ت���:��>�*;�C������v�)��H���l��$����q̋4��ί-����pIr����x��G�5�BgRB+ �ʳ;q�q|�I�����D(�1]~;Z;�9ޥv�y�6x�T\��Br��}�+�����>�{VC(��fE��A+c��% ډ��(��qL��b-N(m\[�����L���Zz7����= �EKt��^�0�!� �8�EuR�C�5�j^�����O��t�9]KG������N�o�~��D�P�۲b���@.�?������ L�0�I�sHIVb��GҦ�`��X�7��OlJ��Pz4%���2�P�����4�l����u;���oX��]��6����l�i*�&so[&�e���\��9e�6��=����ɝǏ�S�&�س?�i�N�Sհe��ƀ���� ���a�C��3U8vK**����}��;<��8:��xë�cyr�z�J��'�������"a�1��r~~GK���c0��_n;����?h�U�uż��4����( �#7�+��9�ɿ��Vv��G�Fy1��}m����_����2>���6z"�7ʜ��¦�恒`?!�E?gv�ME����@�����S��Y�ܥ�Q7YN�A\!c9!���������^�����]�j;I�D͘����sW��y��4��J���ۨln��r��p��~�v/ٕ�-����Z7��?�� �R ��O��7g�0 `#>&=��JJ#oj`Ŕr�J� /~�'o�7��B;��UyN�z$��iY� p�9�c ��ȰW��i\�cWO�Xssy1��ۙ�^~��>���l���R͵��d1B��̙Z���禜aد�wuw�� �$2O҇�sZb$�Q-EW�I�Et;�����q��/XL��6?`j��� ���W���� 7�O}��AGò�24"�8�ݻ�s3��G�z�ʒ��]/�ȐؿF��^���Q�7Hr���͇��rof�[���I}8��bs�K�g����\����8��WA�lj~P!D��Y�O�������!�.�ŷ�Yu�g��Ã߉g��Ѝ I��w'��*���> n ��N>h��H{L�J��gݴ���z�D$/�x��������,&�B6Vn_1��������s��Z}SAx;�/�;IhO��EJ��YZ-�B5k��ʅ��c7�Z`��x"=���Ki��9-im�N�F�&��2�X5�{���v ������Ƙ@�B5�drQ�x.�Ѱ�&<�*%V<GiAc�p'w��L�C��W��nB"%�jm�4�meP���H��#��3����m�Uȑg $�p�Q'ƍ�p�;���O'�Q��:� �HƸ(����x�i-ı* !ls�=iGaGa۬�����t�3I�ߤ>pV��O��S7�����%���n�4�+�p�8�X<�|���WN��ao���;h��-��S�<�}a�}������#�X%"!�!Dإ�q�>���x�;����o>S��_�v�v�̩�p\;���}P����C�7߉P�Bg�ħ�y� �܅��c^� � ̯=\Ũ���0��;"� ���7��I\%fj�&+�_�C�G�F�Ϫ���Yl\�e��x����W J��H�0����� э+��&�H��d -�c۩:Y�y'�Gԅ���ʊ��9Ys�0����{�Mg��GC~ =E�`���T=|��w������0����F/�1}5i�l�Y9��0b��?Ҿ��bd�~n�(y��-�M��J�Bo�f'<�`+�c�P����1�� J��6�����Je�v�V���>�S�AZnKUJ�Σ �M��X3Z�gE5��htF��D��yPm���WG�"\�o�N�}���#�6N�VZ��}& �&�ힵ�J���ӿ�8�8э��r!y�.d��h&���[}t���_�UR��do���!oص�d:t������TXs2Ƕt��=��-$�jaI0�����7�=}���Q�L�+i{�J��8=-M�c$���ѹ�p �eЅqc��P Z��f@� {��R������h�$`��ҡb��3���@k� 'K�-�G���_=�:�����%�<O�VY6����i�!��i�>U�k���K��ፈ��q`���Eyai�nOZ���;����� �G��jP�\� �ш��&V���u[-����Z���Se�F��y|b��9�h��������[�{?>��Q���ZB�.��VI怚-�K��w�=�ٶ�lh|-B�c�щ^#������+N܈��"ͳQ5��L�vRe�el[���K}�J����P�3�w"��<t�\&Q3I��;�JF5�����<�_ 螇�-��F�^^��'�'��'RX���4[0��ѥ����z����Y�SKq� ��!��h����ʪ4>�V/�i��<Z�h�!�����uN��t4��z[���@��{�憢�l9�-�߀�D�0(E��5|�O������{^ģ{��Q�Xoͻ��k�� pY�K��R3��0�+9_���a'��:���st��]�|ik����-}�y��r��[P �:>�ҽ�Du^S #w� >Mk{���Rm��幥�*c0�W"Ui.�G��\V��k��U� ��%���NqaL�c�kj��w>�����T�*��sZ'�l���oE��`h��R���CԇB.�*�(E��e�"�Q���2%p���м���1��_&���f���&���+ˢ|-��WB�\=�;�9���d!f�ŝČP}�k�bs�V��}G`�N������(�)��`o"8-(:���W��O�n[͓�?�q~X��vs2���E�K{O����%���)��ڐ:5�z;�,�o3�,)�Di2RZ�g�C!ā� Zn�'��y�[��B��\��N3�}*��T9(� B�Bܓ���s�s��`�_x��G���#-�����5�l�RtD���)'��(��ƺj4��0�F�WC�;gI#� ebn2������3�m8M���51i�dޙ���:�jv�GY�I������;Q�B��Zj��� n;��r� %U�=��� �c�dT=��pW;�>�
Static task
static1
Behavioral task
behavioral1
Sample
c70abc8138a853d479643cf50ac78853fca0fc5cb39b6c94fa2301e479a968ef.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c70abc8138a853d479643cf50ac78853fca0fc5cb39b6c94fa2301e479a968ef.exe
Resource
win10v2004-20220812-en
General
-
Target
c70abc8138a853d479643cf50ac78853fca0fc5cb39b6c94fa2301e479a968ef
-
Size
4.1MB
-
MD5
796f95224f0f972cea60e8a47fb65e28
-
SHA1
b03169a4cca3296838374ba218d8fac00fe88050
-
SHA256
c70abc8138a853d479643cf50ac78853fca0fc5cb39b6c94fa2301e479a968ef
-
SHA512
c23f40952ebc16ea101b1ff43ce8fc93fee56750bfcbc244301c946daccaffbec75f2bbb182cce4a982b9ba413d6adf05ccd156c8a981e238c7f142bafd9107b
-
SSDEEP
98304:MhYjr7zz7vWBNQC3gjLz5ClpeuCdBLcp9OcodQg:MhYjvzWBNQIgjAlp9a
Malware Config
Signatures
Files
-
c70abc8138a853d479643cf50ac78853fca0fc5cb39b6c94fa2301e479a968ef.exe windows x86
2b2a01b795419bddd45da4db20ebeee5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
wsprintfW
Exports
Exports
Sections
.text Size: - Virtual size: 4.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss0 Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss1 Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss2 Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ