�5G=S��_�$z���_X���\$$V���/��q*T�ܽA���%�wM�+2��=�ʿ����7�*�C�˚}6v��'i�U����q�Cϟ��]��ȼ��HMg�\����g�s�������ނTiN`�����H���!�U]��Q`�Mn^�=Vf,��һ����m{)h��݉�W�\��{�ԇ�L/�w�"g�+�w��F�7c��D���)���t�8���/�Q`����u̡�&g!��^)�nY*�`C}���7�˜���x�z.�RE�@7 }�z'<qd�ч�/(0�r�:j8��g�����W���)[���je2]����>� H�.�� �Esn�D`�Voˣ� ��&��n8�h2�~��?2�"a!�7u��u3�_�+;5��.ν�������� ���qESy��%���"��o��W�����W����T9�7�DO�t�V������OM�9-R4��C���Ѐ�V��Y����^��I���(��6"��^�y�&�����R�B �Z�vE�����h��5��Ԛ)5��)�]�@��<��*n�n�Ep��M���;���>949�q�"��xiD;��S-��2߲M��}���Em���H������5�< �����P�������M��{= .�[��1eZ�A��nad_��/��]��<���z*��I�#J�ryZΈH@�����/�a�Y23�9��=7R�T/~$��} n��/3��3�4Z�YՖ1�Bɣ>�I��sX����B���V�v��ⷂ�e�.{W(�Ӭ~g�)q���A�;�HP/L���t}��j\�j+�k9hv�0<7ĩ���t97�����R����N]:X� 0k���$�%[�C�C���2��հ�����g�N���u�����Ս� �6�&�(t�@�pU=�+�G_�g�MM��{���L7�����Ga�US�=RBUyQ�څL���eA;T����R�>y�j�ȑ�:qQ�,�� T�W-'$�c���͉�f?[�h28ꩤa�ŢϽ��ı:�5����W�a��Xi�(�S7�\v����P%���wӋ8�t�bS��}�G�)�i�"�5�;����TJ �'V�S��v�s�˫icr~��tvXK� Y��_e�9�i���M�&>��r2]1�7�al�sn�U�~����v_���9Z-��T4GT���}X���y��Wʔ���Bv���2���i���9���9pݮ�k ���qu�eT-3��)��Lcr1�GQ��s�N��h���;B��q#. ���-- �o�]|�����Q��uڨp��S�뱐`a��|������>ۓ�C��I��Q`qe+,���n�����~�o�>���0���=R�c��#V���va�vw������v;4h��Ǫ���=���e�dw�) YR�QsK�j�o�5����-z����ߏI���Ѹ�;���%�L�A���6��ny��m�^Zѫ>��>���A���/Q���(h�SЋ��v����(L��c*�4:��J�*T#��8T$����?�hL�����1 ڬ� S��`�"Xꘜ�����CL�t� z��;c�M0Z� �-���(�졨�\3���W��LS�f�X������F�V0rM4I߳�_��5���������W����M��E�N��?(���'�#��r۬�K�UY�@��C�j�c����r�k��f�����X��>6��56���" ��j)�=|�,��_~ΣN�ߎl�(~o4���s�e:�㗲�5��:�V��Q�-��ڌ&��=0�� S��A ��a]S.���V=.ܞzE�{7%�w(�槵]و8�n������e(��5���gOZ�`$8��?3n/D�� �_[�j�_F��� \*<�����ē�3���� 峭�$O�6շH��I�0_����PHчL���Z�+�|a����N �S&�ۥ���DnU�-G�?�� ��#�b}�}d�v��h)���I�bδ-{�\Տ=� ��Ue8lbp�'h�6���~.�x�vPXb!|PO�E?��IL�N�lwڒ 9��� ��`�#��[�s��2}#�uX��G��I��[+�p2f2�]�e*$��q�� ��e%�.t:Y��A��ͺ��D����p�Գ��N�E:]���|x͑cGpN$�5[A��C���Է7?.^��;�+A'?+E��iE�.��@08_��|�<!I�^ya�(\eFhA�c}-V��9�nD���x,��[�)<��\��H.��B�[ma��2'���A 4G�mᴇ~�����u'�Y�~w�{�&�`Rk&~)w��d�C�~@��L��=*J�����/��(��K�;�i������J`Ł�A�����{��a���A}� /�* ��mUAi�m6��`^>���0��g�M��o��u%�]J%�2���?چ�4*��/�&'F/��+Aj�s���(j#Y���~���k*�q�@�f�b�q�UX����������j,�c0TS�sL��������U��c;�ઇ����3�X����΄��u!Uhc�ܴ!��<^U1�' �Cg:���L���p�%���}6�)��A&�dz���w4-��g6�Z`ū�2ɠ�P�X�BȷJ�W�/�M�@,��n���eA`�7{ҷc/͖V�M��,w�P�'i=o��Q?EK��ة5�A_� �RqH�:���~��OI\�M���0�WE&|���^Rs��5�����$|��˩�������s7j쨓���J,�GOWNp>*n���)?8�X��9���V�����s�*�0ce�tS�����S_I�r`+ uK:�`W���ee�<nV�:����A�s���НZ��~����&W.k!��r��aP]���l5߂N"w�����>�HQ��Z9�&�`Ra�E2�=�~QJ�Y�� Q Y�n�/�)Ŗ`��{@�)��G���O�]���NRW���t��0V�S�h+��AY2d���ZK�Q�[�*/7P��_�9�( l��/����-��� �2a� �[�H��� �Wٗ���a��
Static task
static1
Behavioral task
behavioral1
Sample
aaacb273fa13e0d992560cd435f83087064a23394be8643645cb3e598949506d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
aaacb273fa13e0d992560cd435f83087064a23394be8643645cb3e598949506d.exe
Resource
win10v2004-20220812-en
General
-
Target
aaacb273fa13e0d992560cd435f83087064a23394be8643645cb3e598949506d
-
Size
164KB
-
MD5
8ecc201835fb92e2146b5c91fe8c8257
-
SHA1
3f360efa8a2d07a2c6d39c0cf8b1cd8337e7a73f
-
SHA256
aaacb273fa13e0d992560cd435f83087064a23394be8643645cb3e598949506d
-
SHA512
d5db2c771a9732c07ab570380a42bae83964a5d489d70374f982d8c60a05618a593995de3dd5be5176d65291a525286cf7ba242eb31ca3adca6f13dcd65e3c12
-
SSDEEP
3072:PBLRCT7BQqmZRrs7+HFfLMlkbv8tkOd+m6qArpZaL2XR+H3q+2xpR:PBLKdQqmZRrs72olk6FqBpYYR+Ht2xpR
Malware Config
Signatures
Files
-
aaacb273fa13e0d992560cd435f83087064a23394be8643645cb3e598949506d.exe windows x86
3a7e7621298a8a811afde6713ba4758a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
kernel32
GetLastError
LoadLibraryA
VirtualProtect
GetModuleFileNameA
user32
CharUpperA
MessageBoxA
advapi32
QueryServiceConfigA
shell32
SHGetSpecialFolderPathA
Exports
Exports
Sections
.text Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bad0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bad1 Size: 148KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ