%�Ȥ�'xF�T����w�; ��[�^^�kq;���-D� (�۾�q؉A� ¢�fx����wW�]Ȉ���X�x�o_�����ʗ?�T�*���ڄҨ��:�|�[lF�7�l)�;�kw��ּ?D���#���_Ɇ;��o��g����V�����+��k�~%H�F�P̥�XXM���0{O���l�ɜ�\ M�|�N�jg�"O�H3��p?ƍ��qb-Z��$+F�Ⱥ(Xl��+��=��C�9~�Ժ���� &EQW95|���Ѻ�|�[�k^_˫J@�fЮWtUUA���� �˳L~@3��u>�~56)��D���J�{G�k L�8�1r]�6� k&R�uS��Tf��P�q ,R�'_����P��!3��]*�bE��Oce[窹ͳ���nQ�.��d w�w������]�T���42���h�;�͢[^8�3��˨�ۦP�{m�kD<0�T��;�����գ.G��p��ı`�}b-�H?t]�r�\K�[7�V'-�� v�㲌� ��1F���R�^0�w�A�UY��SL�4����+�A$���Ah��<�aYPKKBJ@������x��û�»�L@C��+ͩJ(57���%^%SKq�I����V�����HҐ Ry�x�~(���}T���[�B��5�z�w��L��]G���1|�K;p���Td8�������I�ĔԴ�f�F��6�CK� ؊�t�W��7��d���;!� Qp!����OCL<�玹j~P�'��c��*S����b�mwh���8���u:+O�A՝�X)�<\m����$�:e`/W� "���{fwt����딒<�2\�4��F!���{:v� �!����z�)à��D� 7_�sDv��&�(:7�:�F�δ�\D*�jٻ&��Ӏ}�o�)W�b��.�̸/��R�дZHh���D�A�cΥ���k�m�6)�ڹ�2{���]�ZùG�naצ�q�>��*�Xq��IF���!��K`�I�:p���4 ��+�[�P�^�y:��d�|d�O�;���K��5�F������lW��wӋ�N�8㽙86�Z�I�\�2Z� P���y��� ��W�Gw����>vfMa��2vX�P�Q�<�n6�=�G��/����c��UZ�E��tjާ��K��w�,�G*�S�o��;��as�;Wþ��ۯ�q��g᪩�p) �|B�s�����OV���ˁE*�Y�z������aQ�`��� Ȩ���BՔ#_{O�Z�Щ�ּ]H�Q�kT��o�d����kg�+�E�+|�懩D��t���.M�p��7���� ����&�ōb���LĹG�0<D��˃�9��o�����Z��m'v )���(FHcX�{U�0~h�j����Sԛ�cC]�i y��Y�b-��9O���had^|$S70�ZWP/���������ဝ��� Y_�Dy�5�&�=��?L����� �W����ه�!��?��p�>�8Sf�F�l�' ܙ����p>_�kdGʹK^(�T8������2w���}�,r����M^U���|��D�^��M.Nl�Wbe�O��^A�xB�r��e��W ��.��Ԙ� �h���r��h諡?�ŅU��VR���.B���o�h{�G�`p�K*�^B�^T���b�����6y����Ra�������j�1����nqH)$���B�`zE��H~�#�%�(5�/�?y�@�� T~�Ѣ��WZ4���C�Umn��d!�z%���ʘ@��n�<�c6@��zkO-�C�M���s��H�kج����S�#�X��=?{�ZV��w��mV���?�ATMY��I[P� �pD���Q0s�������~q�Q�:���z*4�I�K�R��Ӝ�������Ǯ�˹���&�䝙~����ƽ�D8�鸌JH1�a��j�Wǵj}b+�����_��Ĉ�ڴ .�>c�QE�&n��4l�Jl��1��bG0����j��PJ�g��%7/��@������\T�:7s$��ަ�a�xcA��䃑Qb���m89�V�&�D;�_Z�zgg�j�Z����|�E`�$*�\� #�������F{����8'���?�����R�8\��d���!��?�դְ�C����P�� mzY:����>j���K^z�OZ����סּ?o/���L�n���Q���ϝT��Y�QG0�4��ܩ���}0p�e������ךH֟�����w|$.�fr�;"�Iq}���Hg�� �2��k���8x�U������a�pUk�������>�*c��ꢵ��,/a7T�k�V����369��m���d��V� �|�DU�P熹Q�8)��,�|^v�98~�X���mњw�L[��*��A'mo�)e^2����mS���xf���E�Dq�E�1�x�`��3����z ������B��I'�z�@H!��zr-�]D S�ޑ�ϯ2��)�\���ۇ��*{�hF���S����LS�<y��8��"\��Z�ow*�K;��) �1Qa��� �ͷ�5��RQ!�x����3�e�+ǥ� V1�5�l�^fd���1�6���E �n�(�އ��:uUڈ=8%�_9����eE6����G�*3l��������S<�p�=�m��#� �����LL���>���b�R�?�,�������Z��5��\� ���:���(F���A�E�R����s��q��1Cj�\�=��\�+CFA���E� ���KGDP��i⨧�2,R�|º�*�yҿ(ٍ4ā-��[�ݓ����u꒟�����T8��u �ڼ�bAa��@l���@�;���ª������$�&�a���V��t�9�6B�f�s��|Ì'HY���tsg���bت-w�J�N�����(��U����/��!�����w�T��Q_��[�lc���Z_F�3�{�h2��cQ�i�|b���;A�+n]DA��?�7�'��h`�N�N�����h1�2����1� �em�:�Qˁ�(��J-$�A�|U�<�aq�����N =<}��^w
Static task
static1
Behavioral task
behavioral1
Sample
d00834a70a66bd55fd263c85786ad4a891731e37cc356023f39683a6b779c6b9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d00834a70a66bd55fd263c85786ad4a891731e37cc356023f39683a6b779c6b9.exe
Resource
win10v2004-20220812-en
General
-
Target
d00834a70a66bd55fd263c85786ad4a891731e37cc356023f39683a6b779c6b9
-
Size
6.2MB
-
MD5
591a79cc4cdcc5f31deb893118199020
-
SHA1
4557375b5de30d5549bd88645f928f64f7983535
-
SHA256
d00834a70a66bd55fd263c85786ad4a891731e37cc356023f39683a6b779c6b9
-
SHA512
a8f7b9803a14787f7103e1550de2d991fa861a19fad27ed14611304372d5667ae45a92c2fe5224088750dc4b0bd8012e1c1777d2ea30bd253cf65dd2e3a4c344
-
SSDEEP
98304:mzlEg8V1eHaYDc0st0M2nICcRcn26KnPjpfk7TKts+eX9Nz78lZZFHVUeab2T+K:mz6gY1eHaWKCrDB2+7TtXglZZFexq
Malware Config
Signatures
Files
-
d00834a70a66bd55fd263c85786ad4a891731e37cc356023f39683a6b779c6b9.exe windows x86
7163301db45c11c069a817577ab3a9c8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetHandleCount
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree
GetModuleFileNameA
ExitProcess
user32
wsprintfA
Exports
Exports
Sections
.text Size: - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 5.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.WSD0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WSD1 Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE