w�2�Ν~xwf���T�y��3�z%~k����Qw����p�T�֜z�����Y��x�!�������h���bR���q�߀T7xp�6�,�Y�y%�R@8��o��Tuһ���%_��'o�N�r!]����1q�|�C�c�5*�$�<��<h����58m���z�lL������B`���B�#i�����n9�N2t1(d��9�BB7C�}.p�@T����i�*6~��/x~ÛEԑ���n�uج��\���'j-��8��~��|G/�R�C��k�;qc=���:4��{V�3 q�{!���Cj��F��0z���hsz+�b�;�UZ��9H5�k�u��_�-�!�~���57�M�Ky��t����(ȋ�'����Z��A߰>_���M��B7�\݈�}��4�- w���H����r:.����W��SPh4�b(<�lc�7� ���u�jb |���a�g�MT��,��]w��� ��5@�C�=Rl��V�Q�J3�&yu��� +H�jv�Je�yac����A��D���8����x!h�M�^a`9�0u�数�����H����t��O���S�[��;�.�HI{�Ք�nJ ���R[;{��h�!e#�z���������X5uC�i��⇥�@��*��e��������ݣ̤҄sPmg�*��9�����D_��3�ѐ&X��p�9� �\�&�� �8�l�9���y���5J�Z�*c��3�m�� ֢��$�u����[���q]�6�fskدi��5��~�@�ޔ7��Xd�1;:��mi�?�d���i��'�W 9�t�A�,�[0u�\���7R�0�c�|���K���Zh9��IF�$���Eݡ-��<��(;��'��������O���>�Fﺳ�E�K�9��ouN�`��8NV��b k������c%D[����^��2HNn^���%�n�a�FR�,��76]=oDu��ik�~F�z��@��N3*!�<��j��� ������d�Mr,�2�����ʶC�˥s�h@J�����B��Jv����úab��)�sQ(��lj��VѦŢ�xԞA���Y^��߃����O�Tp��6���AM��h�������(X��|\�}?9�j����3�~1a��_Q�^�������!H|��W�?�T���4{���D��,��G[DvDwEq���@:)�%G�Y�*:pc���7��Ⱦ%�Dc�Jf�|V�Tj^Y�W�:�$��<��<��Ve��&��u�r���O�&#H_K(]h@���C�!��Z6�J�?{�+Jv}���"������w_�/�#xuK����N:������ͳ��9��x��K�O��s!-�%��L�i&J�Ɗ�Bզ��#q恢�� ��"hqOZ��x�cV俔矨���\@N1���nZ焃�6|%�ֶQ�EYn���B��%��<��5��B?g��QVxW�H;V�l�����Kȃ`R�)�g�$E*م/�J����6�����7�6�qڐ %}|���K�����TTʞ#2:��ez�0��Lb�S/lc��C�i0�#��^74��S�Uenojd&y���X0���r}r#�Z��m�-.�[iS��"�(�8�T|'>�mE�x�t�t�0�yl�ǹ�Dw\G�������<���Kf�E�lMQ�W�x^:�I�MRV'��Fk������E�+9�2nn�+]D� ,� �>i����M�]�N)+���*���F*X�m���wOw����f*�Q+��{z#��˦�7 =�%�?�[ckS��M��U���M�AZɎ�i�fLdž��*ɛz�2�[���I$���"�1�߽����؍��dv�#���D��f)�r�������s�^;b�Y7\�=�3cq��}�����Y�R�����z���ϡ��߮��x�����k��� �f�/i;���7#`�� ��9����!�����\\��k���Ч7 \�� C� S�M��o�K�H�A*ci�.��<e����e�o�Ԍ��V������LA*{�I����'y���@~\x��n^� �������W6?w��V9��$�z��s$�ݩ,��-�����2�TL*(V��k��--=v3;�)��R��i;(��͟� ���`�5�%�mxNV"�ϳ������Y�C�#r���c�A�CY�Y��X�ǂm.+YV�}$��ow���;�]Z�])�=#���X�c�����H�_�l[� ����Y-A���Yn^wH���J�q���v�0M�|�;���p`�m��#9���` � ^��s��e���M˺�t uskt�0@f�h$��5<���U ���������ʚ�K�1��A���[t~���=�n4Y�թ���%9d�E@} Q �ݺp����S��`v�O��Q��Yy5�猳�یʠ�����E��N�]��Ǟ���;�z����j5�PP���M[+��y*�� �[R�緽_��0�Y@zn]�-��հ�.v[v�U���X�_�J$Y0�2d�-���{!�8�8�Í�ߘ>��Vv�O����zaJ�2m�5���t�'��K�s���p<ek��Aw���t '�:��B-øG4O�i�C���ߍ��*g5vܾW�㯛Z��5%C�k�A�!�7�N$W酒�հ�J�Xy&a��D�_Fzq4 Ľx.T�W?d#��Lc�3���=���y�r������o�~}U�)�\�G6T+U���wmF,��U������N-�r�C���~-���v�;�iT{�:��!߈�[��4ݧ���'ƫ�c.��WA�b���ׇ�h;��̥.U]�R+<c�ͩ���{Փ+f���5Y4a:�4����|hb����F����tmr?rl���o �4k+SO�;p�0:h�0'��'�F�`"��� �ݗ{F��ߋ��`j��X4�Ǻ�l���<h�����]Ņw�l�eܔ{�j�,�B��=�a������o/�ir<� hA����Z�g� �)�H���C���@b�XjgG(]v7h�x��0+�
Static task
static1
Behavioral task
behavioral1
Sample
81c188b9c473ecb08215485219103ce03f0e8f59636e3b84aa5d6131620e9536.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
81c188b9c473ecb08215485219103ce03f0e8f59636e3b84aa5d6131620e9536.exe
Resource
win10v2004-20221111-en
General
-
Target
81c188b9c473ecb08215485219103ce03f0e8f59636e3b84aa5d6131620e9536
-
Size
122KB
-
MD5
fb73bb3507a79c3369534da35f425e48
-
SHA1
4414db19d0496f45625732cb607d22fa42070a25
-
SHA256
81c188b9c473ecb08215485219103ce03f0e8f59636e3b84aa5d6131620e9536
-
SHA512
ad000b08ca7d7db3e8564c8ddd8bddc13f99becbad587556bbbe01f29691281ce154522efd146715ba9cf66499393598905258ce94d0487e8d1b5c411652c97a
-
SSDEEP
1536:idSvNqDotvXaWfNIsFt+rTZd+yw1V+OT7H/08TRuzR3dCO6Y11+cdoJL6c3CGiXK:lNCqqWh8rP0zN4F3IKIc6B6ycLIfZa6
Malware Config
Signatures
Files
-
81c188b9c473ecb08215485219103ce03f0e8f59636e3b84aa5d6131620e9536.exe windows x86
bdf28ae65769aa9f47cf68853be8243f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord2514
msvcrt
_XcptFilter
kernel32
InterlockedExchange
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
Exports
Exports
Sections
111 Size: - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tgt0 Size: - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tgt1 Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ