�J��w$�����oXkֆ��cT`��mq)]�앞T���%%�Y�����t լ��s2�³�Mo�-N�Qh6Y4��=����s��?�g[��H~w��µ�[��i� ���~%q7ң�tV��]-�js�H����}3��o���A��A�רz�� 6n1�ȭ�f��9��V<y��u�����ϒ���D��v���t���*�����m��݈��R��}����ss���E��=m����c�/��cI�?��O�W��/r�.�Q�%���Y4 6U�s�K��6�\�2=)�W�Q �8�n�\���Q �x������L��[= ��L����ݔ���Ɐ��4f�C��0����<�<R(A+bp�b��Qc�)���̷��&�K�=�0�퓙�G�%�̉~���+�����aP�&¨�%���.��6&pf9rI�������-�d`���bo!����5Qa=���$�7��5:[���_Ғ�1���5���K8B�(�,c��.}}�wRd���A��?�=�ͽ���#v�a�d$ٽ�ʏ��z����н�XĤ�V4�LY�!���~���t¬|��sh�wc~W��3��h�#c��n��CYx ���Éܕu��C%��~V����ՒÓ�k�}`J����f�{��Pųl�&?8W�B��~V8 �qa��ˤ��9 ���.�n�c�iM��u��qRO�28�\� F�t����_j��-���4��o�WRQy/3=8�i�Þ I[��.���64>|q�1�s p�X��;/d�1A�Rj�W���9��%���,<��91���p�����' %���>K,}&ow{>��teeq�Z�Q��aK��ė�j#��3o��)�DH[�;�0\/ݩ�CF{�S�j���SK�Ԓ�������M@�x����;)�:���s�R����3h���vI0�a]v�.4<��кgtGNƧa���Q�k%I�w���%��P�����;��JC旨<������X�U��RDٴ�Z�k��-�y�8^�ZS���w��\����!zv����f�tW��s�R₭�-�;V�7C��[8���h��;�N%�O���l֦�U��;�V��� �cd�n!�PK^��嵍n�����C�m��3g�&�Y�������8d'�~� �\3(�s�$�_��0���ҋi(zv�d�03�����k��K��lVb���n[��3Q.�E+I��\k�ીL��,�NZT�P�G-�RcC�kYEM����̧��Q��n��v�n������|� �Y��e��b�����?U������������3���<oT%�B����v)U0�������8��4��v��{ �j덃$f��b���Q(����Ӆ8��V� m$Kx���7#_��[b��:��d`��4�+���`)��{ȫ�-�J[�z0�צwA���SXXT`�/>3�@_ ��F����c��C��c_�������D����j�~��"fG���Eg(�� ��Cb�9QD�}!|~d|$��!�Cvh�'�����罒�9Էdz+,a?2�-Q4Z)B�+2����8�X;�Y�N����JO��iB��j^������`�qrsy��;Z2�r�V���h�h�:6�Lc�Og�\�>A]�� �*ݑ��D���;��SȜud�SL��i%�2�����g7����x�T�ưI��r5�A��c93�cܾ=�ķ�dp_q���d5f������}������2�dv8,��_X��)q����\� =F/[�HIA�V�f`���L����Q��/%4Wou�h?q���q\nݴ�� �b��z;�����vo���5;�� �ZUT�B�0���l����#�eKa�k��D��q� s��ٳ���z՛ =�+"�73�;������,���2��yic���&�D���K �����fq�B�"�bPZ>��n��"�"UL�`�-�Y@�P���0?��Y��ƶ�E�eeݛ��ɵ����bl�|H�*���c{GV�g��������A��-�4�J~l���8��$��_�F��.&0������Y~�'���Y�Z�À���� K6m�L���#�L��]!�xA1ឝ(�g}Hz�aՌ�J>Xݡ�Ԡ#�q��x������{�ޠ)������L��X����^�my\0�T���[���Pu���� Ɗ��+ <[��f��8F�g4�P B��G�0W� #LC���%�]�������2����jRa6�a�n���Y��a\��2�RsL���P���R}غ�A���X��Y��}o{�W�ͣ@�����ې�lC����G$K��-aI;���v��b���q�k�������s��d��¡h��1a�:�S��2^�V�� jC}gRi�����+���ڛxzx��6k7���u�9y��e�6��n-��9��Y��9�e����� T�Y�]�} �&����8ᥢw� "�y�����:�>2��<��D�t���45�X�P���u���3��V�;�����B�����t�_��O��|����PR�*e!L�҉hr��δ�Ҹe�&��Ϊ�w[��"EaսL�S��y����ޚ��y k^?M�_��^l)�8����@l����D�݂���Rg� U`r}�T��S �g�b��Q����� /1��_Q��0��4�A�ʝ�M$O6<��ɬ"����/�h��襑 ��"Ct>��Sv/N�����v}���\�Vr����Q��,��H�كP��D��q�~���s�W�M��M�8S`ݵ��;���P��s&f8�H�&lP=���(T>YgW�R���0A��z�i�8A&V�;��;�A#�wgM�MS�ɪH2�j*��uO���!�)h���#&;b"<)F�&�${� ԣ��"݉v����@�j�N���\t�ң�Du�@B�o�%���S*�* ��:��^����~�4���le-��YZ^�h���P�m�A��>���,��Fl>�&1u�$���$�X�� �]�t\D8�f)����!��r�y�'My0�"@�ab�
Static task
static1
Behavioral task
behavioral1
Sample
f695bf2f570fe87a92e67fe41101f2988009f25fad407e8edc6b5e25962220c0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f695bf2f570fe87a92e67fe41101f2988009f25fad407e8edc6b5e25962220c0.exe
Resource
win10v2004-20220812-en
General
-
Target
f695bf2f570fe87a92e67fe41101f2988009f25fad407e8edc6b5e25962220c0
-
Size
380KB
-
MD5
b9a8c12a04f29b7ea7a45ce7e7bbb888
-
SHA1
abb886e7e0834452597663ea8c8e55485ac752f2
-
SHA256
f695bf2f570fe87a92e67fe41101f2988009f25fad407e8edc6b5e25962220c0
-
SHA512
310084ed5114c230b31dd735d89d3a5f8547b3430be43b26d49fb611dbe3fc3b21250568d8fd5a0b40ac9f5e9fb4a09526adc96d92871823fb79c47b2d0abca2
-
SSDEEP
6144:YeWi1yg9Az5B+Zq/Dlk0Zz4429pjqXfwQ4lG5KHBfrmHQnFtfDpmOMJocqrDX/:1WJV0A2hjqXfwQOsKZmy/Dpp
Malware Config
Signatures
Files
-
f695bf2f570fe87a92e67fe41101f2988009f25fad407e8edc6b5e25962220c0.exe windows x86
3df19bea46a2181c4f614931bc76f3f5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord520
kernel32
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree
GetModuleFileNameA
ExitProcess
user32
MessageBoxA
Exports
Exports
Sections
.text Size: - Virtual size: 471KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.HASP0 Size: - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.HASP1 Size: 356KB - Virtual size: 354KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ