e[#���T$t1�ќw�P-вey��������Z���]��l%�!�ܯ�%����H��b��߿�)�ʌwQ��$���OU&��\"�+O6��۳H��z���x�$��t"��\W���Rd��ؗ8���z����L���D�ԍ�e#���.��M��Z�ԯ��X��|���N�uY6/i%�~r�E�-"1|���8�>O��CV��t��!Ʀ���}N��H�V�#�Ұ,)x���;���䲎�R�lӅ��O�:�T��M���a��T�Z�ŋ�k���o��z�1�0��n�'�?Dt��^�����iHY_�m�Ԍ������%t"�AR�u {�9���c����T� ^m ��~�?��8t�� 1Q2g������*�����.�VF4(���zk�&�nOU������z,,)�,���R�?`�_^G��5��wHmp˿,�ر����X�B�n�C�"lfay�?b2�ghw�ڍy:���v���^�����1]��ůߴ�-p�qߠ�/܇b�ѕ���Q8��oy�H���V�$��O:�>����r����[E�m�P����4�4�]���-G#��V��e�,倴kӽ��UE�X�kWt�@U�G���M�!���g%��դ�i�6�Ob�F2�[�eD{��~���`�r�?���`jGIP��S���Q��'��;��, "�Z�6Aie�G0������y,�8��HK���7Y3��ۋ�TDM�j>��a��k.|��V�JA�;wՖ1�2�a��1wƻ0>7.A ���~˞��rϣΓ��_q��#�O�N���l%�ogR^R�7E���9��������M�Ȧ�5!쾤n���È� <\�i8�S:�H��~���@��t����b�]�gN��T�d��mkt���-�Մ��T�gت��� =t��ڱ��x_���xvj��5Z��^:O��G����?)w��K�xյ�<�Fhø������W���ue��ň�������r�,vi��3��L�����-��[���E�����b��pV�m�iv���t���,E|�;0V �~r����~'W�犉BO��<��n�xW��B�x�vw�3���W_V��i!L㸭~�f����Ъ�h���J.�q���D7hV��n�W�s8yyU�Q��an�K�<�B_�Ob�-�O/�n|Q.����G�{&y�ն�)���^ �*��f�hE�=�U��"L�����EO�]�5��/����{ _cI=�;�هr��O�ժ����Ñ�e��,B���W����1�&��$'qk�3��x��%�1��L6w����P������U��<{%�K"!�ؾ�X����F ��Ul��W�,A��W-Dƕ�2S*ٿ�o�=����a�Gɯ��o(��R�b%2¥jY\g⼣��5H(�W6���~`^���L1�B�_��j���6��0�ej�`:����lr$9���?�����V�Y�I�Y��(9���LZ��߬o�˚�����(�3�i.�(��}:������j�������bTC��(�<�_���v�TO!h]\p�V�QG.���?�U_�3����Iٰ�Gwݒ���d�N!��#�>7��Z�^��H����X_Ms��ʊ��'�,@Z��9�5�9��������y���G�V�>vE���l��ejK��:d]��G}a�.��C)��]ɩdc�e<�N<��>�c~������y/l����X@9x�{�1��;F�T�ϕ����x}4��}�|�8C~\��M8Vn�j�� }�?m\Y�Pq�(��d���!}BQ�G�љ;W�秦�|��gxY:�n/����o��n����=+�A���W78�#2����~I.��V�>2v.��׀��q'�ĕ���y���c\��{��G��z�}��#����4�G�0�R���0w��R� ��i&(�!)1�������1�?�_�憌f�ګ��� kH����T����h�&m&�|�������ߣ���f��FLz���kazK͗;!���5R`̒�ukK�[!���A��_a�u�;�m�'ݰ0H^�ld�鏥�<� \��H�3�U�q�zC7m���p��F� -b3'~%�c_E����e����/��Ŵk&�0Fb�$�;��Yc� �S�}�0�[��\�= �W$��?mG�T� ��Oa8<��A����^:�#s߲Ƴi�H:J��>��b�X����ܭ�����ix2=W��Ċ����Ϗh@a���5RV����:�y��;�y�� .��F[�ԋ�+bz������B%��t9�0᭲'���E��%�B9ȸ��Ѣ����5�CT��J���Q�=���b;���.����b���,(?��YЖ)�>C��0ƚ�u c��T�G����P�����o��s(d�xRx�X������iZa�^b>��[B��/�;���Ϻ9v����S]r�9ʬ%QN����%�r�b��Ϫ Y�n�R]2���Ѧ�*�����'����l�������F�� �H��X�M���xi%��Ó����p�?��E�wx�����x�|�f� н�=+b���f6p���Jt�UÕ$7������rVL����]ϬUk8J�G,^F〒��ǒ;v3n�K��#���j)���f�J8����#��z�( B�u&�.`|�F��{��{�P/�v���/z��Nĝ�{j�:���^�:�H䔙���S�����l���!`�4~�#��D���g��J�����>Z%�qd���˵�d�b��qn�����l4��==ـ��x�#FU�)d+�6<Mi1'/4��?��z9���P��M�(ނ�C��:R�3X] ��%�C��Z<���8��ȃ�ڿF'[�#��"���=�+����C�_$�7ݥH���`�L^w�Ȕˈ\�הI��J����P����3�Q�e/o8��k6S܌N���Ȗ�}��3���M���ڌ\��7��s2��C��_��rg'��Y��Y���csM؆�����*W�NS]�{�a͠8��/+�XHgL=M�(��G�O9���Ա�`�Y��'ԣ\֓�a���E
Behavioral task
behavioral1
Sample
6c6f1de1a53a2affc7cd8119c917bfe072ff9cf8a8132b07a2823721c341716c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6c6f1de1a53a2affc7cd8119c917bfe072ff9cf8a8132b07a2823721c341716c.exe
Resource
win10v2004-20220812-en
General
-
Target
6c6f1de1a53a2affc7cd8119c917bfe072ff9cf8a8132b07a2823721c341716c
-
Size
102KB
-
MD5
6d11702e0b12b709bba04adb83d6e0eb
-
SHA1
2007d3e1129b478aa54703f1a4c6b1fb2b05de9f
-
SHA256
6c6f1de1a53a2affc7cd8119c917bfe072ff9cf8a8132b07a2823721c341716c
-
SHA512
15ee21fa1f34c9e2e607d313943538c25d534d5e22d95e4a2dfcd393e9d9e004fc0135c2a826bbda319c7ffda6042dd7f16df649fcb8fd43f50e098fee43af5c
-
SSDEEP
1536:+oPz8azj1JKn7YCwasmOlldj+q0H8hmjQfc890VE+Pr6snr8/0l:+o78yo7YCAmGd90H8hYsc8eVEOr8/
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
6c6f1de1a53a2affc7cd8119c917bfe072ff9cf8a8132b07a2823721c341716c.exe windows x86
1a0e10771d06066829dd5db3ce20e509
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
MessageBoxA
kernel32
lstrlenA
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree
GetModuleFileNameA
ExitProcess
advapi32
RegCloseKey
Exports
Exports
Sections
.text Size: - Virtual size: 556B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UPX0 Size: - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX1 Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 300B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ