v��i�4����1MMհ���q[�9[Q^��u�x<�o����{����������s�,RL8�>ƀTM�ݾ�R�.8��L�;���!���2�m�t��Á����U+��3u��J� ڹ�A�'����7��zW���x P���Z��Z#Kt��z�3�<��%���M�����=w��H夥F�W�jS[�|�&4�; &��-�u������w�d���yaq�%o��4��)��xG�#��F��Q��a�C�r����s�,����eT�Ѩ����Zj��ޙ�$].��W��&!Ϙ�����O��Gв��� t��������~j����������ȶ��w��x���YT��%Qc��<C�W�VqJ�[W�5�d�� �Hf����b��Z� jvȔ CV��f]� �am��/�w0g�LQ�&����{�T]���#�7un8�2�Ǣ�$H����$U3��l��^b%���S_�UP`��� �4��\-�(� ��h�C���T�m���m8���<������/b�.��M��3Dу��@�[|��T#�h�B�h�g���������DJ���Z�K��3��a#�u��K騱 趛��rǛ�@�`�&A�*��6� ���â�<��|�-��j@�n>tP$����7�����'�V��}��������D ����B* � ��Z1��lx�l]1,�ï���u�H��i ���|����f(0�`6f����\Ǣ��Z����ݭ�rx����2�>��O��ؚH�$R��B���'��Q8�� -��T�n��N��/�q�w�ξ�͌�̐J����f�Yb��Gg�ki�5�K9�������5wY��B�͜��30؋[�7%�bC����g�_��[�d<n?\�UOAݩ�#��d �{���V�mY0���/w0@��>T�z��aM����9\�����eLYC��/���Ϥ{�,�����ȘT�&}�y���=C��KP�J��]���^9�ݗX��AO�,hg���w�g�\�s$U|�֢C�v����k�I�d�^'?P�j8� �I��������[u�x��b�lo��g��EumP�^�7�����Yc�a���9��VW������_�*� ��N�5ty7�4L�-v�K�Z�?=�əu���^R�(u|��hȳQ�A<�D�:����K�[���nFFr�!Z)R�:��k����)r������旫���䖖s�_'�l�m{�G�^����{ �Lc�/�S�x:���ސ!*lK�;"���"�$�,O����A���+B���P�&�ID�D�z������|} �A �9��z�2{�lI�.z�nwV��%��1XA�/!�$�S �_�+&突7�(t�'��y�<g����8��H��ug����7��i���Ԅm1�����嗺ߩ�e�c��rm�L��.�uz��p3���o�9�U��焝�PHR�RA��|/�߰?zEN�|N9�8�(�M=o!�<E�v�͕PH��,�S� ��WuA������d9�n���[��U0���Eҿ?��u+����z���FH�{����H<���Ct`�H_�g����oL����#!5Ze������(g���|~p����+�����\7��r���t�zh8��߳��A�{�(?����<F��݀�xX��*�_�Ҡ�wri�Z"�"ϴO)�uz�T��Ħ˿����4耂�0�Y�Px�$�3NX�l+��x�o���+!6�S��M�@X��X������꜇�g�9Ͼ \�~5 �Y�K��������]��<�5'F�֍{ʍ��G]~� �i�g����eM�I}��à��v�őOp������������^�;dW�ΰ�/J[3��νbF�D��R����J�Z�Ls�D��:�@��B����n�<����JB筤�������E�җ���+�w���BNU0ih�UfB���������wA��k���$^*VC��دuB �_��y�0�mC�W�Q�X ů��b�F|��nw��w�A�v�����C��9]�ڎ�ـ��F��R�u��Kv-��^���C;�� GS��5F�Ќ�`4�3A�o�Z��u-��B�)~N�㧀�]�1XI�n������x$H4^fa�@g���.��I���XpRC�hn�S������X�*�!���#���c�0���!�����#��i�P߀7Q�Q�E�d��<�� ��\ �� W���,M�C"��Q(3BQK�ú����m9�3�ޭ5;%f�h��6|���+g�n�Ï���w<�e���ɳ$��\��g@�"�����8���ӧ�I�)&w�G�7��\�Q-�����X���}��F��+�z���6h�6�_����q��r�^���!z�o�*'�A�.�|��K稩�;}��K����G��=`kP�ȃ?�'�X��� C0��x��U2��#�I���� lj��%����B��5���ú<�>�0��)��{���G�������Wf^]�=�)阄Y]�ɞ���_�pd�kV�F�w��� �a;x����U5}!���srg]�Q�Щ6�4+{cc����zk� �� � �_�oږ �n���[���.�'��2�:��_�@��~1� "��jX�I���F�ɇ��r��)yհ�t=�^�J�?��Fm�E�lMEO��=�v��w6E��t���7+\�)����P�:/R�{�p�<��Y�}��o�#�T\R�&�8wDBC:����5�0djڒc;G���9_q��y�g��E4���q�8��_v�¢/���lh6wԁ�'G���{>�?���e/G�+��m��n��<�{�yF&fc��B�D��'���j��;/���Y�;��A�P����Qڧl��E��:���iK~D8�-S�M.f��k�-�M���W@}�u�b/�)?��O��w`Z�I�5�k����MMEw*vAE��k�����j���^��!B9�c�&���}=,��t�e����K��; �h��R�@���.g�c|�����00czutOc$�NC\�j��l��
Behavioral task
behavioral1
Sample
c378c4aa19706d89a77329c03c2af4c80fc93bf7035eccbb5f91b53e66c5736a.exe
Resource
win7-20220812-en
General
-
Target
c378c4aa19706d89a77329c03c2af4c80fc93bf7035eccbb5f91b53e66c5736a
-
Size
128KB
-
MD5
079fddd909fa4506211fd30e785a8ae9
-
SHA1
7a14e651cc7267cc5a659e71694dee0059fcd1e1
-
SHA256
c378c4aa19706d89a77329c03c2af4c80fc93bf7035eccbb5f91b53e66c5736a
-
SHA512
e159523e2d1e785ce950b3b19760a5f57339765752e315994b6b42c67da07d25ab484c86dee1fdaeaa0d01678d875ffb5d001106379f5bfe6060e6987369fc68
-
SSDEEP
3072:QgHY7XMFrpELpbvJnQAEt6ibqkONSpV95cvehYs:Q3MFWLdvatmk1pbMmY
Malware Config
Signatures
Files
-
c378c4aa19706d89a77329c03c2af4c80fc93bf7035eccbb5f91b53e66c5736a.exe windows x86
52fe4e1d566b594496870201cb52fce3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
msvbvm60
ord617
Exports
Exports
Sections
UPX0 Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp2 Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ