bc��;���I~�/A�/�TJ���O韼�L��Q��O��_�M��k� �z6h�?��O� ���$��̫}8�M!�y���� ����vr�N=��N���3:��~>� �e��������|C#�ˢ���RY���R�fF�v��-3ҝ�yY��&�3iz�}�tb�� ��M�ʆ�!�ɯK�e(=?.=�5tW� ���#����ʾ$Gy����MY��=ʪǦ���a QY�?��k V?��9�������ϳ��yS��*+����f�ɑ�I�$�ԏl ��)�����F�pF���G�d��3dj�K�ܼ������U\ss}( 6������Q6�E��w8�B�O*�r�\z�g�X���vHN���zQ���:d������Z��z���$߾��7�B�9��`�y��$.�,) �,�:���7�Vjuҫ2�|�M���[����:�B�ܟ�1�H���&M�RZ�����$���.6����Ѱ�}ir�S��}>��zes�r''A�a�K9KKf<�� fpo��[�*�n^3Rn*�q�K=���[��9��J�*�\�yN�eث�����L ��2R�[Ŝp[3�鴁Ik��)o��4&0��B$�u��:.AM+ڻ!�Jb��*4AM��-��zQ�s!!d��_���O���XSPH!ĝ�����2�8�Is���7F� ��Ji:�f2��uT��mcUo�zO5�:1$�_B����w2�k�����ذ����d��v�� �紛��I�V��8>8�W�.�z����Je�<���r�p7��u���-���U����C�$�����{�ju�<K�=�!M`�a��^���/w�@ɰ�yt�)0�a��S��(^�����w��"�bL��B��j$�M�brh�(f�$���Q�����B��E�����Cbe�����|+�?�ƃ�1Db:]p�������~3E���-J�bEMJ�Ę����V�G�vX?��{���6/\���N���v��V, q�����|_|~s��i�U��W�vW�`f�zpw����|���R]5���h��Hc`��f����朗&U��q�W��!�Y�:¨]��u}�����l�mԝ�_4Cc��.���g!^��~\���^��PD��օs1呷�j*|h���:wy9��2)����r�?��Pe Sm%����8�CW��U*W`��b�uV^`���G�����QI�O��\V�W�h_����� �����dW8�F�-_z8$��%M�o��'�wP!����3���&g�����ھ�'v� ��P�����4<"a;[�b(�;!�G~�M0y7�sF=2\��!���5�r!6ڒm2U�_[�i���v8x�����͵KJڗ{��F����F�L�[�noԯM{`��>�W�h��������=K�c���5�^���K�>���:0<0B0�ᇞj;�B��H^27��q!Հ6�B�Ҁ���- =�z+7Q��s|�U���P 7�Lݘ����Y ��E,�0_=��������ԇ�5r^5d�D'�F.&c��x��Ǐw^���Jeu!��� B�93���Y��o~Ih?-� m��琧��9J6�ixf���� �I��]�g^��=[.H�\N��g������+�d :�gsF���5��(]�<caa|�Ӗ���(k��3B��d$pGr��a��hre�[�a3S�r�V J�k���!�9�ʳlא��;beB���P��Ӥ���ⁿ��Y�K.QxDjL�Dp���}��m%�p?|��08!�vD�|z_�K���bٺ|��%�ye:2���iW��:�������f�>�ѯs�R�2�Ո�8�w�k���KQg�=!��4?�_�kB���7���{ֈ�%������,5�:��-�z ��0���B�0�;)cy3K���uiN$習�:��.D����Ϩ>��糩���H6HuP����ȰTOU`e�I:�o�H�3��� �N����G+�5B�'S�5bP+Y����k��C���4+=�vYGY��W��Tj��g��8���ڿ�H=��ƀ4i�w��(�S���Ä�-R7��}�\���.�p`؉H���8X�����p����h��6�J�#��|�{�]�����#7�Kd��Z�Eip����kN�.��[ �6��Z��ct�3b�s�I���!���/b�\�M=�O�CH(��L�C���ؓ�Û��r���~$GbJ�F�`�4� R�6s��#�G!�c�h!�9Ɂ��,c�� �Q.���o�k��Dt��m��o���|� wf�ި���LI�0K�'�ڣ�Iw��Fy�0}����� ��ly![7*~��L�p������٩�>���١��"x���d�jK3�ޡ��: ����K��B�j"�e���w��,�Aj��ýP����i ����<�͑�bCd���Fks���A�5����I%|��3��������h�ۢd_�m��V˟_k����%`�қ]� �dՠW��Ԃ�k��h�uYgjAD��k�xR�~�C���_��������@&���?�ʺ�-A;�!�aE�R�t��l�d�aɃR����Rbn���j�ICx��Pi���i�����`u�q��;�D�ϟ5J�>�?)y�t�9���� m[Xq��djnsn+H��=U5������fqd*���ڇ(�������^P �+��F��7�X�I ���+����ʁ/ѝ1��(�V=���8!As�q�嶘�s�͏��L��������L~a9��a��C�����Z| ?�����������D��O:x&n�8a��c�G��U�6�r�{f>��u �<�Tk������c�{�N_⦖aJ�hʐ�!��u|%��(;Q��5M����{�>��v�NP��žy���,��@��'�����s�.��h�KV�:@L����K��-F��� :=�Ó�p��+�݄=�2�H�0he�l�E� �*�MT��l*7A�@S��m�<J����8B��8_�q�����Y�D0qG�))�6�M�������Xİ�ά����3���1ӆ�
Static task
static1
Behavioral task
behavioral1
Sample
8d622d8c33eefd8c45d09036917582651d2293e226b67fe00423148ad547863a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8d622d8c33eefd8c45d09036917582651d2293e226b67fe00423148ad547863a.exe
Resource
win10v2004-20220812-en
General
-
Target
8d622d8c33eefd8c45d09036917582651d2293e226b67fe00423148ad547863a.zip
-
Size
1.6MB
-
MD5
956db3a61d06c8fdbe691375af30ac26
-
SHA1
137c30da6b239b2657d3145b25b594ffe89bcdda
-
SHA256
e486bef1dd4df82b5118106146f076056c7b863010f3672be44eba86dc2a0978
-
SHA512
6469962e4cf383138c9d7f96dcfbdf153ddce6bedd1ebb9a479ba8491fdd5e90e8fbb3ff3b628842d363652bc4d13790cb6440e4703fcec21a57abf6131347f2
-
SSDEEP
24576:ixRFXbnmcZYeZC9r/iyHN+QgkKIcHpiDmJh6ZhSuPELK1OMFxcakMnU6WaY1zmPN:ixR1nmPhcHs6JwZhSy1NDcakvZl5mxX
Malware Config
Signatures
Files
-
8d622d8c33eefd8c45d09036917582651d2293e226b67fe00423148ad547863a.zip.zip
Password: threatbook
-
8d622d8c33eefd8c45d09036917582651d2293e226b67fe00423148ad547863a.exe windows x86
Password: threatbook
f10486c1f236d276862f84d121f9afaf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SuspendThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
wsprintfW
advapi32
QueryServiceStatus
Exports
Exports
Sections
.text Size: - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ipsz0 Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ipsz1 Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ