B��wlX�M�����Zs�Æ�DUٜ���.�̱�䩇sw V���$��,Wޔ 1�CfkvF"B����\L���6��D���_� ���+�9D������ҝ:�=�Q���9OX��6h�!!x��;Y��$��7�֝�6`1F~O���!���´�y�ėGL�1V�2q���l�_1/��- V�6]�qWl�����>��-��ޞ����<+N�W��]/n y�;���&���5 -\`]��� N3B����*��MU���MS<]��ZuF,C_����Í]u�\��l�<��6A!�������n)��C|�QX �Ԧ�p��C�5 ��ik���;k���&�xd���WW���\-��X���Q\T���4+��G-��� eZz�� ��\���Hϲ&^��{ޤ���+��B� i�X�M�2ֵQڹ�B�����t�f��|#�sv��a�kSo��cgo��8��j�L����Qo:��H_��5N ��bDJ��������0�4 R�v�U�p�����\�}vwB.�n��w�"���]g�4K��GB`C+:���G�ퟗ��(��Lv���V6A�MA,^�4�H�x�@qy�� &�������*X�Ž�h�[�<d������ГN����$N��ݡ�(Y�]��W�`<o��Y~���e����k�`��W}��.S�h۟3��ޯ�w/��2���!���k����������>7NI6dA� S����S��Э�|~��W�,"� aLl K��r?e���ZU�M�LF�����=��p<,���f�U��|��$�� v�4K�奐B3�a��ț�Oܕ{^�v� %�O�B%��zܮwG2*�<K*yc�w���x] �N�P���\(��2Iu��o@%�l��2y*]Y4�<�1#��,����+o����I�+���S#z[BZ�F��R�1���0�n����?�k���ht�'|qe'�5�IpC��2�H�v�J��G)g �@ ,5�Sz�"S[Z9�b��ew-�0�v��<�%�V�� ?U��:\,{���{oG���bE�v|"�$�����x]�,��6E�x��7ե6E7��DZ�Al]2�Pc����,x�l�d �R~�}۔�%�u��cqȨ)S]�k�nZ*��X������������@�ʰ�rEQ(İO��F轂E��m��ć{�$b�.�t�:�&��u���+,kz���*�� j�Z����@��A.���}���8�-�n�7dz5������N�ϯ1=�3�Q��3`c�i/C/���X@��m�0+�(�N`�SWr�V%�C��X�f�$Tj�B�����B�~��./�������s<�>�8�ف��@E���L�̷v�ɦ�V|�tETQ���3E{hy���|(�iL��V��ƌ�i5qux6��x+#@m��-�ؤH��|dOq���Tf�[s3���R��㻪�VW�J'([w�h|#C��1���]3[����P܊S"�{�_�w!Y>K��*��69\����8N��l���f��C�rkO[1���o2��Q+��q~W�m�z����p�N�|���Դ��'*��ZSA��,I} �³E����x&��z���W�`� ��`���@0���T��1��W�=U3�ƍ��;�������Q%�O�Q7N��wי?�ŵ!pNr�sfK��ԧ��p�=b�_�����DF�P�;T���n�j�4���Nފ�,��ϪZN����W �Y�1�����U� ���dK���Q��UצDգ�<��#��_�O]��Hw�k��qKzXJ����{����c�m��߸�^?%?l�k��|��x���H�B�-�QB�z����d��(&��>�j�N�����hnBf����uf�$AT*�P��+�v�^��ű��q���ef,Ku�>Z���ʔ���1O'����-�"5587L�����Px7��DxR�;��my�f����G0��ѡU� ���n��A0&�9_�)� �Wx����a����>Cj�����;s��Y�����_,}�xQ#�P���{�7�����{��AT~��. &����^��1U��mi��Nc���\��cj�je�7Ni�V�hAz�AK�y�\�_����,P�7���p�|�;�%�΄#<����+S<��!��Lj'~S"t5z]�@|���34���R�j���w�H Eju��{����T�����U��H�x�ԔЪ4T�8z�5F���%���Q"�x�j�1Z=W�� ��;R�/�n������UL�M���KB�diU��[�̥"��]z�H �N,'g,�y�F�/�`�c[�Fj��h}�&̮-�3����V!��n"��bNJ�_�q�f��,�����t�/�[v���c~6y� ��4��%��H��cs$��Rl��HY���[9Rl�L���*�軦1s����HѴ�����Ss�;�-�k)'��!�n&� I��+Ӥ�U^������!B�P��W,R�o��4����/?T��:�u�X�MI��22�?��ד�8a�@���{�>�ɧO�F�t�.�0b �?�b��l8F�+��<Ws�w��K1��,�w��0ƲӒ��V��Sp�-z�S.J�7Pv�P}���&�~�������i(��g4l�����Ԟ����㵸\��ɥ\{rB�A\��T���l�b�䄜��}���:�ː��|`��g��&A�� ۉ��='f߁?����PE�Cp]���lB�#�+����CΡ@@�.�=�ڔ�xz.>�b�հ�\f�;Տ�h9|/\Jq� �d�c�FUK��O|6卜�����'�\uU��*{FN�n��f��5�����Ò5�Ƕ����|A�fK=�7߁�ᵳZv_�^d�*sṷ�Ƀ�r��k�UCEZ��M/G)���S��`߽a"(����%�=mA!����H�]�X.�&bF=%Tc�������:?���s�'�!���BY�/ʤi�;���ʼn���oq�U>��۠GZm����vA�n�����N�|��kc����5H��X�Y����1tu?��Qy��N��
Behavioral task
behavioral1
Sample
c078dc00f838c3155a7127238284a72a8a4d3648f700e85bc527f976e8fc223e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c078dc00f838c3155a7127238284a72a8a4d3648f700e85bc527f976e8fc223e.exe
Resource
win10v2004-20220812-en
General
-
Target
c078dc00f838c3155a7127238284a72a8a4d3648f700e85bc527f976e8fc223e
-
Size
304KB
-
MD5
373603a32150bcd2ff23cef2ee63f97e
-
SHA1
e1117a88270b6c413a3656c5a95f637b6769056e
-
SHA256
c078dc00f838c3155a7127238284a72a8a4d3648f700e85bc527f976e8fc223e
-
SHA512
a05dfafc19e373c2360288894638ae1d74f9019a51cdefdb86720c4f2aa541abdbf33541fb5165f18b5eae7502fa47947aa89a765ac8132d797d9999da23355f
-
SSDEEP
6144:asJLC3MRwbrx6WecSwkyanG97dWDlYHfC1BzOgi6lplrDDWYC:aiLC4Q6WQyhdifbqgn7dtC
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c078dc00f838c3155a7127238284a72a8a4d3648f700e85bc527f976e8fc223e.exe windows x86
0ad3e6d91d753d53abbae1ed3d782bf0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
__vbaAryLock
kernel32
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree
GetModuleFileNameA
ExitProcess
user32
MessageBoxA
Exports
Exports
Sections
.text Size: - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UPX0 Size: - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX1 Size: 284KB - Virtual size: 282KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 196B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ