�Q�������.�U9�^� m\�@��7L*�@^{#��sކ���������7��6�96��w �Sy=�J2��ǖTK���2���ז���5lE��7߂���o��i�'��W�fs~1l����#��\����e�O | k�LF�`U� |�c<�+��擄\���As�&+}U4r�5MƔ�5�~�:jBEf!���ξz`v<~ۿ��x5TW��7*�Ԩ��֗/v��-ޒ Ɲ�1 {�H�-�I:V�sƴv�/cS�fƥ4��j���_?����*��H��u��тb�P�����B�����ܢ��<K��~��ad�S��3�?�V�C%��X�@z��>����t��d;�^}�������+�x�`����8�ĥΧ�ώ�t?{���5xg���LY-�W X)���v�"�Va��I )�����c�ԓf/c�Ybm��Xv&�����r�\�/�GOL=6qҨQO��H�x�zdp9��>u�r��/R��T��0�)�٢�*�����������HC�&^S����Q���.KY�K��RV_\�ų��U]>�ߓ�*B|��`���nU�>bV�]�b���֪����#��ȊkZqH��;�Őq:j �P ^"T�˜V����?#��������0�=�!�ߡ�#ܭ����Ǜ�E�R-B$к>orJ��k.�H�W�S�v�����ǧ�qmPgN^t��,"�����"w,e�����=mƁw"*d��� 8��s�NVp=�O�����/��)�)�CNֵ�������`Rd��/�l�5Eh�Y�(ޥ݂�e� �ÅHB�^�R�L�Ts�ń |���;B��/�9!^�'8V����$aW�U!��"�9���}���OE�S�ʅ���3�*��MX3��#!!�>�8U��P�1��r�.��WaJ��B�2s��lҵ5��k��V�C)��kj�M"9�0_|t�}��oV���8}�V��ray�m�p�}�0���3.��m����*w:m"ͱl�Z5PwZ}zZ�4*4C'�G�ԏ�H~���~�!̠����6�X���aѦnXe��㏦ޑv-��#����Unz>g�;6ל3SvHB�AXO�(���Bp:4��V������X� ��N����.��pG dY�.mx>�Oh���A��tBm+h���d|U�X=P_q���@X�Jr�t*Y�W�_�.��2�[�G"���v���2�1��x�����z|�}ݷ��!63�ud���������S<@0�o�e���;������Z������F��Vo-� Ҳ�� ;��?@��`o��G�� �& |�)Z駑�-�����b���|���,E��a��� ��Y���/��ۚE�����ଋ49 ���U?я{0�$�D;�j�=�BH�g��0���CZrt��d���p���s�]�ҵ�"�J�u�gN����6#a�^_�C?=�u��M�Ǐ��V��'f�>�qo## *�b����z��c�N��gMCl��4c o�/�\��٭i�Cb"��4��.��AQȶ�!{���@O��>j�@��Y���f"��Cy G��*z���@�a�d���67ֿo�F����\(��y҈�F��Ö��F��0��M�����@(5IV�w�*K������LI\������xC�2M�\�ڵ����*�Չܶ3J��[a~ΐ�f5Tk�i�^A��P�)�� Q���c�9Ǥ&@��)�1�/�Qbi������<�+,Y|0����L�W�U�*���ﶴ��i���f�����`t����Y�1 �'��&^��z/r��O{��8�}] �v��ߺ�������'���c�r�Z��d�3N���廣�����h~�ca/���V��cz!O��e&���@ ������������^��,͉c�G��$��]�.�R�_$,�)�E,˨�*���s�T�Q+Ӫ�k_Ǡl����T/��['��ft��?�v�`9}Ġ��x���0>�G�i�O@U���+����QQVS��j/d-=[�t��ڹ;<����Z���z"���֪������'*��"�:�h=�;6�/PkDxH�Y&2�^ jK>��_��!H�����@^��cU�G9���k�"��w��q�Hlc�BW[4�D��='� <�y��6K�H�3|��S��t�#Hd諴����m����tJoh���J�ݯ^,W^����::M�y�23�LO'y䠨�(�9Gץ�Ρ_�bM�����Ni�gk�K�u����u��s��b̶��Et b�� �H��it�B��W�w>(�ͬ���˙�j�����ǽ�תd��\��lG�?6DgMB$P���k(�v@o?2�[@��Y��;����' oa4A�c8��q�9��R���Lߏ�T��z�3��nd�8j�lf#����G5�;�϶J~`��n�������ͬ���f;[�&aXs˻e���֔MV����T'~��fP@&E�f0���)���6l�nHF��]hN���8ġ�N��Z4e-��y�R�>��5�qw�5T��HA���r������5�����Q����D��u�L P����E��O���`��!������[��E�$3S`|4aL�?IK"/LL6� 9��w�����I4Q�J��� �̺���+��X��o����U���R��:s��M�9�����蘒�cTB��?�+��i��^�A��o0�A?H�����=�w�e��cXm����w�dJ˦��P��OP�#LM4��z�3}�����a U�"� �J��wb��b��j:���EL"Wl�G�ow�|����p,A�O�$v>?��{^����[���۞�}p6�R�H���� �4�{k �\�a��8̞�͆���7�zL?�&�Fbۂ�Rwv1��hA��������N>���APB�$���K��������IF۔�ޙ�HmgbY���' �_7��E�T�"��������o��> "x�d-�<<�m*r%���� C��A�_��i��v �Ř O�g�l�`��%����nK�[y��ds�9��%���hY��J���:�9�@�
Behavioral task
behavioral1
Sample
8fa8cdb23440481c96352065a2ca5585940e5186a79d3fc4b64f3aa02788431d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8fa8cdb23440481c96352065a2ca5585940e5186a79d3fc4b64f3aa02788431d.exe
Resource
win10v2004-20220812-en
General
-
Target
8fa8cdb23440481c96352065a2ca5585940e5186a79d3fc4b64f3aa02788431d
-
Size
176KB
-
MD5
b0f277eaafafe014b1f6b4176842b7b7
-
SHA1
c781001fb2ae21b537adef772358b57a3c4be117
-
SHA256
8fa8cdb23440481c96352065a2ca5585940e5186a79d3fc4b64f3aa02788431d
-
SHA512
fc9bf7c1cdd10b782b947e5c188ba4c23a748dcee20de871b9611169b7400ae6c7c380223575f178e2b3f221eddca5dff2b721d1a483e4651fbc45847e695fac
-
SSDEEP
3072:Tp+9ArwMccWa6xJR4aLLvAkSIzTnt0KDrXTz41QBS2Uo8s2Ozdyd4:1+9ArPvHkFzJbfGQENOzQd4
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
8fa8cdb23440481c96352065a2ca5585940e5186a79d3fc4b64f3aa02788431d.exe windows x86
568d0973feaf81b5a2bd7fa70648bc86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentVariableA
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree
GetModuleFileNameA
ExitProcess
user32
GetForegroundWindow
MessageBoxA
Exports
Exports
Sections
.text Size: - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX1 Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ