�K3��NN����^�����Å��o��s�`�Y��rcθ�j�[��*�k� �qQ v�߇��M�$����-�HX��X�UbK�r�XG���/L$p P;����mX�6٣��3�g���oU��*t^�k�Xf���1�j]�V����<���qBZ�[G���3����o&����`�tv��e|��&�8q9�W|�y���aW�N~{Xw�����a�c+f�H�5�#cژMA��1q4�=p� \�r��ԋ q�v`I�6���Wu�A6���DuV�L����(����0U�W ���N��זV���](�3xM��Fm�́���gu9Hɾ��q���ڻ<*�4tSc�=�d2�Z�Ox��%��\�� �����ƛ�����%�I��zI��7��g����j�\�)�� xG2T��M(���Də��}��G_�#z͂�F.��B7)_�B�6\l<Y���E�Iq�<����_�,�.�Z�͋%��w��/B�2��'Cn.b^���9���2Qzxm�Th�o�9���x�P]4��n��%kT�WO��i{sK6`7�!gIu5Ry 0k��}��b�fm���`����B�����%64[RC[8�*�?�mF��Ug�a�����nA��/���������1?���U�zv��U=.���jb���luRhu�/��J�9{��� I��@7���^^A<�/�>Sm�q��{?3���˕�sf���S��\t�Y�����&��f��������;DN7s��Y%��{�M]��q�[C.��)�y�����}hn e��C��A�gE�&���A��-[}1�%��*�#41�������E��DG���.n��K��=����GW/�MZ�TL�cUb �L2�x6�z-�람��.����x��0)s˲�xmۖ�8>}`�v��r�g�(6���o,�D#q���<���l�_��+��H-2Y���u��Ek��� G�j� i�{ʌȚ�8�A�$�����/��(W�%� v������V)�P�� ��F.[�⃡��S��gr�/��}G�b��� tƙ����g-��}�QT�$��f��g���,�إ�x)��Ŋ��=/cz�퓫2�x�����x`�^�[�Y��K����t���ڝ��R�A�o_\�Y���\Vb���DĠ��ތ�մzN���+�V��7�EW���nL]4���ao�b"2s�z*r�H�zeLn�j��e���Fo�%���^���Q�:����J>�?����Ѷ��|���4�.��/@�����|U`�P���WJD�&���\����e��;�� A�]�����){"���2Ħ|��=_����V@������]2M���DK�u�8Þ����ENe^d���0?Fg'�o��e�d��}�%��$�G%�e%��oN��$[�|Woԏ ]D��O�-���S�����C��O=��B��<�&����BAB2(\��8W��Ȅ@�����Ѵ�����A�K��c�ΟFBZm���4����~Z�cN�bPC���씆���br��]���.���M>Ω����$HF�u35p="��q&����Bc��6��ؓ�Sj�� ��s6*�C�Ǻz����υ�G%��x! T����81�M��|p�|����5��a�_s;k���R>f�ii�+3�z��Ē�@�8a����&�H�~i�y������-�oU��{��u��)kj/.F�� 9�%��a-N��ف�g6.)���]*�n}8����8�y�%��QU�%[DXL*P[��MX�����2;SŰ�~�ds�jD<��P� ���B�T�Sz��Y�+��l�h���,�;{��k������6���VzqX7E�������H(o��= �)��tR�M�hYX�.&� nnźꈻ y0��D���О� �f�\�-�G;�L����QmAZXuэ��3x��vW�֑����!�5�����e�ߢ��\!� ߪ��\o��aw���2��T����,Z0Z�P{�J����gb>P�$��eI���Ұ��yeK�-��� >���B7�E������u��K���"�a�ڒcl��T�\��j.��ʞ������P����>n� �)�����L��([�/�<b�u^�_.M��%�M�}�gJsƧƳe�v=�z!����aL �Ӿ璣��e�8/��㙬�_�TA����'�z��&�Kݶ�X�*j���U=ňT@����uX[�K�0c����� �2���*i�j�;Ԕ1�{������]���M9�?@��LMB�H�%��$tq�zB��0���`rb �Gϝ&�i�&jҕ(��]����+ W�ɰ�cƖ7~G����0�B����ͪԄ]���k^���bg����e����������ļu+�C[N(w�̴=?B8����nb�F����\�Cj6s������( о�0���!�c�,����GqJqh;ֹ?��T�s�>�R��~Eۜ4\|�{�в�Gq2��� ���ib%X��� 4�,h;`~VV�v�9�..�>��n��D�G�����A?��Zo7����V�>)Q��'K3n�;�:���<[W;C��6��e�ζ��7� ����6j�J�ڽt��u�� ey s3��L�e�t�����W�/����Bߙ�FmA��#������˾�O]�r�s7gN:���v��������Nz�������UL��˪nA>Ry�W2g:�W8�S5���,)��G�����O�� I0��:���s�P�Oi����Wa6��Nb��?5Q���w���s��=���_�s����Eă23�t�d���?�E}e&�zG���_d�]�q��G�y��3?����72I�߾O�W�|m���"[z~����Ps�s����� ����N��]0 �v"d�nM���Rj�f�����)L�N��ȓ���� �q���]�ͳm����#��\I[S{�����:W��1��̓Mx�����V\��Eۿw=�Ab�A��V;�� �ԥ�+�w )�pM#��X73������oZu���Q����_��Mc���AlpX�B���9�K�h��`I;�����gٖ)���
Static task
static1
Behavioral task
behavioral1
Sample
03b54f86973c4ed14dd90bb5a6219b1e7648cb0c81c5dec65d9c4cf486071233.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
03b54f86973c4ed14dd90bb5a6219b1e7648cb0c81c5dec65d9c4cf486071233.exe
Resource
win10v2004-20220901-en
General
-
Target
03b54f86973c4ed14dd90bb5a6219b1e7648cb0c81c5dec65d9c4cf486071233
-
Size
164KB
-
MD5
c7148846cf3efe20d65c9e6cabbf0493
-
SHA1
d6bec0426b07e452583901379345ed907658dc43
-
SHA256
03b54f86973c4ed14dd90bb5a6219b1e7648cb0c81c5dec65d9c4cf486071233
-
SHA512
6712a49d380628404256169c32a21b1352b36a8e7c098f4edb1cb7377f0c005cc93fefcd80cec092d317a1e231629758ba02b0de19beda5224ad937a21a5ed55
-
SSDEEP
3072:YMlddWbU/T7mWqNCmfIXk5K8ddNO+gwwHxD1Mx2hpyOiIZW+:F/W4TU4uI0M8ddNpdCC0hpywW+
Malware Config
Signatures
Files
-
03b54f86973c4ed14dd90bb5a6219b1e7648cb0c81c5dec65d9c4cf486071233.exe windows x86
3a7e7621298a8a811afde6713ba4758a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
kernel32
GetLastError
LoadLibraryA
VirtualProtect
GetModuleFileNameA
user32
CharUpperA
MessageBoxA
advapi32
QueryServiceConfigA
shell32
SHGetSpecialFolderPathA
Exports
Exports
Sections
.text Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bad0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bad1 Size: 148KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ