�u|�K �97��(3`�j141�_h��`�3��}2o���n{�fd��b��5F��Vq�v���ȧNT�Ô�)�s�_��p6�R�=<v�K�Ԁ!�b�ѳ�ƒlx���;)NVz����N%AZ����$� �4w1;��S��p�oq�Uez�J �4M[<n�3菋]P� y}zn����+A����NG�����ɞD'� l��됔�o�B}.Δ_m�ֹE:��\�|G(��J�����c���5�`���kU�~7V�0���ѷ?� �J�u���7�o�DN����=�U���l�\�px��Ã}X��*������xW���\z?'�o�|���P4�iWeC�|!\�(�ΈȖzq�a����R5v�'�������}�H'��V��d+��S��\U_���q����:�X���n��$��퍰��4.��������A����b\��(�$��j�z1"&����՚;����&��OJ�ЈKBsA����<�џ��Bז��E�42tr�d��Fۏ��j�w�'(Uw��+ߛ F�Շז�sl2��P-'�0U/���/��"JQ����&H�*��y^���3>����۰�(�����Gy��������%EF�d�ɜ�B<�5L���������!c^�2��b���VG`��_]�8�L��k+�MAR循`'Âh������Z������J�U����+E|L=�@ӼtX��#�ĸ�7�B�$���/ȍ�*�g�un¥�TM��9��Ҡ P�`�2�=��*���F�\ui4�e�g@%�W���7i&+7��Y⃬����^,��"o��͟dm�<;R$#<���D9�䫤�qm|��v�R�m��q�d��ND��tO���:i��8c�~�_��c�3���NP��4+b���!k�]3��d�����<�����&4�vZ�X���Du`����/L��Cxg-�����zg��ٕm��h&P�8\�"�Qq_�7D�!�.ɦq���&6�D]P��c�-��\pD��:���$hf��Q��sL���� �h�k�zTK��{�a���;����&�lo��Xõ�#$I��v��Υ*e��87ߋL��3�{#����s�Z�p^�� ���@��U�q0�R�Fȕ��Y���#3�"V�Ir�������+a��;�]�3�G�9D��j2�f[gp&V~ӹ���u|�2 ������#�JNlnBͪ#�=5��@�w7y�����4�{d�ޯ��\6���N�#C"w;[�EwK=�$���b]��\�jBXƅo�?�}!C�;��)��*���z2���i֢�S12��'��0;eZ�}��9��B�$��M_b��aJ;J�w&w������W�n@#����#7'95ʼn���.�7&s�<���>a�%��F8������+�qݚXT�_�d�T�"���w�]��W1��@�_R+^ߝ�c1��K1U�~e��&�6�?��Ogˀ�诓k|�G)��D��X$����'@�������m`�X6Ԕ��9���X�P�Ѽ@�"�!��uY �N"�n���_��wj�IgPk���=�W@A�^;����Y(ZqQnn�����-d~<�]!:��A7#ct�����bt�ڭ<Z��{�����gQ�w\���E��M[{�����Js|�?v^e��j����'9̠IJ�6�$�F�3�ilZ?]W`Q?�:<�iJ����O{�e�嶙0�u� X���N���{= )��#s�<�<�����o@��oqC���#���-D����T�u���ҎudHosJ%O���0�ډgu+�1���]�H6?"�>��\"p�����h"���BR�D$��Pn��Q��5Y�' ��L{9�Lt+����W��,=��k�1N})i����Q<�����J(S���9/�����؉.�a�}���g��������&C�i*�����E2|⎅��̍+H��4�cTO������H<bJ$�����W�����d�i /�<T�ݗX�;ux�NQO|��� ��5��s��ܕ$�K{~h`��U���Qk�'���p�P��fT�ÂT>����5^c���*M0o�&J-��UF���W0��;ȼ��Qɮ����J0�izB���'�:8�������&>����m���u�����AT�[�E�;X0j��fQ3�������K:�� G�`X�ډo"���t���_+��1��5y^��I��p!��E� iTK�w|lYE��G���ZRa{Y��:J*�_��&��9����,���/)W?f��\ٙ�v^�x�����س�s�O�Mo�J�MY��)x��.(eJ���f%�������RZ� �� }q'�_G`��YF)�(���HGT/E������]s"��20��9 �5��ZU���CD��I��6�}"����� ��,�~��{���Ok#1d��H����(;���R�BN�K�����;0f�c�ʗ���q�8��X2�T���H��bhd��ih��B�e���D�5�7��aϏ�00����gQ�������H�aWS&�O���j`����LV��9l� �E����^@e��F�}�_K1?E�V�r͍��\>r�V����g��1��v#��Ws�q��*fb��ve7�\������>-8{��z�&�)�(I�7*�>$q�HbR����("}bP 6!ͽ3�.��_�1���xt9��=�q|/.O��N>J��ے&d�<��t�1"�����:{Q��bOIO�%[2G> y�����3�ډ-_�VB� =�W$>�?�~�5�pxu�M��i(M�o�`F���j��A>*���~IQr�ݕ`]I����i����I�D��Bp�+<�Ղ}LZݪv�A��"�R��u}�� �}J�A�+�8�)�����yK�^��vE�(�E���|�B��]�l������%����6M���ls���<����2��A��J� @N���'�5N�̰{9�-L�E+�@�{q"�-iHp��O2��w�sng� �1������������.�?�v��Fk�;�&\|%�I�7�]w�1����4?��
Static task
static1
Behavioral task
behavioral1
Sample
c34bb020ead41bf2678512dfbcc1ac1eede14a85fc3f7241f0fe5e206b45f52c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c34bb020ead41bf2678512dfbcc1ac1eede14a85fc3f7241f0fe5e206b45f52c.exe
Resource
win10v2004-20220812-en
General
-
Target
c34bb020ead41bf2678512dfbcc1ac1eede14a85fc3f7241f0fe5e206b45f52c
-
Size
184KB
-
MD5
6f9d4beb223c22a09bfbd1130e094c8d
-
SHA1
2b85c9f00b487c7f05e2df142a79ed252c0ce2c7
-
SHA256
c34bb020ead41bf2678512dfbcc1ac1eede14a85fc3f7241f0fe5e206b45f52c
-
SHA512
d4b54ee5d38b1591a0e96b1905445818cf50174157be0534b6b11a714d2e6bf50c600f1929c8ffe6dfa6584197c432188bc4ffda99323e0fe8e4fc6ff42ef377
-
SSDEEP
3072:C0XdrhEHMS7Y0BPPOTxknvoTzmKIjbynFf3G3UKNGdLylJaUmvNicRyJ:zdKHZhPOCvoedynFf3NdLylJa7Fq
Malware Config
Signatures
Files
-
c34bb020ead41bf2678512dfbcc1ac1eede14a85fc3f7241f0fe5e206b45f52c.exe windows x86
f92c956eb8e1b663619a2423683a27f9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
kernel32
GetStartupInfoA
LoadLibraryA
VirtualProtect
GetModuleFileNameA
user32
CharUpperA
MessageBoxA
advapi32
OpenServiceA
shell32
SHGetSpecialFolderPathA
Exports
Exports
Sections
.text Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dsf0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dsf1 Size: 172KB - Virtual size: 171KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ