338bac86d8bca2546173ef117e0c7a7a67047030392cd908582fb60f0d1f5f14
Packed, obfuscated, evasive PE
Strictor loader stages encrypted IMAGE and REGINST resourcesStrictor/Venik packed resource loader
SHA-256338bac86d8bca2546173ef117e0c7a7a67047030392cd908582fb60f0d1f5f14
Evidence
⋯3 more rows
0x1df000000000000000000000000000000000................
0x1e001c43b2a9999180003b3f1f5db496d848.C......;?.]...H
0x1e10e4b4b639ae345835b0a454a3b4b6990a...9.4X5..T.....
0x1e20e92b6e56cb2d1e6e5b60129238db9638.+nV.-.n[`..8..8
⋯7 more rows
0x2aaa0900a82500000000000000000000a079...%...........y
0x2aba0900a810000000000000000000003875..............8u
0x2aca09006804000000000000000000008432..h............2
0x2aea09007c01000000000000000000004034..|...........@4
0x2afa09005c2000000000000000000000dc74..\ ...........t
0x2b0a09005a00000000000000000000006071..Z...........`q
0x2b1a09007c03000000000000000000000500..|.............
0x2b2a49004d00410047004500070052004500I.M.A.G.E...R.E.
0x2b3a470049004e0053005400183b000211aaG.I.N.S.T..;....
0x2b4a22001a3b8106322c1b64bcc1b2706511"..;..2,.d...pe.
0x2b5a650c9c580c06c93645b064e2dd014050e..X...6E.d...@P
0x2b6a32344d8c8d144d8c98511a2736144d9224M...M..Q.'6.M.
0x2b7a60c180c9b60320c9cca0614ca1b6b56a`..... ...aL...j
0x2b8af5a5a96fb356acceba96eadceb96b78d...o.V..........
0x2b9ae737ed5ba95eea5a97b338ef95a5a97b.7.[.^.Z..8....{
0x2baa712c49de73bce777896e2f5ef2f5f1d5q,I.s..w.n/^....
0x2bbaebe7ece7ebe97fc1ef4dffffff9de5f7.........M......
0x2bca2f92fc97efbafd3fbe6b411b2e86d72e/......?.kA.....
0x2bda82ddfecb58803fd1eaff4dfeaccfca7f....X.?...M.....
0x2beaa43a3ee4d84ed26b5ae24a25a6ab66b8.:>..N.kZ.J%..f.
0x2bfae42eec960952d6314cc5f94f8316cfc3.....R.1L..O....
0x2c0a77c997f495ad79b8eb590592e1893dd9w.....y..Y....=.
0x2c1afdeb0b311e9208f8fa3e9776dffb4f10...1.....>.v..O.
0x2c2ab52fe41ee3b5d2f812a5d3aefba82ef5./..............
0x2c3ac3ce94b1bfd3721ea25df8dff4468a03......r..]...F..
0x2c4a89d79ef7f27b8a513ef55704d7722f7d.....{.Q>.W..r/}
0x2c5a7a1d0275f7bfebe6ca5d8f7ee034b772z..u.....].~.4.r
0x2c6a5fc9c84c9c4ebaf780e2b752c9fbebc9_..L.N.....R....
0x2c7a3c381fdc2ff1b15fe93e8aa98446b98e<8../.._.>...F..
0x2c8adc20cff3bf20bb5a25b64eff469bf49c. ... .Z%.N.F...
0x2c9a16cf8c5399fa2fd17f346adbee1b35fd...S../..4j...5.
0x2caa6c165d3ff29f496efed5227fe3a79a5bl.]?..In.."....[
0x2cbaffa83fd733ff029bfdbfa7ffd97fc897..?.3...........
0x2ccac2894113efe5acfd6540dbef4043fcd5..A.....e@..@C..
0x2cdaa367e4ff774e07e3dc9ffe887b5f96a8.g..wN......{_..
0x2ceabff802ff9d3bef0fe4ff0bd0be74fff9.....;.......t..
0x2cfaf9bffbc633fea065c9e3d064fc307f22....3..e...d.0."
0x2d0afccffecb7feafff7dcbdc531e5227238...........1."r8
0x2d1adff124931fe074bdc7bc9ffcdfcb3fee..$...t.......?.
0x2d2a00552bfe871fda7d9fed5dfb3ef4a135.U+....}..].>..5
0x2d3abe29d14b8ab30bd16a94546bb3fdc17f.).K....j.Tk....
0x2d4ac445fe6c3f9f9f4492db414d7f3a387a.E.l?..D..AM.:8z
0x2d5a4f033121220e5e2c87f25fa1b58af770O.1!".^,.._....p
0x2d6a0104200f8cf0c6bbd909ba58916630bf.. ........X.f0.
0x2d7addc66b1b620495107c7000233a49210e..k.b...|p.#:I!.
0x2d8a032c3a0baf6067cf91248044b5162254.,:..`g..$.D.."T
0x2d9a89a8f5cb38391f5183f6fd7cfa512013....89.Q...|.Q .
0x3778000000000000000000000000000000000................
0x3779000000000000000000000000000000000................
0x377a000000000000000000000000000000000................
0x377b000000000000000000000000000000000................
0x377c000000000000000000000000000000000................
0x377d000000000000000000000000000000000................
0x377e000000000000000000000000000000000................
0x377f000000000000000000000000000000000................
0x378009060e803000000e9eb045d4555c3e801.`........]EU...
0x37810000000eb5dbbedffffff03dd81eb0060....]..........`
0x37820090083bd8804000000899d880400000f................
0x3783085cb0300008d859404000050ff95a90f...........P....
0x37840000089858c0400008bf08d7d515756ff...........}QWV.
0x3785095a50f0000abb000ae75fd380775ee8d.........u.8.u..
0x37860457affe05669727475616c416c6c6f63Ez..VirtualAlloc
0x37870005669727475616c4672656500566972.VirtualFree.Vir
0x378807475616c50726f7465637400008b9d95tualProtect.....
0x378900500000bdb740a8b0387859905000089.....t..........
⋯8 more rows
⋯7 more rows
0x37cd165426f78410077737072696e74664100eBoxA.wsprintfA.
0x37ce14c4f41444552204552524f5200546865LOADER ERROR.The
0x37cf12070726f63656475726520656e747279 procedure entry
⋯15 more rows
⋯7 more rows
0x3e5f000000000000000000000000000000000................
0x3e600609090909090905d9090909090909090`......]........
0x3e61090909003dd6801604900c3c4008300c4.....h.`I.......
0x3e62000830000000000000000000000000000................
0x3e63000000000000000000000000000000000................
0x3e64000000000000000000000000000000000................
0x3e65000000000000000000000000000000000................
0x3e66000000000000000000000000000000000................
0x3e67000000000000000000000000000000000................
0x3e68000000000000000000000000000000000................
0x3e69000000000000000000000000000000000................
0x3e6a000000000000000000000000000000000................
0x3e6b000000000000000000000000000000000................
0x3e6c000000000000000000000000000000000................
0x3e6d000000000000000000000000000000000................
0x3e6e000000000000000000000000000000000................
0x3e6f000000000000000000000000000000000................
0x3e70000000000000000000000000000000000................
0x3e71000000000000000000000000000000000................
0x3e72000000000000000000000000000000000................
0x3e73000000000000000000000000000000000................
0x3e74000000000000000000000000000000000................
0x3e75000000000000000000000000000000000................
0x3e76000000000000000000000000000000000................
0x3e77000000000000000000000000000000000................
0x3e78000000000000000000000000000000000................
0x3e79000000000000000000000000000000000................
0x3e7a000000000000000000000000000000000................
0x3e7b000000000000000000000000000000000................
0x3e7c000c4005f00c4005f0000000000000000..._..._........
0x3e7d000000000000000000000000000000000................
0x3e7e000000000000000000000000000000000................
0x3e7f000000000000000000000000000000000................
0x3e80000000000000000000000000000000000................
0x3e81000000000000000000000000000000000................
0x3e82000000000000000000000000000000000................
0x3e83000000000000000000000000000000000................
0x3e84000000000000000000000000000000000................
0x3e85000000000000000000000000000000000................
0x3e86000000000000000000000000000000000................
0x3e87000000000000000000000000000000000................