hX�uB�Lѓ���:��w]=�(��2�MO�/�XV<k\Dd5���B좢|�~�o���?��$<�eq.�l)�̼\��|�N�ڬ9+畍G��ɡ� ����%6�-e~ɳ���~����a+���8��X�=(>&�_�����s���������;� �3O O���*\����^H���Q�<�vd*��%!J]���A#�rQ~��oE8��-�D�~JD2Q&\J����d�RnQo�&G��7��-��~ :>bJD��}ˢ-�M�,����_I.��O3 ��-�J�l�G��� ߓ��r�v��I#2�]o��lv�wA��G� ���^ڦL��'1��ad�D�m��><%�>������Ϙ��gX��2�tᢹU+f���Ȧ�7φt'����5��;�[��� i��i 2�}Y=ep����Lk�� �a���� k���6��+p�daA�����8��̧`�'�%�@���х�R�@ ᵶ �#O�Tj��fH;�Sߟ�MB?���\L�������V�����<���)�Pִ�� ɠ�|\�t�;+n`5!Պ�ţ��j mXl*��TϽ��aW2�����qt+c�^�?�L͝Ӥ���2)66��\% �2M�m7��0�*���ɘ���Wf�e9�ݶɛ��0��~3�3b��v�� �6f�mB�*����:���1����1ff�b$�����i��j̊t����n�vz���t��bW�5�)�*� �c���$y���dk�� 鹀�Y��G눨e�j'�K�L�w�����[*qsaF�n�Q�8�ч9X���8��Sl���`k����?iH�G*�ׯ�Ԑ�-�5�B`��͚���v��d"�e��Dw\d���O�8�kνū���j�g�� B�B��ȽG���]Ko浭h�A��5K�N�@�����]�������NȔ� ���Y0�"�Fվ����X�~�( Ȣ���.���l��L�3�ԅ˛���ϡ:l0 �.k��:]�(Z4����5 �S5S�.V�J2v���~����# � "���a=�;&��1�e�AM\T�}f4ɿ�f�=9����P�* 's`�b�Yӿo��!�K��\� ���z�6�۰��ɷ냁�m�^�:� �o�0��j/�hM�^��נ��Z�n�/����2��Z������^T�Z�o�̫&�� Exx�mx���FT��R��/,/�ҘZ����e� {KC��t B]��r �}y�9�t$���[ǔ��J�����>@�6"Y/����MŦC-�<��m^͓!�i�Z�����bt�yC&�(���V�/z��*���-^@U�Hku��xl�@�g�� c�G�Rk�31uZ��H&�0�U��U�- {s���u={��H;R�v�� &9�P���J�Y#�j�dnn�ei����v�Z�N ����˥�D�WEY]f���r�ל�Kӷ�l����e`�V��[��V��2�j[O�����#�WˠT��FՖ?]�۵+,#�*%��:KEuz'���y��9��W��g�[��s�D�w�,1�s.(�\�l��)�I�P��vȥ_:�����ݙ^��v�������]+x�c:��"z2o�%T���,ep�G��fn��=n`m��S�� �Rd���5?��<;��>�#�D}�RhL�{pTm�Ky����5|���+Q|�FY;�Z��C�L�e�@F�'�q;nV6N�>hfI5幁�����OϤlxK|���2SN�������@. ���=�����7�úG��F�1���:\�T��PUe����F�2$��7���1�l��{��V_u�Ο`��Cݔp����[�f�ij���� R Z�z��K]��定&q�W���[�^~+�"rP���F���$���%��nqŰfiQV`��m@���O��%��̪ �Р+�-b��J@hM���=J��ՊO�BS�2�N�jx?��=9��{�]z���C�� �:������Ô�� Q�+ �Ҷ�U����h+Sl�V.�KA�{����H�9�j.����h+�D��-���5�^o=S�b�[9��g���.i��k����B�������4&X;��ȷ�O�S�+Üd�`7b��1�Tc�ar͊o}���2�%mM�����'�'QsF��<N��M��*\ЮUO�Ia�=P�UH�����#Maަ��,�y��m�g\T�E�/����ʜg�<V��sƈ��A�� �_}?���d9�k5�q�S�|b�Y=��8����`w�vyd���Ƚ�h�uJ�W�B�E�!ޮ ���I ����n�t}�U��bmwz�$m�Y�#r��D�`a��ø��m'c���֜�w�o[#���̆Q|�4 �p;l0�}�7��uQ� ��� ٙ�*��g'[��>�/j�4����h9���fC�>s����ܱT��#����� �eD�PMcX�*C��P����x �CY�3��*��9�� *bL�wh�!C��vݮK��ܕH5QZl1H��pT� �F��o_6�F�[�P��p�����} qJWB�K�4۷��������7��(�8�7��~xj�A����߿��g�aB����[Ӈ��ն M�OMg�.�i���m~?T���z���NJ�@n�!��h^9�0S^����睌U�入�3r�D��:s z�6�ŕ<��M�0���B������N�,��r���W���������ACuIV°�M�62�P{�)�|��'��BVv6��� �z����/t$��~��[�-���W�~�����~�~c��� ����a� �Y8}���#�-[��k���<t*rVo�cwˎ�������c�;�K;���P�qo���h�M����ڱ�my�F��yM�����O�ӣ�a����x1��g�n�-�L�����EH',�(�j�Dg�HF�8t��b�iY ��E��S��3'��/���یĺ�̶t8��{�E���A�U���Z�m��.CV�{Ϊ���e�/��[��� �F2H&fo�����3d2�p�H�Lͦ�R�b�����1ڮQ.��� v�H���k�6&�k��i�C+ \j�Z
Static task
static1
Behavioral task
behavioral1
Sample
685472de17cb79bf222d897ed16ac979b92798ed5411ace7de7fd148076f87ee.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
685472de17cb79bf222d897ed16ac979b92798ed5411ace7de7fd148076f87ee.exe
Resource
win10v2004-20220812-en
General
-
Target
685472de17cb79bf222d897ed16ac979b92798ed5411ace7de7fd148076f87ee
-
Size
600KB
-
MD5
76c103f09a730f5f981e56298ac15c20
-
SHA1
7c552b010f36fcbebb1abea43ebbc7d1c0ea2168
-
SHA256
685472de17cb79bf222d897ed16ac979b92798ed5411ace7de7fd148076f87ee
-
SHA512
590b7f01ebc322750897062614c584a783d41c6133083130392abc5da08119b0f04403a0010c3964f9034405eaaf2275936d8354459a12cae04ea60da9ab0a4a
-
SSDEEP
12288:u2NO/qp9MmeLwKuTp/Uuz8191zKsCPzlFWgNEOsqQkClpobA:u3qp93Cop/Uuq91jcSDxq+Sc
Malware Config
Signatures
Files
-
685472de17cb79bf222d897ed16ac979b92798ed5411ace7de7fd148076f87ee.exe windows x86
23fc780a2e4703073b7beedf1d47ccb3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamClose
ws2_32
WSAAsyncSelect
kernel32
RtlUnwind
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
RegisterClassA
gdi32
StretchBlt
winspool.drv
ClosePrinter
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
ole32
CLSIDFromString
oleaut32
SafeArrayGetDim
comctl32
ord17
comdlg32
GetFileTitleA
Exports
Exports
Sections
.text Size: - Virtual size: 453KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MMS0 Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.MMS1 Size: - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MMS2 Size: 544KB - Virtual size: 543KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ