.߫;�2u1�U�����\�����$��u�+MO�vn�x�?�Rџj@�Ϯ�ö�|XS���f��"ӵ~�E x�2�F�4f��[_,�{�3� ��;b��q�O�?ڦ 9��)�D����ḮsY�Bf�2���<���#�����`N��\a�������^&�ѼZ*��߷Ni7�/z�)�/��]_m4���j!¡'X��J�d���<��p��Xcv��yok�����<ݔ�J��ӱd�6!���U����+�j}^v�$��]o<+p�����0��e��+@�-��d��1�h�!�"k�^5*��-b�M�a������_�/E���c��k)�R�2�^��@�E�ˆ�C��x�cqB�x/k95q��=��A���g~� #����-��&ʡY�4�_^Jy�Ғ ��RÝ͊�5�L�MZ��Y���C�[6�oX�i�����V.� /���礉�|e�����(��b���3%�%r/�&"iW�v� t��G; -���Sl)ZHL(Iݭ�2-W�Uʀ�ZN��Mh��-��-/z�E1�A�bn��j��&� EVm{�CTl��Q:�{�P|�LMc @���4%r������Q�XT+���V?���q~��&�a�U|���R`(I��<0.�����a�7 "�BѶ�Eu�֤��j_�-���m�N�|?�6��4K\e?w�vfO��K�#I����� ��|��]T�A�ڈ��Ke���1�$u�L@���0���Ă�xi��@W��6���y'\Vߍ�ʢ�͎������21T������ʄ��\p�\���G~��{�r�Uoc����g��ț�Gc�=����x�,гsd������uٌ�u��0�g$��hN�f��i����)�*�}��1�(]�0��r��ܶ(d����O�)�K&���ٗ6�V�M�ٜ/.�^N���ݔ��W$��,�zrz;�!N�L[``6��3�G�2��L��+11&!JX�� �_����j��R�i=A��F�FV��Ɋq�7v��6R��f�U^����O��2���su��d�5��R�v���B B��Ɔ�9�����z�@�D�g���������Gk��P���[E�{�7uF<���1_Տ��]�%M[����8�)�/�&��`� ���!Ƴ�/�0V����t�ï�&C����)"D�J���H���YKl�r@��U���N����>v.�7���\z(>���|�ۍ]��#n#�/�-���M����v�z��b���1:�{R�2�s�%!I��K�:��Ӎ +s2ʇ�ךޓ\�/�ћ�ܗ�݃�Pۈ��8�w</�2�)T�>@&����c����W[w\��X�����~Zk�� �i�����Y�: !����J���K��C���_O�q^ ���)#�-1[|&���6�%����tq&4�oyP|1nJO�i�4͟��p��kA�\�!�W� ���F� H�m�[:\-�Y�m�!����1b7EȺ�ō"�aoWh��J ���Tp�!��<G@��Q��Ʉ}�J���h��'ċ�6�~�����O� ���#W��K����Bv��h�!z0A=��}tT����5K!kEɮ��������{�����Gc`�� ��`]����*��a�� ��}����& l2=��<'�_�+,�{ GP1�� ��������kN�+-8��K�{��F��D��K��T�]�s�R�Kf$5���;�UO��} �o_M9xV�vx������Y��ܚ�.����Чd�&H^�o�B��l����Db��z<�&Ρ5�G̺�e�j��ћ���/ZQ+���"̷�~�����xW���,~H�����~�"VM4 �^Bv�jL� ���>�*d�)9be�KT���q��JH�tN&�����!��옿�2i��O��y}ߠ�n�&e�#I���Ł��s���M~��D���U\' ����Hl�x�j����*Iy�r���i��e}�>/h����Hdg�V3�)7�hoQ�ð#�� .��p L�� ��g��~]�O��9�{E��{39�Z����C:���ᰑEK�%�3��c[�F)�D�n� ��V��������g{A���R�]��ggDo�rx'x&;J ��e�U-6���gX�**��V�vvr(vNY� ������eL�3p��'��}+E�WXz�V���*G(��h%N����F��?�9��{Y��������(�2��^$�1L��|`wx��S �h�,���_��K5�gs$K�xɯ�t��k"E��;ق��N�nk�`��m���H:}^f�%�D W�zuԦ��-$���5f�+6��t��#�B ����iD�n��q������0��[$$epl��ҡ�%��?��0�{b���F$6!��E/L8����zA�)������g��N�����V�f�4M�!i��~"Zs���>=]�s��|��ID ;\mꕶ<�7�o�*l,y>'��J�R�P�ᙑ���w��܄����[kh��O�&f�TD?��&��M������L ��ٮ�?�܈�/d�k��M-��$ɾ�]{ ��-�5\�X�+T}�������8(O��*�#�B�E"a&-ȡ��g�š"��kZ�!�����r&LW�K��g��Q aX#����r�FH�{�i�+2^b ]OUChLp����9Q"ȶ���T\׳�)�ۻ�d��R+��R?������2�V:ݯ��ș��6eN�TY����yc�J�\�]��oM%us�A�.���>��/*T4��H�!N�ϐ�ܛ様�w��B��{\�� �>�.:�,;@=����S���ឥ�K~��� ���|�'lkL簕����`ɎY�K�%�F)��� `����^�%y�,�t�e���盁u'h������~���@&�G����L��Bz:�H���F�1 KH�\�'�_��٦�r�(�2-�~Ԭ[����9gI�K ����>��B��g�ݦ14��?xp*��HO��r���E�/!n&��d�s ŌU���i����BB#Hz������N��9(gw�
Static task
static1
Behavioral task
behavioral1
Sample
31d77a20dc824f9309773df73fed48108cf4b6a7ce038e113a64c217cc1f08eb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
31d77a20dc824f9309773df73fed48108cf4b6a7ce038e113a64c217cc1f08eb.exe
Resource
win10v2004-20221111-en
General
-
Target
31d77a20dc824f9309773df73fed48108cf4b6a7ce038e113a64c217cc1f08eb
-
Size
451KB
-
MD5
b17f236824113d0089d670d060cd6104
-
SHA1
be69e8c8c3fa99885f621994ceb76e98b3eb963b
-
SHA256
31d77a20dc824f9309773df73fed48108cf4b6a7ce038e113a64c217cc1f08eb
-
SHA512
6110e972811d206de2be17462192257f13395b0dde06dde020c228ae1782833a6281a118c4c392a51da52c59889ab5768b4b28aec83dc66a6b5371e30f61977c
-
SSDEEP
12288:HxXtSx8RCb8WPQjh78KUChpsi9DC7Oabwf/rbwDwv5u:Hd3dw5ol9DU3ogDwhu
Malware Config
Signatures
Files
-
31d77a20dc824f9309773df73fed48108cf4b6a7ce038e113a64c217cc1f08eb.exe windows x86
430af5e03e2a86008c59fa83c8a462b6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
Exports
Exports
Sections
.text Size: - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tekno0 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tekno1 Size: - Virtual size: 377KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tekno2 Size: 448KB - Virtual size: 448KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 172B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ