0��#G\�>g-:��Z���x�CϯL�`�X�5K����J ��v�۸��d�~�S���|��雡4������x�o�:��rH|�ܣ9��}���ssӼ�_�\b70��g#�Y)��C�:���&��]n�&j�&`���w�d�w�i��D���4_ ��S��3���!E g[mm ��������˘�j�C���I}Ӗ�R�K�)Oq�eCu%}=e�n������Hf�O*�� �������x�,��7���D�_2�*3f�4�v�_Fai����,��DM��6�"�� R���t1�x͇͍���&e~)`�\�P#>���PӾ@�B c���8R���W��\#�ɡ(�({I�����Q�2}�dqj��b�_�ӿ�3�� ��Jt�M']q�Y4XE6�2��������+17�66�h��MvB�c|z�i��/e{��@��>_8֊7I���T1�0�M���;��$�Q���Z3E�����E'V�{Yd�����q�d�M�.���ݹ���;�ٳ����h����?�p��,v-��⺳Gi���q�Q����$Н�4���av$�=怓��oWn��Gc˙����yj5W�uުa�\gcv�'=��3�9��������OL��g����b�s��)#�]W*0!��j��5P�=z+Jh��w�.��i��b /��T�7���U���f��K�-�ũáE������9y.���*m�w$Z��ё)+�����!���<;;CFg�Jk b�h���r�����YI�� fA�'�n������l�\�+#Z�W;ġ����7o�J�7��M������OPq4�&�ɖҰ3�VM��,��>���@���3z'�~`��e��QXо�k�o2r�������)htT>�u"}m�c�>�*��2`x���A��Ox�l����O@��)K#��Wq��� 1=��,�H���XX�KWD[R��n����IF�:yƎ����� V��);�?)�[���4S� aAȸ���9�%n2�� Y<|��9�mo���j+g�Ұȡ^).I4�Ѝ,H��r\�+��v�|�UH������U�g�!b;�����J���H�<A4<� /���v ȃџ�¬���*��S oK�t\��H��<�#��F�J��m;b|����eE�|�e���1�U�H�*����.Ok������b�TVz����M�h�ه*�:�����e�a�[wRQ������w��_�1�E�G!����[�"X��e�1X>��ܥU��O+A��W�L�wv%�U�88�uZ+��۷�>~G����(=@F��a��?0iֶ���,;� ���kθiR�".J�[Ío�=������њ* +�F�۠C$�� ʷL�Ƚ��d�xdѬ��5$�'J,�P�Bo��g���R}��@���is< ǐ����'��`-�Ԣu��{J��;\,�ae�����Jl.bE�R��(��9o�H6~��%�bb�[� �A KmK�5�e߅屜 0K��ñ}�q�TV�@/nj�Y���0RP3���Ud�c��p���Ϣ���� m����:+�@C�Lciɛ4HG�Hћ�}�'��["7(��o�=���2=�>.�(�:n�#��0jMl�D��:���$.�%�E�!7*���=P�Ĉ|��,�}s~C���#|��j�@W@M�J�����~�y��ծ�s-�^�M��!���T��ǪX#�ms�q��^�f��/���Lzm%X�"�����v;�n���f��3�HFb�L=h�.�t�{X8,�j:����P�0��u��=�8R&�&�O�\m�<����U����텊�ri<G�G��� "F��J]_y�Ui���J���y��oj�DR���Wõ=/�s�$>C�_�I��\�q��4&��ME�ÏU��8�3��-�ӎ��TF����v�*�rb�����`�o����*�Ѵ;�9i�����P'��?���bM�J��|vǞ��l�}� �'2N@�U�3N=��hE`��@�B���=��3.3=#���Ј᪑��u��%A@~5 i�Y������� � �J9��+�$"����YP���n��Ҳ�h@=PfDmu#�Z�>dB��o$�E�~dR���ƲL�AOC�zyx�%38}��Kt[��p���2ra�-���������]����#�k����.3�pF���G������ ����+���$���% ��7�YJ�r��s���n�?d��*���[��a�PV >�c__WLQW����bw����Y�@Imu���?�0�x�� |iA�ߘ1�����H��� �.|�/p��ώ�j{�KH�5*Y͢�����J�qZ�o'Ab�$Un�g.�ޯ1��S'x�l���#��1�MI�8���|`�-�1ܢ�ſ[�n ��Y��i�/���*�(h�!v���^�o��?�)n� �Cc�U�o>� j�s���>���p�S ��#���f�����=���I��}�� �P#U3��5L��$#�����@͖��u�0��T|�B�V;����pX���T���؞?��\�Ke���\.8O����1jڮ�_�s-c�Hi]�k�l�o�M��_S���+n�����uG�i���������4X�Z�c\�p�$�p�$,��V�9�H�� ֊�wS���F��˼�����_����'�$f)�{oz9��o���u��yD���'���1.��G��UK��aq��m�{�ܦ��o?Q�6�H�x�p5�vj-j����7`���#��c����$c���~Ez���U�����YN���)X�ʖZ���L�R��1?h�����4�9����A�v�lO�t�U,�� ��?�ai�=T�TC4����Aw^6U������\k��N����hd���rv�������a���?]^��g-P�#H�A�6���:�1�|����@�"<�Ó��a��TO�)�ƈL���R?�5�::�w1S�X(Hf�aC��nje-�4�!���q�^U�� X����hՀ�/v����@�����T�P��[/��Hg�M��s�O�PgÎ��/8��BJA�
Static task
static1
Behavioral task
behavioral1
Sample
wavvve_feat_sqhack hackvshack.net.exe
Resource
win10v2004-20230220-en
General
-
Target
wavvve_feat_sqhack hackvshack.net.exe
-
Size
5.5MB
-
MD5
edca298528599b0d25cdec54764ba65c
-
SHA1
b5daef6a7fe0758eebe455563bb7858f6b0d510d
-
SHA256
555d4b9078b4c738f6a94fdc7dc4762414c92bb75f7e2311723e606fbc489357
-
SHA512
0ba95773f71947eb1be81eb7b9b7616dd4cdc69614e917ae7379d4a51ff0517f8c81aeef70e647f5c14cfe8eaecad59e683151022ce9cfb21a2fba8fc31eadbd
-
SSDEEP
98304:88awK/HkCS5ye9QKpbH8ItLMDSUj9YOey5noF0D9uAmuqDamPN:8LgbMe9/NeGUj9Xe8o+D9uAtuP
Malware Config
Signatures
Files
-
wavvve_feat_sqhack hackvshack.net.exe.exe windows x64
f6fffd13aad3b4d8a2d91ba8d8578504
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
wininet
HttpSendRequestW
kernel32
InitializeCriticalSectionEx
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
MessageBoxA
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
advapi32
CloseServiceHandle
ntdll
RtlInitUnicodeString
wtsapi32
WTSSendMessageW
Exports
Exports
Sections
.text Size: - Virtual size: 270KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wavvve0 Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.wavvve1 Size: 5.5MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 188B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ