P6���ٱ�����!Yz��$,�p�5���� ��� ��Ks���K����jt��i���s�Tp%��T��E� "��0Bt� ��93���u�l� ��&g��Ԉ��v���cm����S��(08�'ҟ�ݼ�W�������i�kr��%��P@�y������թFg���曦��g����� �Q�����R��~F=�UPw�t����n��A��AA��b���� ���WT^��V����vxt8�����ώ|�{< ��Z?��/.���y@6�2��n��Ky���e�>�@ �G33�NA�\% m�����T��f��a,��Bm�7 C1����V݂6�_T$�##�K�����g Eޜ��g����שb�3F�'g�z��-�ML��^} ��:�[��?z�WT����}��jV;�V�i�LY�u�Z� �BA����HL[��U�����8*��K��W�<������bX���5`jS���������a(h��=>,Oj��4U��t�n�f��9��"�o��m�Lzd�EL�N��?A��D�}�E9k����"���x�7���Xމ���2�>�$'��W>v��nF��$����w��%E�f�r�}�����FZ�J�G���ە�Ǜ -���M�zd���?\��k ��q���$����HK��*4H���u��5�Aez>���SUL�0�~�o��h@A�k�z�ӉF!���*9H�� ����֨�nL8�{ �%ٍ�R=�o�tul�_��q���Ƃh����~�5��^5-�kiƸף �:*2O;�Rw�-N~� Y�\�4[g����E}�3�[gn$��.�ne��q�4M�(����ak��#��S"H�l77 2�Wq��Z�,1jb�r!�-϶?cBp��-��.�/��UI�M�f��zo�z�F�*�H�i�q����̵��3&��#K����u#��y����7�Iz �����Dῖ�6��naң֚Ⱦ���(|F�ݮM�b&}�d��si��� ��X�ś�_��'�ߓ��i�j3zn���-T�k�CnU=|FK"O�3�1���MAb�X��� �23u�{F�\����]�/ʚ$���y��p�e_O�J;ɤ���MOcx�~I��ф�S��C����( � )�M�t��]�6*v�:͘7>ue�]�W��M�6��j��UI�*;�¬��<_�.�(]���2i���m0��-�������y�z9�t] �����̠���GȼpR�����U�v���;Zz��U���ٱ��F��������pn���T��� ���<���h�^n0,H�]��Y���ot��F�?��mO&]�ۢ�������>�;��cҷxU�zV��� o����w��F�D��lO������U�R�or���8��V��^����A�hHX��ӭ#���=��JQ&�S��3S��_�v�o*fb��_�W�2 �h���(t�������e��#z�W�|��} �c�C1�9_E��%���tW=@;��Gi�]c6��$ LϿj���F��/gez�%� �P߹���-�����E�x]B�}BpǜV�"��j�@��0v*w�]�M�'+O��q� �}�^�ð1><X ��X�������i>�T~O��]a'TW[i�L[S�o��F-�I�����~o㍽+����,�OE����w�e愨|T���;{Q.�R>�CH'+P��E d������!X@�Vp�ij��ԓ��*��&Y��sF��Vfa@��B�����j���[��|Q�����j>���v�DQp#nry����ɦ��1W�6Y����Cd��Ai�K�� 3�w^P�[��@\('�"d���������O<��]N8M�;ٿ �\�9�6�Z�`(��2=�%�Yg3��'�daW�(P�����o�W�`=5�S�����hOf�����5����C�Pz��!~|ƽ���)zӫ^�J���0�b�[F���Jˣ�����[���U|\��^���9��(�%���So^"��w݀(F��q��M@�B�V-{9��q�E�Gs��w`ڹ��u��I�'�����(�<R���}F8�#��dF^�� �Q�m��;w�;i��`zļ�)��>.>C�,c����;�w ����8��4Z ���Dr��i��F���QZN=�rrՌ�c�T����>'[���d]bG���s����Is�=`z"�l���-�Lw�o"G�晈kޕǯ%���\�V}X��3F7�-��������3�5���:�I�����Ɏ��(��!ܙ���'4���o�Y �V΄$_ ��'oķ 1�z�S���R����o��ޢ��79!9c��#�{C� qdc�y�N��� wGI�]b�nx^iXZ��k�M3�Q��(Ev�J��6�'�(�����"���qcSG��-���l§Jg�nV�S;��7�3��g����Խ��>�M�;K�5Eu�{�g�<7<����i����(�'Y�6JJ��υ5V �<q�ts��B�*�E�BY$��n��-�u��.rɳ��H*f��>�E~�8��z�S��kJ��=���b��Y��80g�_gS�ȋ�I���+Z����S��C����K�y��B�+<��*����Ї��y]����W@#���b�ᾱK�A��<�4N.W2�i]H�0�Ώ �-ɕ���cF=�`�h���yYn��ckje�(�pX�JCeJ�/����qw���tT�عL�U��Xb��0 �/��:Z�XL�^����g�"�����|��(�[������ �An.���^6���n?l�O*��GҊ7Hc�I�M��|��p���R���d5.�%ós�-US���j���5�y"�B9���&�������yXH�qU����1yUAXZ���y,�a�s�a%*̄Cܡn]��0�m�I�p6����8�!e����������|�[>�c�Bq��< Q�s����G�C�p)����!�����9��|���'d�d�<��� �^ucR�Tv��T\_�������PR� ����b���I2�
Static task
static1
Behavioral task
behavioral1
Sample
7127a360c8999070f730b0684b216ba281814835dee89f19cbd05adea9dfbd55.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7127a360c8999070f730b0684b216ba281814835dee89f19cbd05adea9dfbd55.exe
Resource
win10v2004-20220901-en
General
-
Target
7127a360c8999070f730b0684b216ba281814835dee89f19cbd05adea9dfbd55
-
Size
392KB
-
MD5
11487fab08ccfa7b1538aa7c59db0110
-
SHA1
3f02e18f1f36be22ffce3271a8a3dda13fc8693e
-
SHA256
7127a360c8999070f730b0684b216ba281814835dee89f19cbd05adea9dfbd55
-
SHA512
b98cd7ae0b138af9d8bb61e65c930de8c4514357cd33c103d99b1ab9adb23e656b1c83df77abd0b79934c405ed1868ae904be56be5869e325b19b5eb7b86b958
-
SSDEEP
6144:BD99UJKh4bw4cy9ivFED7SlufXGZ14+drjE3uKrki0PXeD0tne77bBlq:BZyJ5U4c+ivEfAndrj5KrePuD407bB8
Malware Config
Signatures
Files
-
7127a360c8999070f730b0684b216ba281814835dee89f19cbd05adea9dfbd55.exe windows x86
a96df4379d76e0816951929b304db6e0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleCP
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
advapi32
ConvertStringSecurityDescriptorToSecurityDescriptorA
shell32
SHGetFolderPathA
Exports
Exports
Sections
.text Size: - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.LnDL1 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.LnDL0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.fuck Size: - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.LnDL2 Size: - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.LnDL3 Size: 388KB - Virtual size: 387KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 316B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ