����Ө�Xo�����6 �b�8ްY���B��x�G�8~\����z���g�������un'�xZ�4��!*�2�� ������U.��9�7
Static task
static1
Behavioral task
behavioral1
Sample
5f6878cf4aa52dd5fa9ed42b664333b0fc7b28820a36cbe59dce16829ffa808f.exe
Resource
win7-20220812-en
General
-
Target
5f6878cf4aa52dd5fa9ed42b664333b0fc7b28820a36cbe59dce16829ffa808f
-
Size
6.6MB
-
MD5
b9d84e7b813c108b2d1a68fa354ff175
-
SHA1
44cd4317556ed8e08b8889148c0d1a0405a85294
-
SHA256
5f6878cf4aa52dd5fa9ed42b664333b0fc7b28820a36cbe59dce16829ffa808f
-
SHA512
1edf8152fe65dc561bceffa66f074456491b1658428afe3e7cc0398b40517170db452466c5ec3929f6defdb0f72fabbb6360ed3393a725783c310b7c64393497
-
SSDEEP
98304:rs1Ra3GYxl+f8H+LZygNMTjuIv1LPqXZmZy0JEozO59yNQBa0OAS3T8rS8SwNLXd:w1cWal+UHe6TaS7qgZNEVbyNQKAzg6
Malware Config
Signatures
Files
-
5f6878cf4aa52dd5fa9ed42b664333b0fc7b28820a36cbe59dce16829ffa808f.exe windows x86
dafdbbc6109353a89cfda1e51dd5d507
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
shell32
ShellExecuteA
user32
CharUpperBuffW
Exports
Exports
Sections
.text Size: - Virtual size: 202KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.:T. Size: - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.zO} Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.D|B Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 430KB - Virtual size: 431KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ