J}��܆����GwNJ�?~w���+��ҵ�����^L6��k����ڠ�L7W����n��`��5�@�$��Uɯ�?��$|�#���/'�ݨ+h��+�����������Fe}Tx��O� L>�O��ݓ�DD=�� �������z�C�2�O�'�������u��v��\���^;ұ�ua�.ڒ����MA�7�p#u�Ϸ����i,�t��^l7#H����6�Y�8C�V'���e�\��|ls�K� ��+��g'r_ձ�ns8��J�p�P<��Ȟ;F�z�����.�ئa��mB�zG�Bi�'c����o�-��F��(�ji��g��Nd1!_��6�[>R+������c��dZw:i��f�)D�Cz�F��aj��|�6��F�Ǝ��.#��6��t3���{���?� �4)�Ti ?��d��l�5�Ԩe��;��������k��:&��� �k`���8���H��릈݅�� @5G�ҖF�'3��Yn�D�F��?��BcL*<�S�3ö�N�/���?k����w�F1��֨�����a}��j�7�Bz@����垪/ !���_/�Z ������T/0�7aAM�~ʍ�����0��h���<�jM7}��_�A?#Ǻx��|+�X!NK�/c紷ˌ%^Gٯ@"r ������2�W>�-eXx����pя�z )%e\*��c��| n�-�Y��Fk R~ǩ�a����G�����3n��9�lFւ���^ �m�6���?�j�H���D���x'/tQG���7�'�;sqϩ� �%��c�f�|�����g���� )��Z]���e�?鍱x�6q�Ҿ��ߣLk�~h�Oz�H6��T(��6fd�c�k��qr�����3�r��:mlc���zK. ���{��Q)���g� $�X1K�x�ĵɼ"�Ewt+Y�ݡfN��oZ�����w����黳�OU&����g����֭��{�(qe[� ��)q�"����X�*@�$݆���L�����X6�dB1u'�)Ύ�y���FA��6>���-�,������.{�ʖ���0�*;S���ܲG*{�%�X^}ő9��A�� ���T�]�Y)���S�#��OZ����_|9� �}�r�=:1�UѣWA1���8��S�ɰ�GR.����?`�j��S��6�&��֫di�'p��X�߄���P%B�Ʃ~�vh�Ye�b\«G�Ty��q�"1��"���@p��ޚN]��4;\����L�������1��W4�����j�lH:T���f�^Ș��~�$Qz�����j����$�eO���n�� n!��aYНbk�8�=��B��=�J!P6�}�����*]��X�>ݐ�sq�f0҆�m�1�Ed7�@Ag�C���V�s�j��S=�x���|p�Yz�Y�=g��އ�̓ŖTm9��ߧ!Bo�؋&�1g�J��2��dH��_����" 0 ��� �2 ^{�&�Ji�r)�-}�]2�ιH�W@�m �ز�=�Y��U�A�����q�e�p�q������sF1�6iv�H�� }<>����T���=>�ͼ�WA��:�~�X�B���N��w�S�D'� ���"E/P-a�^p�j?�*6��t+�r��cC�ҝ8,�T�ZN���-u�awl�a�����7L#'j�bI��(�� 5+�������>TIԞ��_�/x!t=�,��M��v ��?:�{��C�����i���: ��t<^�m���8 �b��I2KEj`�ԗ}�DŽ��̈3zS!�&_!~B1��w\kvZ����:{�S>�!�e+��i��#���)����}:UP[=o|$⟝�W�LB�cT!럝�0���b�H/:����S���0U����1TWޔ���J�ɢ�_!�oI�|�����|��+�e��� c4�,�&��Q6� ��FFYNp< q�CEz�Al�j��m�`3z�KGˑ� s�*��Ǎ�P'�bUƉap���d<ћ��q��l��;�N�sn��0����KM[(y��<��YV�toY�j:���"F�,Dy���kȒ�N�i����\���;mhj���\UWf�3�����ь>S֬�o�/(wx�� g,�ϩ �XB�̔�f�1\'c���*����赌��юLJ����XkK�������k�Σ�2_��� a�i+n4V��F���تc���p�}�ܳ;�!\����M�u˯�: N�^�)���Ds��_�4�m�: .��^e�_{�.�� w$�?GIK+�ɞ��� eW}�grj�$�rd�-���Ϗ[�/��BU��!�� �y�0����ͽ����xD����b��a�ke*6�M$�y�3�f��줏�i)��ݒ� 7�|Xjd\�h��'�T�3R��j��ނ�-����B�B����}v�E����ϟ����y�.�nn�Ƴ�w�́��j�9���B�q�5~�q*8��&��,ιڢ�9��4����W��6U�����3?�莻&�L ^j$���z��D��%�!�H�!Ң�w��������D+Oe�{�p�&���Ӫy� '}��>�1�<S�? �W��v����[Ȕ5��Oy�S%����'� ��`��]m6���M~��/ W�2���M+�eٸ����rQN;بl�UAp�W�W��y�/�3 �����x���s���䁰q�Gj�6LI��6�Єhd{Aw;~̟XMTH�>�[�i�5�b��4%G�C��\��5̲���!^���B��ɝ�P;���&Z�(�HT��"X�0r�!Z4�dR���fg:-&�}��b�u�]�K\'9���X��oB衍�ô���h3�^��ȡlO����u5���kl�?Y����q��}�U����F%����S~��t��F��=$�q0�� � z��h��I4AL^t%-�DZsSmuN_�!�`���ꮑ�]�d�hW�CB�4e"�j54K3�<��*�@���[�ʢ����]EB�5^���4�8�t�FL����X%A˶�i��i�M�|Yþ)�p���AU2�+����
Static task
static1
Behavioral task
behavioral1
Sample
6664306766cac5e2d3fb10473340a80e9639fecf7d3c8546cc77ccc948aeea07.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6664306766cac5e2d3fb10473340a80e9639fecf7d3c8546cc77ccc948aeea07.exe
Resource
win10v2004-20221111-en
General
-
Target
6664306766cac5e2d3fb10473340a80e9639fecf7d3c8546cc77ccc948aeea07
-
Size
268KB
-
MD5
4051ecb4b07e069c73556991fa588a95
-
SHA1
f3ca9dafa51da31f2b36666f7b1d4a014f2f364c
-
SHA256
6664306766cac5e2d3fb10473340a80e9639fecf7d3c8546cc77ccc948aeea07
-
SHA512
d89d852b0e645e4ec00aae8b32eeb623c9276b24706253cfb7f01046e50edaf0b3654c245b5bf037c1295168669c89c90446cdbe43e1230efc2704ed221a3354
-
SSDEEP
3072:eXIzZY4IBA63rjrV0Y3HHM9ZaPjvXz7d/7cp+4S:DZYdLWYXHM9IPjfKpW
Malware Config
Signatures
Files
-
6664306766cac5e2d3fb10473340a80e9639fecf7d3c8546cc77ccc948aeea07.exe windows x86
36d9f4f10216058b128824445e3f81d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcr71
strrchr
kernel32
CreateFileA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
skinh
Hello
Exports
Exports
Sections
FeY)# 11 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
b8<CE21y Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
55>krBG- Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
k/Agm*g3 Size: 165KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
V:(04]kM Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.���е۹ Size: - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.���е۹ Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE