Static task
static1
Behavioral task
behavioral1
Sample
af14e8ddb2d7b313a6ea9a5298ff216774054affc1530d657572c709ec0276ac.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
af14e8ddb2d7b313a6ea9a5298ff216774054affc1530d657572c709ec0276ac.exe
Resource
win10v2004-20221111-en
General
-
Target
af14e8ddb2d7b313a6ea9a5298ff216774054affc1530d657572c709ec0276ac
-
Size
60KB
-
MD5
0ffb3cdc9aaeb0ab1441c7cfafe8c444
-
SHA1
5a0111f8c97f97a4698bb352af6476ac5c23931f
-
SHA256
af14e8ddb2d7b313a6ea9a5298ff216774054affc1530d657572c709ec0276ac
-
SHA512
a1b162d15c095cbaca6a217e4d21a843e1689a98daca22e341da8fb5b36206813e5d4db3ed6608ae6700525cb62642bcd8b2437a4f3ddea4fa6e46a405020f58
-
SSDEEP
768:5jcNp/4tZ0wAFYVVpCmrMuSQhqPRJJldnSc3AqI7RnfNMSi5qOVpxmN9JB9zE:5japgdCy/sdt6i5q8x6JBtE
Malware Config
Signatures
Files
-
af14e8ddb2d7b313a6ea9a5298ff216774054affc1530d657572c709ec0276ac.exe windows x86
00d1bbda4e17ec9b6b8da7080c474cf7
Code Sign
eb:e4:96:33:1d:e8:c9:1a:d0:4b:09:7d:81:a3:dc:b2:35:5c:94:2cSigner
Actual PE Digesteb:e4:96:33:1d:e8:c9:1a:d0:4b:09:7d:81:a3:dc:b2:35:5c:94:2cDigest Algorithmsha1PE Digest MatchestrueTrustedfalseSigning CertificateNO CERTIFICATEHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
user32
MessageBoxA
Exports
Exports
�1�T� ��*:!F���M��#QDf��_�cwR���� )Am1\����/g��~��q��o��n�ܘz/�6ʭd���0nXoZ-B:P�W��Zy�S�졵���Z�i�Ѵ�,����Ԛ-�Sa|ll���@��!�CE�퐃�2�L�}&:��Һ�V+�!l{p}ۜ���Y#��@�Ո� y��:��b����A�yF�`eQx�L��#}��eB�����Z���{�4c7�!T�"���(��V���%]�i%?ųA����+�B�Bcc����^F�:�����hu��T$�?�I����%��%�*���v�~�(�u���,�J6��4gT64���5����u%���`��� {��-��Ĝ�x��8�Y�]�e��<��W�Wt~�1��'��}��.�T$�s�6kM�!}2�ߚ臤!�Yr�?�� �viT��IG\`�T�0pk9lv��BU���+<��Zi �h!e��Dn�-D�.)����-~�&"v��~�@vA������ �� ���Sk��/����+�Ve臢�W���;���?�!r B"�6�[��+}�#*���W���n��sY�БG>�5�pfh�e*���\/� P|hPm�hȷ�ի��s{��Eۂ��5�s�4%�hxy XU i�}����](���+�������0� �&�������9VW�.����qW�ʡD��� �R>�dX�Rglkqȸ�fk���~�%}!y���cæ꒼�n��f%Kc�-�~ �'����Gä�|z�g�`&w �,%r�.p�Ϋ������08��*4��T��8���,��z�E�.�.QHi$�!_Mt>ʳy��\@U�#̄l�)xtA���^Yз>ښhX)��iTU�oj�iYa����}�� |IBm�Кp�� N���dRJ�.C8hv������ �O�X+=Ew!.E��/�lv��/��f�%Dh��˾^i�N#�{����+w�u�0⟊�\F����Tc/��yw'�6��`�c̈́+j�Ps� �����W������f�"�'N��&u7��i֡ qF� �7���k�i�k4���lg+�_w�`O����$1�}�%�w�Yo��X��^�����Uk�����o ÿ��U�\��H���o[a�p��R��M�s�4RU���#���Aa�Wz�*�Vf�����A����=�z�k��tZ�졩V�AlW�D=AH�#;����w\��~h}�TP��;=��d�.a趷l"���۲��c�ZU�J�FAq�|S?���{z�+��7�<�%@8��Y����]�|�;- ���=莵38l�y���Y�U �̓*���2O0�$S�ׅ=rC�����3J�S���ǝ$�R����A��ěS�BcD������R@�� G�B�V$]O���<e��@�è��]�C_��ƀQ榣ds�`��dB�cM���O�Re0v�N��~��d��l|�_`�빋�xt��!1��xcj{FY�*�l�8�<ʆ�n7����6_�(�M�Q~�^�#U? ��ו����|�aP��MM+ۀ�!O��QO��{٢yﺿ�x��W��/#6��Kō��<����I�ӌ WJd�nLw�Px�x!ɤ����W@\�n�K��'{�<L�X32�t��+��E���Ra�������!���TZ��s�LC� ��˔|s�����-q�F`��1��vNƝ/�`D�Z�s?�I*r���*�r��fR��hR�M��D�����d\_m�}ri~���T[����J��Q�]��k��Br�X}�� 9_�Űo��] �6�ф4�"�e,��_�45��ߟ�*>��U���i�p�Q !��n����X��/��l�V4#»��������i��]�c$=�� �F`��a���qJ2��i[��0GFl�����,h�L��c^���^�����x^l�)��3�$��,�F*[�%o�V ��(�l��'[��gU�|o��q��,��3���*�Zs��V�8�<�&n|��)�.\1z3�Nƅۦ��O�t�7�&�*��Фr�W�ޮ��@�B�u�:=�>�Rg���j>��:G�hZb/��WQ�@�!���X�Kq>;`����7%^W�̪Slː�P�90v�$Oߵ�o;})B*�s�p�q��tA�݈,b�GZHd�2���H .T;(ٳ��?�`$̫ d��,w,oQ�l�=^��'�~!�#��}�/���bI;d�> 㱫lɢ��_h�������-�tC9����<���f�C���w�r�3�&;@Z�Y1ׯ�����8�'�/L�t �����V2��N�@��jV��x����N@VXz4η0Z� =%{��xb�a��Y �)�aKh��owi���X?BuY~�I �B*����m� Z09��"\ wR0��{�)�W�_��L!Țބ���:6 ��6m�`��_>p88��ʙv��ǜl���.qng����3����\�t%)�H�-�6ۓa�HFp,�g�A"wj���l �o�<cH���������̲�O�]�;�0�(Ԯy)��v�!��D���:9�7����qi��ퟱO�4a~�� {$���D�S[C��x�&h�)6��P�_���u�S� ���P�8��-�X�L����u�I8o�~�nֈy�K��+��+��1��<M�l5qǚ.��EM�����,�m>�Ï�x����;�Ӏ|Ԋ�"*g�xң����o�2�_�dA�4NK��0T �N�r�; ?�����[�O�y$i���"e:�����ԵH�=.j�,w�j�WIJ�y�sV�v&U<:=)�ŧmHԣ�T�A��"l��b��������o��j�N�/��GxIf=Vp�`��i�[�ú����༦re�NZSF/ӹR����|�R۠��˼c�kA�L{3]TOu��~�� -!Ci�l��?/�QO ����lV$�� ����[}��ل [���D�f�E �T�c�F��2�Y����!��%uy*�5���Le��l,_$v ɉ!=Gَ^s5&���0�ߥ� 9�b���`� 6�%
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.anti Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zxcvzxc0 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zxcvzxc1 Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE