��7��if1���.5|�M�&��v���g�ls��e�C��WT.�&|�my�����N�>.�%�bꡭ��FA��MZ�.KGd��.����r|����x�<�����^P�[��=��m��$s��In�f�������n�G�����cH�4�j|�If��?�m���� ������sG���n˒����4h�٘O�(����< ��Z�JI{�Z@��\�f���U[�xhԫ̨1~�)���E2�6O�!?�X&,�!��Ɂ�~%]�״�+�x���#;�@��!?o�v ̑�'����G8#����uEӠ{y>u�_uꍉ��=4U�ѩ�D�w��ß��G�L�$d�����n��N,�] Լ�O��'���X�u����B�jv �Q���b�>7g�V�@�O�g% ��G_^�<%��9���"��Y��)�0� �囃[{<T=n��dg=��0���e��l�nҟ����r� nj�)�{~��T.�=�,���F���&C;�q�F�a������DO>�[pb�N�̖N5���J'�Y���T!��e��&��ꅡ.y9 p��Y�� ���~���c״>�����XqI�B��| t�w�C�V3#=@���N�d�ܞð�W��p����)w�iB<��L���99��������2�{o��3I ��E������1}H����¯��d%8xA5���<��,;�%���v5k\�Q��2.��m-��{a��sS�8S��(�+ ВtS�p����)E\�O�v�4,�ش��e~+�j ������H��K���d�5��Mi@jkh�r<"�-�3R�Xz�m�WߔK�UT�O�S��"�hg\nOu#��t;g�� )ђ�{�1�d�V��-܆�3�#}Nu������C�<+�+Kpq�|�a�'�-CȈS���S����_c� �k(5+c���Ek�&�>�3�a:� �Mg�3���������[;�2��ji1�ft�^=���Ć���<4oM�79�=�KKr� ���a�^���eYƐ���VQ��")�_�\g���BQz�y�W�lH����H��͗�BgPlmH�M����KW����C@=,��*3��F[BgK���제r��*$k]cnd����i�-^ ��Ԡ19+�%�L�o�:�S��v��6r==54�ch��5�"uP�V�+��U@�j�}^s�e�5�ĄQ����-@a��#q��T�^:��aț[��_&bZ�XU�g_�W=u�;J��KdL���q�����0=_�:250=Я�[w=O|C��HSeC��&a�5�H|Ұ���x�"�!�;0ǥ;o��[�ow���.ߩRQr@R��Z���I'�t��e����M�?�N�r�G�g�wc/�����H~�hV�� �Q���qfJ����R pa�x@w=���(�uB��թ�����h|�X�^������uE����7����s���f��tm�i�(��& v0�$$�$��g)l�ס'J� �?�-E�β����|�{%���d~�'#�=;�a��WT"��*����hb���wB��S��>� ᨊ4z#ὖpC�(���(;w���}�c��㴐�GxhOjEb"��7�����f�\^ �:R�k�?F��nն����$�Y��§e�Ǘ��8�+�)z�3�$iC�# ����x�@S�͗1aM���| #�$��Y�=;���4<���N8I]/����+5yI���y�_�2�X��'ހ�4^���0��ô80�UK�-����5�}uU�����}N��H�܈�J��DKs�����uĶ��m��c�b]q8G�6#���Y����h�o����g7͋Ϫɕ�a���� [�������v\���&U؎м7ԕ$ڒ6�"u��ܔ���$zi{���J�/}T��������J���&��1�fg!�-)���}4'�|o�4}�yw��)�RL�4Ju} �Ȓ���ʒ����'��c��M=�_��"�}@�H��$�9��1�:����<âX���I\�z4����3�5���>.p��Y �])���C��Pږ,Ρi���χ�p1�HL��,t�tXL�h�w��Fמ��,�^PҪq����Ѹ/+ [g�Уs�K�ti��� ��e��a� {���KUk�C4�R��kg���8����� �#9�:w�o��N�X�C�sp���Q�m#�Ŝ����Fו��������,���G+����Ir��]/<這��ߠ㷤�NY:���u���V�)��7��6�msw�#�ƺP=����MƆ<�C�j�����q'��'���5�]��-~l��3���.A�z�h��\o:F}P��+B�����fH�����X��G��YF�@�T|���lF+Z��V�x �I�)��^De� ��<F��9<�9$fgY�T�`��a��e�������_ot��� ��u�6la uqvl��UL�L��!�p�����pz9'��Xq�7܈��NA�f�#P,'��dSY�(���r�1r�d�e�E�f�ڗE�9�w�v5����1^m��C�\���,�B���.m���a"�MP��r�Ɍ��^x��.��nO�,�����%r�(�仝�IC9}0\J� RT��/�@N�_����������:����*��������|9�b��=�G!��{@H�\~��N��p/����p���ሴ=�?��{q�[��gH>1K��˸���� ڽ12K��g�e�^#���>��G��B����&�t��}��?�O�f�x ����Cq�����I*�Dex�%�s�8^���� {9OT��� oݺ�(^�*gm���I�d�jS����$����-�O)��� >Qs[o?���`��\(�Q ����yLg0ZG(팷�Z�-[���o=ckJ;��&dm�R�#eu�8�</�.l��������"mj�� 2(��<[����V�6��H����sSK�-(�����`���P�0�������2�\��9[q��^.ޡY;F��;Ő <�c����Z�1�ݯ��� щB��ܪؓ6'
Static task
static1
Behavioral task
behavioral1
Sample
83304f9c30b4ed2e8aac06fb7318cf81ff28e273543cbe817355754c202eb768.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
83304f9c30b4ed2e8aac06fb7318cf81ff28e273543cbe817355754c202eb768.exe
Resource
win10v2004-20220901-en
General
-
Target
83304f9c30b4ed2e8aac06fb7318cf81ff28e273543cbe817355754c202eb768
-
Size
6.5MB
-
MD5
def1d800d6a1c9d4d3c5dcc6d8d19921
-
SHA1
611693adedb359331413ffcb9a870c57488d9ef1
-
SHA256
83304f9c30b4ed2e8aac06fb7318cf81ff28e273543cbe817355754c202eb768
-
SHA512
3dcaf2fa95fc73fc73bb771b5435412fb1824687ca82d3682df5e883899f2a50a1b0e463e5e36059e1eefffb6246fa0d3a716c4c19e5f049d112fb5dc81d89a7
-
SSDEEP
98304:yCwLCab91nmIESEM4t72vMBhpfroMJVVFStyGrTItO3lmiBgHg8JD:laCAnmIESdhxMjSEWmObIJ
Malware Config
Signatures
Files
-
83304f9c30b4ed2e8aac06fb7318cf81ff28e273543cbe817355754c202eb768.exe windows x86
f54d192d3eed4b9e21e418b6ec71368e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree
GetModuleFileNameA
ExitProcess
user32
wsprintfA
Exports
Exports
Sections
.text Size: - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 6.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dbb0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dbb1 Size: 6.4MB - Virtual size: 6.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE