u���_I�T�6��3��f1��q�7T�s�o,�g {�Mh����ō���%!>��-��7vJ|��zR���oT���~"78����*�T�� A��2]���!��|�{�>w��|k%��-� ���J��uZiF (�j,��]t�䴋BC3���7�����l�p0�w�g�A/y�\u��*��1h�-A;���;���h����s+���P++�ܘ|����0<q�{�@�Ҙ���?� �}�@�_�P�� ��r�6�پ��Q5S��2`f�R�Y�z����L'�ɳ5��������r�q�m&G��fl^��\���O�!]CM+��������������yV(v� �i�U�5%�!'ޟfJ�7bn�Ai_�-Wy��2�'�~��]&���&Xn�\�MTe q��C�%�h����!���T�[������b!u�� Z�_�e�o]$�>[%��������Sd ���� �{K�1�}���4���w>�:Lp�Q~���]�V��l�s��n�&����&[��V��r��*!u@���\�5����~56h��čb4�]5ɕ�W�g���"b�s��G�WH��7��ӷ�(=��< ߓݧ \b^A)�Nl<�+��@1�mo!�?irS�f�pK7բ�k�Z�B�,���(�zR~"��l�f<9f[ D�����?^�x�y|s.����+��i��H7��|P��[��e�����a�j��q�/Ky�%v�ID�`�x� C *n��'/�2>f�q��!�1$(�H��_-7����|��6��u�>����R�����|��\�j�R�&T����[���������3J|v����4ǔ*&L4�^�#�b~a����j=�e`a�P�b5�z*1g1>�*����)?�q�ES����M�����}���:��]�}��K��Iey.��LqZyܰq|!a\��vn"�P���?^���0���qw:�\�3N�Wǣ/����W�cV0���-8���R�>�\�X7�2�u�#½E>p�P���}�^2g{� �� Ȳ9q�`&�XlM��k��q>���)]�MUĦc=��ϩ4�}���$�3�u5c�ɇ<�~%{A����,����;t_��AN C���0� L��?AX�z��T��@ $`��dت#�GS߹"���[��.�����k+9��pu ��!��#��Eg�PKu/�k�W�t�ݯ���Tl�ba��®l�����b�ai�.�N ߚ��E�DA���<,k����E���n���f�/~_7��}��>�h��MׂK��\2A?%\���S�_�&��XNw��<�&�r�#+������f<Oa�������"��4��)����~�Ί�=܀��kyMJ;V#%f�9n����M�=�O��Q*��|9ZS�K|�Y"�]�����h���x5�G��+WC��Ud����$ũ��|��͊�t���w��>=���G���`*-�Q3KS�����Z8ʻ)����^ =-��lT�˟�����;���;WX� �������$%(H��?bx� �� 6��,���2�����*��4N����yE���1�{���4�}�������Ԏ�Ty9�@���J����h��.�!�יd=�6�V��U#�Єܰ�\��F�3*Y���ܸ;,"��Z9�Zԭ=P�.������L��D�Eli���%u.�Q�ќ5��)�A�f|&��V���c���YH�#5`��nc���AX)��R���PMw+B�b�?�dup^u���u)�_w�gkړ���B7Il1m��o�GL�`q{Cop熶� �9R_=c��������J9-�b���z��N�;s�o�_��z<��.�ï:L���Yz���^Y�Y3D5����ߚ��弦Gg�*wϓ�\L���ᇪ�0��5�� �ϗ��� '#9�t���i����54<���@_6 �hM%d��կ+�V~j��E�Y�?��t1Փ-x�������5Ȃ�W� �=��.������Vq% Bl����h0�[q����!(xs�xʉ���X*Pb/�%�t��']D��֓B�-ą� ���H�C��KS� ��$�3<�&dY��Qx��S+H"�jT\6� YN����6ߤ]n������<j�"�F�q�Q������1�k���q9dGcBfx��^��=�=���۴1H�G�:�9�ZWGp�Ϙ��c�����@�����ӡ?4�IWa[���X�I������L�ul�љk��k-/ "C��c-H խ�`��I�G:�tA�����I�Hi?��i�7$�Zc�S�9�ų�zi��vs1;��z@ � ;)ͽZ N0�j͛�;&��^���j��&8ʯ]b���~�=�^+��,��T������d?�bѳ�n��l��c22g_���?U��-�� 6 �/�"ͅ]//�.�!4g�u!��9m/�� �!�t���QL�!����Ky�Q{�U@��>�������yҤ�؋p�:�B�es���M�{Ԍ����0�ܗ�*�mʪ���z�R���d�NP���_ĮQP�*�h-����4��-���Mi<�&A�������P)V',Df��vZ���3���p!+uL�u�l*<].�E(����8L<]��>2��v+9J�O̕U�_�2rGF�Z�C �s�VSv;q�@<�5\n8߃�C8��W��.�@4!&��3��w��ֳT����}?�]4�Z���yz�O�N���}��S�g�[v�%HP�a��1̵�}��5iGi �!��$��X�{��Z��m�I�iV����a_�el�Vީ�K�]�Tnhw����j�%�8��i����o�z\L(v���� �Kx� �J�틞������v>����kl������+\Y,C��!�����ʆ��58��#7\#$�����-�p�^٫�o��-A��q�������q-�ǰ6o(�V���o�v��o����u$#t��gܱf� B�����l����R�#�}$�ڬ� ����l��M;�e<P!%$ڇ���Q��j�A =�C�sgD����Ԡ�_�s�UC}vnc( @�Q�[@g
Static task
static1
Behavioral task
behavioral1
Sample
55c92a11ae933c64cd7bfff1411cc4bd3597da7b6d0dcaf2fb134a85ed776ff2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
55c92a11ae933c64cd7bfff1411cc4bd3597da7b6d0dcaf2fb134a85ed776ff2.exe
Resource
win10v2004-20220901-en
General
-
Target
55c92a11ae933c64cd7bfff1411cc4bd3597da7b6d0dcaf2fb134a85ed776ff2
-
Size
141KB
-
MD5
7b6e13b29f769544e2314dd0644598a2
-
SHA1
4310fad3d31fc36bd4bae911a46bd96b4d7a2251
-
SHA256
55c92a11ae933c64cd7bfff1411cc4bd3597da7b6d0dcaf2fb134a85ed776ff2
-
SHA512
562f5a42f47c7398ce1b66be6017e0b0a499cd21becd436018d4ac8ca2aad0610ec49197aadc1ca02e23ef02d0e038359717559529c1dc6f8e93a4d4d5bf41e2
-
SSDEEP
3072:TU1abr5DjZAWp3Qg7ePtMVqsrL1e7d60FNUusvNHL:pDl5QaQM4sv1evuvx
Malware Config
Signatures
Files
-
55c92a11ae933c64cd7bfff1411cc4bd3597da7b6d0dcaf2fb134a85ed776ff2.exe windows x86
d781b7d9983854c3555f63250cf032a2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
setsockopt
kernel32
LoadLibraryA
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree
GetModuleFileNameA
ExitProcess
user32
ExitWindowsEx
MessageBoxA
advapi32
RegCloseKey
shlwapi
SHDeleteKeyA
msvcrt
_adjust_fdiv
shell32
ShellExecuteA
Exports
Exports
Sections
.text Size: - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.linux0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.linux1 Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 188B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ