ge����I�1��H�|y�خ���{n��aN��V�&�\A��E4������6�#,�8i�dd̰-7ߞ�3�/��t����)$�f/��%c�}q#����b��v���̏,�a�_�;�r��P�^՜�+�Tk��n��.IaG9����B?��f��s�+X��Ny%���V��;0`8��h��Lk�,�!�۷[�E�O����obz�Ҳ�"���w?qEʮ��14GIQ��U�o{���=�;uk$B��:ߠh��+T�Q͂l���s5�ߐ����5���nէx�#�ԫ��ݫ���d< ~��A�}���.� ~U`�{Sj�R��Y��8#}�^������_ ]��+��?�̬�5����0~� ﲣ���>$#�PtA�.��A�4��{cAM� �#��g�1i��Fܱ8�F1�� ��_�n�˫rr%�6Y�d�fI3��K�bX�r��h0��"[Z�Z�nx�,��?5�����p�@h�d�TT�Rt4�'3��>g��#J�m{z���jƧT�8�d������ �<w��D�0֕��I p�Vy�����(�ẍ�Ze^x|�GnP��E�훵'�d�>d/�{vp���8D��-�~1�6*�M��E��r�e7A�.��9�U��k��p�v(h������u�0��,o�����0?@0d���� ���h���ۄ��=��T�K°�`��IƼ������@F����Mرe�n?D�l�fN�t���^�'Э&����SI�+�(D-pqg���[8�Q�-�� ���ڃc�4c�%XI���B h&����kdE:=����xu8�Z�T�j����m�o��<u�n7�e����[����*~<C�(��V9(�<)C��2�*��J/T ��^�l�Ŵ��8��,bM~�ySa���7�� �v. 2�=���j�f)�����~�C"���Q���x�|��ӧEa}�R�s�<�tX���ZY+� A�!�Tl���Q'1�v7H�e�W�\�}7�L�~��jR�,�F�� �[��n��E�����p�/2C�M+����.�Ч-�Zu"��);ZfkSݖ #C��2�#���N�EK�j(MI�2y|����F �mM��æ�9�+G��p.uA�A� ��3u��E�W!k����~�`�4���r�-ƉD�����G`���pApK�,c&�rf��������3� ;i$Ǝ��U^^��eǿ�A ��7 ;�'v2�#�V��)�E�>?|�YN�Mɟ�0 �/�>"ו�:��H?Op%�5���'/��I�$m�Ò7�!�t�p�#�������U�,h����RW����,i痸|���5D�'����\��1�4�K%�m�(V�a#��YV+si0��}�JX�t6��[�c�Ch�2�}5^�>�}�a2�z�=K���@M��R��߹"�D��Bqs��F�N�k#�3�+��|W^����~�D�&y{^$A�#F��dg�ۓ)���b.p�c�'�W2f�l�Y, ���������tW��@��4{{'�)k���(*o��I�(���Ej�m�T#e����sD��J)�Yk�Y�ᦓJ٧�z�c�3��� �/���� XS?�����F�s����� �Aω��� ��0����*L6���L�r���J͓g�5�5h�"� ��$d1�F.Gl��gd����Ƒ+�}R���l��u`EKȌ�(���Q��+ZЫ�B�D�6^�]"N������u吉�����Y��/F��}1N^�+�:�G��1�V.�xS+w�o���$vSq�+�l�n�zf��mf�\a�%5�E4c���E�ʻ�r@e�a|��0��>�ZL�l��[d*��W�t����6��>�p�iԋ�/���6M��N)�SH�+��^�/���Ԕ����"�{��Y��j�Z~#�s��з��Cd$O��Q�å�)�1 �/�6�\a��UO�Z����g:ܗ��1�:��6�v儮�o'��-�S���2�ԡ=���JD�����RB�}�+6Q�$F���]����D�NO���:Z �V����(��чL���z<K]��﹞+��[�5q�-A� @��r��)������رN����7�O�<͒i�ٴ�;94^�XI�%��%>ȁ7�u�g��t,%���(_�V?�~;�S���dG6�z9�]d���7:N�����x��G�/���K�K����sȢ��=.�J͜p�����$���?֨�E�k�'$��|]V #���pc����]���d$�6�M.E�q��S�4��D�@��y�2=�e�F���E����Ê:KG�Y�؊�l46`�R�l�Q��?�i$oA1��B߃N l�i�&�'wL3�[�BG�SR�����kEκ��Ɇ�y��R%��A����� ��]S�+�َ�Ɍ�N��+n�r !!��b��=lt���rqY��H6����b��2��YP����f(�V����]|�ro�KY���1�Z�]�r�r$$ϐ)��̶H��r��I�} �Z�P�w��ҕ�4�;�L �/>�okzN���L4�����(���)�|YN�G<�m�a������S������v�����K{�����Zv�"�V��x?ڠRF�K%;zI�6'U��A�_O��W�ӵ��V%�Ͻ�Ǹ�����?�B¡���t�S�Q���qE�M'�wэ�̽�{�@���#Ze��n@&��yt���xW�)�[�4�a�� i;Z��jD����c���Ñz����a/�@a��^����8 Sp�����e�22��V�͝zu����?�ಹ����iޕ����� )�~:��C]}��!�0��lF]�粺�+m7m��?h�w)�*�=|�������IZ���3'*��4�"ka@B�ʻh���w����6��~��C�:P\�*��H?��C�t3�ݱq֟m��ߘ���_��o�f$<�k˽:�gՏ:BT�؎z7t�]��kSsz��\ܐƺ�F}r�����9����իwƘy��l�w�� Ca�����8y��N�v{A ���"L-Alj:Ddϫ�koH!�l�rz�-�@HT7L;�M�r�����3���
Static task
static1
Behavioral task
behavioral1
Sample
Just_Shapes_and_Beats_Trainer_cha.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Just_Shapes_and_Beats_Trainer_cha.exe
Resource
win10v2004-20220812-en
General
-
Target
Just_Shapes_and_Beats_Trainer_cha.exe
-
Size
6.7MB
-
MD5
a78bb967988e73d9ac8353a0dd258019
-
SHA1
cd7d329aa73dd25a574a51924af314226b1155c8
-
SHA256
e011e1fdb60847ac92ad7bfc733884553f4bfceebc035b7e4d9149499f8c34b4
-
SHA512
98870a2fe756bf725702f32043651a3b81a002ac0ff09d105ae0721757b249f829536ced6d06cfcd1758970d5d53b213d271a249219b02eb28f7631052967322
-
SSDEEP
196608:B2k8lb+Jz5+Rmq0354ia0QSaPAVIth+wQBb:kkqb6+Rzn3xPAV6hiBb
Malware Config
Signatures
Files
-
Just_Shapes_and_Beats_Trainer_cha.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 42KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 18KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.5MB - Virtual size: 12.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE