c���V��߉d��#��:��|T��5��Oک:P��C,��&�S�t��ʧ�Bn������f��x'��a2RԐ��ݥ�[��̵첟�XF�9<=�cT?@0�M[��磍��P�� �6{{*��u��XzԾ�.<B�����o�f9p$��^r��hFD7��N�{)�З3:�Fsө�$2�(5%K�k��o��P;"RI����2�d��%��KR���%\V�n�m\S@��Y5���k�o_L>�ݠ����k��o_�։h��!b(��͒Q�,�-�����D�ܸ��k�3����Gz���k� 'ن�H� �jɈ�*��p�C�7TA������UB��dT��@����Njj˞r�ouΞh�0`V��Q9g�xRyܖ�-�gy7����no�7fWw��ۀ0q�~�&��D�ZN=TL>��8z$#�b������tkQ��о?_If2����F~�2��]���C�(��e>��N*;�ǵ3��%7���B�S�{�}��j��%U��R�x}Z���*��S��%����%q�[I���Bǜ��[���I�i����ā���Jw+�����!�U��E���Æ,pH>��������s�����~�;6�g�u�yܣU����� ��B����'��ߟ�/��x�r�l%�C��H��TZ�2�g����gN�JNjb�q�s�zbM�>Z������b��!��x/��X�>�C�3���s(�8�K�0�=�V0�?I�R���D�`C�u2~�d���h� ��*8�JNV!�nZ:H�bؘm W.��% 0�V3�z��Ҋ�F�Q@�nf�!�j�����〈�C~�����q-��{Z�)��]L�����Hr��o����^2�������xnZM ��ֆ����W�@�Y|����)����EX.�'�7��}7rsb��=���#CE��>|��H�P�NHy-��+z�J�7|N�qΎ#�U� ��g����W9�� �� ���>����X�*ebZw�����r����x�X�Ϧ�V��5u4�zE�������.��<�AZ�b)�U�3�$pnC��qF��П8��l�S�����F�@�&#H�%'j77WHJ��'-K�Μ�h��:���ur0$�z䶶�ށ��/�?o��:w�L0�-��Qs��{���Y���S��t"Ec���Yo(���������m}N���d[M> @/H��CXo�Vt.�����X[Q� ]�8�}I����Y�/��B����:�z`��an7�J�ҞJ�����-d������ye�M="�!���Ze>�������kZ���K ��qZ��������'JiBm \��5��j�B�A�,�"53���l��ٹb�hR��W���R|J�yy8���Ԓm��q�db����hL�����ӏ�w\�u���p�¤M_�J����C�cf,�e&>X�\��ou==��,���&�?\^Z���`k�^�S������N2<菧-���q+mY�����l�. �Y��ӽ�����h�/�(���e'���:0�ɲ�>�ғ�/����:.�r���n���k�h��Va~����"��>�)VM+ġ�W�6F���¡��~���]Y �Q�����:I��뢺!m4az-�s@Xs'�_'m�M��.�Ⱨ�0��[�h@���^��������A�eT�\�0n'�H�n!���'^��c�~�������*( |�ᡐ��7��Q^$w ���4�㿻�>V��}c�Y��hY��{��Zn�Y����h�n��[�Y��ݿ����c����j;�o�#��'"ԁU����,����Uy�$��I�2V�l7x�0����QLq��D��0{H��\��堡����Eil��aֶ�I }v�uʡ������ ݤ{-�X����k��lfd�^(�g��:��w�*�)H����,N��IS��՚{.2D��]������z��y�l#�D@�;*�VyYx��q�`�-~����«/h�C����DW��\��z h�a�k<�N�*Q�.�����M��rxkdž�i0� ��Lx�5q��+3���E2X�Y�����2Ѯ`Wܟ�ܶ\5]l��*J_�k,^�(�u0�ՠB��N�*���E�j��B��;�ӡT �?����'n�1u�P������@v��3h2m"����a��U�`˭�[�}�2�-�y����zP�P��|��O�#�1#_ldFDv���;��v�M����x�8UVO���/�~g J�6d!S��_B�qKr�3�8h%�u���9֗��M :�eᯋ?O�7Œ�LIx �z����)l���[G�bv%Y/v#���~.r� H_*!X0��u4��44Y˟|�) ���岜��1=s#�ue:P`K2O�g�� �c�@�!��T�B6�V�B�Q�w�IXnV�Ә�q��x}:�X��?vjO��=�!��(�*��܋��Ĺ}��nx~B�f��}_ո&�`bs5^�eE�����l@�w�y�Я�� V4���-[x�&|߂�#0z�9�����:Yd�Ռ�i�n���@z8����ܘ� Vld�4UF=0��?�Vכp��ѿuS{<���H h[�=Ι%���.��_}���˷#���0"73M���)$�*��v�&����G��E����!�zyUzRg���T�p��`_p��Z��ZQ�S@�����b�M�t� �����d��ԯ��B���_�(�+�a�E��d�q�y���:�-=Ve�}2}W~�v(��-B�P�,B9�E� �!��Ed^�3)��R]+� Ln��[�e}��4�ww�Hx��M1�St������E/��H�̪��{�^�ҽ`(���ȳG�![9����[��t�z���v��TR�Duq��6͞i_�0�N����pm�����3+�Y���Y����%U�dx�^�Ǻ����(���ۼt��iCY�@><��wX�c����+-�\ʫ�����)RP�q�j�!�� )��{�Y%��Zk�?he\�e�{��a[��, ���Fo����@�0�m<��J
Static task
static1
Behavioral task
behavioral1
Sample
Launcher.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Launcher.exe
Resource
win10v2004-20221111-en
General
-
Target
Launcher.exe
-
Size
20.2MB
-
MD5
1ca45d429abbb62b5d5c2d23e582993a
-
SHA1
464875efcfac1e7be1771b8f95372715f68b1954
-
SHA256
946b3874350cafc015bb46fea8594a2788445eb79991d1f6e1f3a77d200efcaf
-
SHA512
658e64f24cd52f10cd37f82d2fa73c11043b474f35f534fcc08562be28130bea499cec9e260a2ad25e363ef704e1f72d201f73374f7bb2c6b2bacfb305b62536
-
SSDEEP
393216:m0nwYk00NE3nJ3SuPUD2W03FQuknpVA/KCGuAbYJGtph7G:HUF+3pS3D2RBk3TuxYA
Malware Config
Signatures
Files
-
Launcher.exe.exe windows x86
1c9e07af67348622700778228d2e8f08
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
CharUpperBuffW
Exports
Exports
Sections
Size: - Virtual size: 221KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 335KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 20.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 1024B - Virtual size: 840B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20.2MB - Virtual size: 20.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 445B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ