ݝ��냿�����������q.&��JAd��*��0Iq�\B%1e���G�joCU(J*�^ٴ�c��#�"���˷#nE�y��=�ݿuQY�����R�D}��d��1*U�F-�x)X���|��[�n\�<��/J�� ����Y#�s��be����l�oK]�l��},po����˯\Zl��&Sӷ����9�I�As7h�E�A]� ouc`���D�b'�b�w~�&�*w �6j�݇&����V\$���l/B��?�U�=s�ˢ�/.��Sr���o��f�(�[h"��`Wf�����d��h��V�7�C9N���@�ٶ�������M3j��}fbE|½꯵=�.�s�Cd}����@-b��~ D���*��@��ӟ�5 <����`SVh����|ޣ�� ~t�أ����5��_�^ws�{�@R�hIjʰ�df&Q�@��O~�6�Qd�<#{�E<�{�����a�x� �S�i0�E��n&;o�;4�f�҄��]����ŵ��Z�j�>�@R9��ȚL��>����Ź9�(�v������yۙ�oyӊC-��r2��RR3^ө�EuOS�'_ڬ��<D:Y� '��PYvB��lk���м�a�^�ͭ5�����<6������vW7(+?�!CʸؑO ͅ�pE�[2{5�Y_�I�� ��w���h>l� I%/�g�H:̄K�-�;���� ����uPZMP/./�L6:,J ���KQ���]��v�0���`�f����"�A��pW��.��P�������N��ɬ+y��)0{-8����y�6E�����^`h������OɁ��}��6� ��a�-C�٬%5�������tfz$�Ga�ͺ3�W�Ж FND�`�}�R�����D}�`c��r ��AJNQ�$ӨrZÇȅ*M��O�n�bB`��.J@�n���.�É{|ڰ��vKa-w�V�X��*����̭��9t]�f1��qs$U~���D�I��Ӧ�ۯa���^�%̶�!�6����a0�K�B����o<G�b�?�Oc�C��Z&��0�Z�+�S������另*�V*q����t���.`6�G�B�ig�fFP1�K<0z��׃p�Ѽ�����>i��Q�v�Vћ�� �YT�<��|Mo�v���T]���g} F�'9' �uVZX��@�Svq��|��6zޘ<����3�/�hG0!�B��+��9�dIལȏgx��������02��e-$z�g��d�}�%Ȓ�zJRc�V� R�A�H�#�3+�ͷ .5K{d����: ��("�Eƽ�R�-�����2���}�~n��B���]hLm��[ˌ=4���%���|���>t�Bi� ��R�}����<�g����i/�R�p��?����T���*F7z���Tv��6ӊA��קt�:>�aʣ��~���szJåE�{� ,�TS��AΌ��㭿���{�fΠ����j�����_�%��-6��� C6�J�T�$0 �%N����G�|ɪռ&HC��p_^?��tK=Jw�D�������-��D�������h��Tf�c�Wz�`�� ��q�H�\���}�� ���v��>�{ �A���|BFt��Tܕ�i �2�!���͘���O�O��F�u(���m���a<OY0V���,�������֥��|ڍg"~P���A�����btY������ ��:�h|��=�o�mH���Hl�M!5��#x��e`@$������>/�tuX�FtQ�`�p��7���"�̓M3z3�zI�� �W��-*C<�I����nJ�!��r��.�P��W���;6&����"�S���s£Rs��˟�� �����{������'0�'�.�V��<���<��3?�"Q���̧8M���Ro(�8j�x��U���&0h�G��v]����a߄w}Ce��p�KFB�C�G�c� ����AI�������ޫ�R��=�[$yȤ��6*���-^F>"���a=�T���{7�5u���M���i��q�% �77)*�,�������|�CM6���aD1�ȇ�$nFWW� ��3�ձ ����F���B(�� ��)�2�+��T�G3��-����w���7&c\32���S�K�vAX�'�����J@;S��m"�����1��K/"$)m�J�"X�B�Zƪ=R�a��� ��D�$RO��q�k�� X�BB5�G��)ɕa� <`^j��l8��3�0\�:)��8nU*R\(�\�����ܟm9B�)ڃ�Q��@�����b�J[����M��28�E7��Q��H�j]7����l�%\����C��S�z�$e�I���"� ��Ӡ�[*� O������X~\!�Q��C�UM�S�m�V�� $��ʩU��<���e3Ւ�`��G8���F6�^��q��K}�D���GC�(+<�x�+�a.��b����Dn�%๗ً, T��C���;,�H�����WU]Y�S&ĊY22K� ���o�T���{��P�g��o�n'�[��Ҭ� ��*E�5�m��_Dk������"�7�!v���<D��V+6��R���N��`H�P���;���̀.�Ĝb�E��M� ;�$u5���>�.�θ��o��s��/��ݮ����#`%�<DKC�|����:�����;*���2?�&P̟�i�hZ���Dǥ8�P�5 1)���l4 ryl�BgC-%�kV_��*;T���=��u0)F��������2�ebe(HH#�`��ѹj�>�l�De�T����/�&�%uQ��J!p�zk�H���9Ye�51��CC3B���5�v�l�l�L��@Tފ��Ž��#��� VkWV��AE�4ܒ[����*�Ռ;T��5YZG[D7�*��k�J���6��.�v�a�HG���6�m�M蘮Ea�=�p���3ߪ�Gw ��N�ؚ��<�+��z zR�HU��i�5�9dA��!|G����S�z�K��ۈ���hTG��n�{��K�����Z�����l�"�O����M�&��ǪtўG���[&�W�Sϕ��Y ,s��OTh�y�ח3 �n�f{
Static task
static1
Behavioral task
behavioral1
Sample
27e35d0b2563dfe2784a9e953d99bc4dba2ab9b9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
27e35d0b2563dfe2784a9e953d99bc4dba2ab9b9.exe
Resource
win10v2004-20221111-en
General
-
Target
27e35d0b2563dfe2784a9e953d99bc4dba2ab9b9
-
Size
6.7MB
-
MD5
0572de40b29c53ebe8df22f6875bba9d
-
SHA1
27e35d0b2563dfe2784a9e953d99bc4dba2ab9b9
-
SHA256
e809a311f3bbfcfc796b37783b4bdbd76c4bd59657252ee3fd20150f8a76ccea
-
SHA512
9d9e6a35bb3a0db5b9bc6702f1fe764cbee79f23caed718a51642a1dde342424ea861c52ce8eea59c66655b84202dc705165dc1cbb3ba5177762033a7fa6a5c1
-
SSDEEP
196608:ech1JnwRSDaTvKuXwk2SA9lE6PI/GR8x1MA8Ra:dJOBKZk2S0P6hvMXa
Malware Config
Signatures
Files
-
27e35d0b2563dfe2784a9e953d99bc4dba2ab9b9.exe windows x86
cd649d0c74c0b1660a728219514692ea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
DispatchMessageW
CharUpperBuffW
gdi32
CreateCompatibleBitmap
ole32
CoInitializeEx
shell32
DragFinish
winmm
timeBeginPeriod
Exports
Exports
Sections
.text Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 140KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lbX Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
. `| Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.{[h Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 552KB - Virtual size: 548KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ