Static task
static1
Behavioral task
behavioral1
Sample
d6509698cef5017b7305dd2d89e1b4daf50bb9dc1a5c891103cb8f223682d8ae.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d6509698cef5017b7305dd2d89e1b4daf50bb9dc1a5c891103cb8f223682d8ae.exe
Resource
win10v2004-20220812-en
General
-
Target
d6509698cef5017b7305dd2d89e1b4daf50bb9dc1a5c891103cb8f223682d8ae
-
Size
518KB
-
MD5
4fc797b158861574276519f79e2f137f
-
SHA1
0366ef0cbced781add9ff0917f9b2f798ade4960
-
SHA256
d6509698cef5017b7305dd2d89e1b4daf50bb9dc1a5c891103cb8f223682d8ae
-
SHA512
67046f6e1002f6c98d9d10af733cbbcdb8ffc869abc915532e4bee8b89de1b348ab3f5e895854bd75be12959813927c9032ed779f4a26a54001de48993ca65b2
-
SSDEEP
12288:ae8IcCMPy6R+TuSCBoSzHk1LdoLd6rUXB9K6iwLtqZ5JBw:L8ISyipF1Dk0Ld6r8B9KfCtSJBw
Malware Config
Signatures
Files
-
d6509698cef5017b7305dd2d89e1b4daf50bb9dc1a5c891103cb8f223682d8ae.exe windows x86
00d1bbda4e17ec9b6b8da7080c474cf7
Code Sign
67:e1:3f:79:81:ec:fb:09:55:a3:cb:0a:fa:e2:b8:73:c7:9d:02:fcSigner
Actual PE Digest67:e1:3f:79:81:ec:fb:09:55:a3:cb:0a:fa:e2:b8:73:c7:9d:02:fcDigest Algorithmsha1PE Digest MatchestrueTrustedfalseSigning CertificateNO CERTIFICATEHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
user32
MessageBoxA
Exports
Exports
e��a���g8�W��{��8���l)���/�ОBJkP�䛽��b B��<FɆ\!8ȩӤ��Vѵj�V����:^�%�#�!7j�J�^����[<eu%"7G��Wiݳ�A�r��Ėp+G�]��m�G���R^�mf�e�4w&b@��_=���P�v����Lt�U�է�pzh�K%��zֲ��r��8 �p���,�&������(��Z���������B�`��/|�ҹ�ej��.JP�'ŋ�p�E��,0�r6����X��e� [��g�������u�wȭ�^�j����CxNyT��L/%�<up)L�K>�-;Z�@� - ����1����^R����ޯ��K��o��B�!��B��03��<�d�c܌3�N�S�$�㉙Db)�g��.��+jG)�G�iE �V ��RU׀f�E]l�E� P�1!L�1pi����Ӳ�t.���)�r�d��6Gs���T���l%�*Rz��TM�]��Ij�2�D�}P� ��,0�0ic9 �Σ�}w`;��P5��S�5�((\�!�]�����L+�(�e�˜~ @!J`*���J��>M@+��v��̶��;���)�9���S�S���Ѡ(֖���f��w�I�k�_9�s �id�h\�r�PG$�Yy��Z�˧',�U��]7�7��?����>��`��R�u�ņn�<1��K��Ol9���� f�%��'�:&ճ\K��9%��L%��2`��l�/N�|���\l�+�3v���k�#��uF�4Zj��G�le���@���9@���6�0�*;�A�����+�0:�P����cS*h�G�s��M�=�^�]T�ۃ~0:T����~~����@,!.���Uб1�x[ڢ�]��L���l����VkU�[�^�������Q=R )�o�9��\@6�Aě|ֺ������+<��<�u�r٣�㯽�%��pE�H�ɵ�K-ȭ��g������%N-w;���`R��M��4�8�?>N/ciB��iYTW��r�zD5�ˌ%��?�S9�����6p�]�;55=��g��d8]��Y�Y����p��u�o'/!�4Ā;��o_��@!��=����ߐ�����,+����DcS�k����p�'08rٌ�c�|��#*�jC��ͥ�����{c��In�j.L�#ʂOyt�FT��ͷ��c��������iա�,����m�e�֜@��Q����{���߉��-�I�s�Nz����tG�?��^~��Qr~ݐ�'T.p��^�;�,����\� ��<q��ח�y��ƛ���y_�� ;�� ;V���S_csʛ"0d[���p$~#�Rd}�`*�3�-���i��G�`8�i��Ä�+��E ӍR�v���� �|����$ ӹ���NZU�>�A��7C��M`T6.�C�"Np��Z�7��ϸ��>%U�/ˎ�q]�W����B�����#� y2����y�f+�8>EŌ#ny�_y�8-��]�����%�JDI�#�������Ƨ�@�B��+Wa��q�v�N<�R����ο#��ZA��W�[��`���/�2GB��r$̹m����L��P���%u�9�g#�tJ����Y�Ip���B�P��.G� ����}��B��{�Q��~_���ᷔrg������p�Β*f�� z�T�q�:˦,/ ��p6r@������z��m�aΪCf���#ù����y�'��b�k��sN�={�؞���;��]X ���E�|ű�CzF�[�RU�������@�6W��x�j5�����<�z��1un�+��X*�[/p�-a��%��Et�6;=����>3)�b�]�2������L�Q����S�i��k�ߖ�|JԜ��� ��pOf����(yޞIv1�����A�~��yj�JY��تk*��=��Ga�u�3m���k/�3���5��Ԅ��}��?���o�5�Kԭخ<�]����{&V�b�ɕ��+E��ȿ�Nō�L�S��ЅbF���I⓯T�Z�;V�M�7��+?���䈶�r���cz��!� z�*k�-�L����R�Ζ�\�������DwɆ�-��y��%�J��� y�1��֘�����'�~�e��FD��LOx���Zm1$X��À���m �]O:���ɇ��sB�~.���Ci��&�2�P�?�~_��ּug��,Dܤ����q��b>˅Zq�݉��\����4�+��-;�RlakV�k���T��N�-������>����x�@`/f�#2��8=o"��!+�k[2h����\Z��6X���+��ϫ���C���+�ns��fY�y���s��^�g���L��.���Lw��a�&��͉֓����P$�xs�:�b�O~&?�S_�w#��-��W�S^e2wl�1��9.Ӈ���xJX��?���'���E�����@���M��L����>���h�u���|�C�S'��G�nZ?�r��մ)�'B��ř�&&d�I[hMtKvYZKz�9UDf��c�B���a-�h}!��%��7�A)�l�P<C�D�O!���#�O���.�8؞�3 �{�x��<�ʺڅ�5�7������wAy*ն�,�AZ�B� �/��e آ5�R������鳛Y���P��� L�,�rY�C�5m�3L/�PE�9q�`�v����V��g`���A����P�휉=��0{� �ݡ�HV�<��N��o˼��2�K_�܇3m`����%���gJ���-(Ʊ�]es?��n,b�K;I��P��Ⱦ1�E��#V�C\ғͳ��"8��wɺ8�Wp�)�Uj�zn���͖"�����Z9���G�\H�xZתt�-q��?I�%8�W���$MB�Ko�U<�r�)�<i�4qq�VE�z3��/��F��O�ԳI"S� F�3L=�Is���v'#@u��M�oT�h�cp��K�2z��;֮YTu��+������|�W{�,r��n؈UQ���y��U;-��*ζ����)2|�����$T�.��x��wW���C�$M�P�=��J���t��c��[گװ�FbbH.������\FW���
Sections
.text Size: 392KB - Virtual size: 396KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 72KB
IMAGE_SCN_MEM_READ
.anti Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zcv23r20 Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zcv23r21 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ