�Zi�9��x��*��n���˫����iB��t%:�s�W�X�VG�&��2b5�I�8'�PW�¤�pb����~�r�@�@똈a����V�g��iE�i�U�7'��Q<�a��=�s��]m���<:y�R����J���6����J���Uf����S/��W�p��������rMqV���M����˼kE�d�1����i勻<��5����C�����f�9P�zYT4�4����ϸ�GK����8�-��Lo���g��W��Lk:��F~+���v��ш��8�Wj'���IJ��f�)���4��G�bkzd�BJx����x��W �MT�Cجp05f���6��U<����=%zN+B���_[�։��������1>�&�������a8�f�����Jff�x�oWx�zl �oY$��O^N\�l_e������<��&����u.�#I�̈́]��w���|���xLc��Ҟ�/��S^���Ц�\�k���9Zu¶� ��� 9��Y�@Q�9�ӡ�ߠ��'�٣� 6��I�gO3p�jd�6��;�Al)N���9���8�j�vy���6S_�Ba ��k<�ls�;N��n�M��Zu��]��)y���_��$�69��E\zܔZZ^3����w�l��$_�Ѓn�D|U��q�e�̹$�r�M�js�H�k�ج��IY�ʡ�B�F0��r��`�J���/�=D:=�&iO���zs�ٞ/���`�bs�G�$�����3������_��u%i��"�z.ӿGbq]��[CڲZV]�� ��� ��6���3�Yb��a���w��R����j̎Go`�MR�REr��6VY1D�3W������$'��O8B+���5����C(�j�FK,hH4KP�E������9�b�*���sꚝ+ o�"V�ï��tT�6r���Z������Ǻ���,�'��Q0d^�I#k�7V'JA��@I��m�)r�)s�����mw�ʁ��x�I�|�L�,v7�X������`9��z�s��4�3;\�7+8�1�?�����-r���e�r�G��W��~dP��^�� _}��6+�����c�n�ϥ���h~�$Sz��Wm_je+`c��O�GWUn�ʃ�0h6;��]��h4ۿ�}�+�#�TN��SwY��T��������2���ZK���4�\߾�<�c+��6�E]>��H���4��~�n\�W�>�*���|���OKXf@l����I'���i!��l+4����!*������g�Aꦲbe3ޔ�)R�� �hP#U��_P�뱄��<5 �kO���He���|NE/�H��@�\յ�.�������x;�H�*s�A=oq9q�B,6u�e�w_����}"�V���~�WuX�!<��:� ����������h�%����-��Y%%ݿ-�e�]���d��H�&��@��!���g�,ZY���A[��k�3��E����J���^�;�'nJ}�r��\��H��ZԒ=��|?��;��������9���*Z[���^Gp>E�X��,�_�Z6L"Ru�[ �u���Y�߄�bX٦oG-o��@4��}��[ꀛ�厅�y Kׇ?<$���|��N'�B�\��������z�O��8����^E�%'5X�wW��R�zW�A�3�/��-�y�}f~C��D˩�w��0�SG��ө;4Pj�ӌ��5��8VY���������ԽV0#[��R��j�[��Q�{��j�J��Aii��6�f�q'�Xr�2m5�3䌻�dr��M��¼VJ��+1�z��:��ǫ�Q�H���6,��[x�?�ں��Nz3Qm�-��7����!@����d�������\�7/�4�U�5SR���/և�DaLdryp2�M�'� ;�2������!|���|��cV$���j�X���NBKV�[X�9eu�5 �T���G|X�ڋ���X�ā*eb<�����C��:ˀ��*X�)�Z|�u_�����;�BM�,�#�����9�T%8�T[a�����6����=���Ӳ$7߹�М�,1�_�%V1�ԃ��:���u���y�� ����U�0�e�t�P�}�?N�| �`�@(����&����t�����|65�Y��J��(a�� A���K�JɮI�����K�����^����K�����d�=�d<��K�O��eVuв��a��� (b�F��9�8�`9��3H,4�rt�JI ?��� _00V�}���_��;C��/ ��wY��{3�(�Z�-�ˮ*���"P���"��9�<�e1��Ә6!Da�M��S��A��-sm��j�<��rhS���z�������W�DXV�Sp����Zvvսǩz��cn�:������,u�{<��N��Z��O����������-��-=z�f6S HFC�ƫ )�E��[�z����O�v�1�;oӐH�(�nA���"����G�n}���ю6��̑dV<!���xs�ѓ?T����w�/ɷ�P���S�dT'���"��y7��!%`�rK|�*��,�o��xc�d�֩��^i,�����s����` �î�a���OT5����e)�Nί��"@)�r�?����e+9��.<���'gB��c]ؗ�qNG�����au�Yf��;E�i���/�8�@��$����u��S��˝p�3���� ?��U�.�O���9 ��/G�z�L��X��%�e,2/�i��Ÿ�?Ɛ �"e�YR!w��n����j���O�ۺ`��9:� !j*�c�D/�e뿦ɮ��� R�9���!`�b��C���#U�a�w�6;/���!��[-4�~�ې�j.� Ql$�k�����2у�,;n��5���j�4��� �(��N�����kCG��fkn�[��|6����ؐ�l?�s��O�V���}��s�o���ɰ�.�~Q;JO��>o��J�Ta6��k��ݭh�P���-�XR3azD��;�yx'TC�Ӌx���7�6���성
Static task
static1
Behavioral task
behavioral1
Sample
ð¦utoplð¦y.exe
Resource
win7-20221111-en
General
-
Target
ð¦utoplð¦y.exe
-
Size
6.9MB
-
MD5
a69200b284447ee873c9c90f5d8dc559
-
SHA1
75651b61d2001081b9563f70694374a5a8e01c14
-
SHA256
5b952bf985fd96067d53c27f6b7322b16da25f3e71e6a2bda1a6dcb51dd72c6c
-
SHA512
355c20d06a4872d5bce1b1c4470c8972844094ddc3484bdf6450114068b4f5b097197f5f7bbec94c5c4b7932e4b0bfbaaae1493c8e28e8ba96c9982e5946b646
-
SSDEEP
196608:LGeBG6tJR1RyW/jiJSrS3YUTb167X5we2sLY8qafPcV62q/PhB:PBGs1csizByX5we2svquEV62iB
Malware Config
Signatures
Files
-
ð¦utoplð¦y.exe.exe windows x86
11ea24073ee65343ee563e3160c77fde
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
DestroyWindow
CharUpperBuffW
gdi32
GetObjectW
ole32
CoDecodeProxy
Exports
Exports
Sections
.text Size: - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.*oT Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.`)] Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Orc Size: 6.2MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 645KB - Virtual size: 644KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ