�s�0#R4��`��_jHh~�@0����OR�e�*����Nٸ�,g���^8mX�<�_� y8R��˕DnD�`�5kOR0��Q����%�||s�V�m5��d/03U�.XL�]�5�OAŒ#�}��g�Ltf�ƞ�����U9pNm�.�E��ٱ��n|��i���eA玴���7\�o ���\c+I8O�+bw+�qr3�qLպ���� ~�L�H��g*JCʧ)�uO�}4������sBpV�9:����8�}Lo�.����Hf��=�(jD�/�_z?�����N��|�_c��S ���>�ጥ��U��cC�Z��L�wLY`��+�������Y Z������v ��hm-N%��:��j�D�כ�M�?h�X�m\���4���v!�Fb��!4%�5��^f�,���Y]m� ,��L��_R���?qNI�B��r}T1۞OW�c]m`��Y����~�B2���w�i�O���X��xoz�+���7����=�Uz��a(-�\�vX��'��|�·����=}톷<�-�0�Ϳb��θ<�ZU���4O��b�ν�q\6�z! h����40�j-J|D)����Z$?m����sΟҊ~��V��қ��V[�y|v#��/x'�ޔ��U�� �I�x��!����F%�e��v9���ש����D�c�7A�H�P�.��W���� c���:q\�(��b��j�jBk7�w� ��d�:����О�).-��8��~��8�E�$�ۿ�"w̐.G��3��A�ﻼ����3�(�=3��0�E�_F �qp[��a�-��~)���r���P�\��V�FO��Ob�Ĩ����$p�����D����Q�i���iN��Yx�M�w2��I<���i�ۻ�f��kq7�G@�� �����T'`�-=�6�j��mP��[/?@{�T ZM:4�/��E�g�3�~��3��75��2�3�C��-u����Y�6�ݨ�dy���@`.{��A��b�.�0 k�g��Zیq����o�t�O�?�h=%JV�)����b�"]��ꜞ��z%�{�d �dB��J3و�T�*��0���S�#�S5ܛ�>����+^�Lg &qy�_�k��T��y�3����L�]ll����� KG+�^(]�ץ��M�6;�]�mpWG��S����2y���m~�5�i+�5I���5y�*�aN��Lщ� ���a��}Ӛt�n�6ͷ!գI���e\�x�/Vr���]�vC�c�9���g���!��ܹ����R�r�L��'�u�тݟ�9b{�{b��S��#<����U��-��/A�=���������r�>�F����:� ��r�WHx�]<T�2�<���>I�I� �p'�G��$,y�che}��r^v[3)́\��k�IC�-!��0�����磈?��j-�AG]��mv��)��p=̉�Uu �[�7rm�f���#4�?��{�y�Sm<�j�t�dK ��д��/�����,M���L� �(�vW�=��k�}��L��7��4���>�����>PW�"���~��*�Y��ʞ��o�$ &ڎg_��# ;��Ox*��L�����kPY�XuO=��d+�0�Ȓ�<ǻ�S��42�!-L����[@������"~�߇dgW�a�)�����ܲ��O Y`���Ƀ��P|hCI�y��f���z�I� GX�~g�^6H Iz^��G���k�6�64y�Y�͗{�ʟ͈�����#�_r?j S��)o�0�d��:���;4Z"�7K�ESES��8/��4߽:�K*FQ���(z�Fm?���®�-]���Q���t4�M�L ��P���!@��PQbrUb�^��������=RŒxe��UP��g;���+ J���ȺP�T06�2; ����P8�3��c�.��P��Bn��u"���44��>ɐ���������dĤ+bd��S�j��}�D����)��xj�T5Z��2��E'�'v��B\S�{W��3���a�v��h� �M�p�شF����Es��N��<�ܻ"懠Ɨ]�����.�g;�b��Ϊ���\��+ �_���U�u�71Q)v�����j���-1�g�f�w^���6�U�����T�8|��,�+��ҟ��4�.����"������.��I�C(f�H9/n�}�_���铑���U[`� ��,s���6;�uo4�b���"��~������0����FMD�i�Z`4�b�?뽈T_�gp��j���&ͽi��� �s�.���I��&@���.b�}�\�maT�l�(v/�N!��_+��>g<6؈����Gi^���X��F�2���� �DZ�H����/Y�jë���v��<�Ʈ/e�ڿ�/�(�����wN�b`)6�<e�L��W3��7ÛhGL����2�Qu��#���s��A���t@QePt7�4�����3��?�k�3J���#i���2N����ӢxI�J)�+?BA g�!b���1���=b[B���B�ɴ⯊�FHm��O؇��ϥLn��6�?z��}L�ף�m��_��m��"�: }��ulnX��k�����;�Qk�9Z�B�`73�?�Ұ��9�>�5�m�T��FaYV�i0-��jq��0��UG�VD��M����M��,�8���I�a�:C�C;����$� ��KJ&U�$���G8���wƇ�Ay,J<�Ա~Liӗ�_n�.$��Y��Vw���ݮ��)����zb�����ޑn����<�S+ٵ�p�c[Vn'�oF��J�B���b�+�xŽ g��_ j�|J��9W��0�{0��Z�����pr��yC�����hS�����ZBhZ��i�i0|�������Y���)r?��k����Nk4_�7$Ry������<����-)7���d�Ec�c�۔���������g=��Ho?S�,�#+z@>��94h\p$yE��餽�1�]b�����}���R���C�P��t�1C}I R��� �� �"?�#ps���'�$�OѹZl'eI>�
Static task
static1
Behavioral task
behavioral1
Sample
88a368aec81422e4f094a010b2719e36.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
88a368aec81422e4f094a010b2719e36.exe
Resource
win10v2004-20230220-en
General
-
Target
88a368aec81422e4f094a010b2719e36.exe
-
Size
14.1MB
-
MD5
88a368aec81422e4f094a010b2719e36
-
SHA1
16c8068656cf550a7545f33c10c73d051a071aa9
-
SHA256
23590a4a514310977b05dc9e957ca72d42efad4c960e8c0093ab733104ebfb95
-
SHA512
31c8e84606fe8838771f5a34135ce9867ffecc99cc9fce32cd95fab049294d0f9b4b0614ffd06617949501493cd3a03f17cd3dc19cb52a4f93caf771fdee3b3f
-
SSDEEP
393216:hnzxNweUSxWYs+5DZjHk/wbCDHHIBWyGj8L:NAeUSoYfZQh7HIkyGj8L
Malware Config
Signatures
Files
-
88a368aec81422e4f094a010b2719e36.exe.exe windows x86
69ced1ad11dc0af68759e861c3ff436a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
DestroyWindow
CharUpperBuffW
gdi32
GetFontLanguageInfo
ole32
CoInitialize
Exports
Exports
Sections
.text Size: - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.E*2 Size: - Virtual size: 12.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.j'A Size: 1024B - Virtual size: 916B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nw* Size: 13.8MB - Virtual size: 13.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 306KB - Virtual size: 305KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ