�D�[�3�G% �<a�p�itdpv�͌|�^}��ْ�v~����v�\a���MTXż�[M�T�y��i�ok��5q#�$�������S�`9"Ѓ�r��L���#���6�x���y���=--O9��%��Ƶ�=��[���«���(yw���aj���H��2�%�����zƎ�L,�X��Att�Y��N� ��Ғr*y� m�$w4z��zbZ����+���w������$Z!ˏ^����-� �ƈ�U��+���h�i��b4��N-!���� /&���c���1^bDžʵ��uZ_�x��������f���W�刜dn�+���i>�[�3�����J��&uc�+T�2������g(�f��)��$w *�N85�ks8��y���{ �x7���/ѽ�~�������:O��0g�S�o?���n�k�#e)1�ی���lI�u��y d��j�_DH$�8�^ݔx���~�.�,�&tsZ�봀c$��ꂉ��@l_�7m��ħ>[����Z)U]7n����f`������rvqU[��cѹ>s�WY '>LJ��M|]bQ����~ŀ퐪����7�ыUk�6�V"� ��G�P@���m������M��"�.H#ɍ#&K�0U)J����1��]�˾) �L��쳀���o�ruڸM@ܘ�"j$䖂��9Q���2t%)���سǡ�j� Pq��=1�������< ����]�7����:�{�W�#��Q5y.�3ɵ6Pf<5=w����d�U� `�;;ݘÍ��:�)��3 enPNg/�JV]x*��9�kl�&����7�!�a9)ճ�|/^':���娹�o�K�kL������U�����ϭ�:w���s<p��+ꄽ�9������"�8+����W��|?��DV����NQ� Xxt�����۱����\1�L�9y��y�����Ǒ��5w��ʿ��W����ה E��\�+���!����"=���9�|��&��n����va�H��!�Ւy8 ��>N���ؙ�@壓)��t+�|�GIA�l�y��a12�D�٬]�|%�K6KT{95e�p��FJח�5T�̸����c��}�0�)N��Μ��΅�(E�5��-�� 1\nѹ��E.B�V������[1ȇ��Ǡ��Rs�8��_v�W!P�E������z�">� ����*�)i첍���'�oy�]�� ����y$8ϐ�e�z `^�^1�k�pL�'���{{C=#ò����m?��x5�+c2qƶ���χ=�6��lM�x9���@�����N2���*]�I��o�l���q�D�{�PѮx����Eҵx�~e R�aE:+,Sx���ۇ�~����-�0 ^Ӷ�FdhlIIGX� ���(�����AR$�8*"�!��GY���+�j��.�U���%�� ��J��զ@]c�������du �Y�P��|�≯ك@��[ 3 ���9K&��/��={E�6�SYjIt��BՓ�1��td����w5�LMIzq��]�� �a��W:��x-��]E����ӡ�ڂ�Մ����� �لp�h֭l�ݙJ¤�X�����o��Ռ�a~kI�rY��R���Tf���=�=)<��w�/ 9�K�d�/i�n���E�q/�"O8��o�����h��,�;1�ruwW���mS��|��_O+�����, �����j1�2��=i��Z�w�b\�3X�JR��>=;_��T��F�\�BR>�WWz��+��H�����[X=Jzp\�����$ !>�Hڶ�9�������"�p���) �����E�_�����[M�:0����`��;�ü�ڻߴ�Ӓa �R~���2X��K���f��3�ſ#vTs0j��Z�Mk���/��MT/7�_<�V�I8�~ ����������}}�������i�ovq'�(�VO�����6{�[Fr�X1B�G�{����/��8��j��� ���H���-��T<�Q�|Hw�����0ԕ]��o ��C�,=��M�ٙ��xf4ˌǃX��|%:-�+/o���Ѷߍ0���_ SΈ��F�ސw�K]�5cVJ���x�tIֵ���塌r3����>D>��BMr��n*�]»�q�`��à�DS0b7EwHݒW_�c@�TB���h�r9=B���K�8�4ύ��{h���K,'$?!�PR��9����[��,��_�V��e����R�L|~��v��;[�`�P q���?;%�_aB^;둋=��:'�r���t@�E.!7�f��n}�>�=��� ��;{ðy+��eW���K7t�fW* b�������K&㘷�nn"��;�n��I�-i�b2�� �Ք�|����2�(շ�Ve��j]�zLʪ�Zc� ���}��6b��� �D��?]x�o�G�;��ŕZ��3��C�?�ŷgm�-J���W�E�wQ�Q}"+Z�z�)���:����픘�YMu�7y����S�4�S��_g���VԬ^�$O�ڠ�AY'p�����h����U�]�LP���U�9(Q{�P�֞d��5����y17/,fu��-]���8YI�twb)�0�G��ގ�nE �����5J'� ?��1��K](�������$²���'�pr�eشk/����f7ס^a�O�P�T���m�w4}u�)�?Oa��@,)�YH�W��t�����~i�������:!P���n<nr�f�������}�=�ng?Ǣ��p��o�ٯ��h����h�?�����Zׯ� x�D�܇&��j k�@��'� �@�EsI�����<�XwwRswݪP��|#�� ʈ�\"�/� 9��Nu�4��ƴ��kn`�/�&(7}g� ��V`�+1������E��R�U��>�����v�3��[+\f�=,�����'x�J��`o��(ջ��='�A�� �#*������0��"�!C�G���ҟ�q��"��v��#��.]��%}D���7��ۈ�
Static task
static1
Behavioral task
behavioral1
Sample
c7ac0c61a33e6703f8afa99a304fee9ffb69463dc29f09ca8f5cc577735f0e88.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c7ac0c61a33e6703f8afa99a304fee9ffb69463dc29f09ca8f5cc577735f0e88.exe
Resource
win10v2004-20220812-en
General
-
Target
c7ac0c61a33e6703f8afa99a304fee9ffb69463dc29f09ca8f5cc577735f0e88
-
Size
744KB
-
MD5
2423e7ed317b289dbd08cad8be12cde0
-
SHA1
6916aeb51f77584f752aba9043dee1d3310bb924
-
SHA256
c7ac0c61a33e6703f8afa99a304fee9ffb69463dc29f09ca8f5cc577735f0e88
-
SHA512
7daa7e72fda165f55dd826c9c98befccf1d5fa39ce043cf8b342e78c3beae81a9796d965f3c67b0506b87fe6f0e7c70e6ab9e958993892c22486cc763c07687d
-
SSDEEP
12288:eI259yyUO81sWbDvq6uyQ7JoxitBNHR2CaChGUGGMaDTjHtxZHFAKcfVwyci:vWE4Tw3CaChG3GJzNdAKc9xN
Malware Config
Signatures
Files
-
c7ac0c61a33e6703f8afa99a304fee9ffb69463dc29f09ca8f5cc577735f0e88.exe windows x86
e90cc279160d5cdf31c834786adef079
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleOutputCP
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
msvbvm60
ord690
user32
MessageBoxW
Exports
Exports
Sections
NmVs9N$J Size: - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_,@`#6vO Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_UBe)plc Size: - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2Q]0"^Uv Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
M.NO:Cfk Size: - Virtual size: 620KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
W&X0)6B7 Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7,m;"tb: Size: 732KB - Virtual size: 728KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
S0":=\l] Size: 4KB - Virtual size: 445B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ