��oEP#A�W�Wex�@�&,���u[���=0 @P�7�>?-r��<��§��ȇ4�Ֆ;����:GK⋂K ��9{mq����`Y���0S=����66�����M8&���7p��HYx�i/_��l����\�9�Ղ�d����K.�Db���^�~7���Y@Rw:V��{�S-~��ͥ����H�~��,a�n�:�� O���C����W��*�oū� $R��<�$����)慛�-=a�.��ZL������2�@�rAX{��fg�ӆ[��}#a'o��Q�n^O��Őh���|�-����REF�/|����3�߉@�-O� �oŕ&�_$�~<~t�d'ǔ&�� Ŕ6�X�������(�����5�wy8���2� A������E݀����"�����VՇ��)�POzO%b�R��a�BSK s�`sa,������� ��}8������0���H�Fƾ+t��M�P(�k��;Y�`��8MJ/��E�)� � �JF�d��{�n��7EOٞO0���~�7��w������V*��&u�]���g�#f��a�@�w���~��4���e��.�;�gH���?��6��;�ǐ]J����u�d�h?��I����9�2}Ow2i���RgjjtuG�(ߘ��t -s��i����L~�f����vWi��l+iN�T��Yc���!�xu$�ܚq�e-���mK�:��Z��M.W���ʰ����lڛ�Q+|1�C9�l�8�G�]���C����Hj��¹(n��JT;��u,��E���q�~�%o<���>�A����)��|A]�6��p��N\�0P�nD�}���~��{YDW��>� �U�����x���L@��NU���Rv������V�;������J�@����#0��N(����&����o��1�HK��آ�\'?���D;�i�4n՞��� 3X��Ъ�m�=yBvR)0�����o���ڼ�n+iG�y��,xԅD�����!ξ�t�]#��f7g7����Uu�����s<����|ޕ�����E�����`���U����`M,��Y3��Apk�{��k�2�\J�So���"�*[�L��n�^��R%\�������0�L�a�-� ~s��&��p.�f��������Ly�)o��ڰ��IleX�$k/xvy+�u�L��Z�� � ��H���C��g8��� �x�P��+5xJ�\��QC�F�3��(L̍8��Wt乜��SW����ҽ<���?p�^���:x h�� ��������[�Q��n�Q4��c�qZw�y�7)�R�VQ�i��c�cæY��^�A�O�8Q,|,;�=�2LQU8vCZ�+��qsw^Yј%���@gCW�Q��c��f)=����HH<y��oT��&!L¼"O�H��h��*��ƃ�#��wUG'��~Qqf��|�w�\�������$lK��^�� ��&��oqz��:�&�BB��W���Q��8���z���f2l �`��$w��iFoߏe522M�C���X*���e\�Gy}Dՙ0�gߏ���}&L���e�Q�Yry�rI�뷕-���!�m��� ��*���.Y��_�:��z-�Y�mEҘ(���:�rq� >�ˀf\?�Z�p����v�� q��j�}L����_��M��³��.��`����D}��4�C�GX~&K�wE 8�5����\r�<� ��l`�Ǿyf�7w}?�E]��� �������=I��0�=;ĭ�8b��7�Y����nl����tЅ����~��#%���j��-u��暪S2��\���zj�[����]��VKZBk��<veO����X ��.�FO��`*CM1�pS5���n��������&��$O�4�oU>!��w�w~�fBD���{k�I����x����1ީ�C6>��O��?�I�`F�<Ƞ�ϔk��Cx����ӧ�:P?��N��<�Q����"�>L�1�8B���Z ��V�� 2'+����6��da�o�o)u�6��`$0����@�f�(���a_1����c|�p=l��5U���L���n�Y�d<?Rը�\;8�g��������}s|{d;��[�cԵ����G7�H?��u��qU�<������Ϡ�ߑn*�3|�f`�f���*_�1���jiD� �p�|C:�g�ڷ���Hi����m��o�w3B�rA�%�c��o��j�JnU[��O��.��V��;���`^=Bf��WKc��#q�uȜ]��嵓_��2�]����9@2t���$��� C�Y��T�R ��"C�h�e�Vj�5�N�T펭�9�A��PD��U����J��'Z��b�~�ߡ�;��=N�A/r.�|��oOB<j$��9z�7��a� O��-��/I�;4�Ps���*�5$`0��/{g?P�`=��5�|�ƥ4�Z��?K�4O7N��x���L3��$��7�H���n�C�UT��>{�H��S��]��oK�*c�a�{�+|ْn0y�K� �f%�R�S�p��H�`�qթ��R��D|�ë2Ƞ3��{��TRA�p�������k�of���3�\�m�-!.b?����7�K�8p@?,�̽�����{�@�FG̿235�W�־)0���M^0A�9��˂ �� ��֎�u8��O�s�X�ya�K�)6�C�8�v��z�6*Sg\w $�|$.������DK�M�\=�FJs��:]�h��t�s��P��y�����o��l:�q��t`�2�L{�c�T�9�;�-����Au�>��]v8[I�ߐ$�u��g�q�32��k���g����.���E���d�55ܸ��oe�X�2��������E��Bdl����u��m,�g���R�����4���&��="�7����n������� ���*L��ގ�˅�`J�8����<�7��Ee_���_FX��e`��4���_I��.2ƗԖ�y0X���8�����6Ձ��@룏n�H����c:�̓A�3��l
Static task
static1
Behavioral task
behavioral1
Sample
Use_2022_As-P@Sw0rd-New&FinaI-F4.rar
Resource
win10v2004-20221111-en
General
-
Target
Use_2022_As-P@Sw0rd-New&FinaI-F4.rar
-
Size
6.6MB
-
MD5
ac0e3969d4b1fe804b2bbd963cb78372
-
SHA1
cb1dd8c5345b24a97da06439d6fb90cef9b3553c
-
SHA256
45c9d802086cdf028451dbb91e77eff70348c6cbc6fb3d99627c9452247240cf
-
SHA512
da97f5c20bd7c52749ff35d5dc636a23e6a86c76bfb2b0d30e829b6b955ef4e132c65264c4c699e128617f2dc04d0e0939abb3a17199b3be606804b302e9300c
-
SSDEEP
98304:Ti37+5/F5tTYgEBq3pX/nHxXt8nhyUxNy8o8hBKJyvu9sd2hPmjjNYOL9xaQ41Sh:+370XWgf2h5KuBKJ4uud2IXZZXLQEF
Malware Config
Signatures
Files
-
Use_2022_As-P@Sw0rd-New&FinaI-F4.rar.rar
Password: 2022
-
Langz/Cr0atian.ini
-
Langz/Danish.ini
-
Langz/English.ini
-
Langz/Finnish.ini
-
Langz/Hebrew.ini
-
Langz/Hungarian.ini.ps1
-
Langz/Ind0nesian.ini
-
Langz/Japanese.ini
-
Langz/K0rean.ini.ps1
-
Langz/Kazakh.ini
-
Langz/Kurdish.ini
-
Langz/N0rwegian.ini
-
Langz/SimpChinese.ini
-
Langz/Sinhala.ini
-
Langz/Sl0vak.ini
-
Langz/Swedish.ini
-
Langz/Thai.ini
-
Langz/TradChinese.ini
-
Langz/Ukrainian.ini
-
Langz/UyghurLatin.ini
-
Langz/Uzbek.ini
-
Langz/Vietnamese.ini
-
Setup.exe.exe windows x86
Password: 2022
11ea24073ee65343ee563e3160c77fde
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
DestroyWindow
CharUpperBuffW
gdi32
GetObjectW
ole32
CoDecodeProxy
Exports
Exports
Sections
.text Size: - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.~cq Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.FSm Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bmS Size: 6.3MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 580KB - Virtual size: 579KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
TheNewInfo.txt