XC�t~�!}k4��~������C���RX�\E�ZB�"/�ܺ<��7)ry�(�����v��{���@�n���0 �T6z�XR�v�`���tjt�M�1Q���E�_����W��e7����j$qM#�����< AhNf�E�m��%j�e��KP�707��̅�r�<pԬ�i��-�S�>����t�ZB߅M�ۛ[)��y��ˎJ�&'�3 yC��7��`�a�WJ���_�i� b.)zY����8Few�IƈQUl�:��콼g� ��͞S���)��J/�����8�����ټ9���,�j����U���U�e�,�5�د ����E��y>����������K+P�ǏA����]8�:K\�{��1�fʺ�F�Ʌ��/D�ࡶNg��E����7z��P���T��v�*ɷ�Zb��\�`��c?,yt�1E�t|Z�Q|w�l���n���y�-o��|�˹r�"��q7�YFDr�Y�1�b�$��z��ug��V,j�nepEbwRN��x����4}���������OX �s������8j�xX��z��+M��_^쵋��=�Ļ��Ű}�M�\��:�N�:�X�>$x���;� �s�ڶ���"�XK���]&�MN����w!vy����ζ����>�j�&��������<����2F�,i�*!y���W�Ef��D���γl��"n��:��1�8DP)Y�h�;JޫV^ux��S�ɽW���`���֣Z�C`8w���X��g��3+9��Y���I<� ���%c�w ���zMtF��J�{~�S���|e�%��㝆&��L"~sD��w��������u[`j�6r����9v�i�b35����������Ī��|�nȻĿ+�F$������{x�։+�EK~@�����wK�P��9C��<Lҧ 0��tn0�b��^v��.�{ X��謤�Q��X����U�����R#�m��%ϋ�����������H�v�I��uI%�rq�)A�(�� I2�6 ��7����ځ4|�5o����E����E3Ɍ�It�G��U���=�$"��7�� ����Cas��c2jq��GJF�g��(2+#���`������up�?^+#z�M�Q.��:9l�;��W�Kq��v6��)$��DfˁӋ��#"5��_@����CK7��V��=����g&!�,cM�y~K_F�U%�h��dP =�G��$�אS\�p����%�*���9<?��<����#�t��T5a����� ?r���sd4V�y��b��hR�<"�G�K������&Q{��J<�By��~A���nx� zr�Z�_�i�Y�uF��A�Q�I���-�ί;y�PYd�-R�yy�ד��,���C���3*���3/���Y?�����'� a���'�]�Bsѻ/��R��~r����� �<+=�����?�i��i��pa����x�@�z��8�Ѳ�����`m@a�8�[�R�������H��S};*�0A��Z� ��, J#`\�4�N�c�4�$C��"�r%� ��49+)��6�/J@9m�&3H�o��ˮִ���A�x�'�Qܩw��J��6UA�V\գ�����=��HWz�]Yt�v�$t�� s��Ǧ�B�B"r8\�|��NO�̎�g`��o�(����X,�E!��d�ĥ�)�G���O�����^5���B ��]��E���p4��X�$��o�ѯ�yN^���i;�V`)�L ���Q3�|D!U�j�n���;����F��>çr�����!%n$8�h���-{(�?��8�O�2�n5B�"��M�|�D'��A�r�� �`{��� Z�`�_k���]q�F�̜I����!4u�(�%#�Eg�t�nW��g�ԖC]]k�@j��U�PR�Y�����S N��_B��������R��|loǜ�c���=��g<���B�DykYu�'5�(��kׁ��I��b$Є�Ry���Oc´?+����W�ֲ�`˽R@�`�M�����zK�x�k �������=�����:�1� Z�7T::�-�4�V���9�k�Oj�� +��f�5��sr��л���݅�g�����^��.�<lז�'�Y�97k�-��W|���9|�z��(�<�]S*�`3�Ǯ�t�w�Y:����"/��qب��ix�|�q����h��Ps�%J�Y���F�>�1��2��9����\h6y�+����ILNfr{�����e�u a�6*e����{�����=��a�����b��l��~��0|�R���;х������¸ɑf�u\�/Nyǁ���]V�8�_:�*�ŭ�9�;7�Qh٬>��}�s*����&�����z� �5��1�[=��O��阮�e�ڗ86;�Nl�d�-���K�����L�c�,A�KeVm��6���Ț��`�'PE�[KZC}����.-��C�hv���d�[�� �nS&P�:�c`�HG_m��{f�V0�e����n��ΡLLHhmE�|��ʇ1L���j��������.�ⰙR���j>����*���/ʡ�c5/;��EOܢ)yuwm� +.S��y>5�8*�L�7��5 �U/�)�0A�h���?'4U+`e�H�F8"�a��gQ�7k��!��2Q*6R ?U�m��ן�q-\��k��'*��Z@���}X֘�Y4��NL���ȣ�� � "�߿��!M�BI)��A��V\-��!�]c}��x�kb���rGŁ����u�[u� `;/���x�����x����]<O��J����Z��ܾ�~�:�WX�vp�.��q�~�9� ��1&*�Y�F��W�����p��K�In�Aݥ[�DM�L}���6�m�Μ2k��RKa�d�c��{}�8}�[+M�f���S�L \/�|���1�����x���aKN�93��$�f�2 �u�iC���wּ�;�8DuY��� �j�l���V�S�E-��R� )L�C�����w���J�����B��>� �jKm�8�c�������
Static task
static1
Behavioral task
behavioral1
Sample
c81c96ac520953963eff42165c163cec0ba99160e8406ebfa1afae231e81982a.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c81c96ac520953963eff42165c163cec0ba99160e8406ebfa1afae231e81982a.dll
Resource
win10v2004-20220812-en
General
-
Target
c81c96ac520953963eff42165c163cec0ba99160e8406ebfa1afae231e81982a
-
Size
196KB
-
MD5
a8e226984dbdab9ff33374c22f3654d6
-
SHA1
c4c49fe133552543009305f5c657d9b63e446248
-
SHA256
c81c96ac520953963eff42165c163cec0ba99160e8406ebfa1afae231e81982a
-
SHA512
3e668a5f11fc008aa6b131f1a2a74ce8ea354de557e18b32d15b55ae96f5e4f5c141c9cd862602f571f048bbb02831296ad938468ebc3ff87c5218e607926ae2
-
SSDEEP
3072:i3IY4imPe56j+yEmTvPpb6XNTXd9HzmIwaX5Ll/CBC+KtJM6jgxy4iMQG43MWUut:i3FmayvPpUNTfT1wm5Loc5JBYQv3Mby
Malware Config
Signatures
Files
-
c81c96ac520953963eff42165c163cec0ba99160e8406ebfa1afae231e81982a.dll windows x86
0bb0a37912faa1808329bf329bcff6a4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
GetSystemMetrics
advapi32
RegCloseKey
Exports
Exports
Sections
.text Size: - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dsadasda Size: - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dsadasda Size: 184KB - Virtual size: 181KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ