LΆ�ch��AUz嘮��?�c�g�2��T��탪��W����Z~�f�R-jb��J�U2}�^�r��;��CJ:��b������r�9ԥ�@ſ��E��\(#���!���-�H���Ju�����׳��qP"�7���o��.�m1�?�<�5��ظk[´�\�4��Q��_��ȸྩ�H'��ù;6 �7X��sr@AՍ6�[�ɗ|���}u�cTv)+n52:ת���d�q)�'��7��}����籀R������f_��>3FZ�������&���_(����g��0�H*i�|���n��<��ި�G��������o�|�f2���V7Ԝ���dQj�1= �R��*�U�:k���ɇ:((� �'9d� 4@�W�]�/�� ��O�_٣L��/x::W1�LJA`�^��g�Prd,�`�=v�d��A'\����t}��\���{�&�����|I1n�d�A��,���f*M�Y S4�Z�Fa7T��L�|�܁��m�GK��������%�|(��+����36_������B��`�W�]�۰Fi J�bY��sĢ��b5���Q'�q�^h�_��H���d<�B$U���B\'��+g9a��l���a�>;T��m+K��,A F��٫�����N�Hl�w��J���/��D�3E��z� T٣Hr�zq%�鼼���y2WAǎu�z���4s%�R,<��I���7.%�c��UP I#���C=D��Lͻ�@���;h ("F�'kC�pE?V��0N�I}t��ET�ύ"E�+���jf���k�9��������1u�ҍm�w+AF��>��\��U�ňk�/դ�o��=/�6�V� ���ޏ����ª��,k��=m�,�3wA&��~D'��&���jܶ�<�ƶ�� �Vv{&[3:X��9Μ=���֗��p� ٣/� �J���� ���X���.nL��㹕U�_c�@���Ү���e�5�+cC�g�b��a����yw��Vd�M�Zo��əj-��V�$T'�~��1�~����'�����ΆGK�|�aa�t��TX�]g9z]#��l+<&�I�P;R�Z_&��r�5S���Z���I):[� ����Q��h����&�1�],�ͪ"�C�~A���C�}-�2?��[����8���bs;DWf/������\j��=�|��ØIv{'$s +]�Ռ�����������Q a �����V:�[S#�h:q(�1�c߰��[�z{�; 3�1% ��Btv�����{|I�yg���n�4=� �x���Vƀ��\ID�/ܹ�l���5�p�s�2�%�DQ�A�#�m33*�뎨�&F�&�B�w!]!I���"&�b�"s���h�I�N�ͽ'X��#�}��ګ7�e�M�w �B���>3m���ƭ[�jdɞ��ʰ����QK4���� ���n��}P�������ٞ�:?ȮBԡ:}������g�B�,�x��FPcd�����9���'�$cF����p�onO[Ͱ^�Y/��\ ���iz�,�`���Nov��U�Ix^�}>x����O6ip�H(I�"<t-� �(��̷�!�_�6��9,����ZW1��HC.z�OB�I�X+x]1I���O8c=ѹ��?�n�=&U=R��8�]'Σ�&����Z�\��_&`M��$*�)?YW[��]��.���q;' ��3��uՅ��7[�i71��Y��/�_�kCr@��{�z���@Mo���IбS{O�̧�g�U���%��U ��`��-��>��w�^�j"���[Ҩ�����(�����_����-�5lΛ�-�z� =SI{,�f�f���n0�Jw>4Ip�2�T���oi�c��p��y]%�ڼ���ݲ��6lp�*`�hM���N&��c�B��c��JrO̘���h�S j�A&1s����[InΟq$o �@df�E�g�)�LO</.7H[7���=�XJC�J0���O��j�0�d�������K���aהL���� ��˘�v#��3�跟���b?���|�\bV_�����xNL�A�w���H=�z�+]9S*��`oG�r�Jm���?�W�����G�����!혆��%�ϥ���E���c�L� ���� P�%����OyN���*_+�N�J��Jt 4�6�5���ا�S�jc�9 �)h�o�,��(P�'�<�Y�xi��Eyҳ#_������3;�������w���U �$7nY�����[�� ҁ]q��O�m_�D(ٲu���`0O}���V��nFa>�;�z�4]�7"����|��#���O����~����F�)-������6�%��l���d���@�{�[��_��c�����{o���7`�-�MXH��U� W����~X���x1Cζ&��)�����m� "���i�K��X£�Akb�c �l8c�F�����I2�bz��_�[>hX�W_rǦR��$����V2��[�����L���~Ch0��j kڔ��b2qԌ?�k~�.�g�P�ڿ[pj�iE`6�`L��ڴAi�������p�?g[�2�_�"��;����a��:g����6�����SIᏥ;�@�iZH�-�?h�3G�, �2g��gAa�Qɔ��������x��Tg�\�����Aӭ��\g)�h���?�����37[��c[�P�NlKԚs�E���#��+����d��&Q�+�@H}a1|�_�iqb7�����:����]#Y֤�.����ӌ2N"~+ǔ�Y�F��0��P�-�ڲ��S�*\1�cLH���c���{� g�jㅘ�|V<rMs ߷\mz��-������������k�kz8����H��?���u`��h6yyn�@�R�aܵ�b6�~O�����4P����ۗ�xL��b���en�R}u{Y��ޛ\Zmf���o:Rp�P�U��m~�(�o�S��Y��2���~u�g�@=��*_�j�鈻߾k��n��)6�P�q{[I��m�U*�Y�`��B^���� �G��&b&�.y�7�=�����#̞��a�Z�����h��vE�S�z��։L-'D���
Static task
static1
Behavioral task
behavioral1
Sample
7ce364a1c04503ed10e4b0266969e0b1.bin.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
7ce364a1c04503ed10e4b0266969e0b1.bin.exe
Resource
win10v2004-20230220-en
General
-
Target
7ce364a1c04503ed10e4b0266969e0b1.bin.exe
-
Size
13.4MB
-
MD5
7ce364a1c04503ed10e4b0266969e0b1
-
SHA1
8e3e11dd924ecaa299951735cbe990c5633364b9
-
SHA256
d4e4225f4f7476a113a3cf1e49d9629fc35b1a64641c5766ed7074e031d30000
-
SHA512
01fb8f22951a6a3bd2f6bcad99567351f34f5900cbcc5b767937969ff94610d493b982ea7056e7fd21c5016617e893c07a87b581b5ab8afb71e20bfbfc1a9dd5
-
SSDEEP
393216:vXlJ4Qp6+m+iu9sKxXYckxTVodKZMaBgAvudj:v1JrguWKxXYc8/qat29
Malware Config
Signatures
Files
-
7ce364a1c04503ed10e4b0266969e0b1.bin.exe.exe windows x86
69ced1ad11dc0af68759e861c3ff436a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
DestroyWindow
CharUpperBuffW
gdi32
GetFontLanguageInfo
ole32
CoInitialize
Exports
Exports
Sections
.text Size: - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.i/# Size: - Virtual size: 10.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.mI/ Size: 1024B - Virtual size: 916B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oqh Size: 13.0MB - Virtual size: 13.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 397KB - Virtual size: 397KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ