�sn��fD5ݷ��r��A��m�2uも�,X��P�X�O,!,��������o����ږ��������ƣ`m��"��������s��N��r[�zm6����'��k�� rn�\���q�����������&���J�V�T8�c��cPS���H��.j��NZ�I-�2� ��h���$���������I��&4m�� �:9�01��=����'y�^2/�?�r�co=�S�l�RۍlL��O������nf��~c[�K��T/! U���`ӝ?�n,�=DT��*'ٱ��+!��®a�D��9������h��O�P�����d��I�������*��� �>�5�E��9[î�/E��W$���?��.;��Ă���%*Y��'(�5�o�wj�H�@��!�I�KL�m<\m��m�d�#țu���y��q�5h��xV� ��8���*��l���Ŕc����܂NIfJ��㏍������垾B��?�F{�B;Je\��#������?@�t��n!�G8rŗ���)��-�te���NS����v?�Y>�Vq����͡��z|��I���u�Б۶��Y�߉W�ӗ)/��p.x��<�e�f��(��� u��+i|lx'��h�y�\M���xvѩX&p�����}������o���T��v� ��+}���_����<����ɋq��V76���N]�Εp1O<�X����Ɗ���q�љ�U6��<�.�+<\��\�4g�va�黝��N�Σ�!�Tݳ�`�3�NP#1��m��YJ٨�u��@��#=���%��Fzd�#�%ng4f���T��[A�8�����H��bG�o�UG���F)�ܠOA�B=V0v�=��?D�Uݲ���1�����r�n4݂�$,�r�[@�+����$�'+��{�4�z2f;��C���\� �� �H�uUB��z���V�L�� �M�>�1{����R�d�!����^6�ز��j>e?�k�/�ED_��@S\�5�>�YYnZ�)�;q��{G̗rœ�zp}���v ���>���S_�n����-�R�Gp?�j�K�R/v�Rޞ�~,���4 ��_2�Fk�����aB�F��X J��4CV���r(wt:gJi�YȐT��ˮv<Z)�1�`m�k����~�km^) �u��Я����nP��a �i^ ��9;��m��^��P�5!��R �U<9J�6l��"5��E��E<�U�`T@*��V�mȦ�2�9z؎�V��D��zuz?ׁ��I�nE`�Su&gP����{����=��+�p�#�S���kv�GQx��ִ_&o�W��*K�u���E����qS��F&�+X�S����0_�� �����kln�;%e�I|m��pL5���b��B ��/��M���q4I �\C[q��G�>:�c:�O�c�U�tMd��U���rF�֩7��^#3>2����o��O������2䢸;r��ax$�|��T�{�a�Sa�2 �]w*u^l�~ZGG��|2��?� Ɣ��uND��~q�m3�2JE��3fĕ�r��|3hͰ}�2�=��W�D�Y�������N�%�rS\~�GR~qR�_���|d-�?E$3\|��!"�)�]��=k$�b�1��y �=2<,P9��'32i4��VJ��7כ��y����@$ENH�4u��scRhr�T陪��-F�1o����ֈ��������V���<� %Y�R�mN ^l�:�5�vT$z��a6�@��j�Q�gs��q|�5F����E������5����3�4;�.k��/��;U�7F6�At�n�CHj�х���D�-�r�gs5�re�ڢ�}�|�����8H)C�7<��_�Rp +�(L� jp:c��k0��3�j�����L%�tyv�-a<��~p�����0�0�Suc6�֢-_<B����z��oL8��_��%�uQ��M�[/C����� ��]��7և�����Ǵ��I�G�ӽ4Շc�R�qc�I#���jp��c �����K��Ѵ��P�*kwRnQ�S ,�Z���%r�X�q4>iyG0�"T}$��m{��)�b���eh2��������r��*�����<9����b����k��?TU'���UIm]d�����:��2�G~��Q���E����uW\�O�3G�����{_l��3xo&&ܭ ��,#tfr�[�úp�����"�O���ZLw�������j�>4G�,��`%��د�菲��E�qi��h݃�m#����K*�K����X 䂀����_*���>�Y3:�k|�Qm�ݍ����^NG6>=���/��ۦ�w4Ƞ��\�|�7MF�-�ᨚnd�����Ҟަ�!v[���[�u�-��`R )�ݱ6XcY`Z)�7�������M(&����5�'̕�{&���"g�4vc�<�_Dّ����\�p�?ͧ��n?#��Y�<'�c�$� /�r��7e*x�ޞg � ��ֿ�<#�����0�)����-�䇌Ô��+�v����p��=tb/���g���+�n����!,�r"�=�Ҕn��1l���'�e[$��F21��}@����&=�q����Nb��e�vO1�c�^��p6�{�|���.1q�%�{Zh�y�@�"Y���ټa ό*i�/�M�� ѻ_��Ko��'���t$z��~@@)(����ҽ��oս���S3��M� m�j��l�=F4��&�������w0��k��K��$Z ���+��A��ܲ�I߿=@�H����i!},y7,��8��wq/����'�� ����6��~�jR5;"��,�Ѐa�8����3�T ���{�(S*��`)� �ؓ=I��E�����B/��Rr��Z�4�q~�.A|��I[OͶ�8A�Ǵ��h'$U,7}?�Z����Bs�%{�Mv�\�a����`����Ǣ2�=Ӿ�q,�z�6VN��>F���NO���[\� � ~eoi�&2�r�+��rW�_���I'qAQg�0%P��+��f?��y��U�Ԑa��
Static task
static1
Behavioral task
behavioral1
Sample
923b5f38aa862571be3f515e13ff5b741852a068ef52628cc034eb03c682f4c6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
923b5f38aa862571be3f515e13ff5b741852a068ef52628cc034eb03c682f4c6.exe
Resource
win10v2004-20220812-en
General
-
Target
923b5f38aa862571be3f515e13ff5b741852a068ef52628cc034eb03c682f4c6
-
Size
716KB
-
MD5
61ab789bcd1c5f5c4d6fb5a0ffe8266a
-
SHA1
100b13c72118ea4a4cfd2402d3fe3b99b572aaaa
-
SHA256
923b5f38aa862571be3f515e13ff5b741852a068ef52628cc034eb03c682f4c6
-
SHA512
4408e988fc95f762038ae5d0002b8317f055b1c9166e30b128191f322c21b1dd3ddea517a17fef73e96c816b8808e6b928314ea50706a399b4c9d48e25663541
-
SSDEEP
12288:VpcUFprolOuIVCmoWFzNgNeWxsH4+uatpGzJimRgajYX+wi231:7J1uIVCNWFz0eWxi4+u6p6FjG+s
Malware Config
Signatures
Files
-
923b5f38aa862571be3f515e13ff5b741852a068ef52628cc034eb03c682f4c6.exe windows x86
b9d2600aec50c8faa5a65b976e72ab15
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord662
user32
MessageBoxA
kernel32
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
Exports
Exports
Sections
.text Size: - Virtual size: 645KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 434KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.se0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.se1 Size: 704KB - Virtual size: 702KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE