����jN}N�7#�JC�8Ek�fy��oԶ�W�%�o��S2w W�I%\�cm*��ol��A y�'x|#tƿ�;5���v��*���c��U��������u=�n�c#� ���>�H/.��?[�jV��=�Z�v��m�0� �w��e�'���}XU�������E�1,B���E�=RO3'� �3�V���]̶�4���Z�n@.�&2"��3�C�=�gW�םY=U��d+�6`}��X����{]ԓD�����,�(k���(E��Ý�L8���*�q�E)��]Chұ���,\���Wx���>��/d'D�$�b�$ �����I��85Ù�B�^�E� <s��n��OLA�R����J�h��F������1:��n������������Z��DP���P�v�]2���˪iV�� =p����n$� ������i���*�!��qH��As�Z��8ى��Eϵf�.� ��u�����B9�?��X)���<W�+*��]`_ʍ٤�K���f��{p7�:��^^�����4.�L�%d!���8�C-x�֟�-:�'Ҁ���qLf�� o�[� 8uBc�;��!� q��]�r�{���=�y��d�oQ��ϭ?��|�J# ri�Rp�Ԍ�.���gJ�̳ !7��8��{�)SH�(�eX����=qz~�NSi#��5X|���W����5J�p0#��q��?Z jX��d��?_/�0�|/���l{4]��D�I�� ��ӕf8�� ��O&rp��ʶ�"�j��!-Gs�ǃ5�������B#of���ێ�)bd��t�Dr� �w��b&��������{ H�|��>�+��3����o���4�4�����%L�Q���� b��N��ֽ���Ux��#)`&w��3��O�fںO�h�V�[+�8��`��k�b��C�2����گ� o����je@��\�05�����7������S:Cv .��ݮ�#�E�@a�Pm��}��w\�^n+V��5u��ў'Q�0�%�:��3z�[�,��N��m4����W(�]��2��a��g�p�K�[��Dr�T�ŧ��iK���ZDus� �d����u���y�Z���T�x�n��.181>����&�mA���i�(�=���r��B����[Ny ��{$���LQn �"ǡŭ��L�{N�N�C9W�t�-̌���q�~���I'xd�q�"!�kG~;�� ���FˉSc�%�U�j?>R�Qwo'K��9�%фG]��q\��C�#G7&`�rG)�O�P���/�h�6*���(n��z�?R�C���S 9I���H1sR�靓h��xFB��ΰ�)k0e����)`��01��:��� �I/&�]%�7<�iB�Y얝�������{�'�k���r�B���y�7��u?��� Ͱ{�h�hgh���o��+ׁͦ���e*��?$�.�zQdy[m����{CW�~\�`�r��]2_|u�@�"4�8�?P>�ɉ��+���O�� |>!z7i��}�6$|�ds���D3�����,+�ˊ0��`1"9���F����-:�B����6��:b~MQE )�p���;Be*��:�:gx�Sy>e�G �C5�����K���?�\ǥ�_��'�h�4�k�$FF�oE�x���k���Y�*�+�-9p��[0[M���;kU(7���R�{ �<�S#��wc����c���/�����|tK�`���n#��oj���G-�[X������B)�E �u�X� �{�9[ffm����0qB9l�ϳp�4���X���QI�pΓ��^� �pM����s��S���1�2-lo��~��!���-|�W �Q)Tf*���9i�#���r��e��R;�l%�\����?�����P���_������0;{�N�F P������:� V��I�g>�P�5�$���Fi�w :n��A���� Ͼ�ҁ��ī�I���]tq# N�A�B� f�.%�|������<������^wq�2���a�P����OĨ,���X%�&���~�-<��ˌ�"ÕrMo��h�ݱ��h�獓��%+Ѡ�B��ũ�Q��=��GH��@V���V�OU���6�ͻ����C�[%��!&ɛ�~�H�ɉ�� ��L��宪g?X��.�Oi-ͣ@r"hv�ˊ��O7)�/��4\<��e���eȞ��M����+�F@�.�aP !�bi :��h.�J'(�Ө_�����}R�K���&�K��¦�p��#�.�u��~���ʦ7�m��J���-����]��`�� �lfEe�����p���3��*&xu.J�s;K�$�֓X9 Q@�ˁ�+��j m$���Z[�3՞?��K�5ϴ��è���N��A�᰼bG�TqF��q"�H��OBĭ^�X���g�~��ѯ��Ol,�7��+�i����=>����A���3]����n�#�&�J���c�~}]�]*��va,alV���A��x��/���v�u�E�F�g���_���|"d �&����n ��8e�0��W�\�;�,tDx����ޞF=@Ul۹�\�C'צ}C�)���*�#�&{e:Ni~9P��j"A�������s!z��t "������/�<O~ŞM���`��1E���?(W��R&.��3�Z����،�QL��x�� 8���9�%."K�t$T��͔����O�þb�P�����t�9���6�5��Q1S��E�va��)���u�vw�����k�!ǃ(�Z@Ѩ&{�J�`<c�V�Y.H����Y���S9*?�����|���T1�X@�c�a=sI�cpI}�~�c��E� d�3E'��L�{r�₾%�ul�P����W����V�PY�1lGq�̴��k��T?u��;��N�YLV����O�#�G��-OV�Νl~^T�{ �ߒߏ��O�m؈A$n��NzC�5�@��D���4��0:�K ���4�?�@�}��F��Ɲ ��[��� A�5 �o�:��,��_>�2+��
Static task
static1
Behavioral task
behavioral1
Sample
1118f431ca940c3091eb816963b888d0b53704f42bb670def5969293af03dd9c.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1118f431ca940c3091eb816963b888d0b53704f42bb670def5969293af03dd9c.exe
Resource
win10v2004-20230220-en
General
-
Target
1118f431ca940c3091eb816963b888d0b53704f42bb670def5969293af03dd9c
-
Size
13.6MB
-
MD5
69d731bd15df760b6f7cb6fb0b125350
-
SHA1
6b0f8796def706f2336b43d174bb4d3efeaf2260
-
SHA256
1118f431ca940c3091eb816963b888d0b53704f42bb670def5969293af03dd9c
-
SHA512
b423c6a511b9e27ec1756d7493de7a2180bab06d280a5915e9571cc5342b9aea976090f13c104cf5f3b9d79d22820c68b1343086c412d8032a3f4a9ca9b2707f
-
SSDEEP
393216:w6iHwWhiAdLn7l/dI38sJYI3bmT7zZv9sRi+:X2whAdrZlI385r/J9so+
Malware Config
Signatures
Files
-
1118f431ca940c3091eb816963b888d0b53704f42bb670def5969293af03dd9c.exe windows x86
e0224bb1f86777b26682b150d90a08db
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateFileW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
IsRectEmpty
CharUpperBuffW
gdi32
GetDeviceCaps
ole32
CoInitialize
Exports
Exports
Sections
.[R5 Size: 1024B - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.<_O Size: 13.4MB - Virtual size: 13.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE