�D��i��+IfP�]�%tx44E△����7�/Y������?��^����ƣ�3/�(�$�`8�&uacZ��F�ج������Ȧ)�q�`��C*Ӟ�]i�9�LfR��nSw�����E����S�� ȉm��\�V���{��� vѹ�r���z��p� ⃕��p��(��=��&;��栭c}�`><3��E`�Tu� >�.� CT���<���\MD�-��d�4���ۼt�������զ'��e�V�-�$*�~-���!��fv��k��"��3���6Y�+%�;�������T�*��*hӈLJ��{?�T�ސQ_#������7D�q�E�*�K>s��T7�/5�ꌎ�.��P�%q�3~��M9!v@���Z�뼁:�˨���/�>S�����J�Q���u�;�;�R��_�u��v5�C[i�V���'2#��%:�����6�3�jŗ�+�B�H�?����a�7s;��HR[ ���dB���k�"ۺ�唊x�=�(�ο#���Pn�ck��#"#��[�k����pFӘa�"�?}��.���ooݘ�m�Q#����W����W�6{��?_᧸jFB������(k�ʠ���i IɅ��*��Bt�W��*2ʹ�1�+��G���A�!�ȡ�N!2�A���O��O 4]#�:̖4�gt���h�r��o'2B��c�?}�Kag�o�N��&����eK姇�Vσ�}7����)&aw��ZE�m����E#��;}o\�dE�l���e��:���N*�gk^���������v#Ǹ��Ԁӹ?!J��B��xvR뼮���}q����%?� ����Iϒ�d����.D- �+؇���ˇm'��OV�����s`��hT���,��鎐�ݪ���g�5��S�2[8�[�|��X0�<����L�pm7`(�6�����*ݿ]�y�SL�[�h�ߎ��0Q�@0�|7D2 �0�h�r���i���,�/ϣ&9���a�j�OT�J=����\���������Lk����%ə8�V�kc���7b���v��Η�tP�3�D!g�?bR�4�� _�etur�ꑸM�3.<cr����N�z���{ACd{���(#tk_�=a��&���OY�LA�6��ZQ�/�٘m�e���u9E��S���!s�Ŵӈ��|�ujm���O8�>Y�D�'B+nX��,d�;����%{nT����Y��:��<�;�PeKγB�|'@ ��*;N���;�Ǔ��՜�䑁���I��FX�3ŊF�=�DiǼ|�e�^o���f�}��:s7�i;�LY�K�I��P��V�@��p�P��mkـ�ƃ)�p��e�*�V$K<E��L�PޠL����Z��>��!V�Y=gP�3 wc�8B�ʗ�ҚmX�6��e�f}x|F]�ݍ#"���؝)i��(�����R~l�� �E����S��֭��XMx�|P&�:�#_���-e \J���@���H�L9�8`�z��-�:�$]�b�Et h��3 ֒������cO���tNc���/tG��"���G�uTC�6p"Sr�{�s0x<��=�5����-0-V����Дq�֕�NӾf�:�����吝#nN@��!~RnL9wR�ۙp�������F�b�z�.��ٱB��Q�b�ԯ����*����B�P��.W ��әN:�h��7: I���~u��K���ur=zY�F3-T�Q)���gq�IH����|R#�:��O���- �)�W��Ȩ'�4Ү�(gEH��5\@,p�[)i��ŖnH�`EGitĕ�����=��yzt�`/��-/(D�D����ϨvDP��n�=�-������n����q{u9��h������|Vc���}�x���<���[t�/��d��E:W�Ao����Γ�=��f�����+>�C4>�|�m�����!Ŀe�Ð���lv��~u�5Z���ї"���K�I2x�Ed��� �����* �����S��l|ږc���i�j���Z�O=�/rW(S��<�az��ϫ. 6[�3�S��h��{co1u��4���BE�L�=o�6P���DrX�W�������i7!���B'�,��2od���{~w%�7�!A�T`�y(�Fi&}��K���i_��wK�U�n'�������٤���{$��&� ��"~-h�����#����8��]Z�|ڶ�U���9�Er��C~�3�PG�0?�/ߡ`��!Y�n~���&# 66��bĔ4͌��b����=/��H���wf�[C�����(���_:�n�"���%�̸�@gB��W��R?�Y�����4I!���hq0��6`:��/)Pq��V3g�|�6 ��Dq�2��;�r"�[4�A��y"�0J����e�"qa��k�l:����ճH�$5z�4e����"����p�L�A<���I?)�IM���L8%���� v�f���m�ސ ��$W�T�4 ���� ,����~/'oq�6r2?� *��-Ab4�8_�&3�y�S�����2���Kl3����T��Y�M��؍Fݞ*����"7�]/�㭐3v>�|���̡!� ����رʿ�8���Fj�Ifq˂��s��IEB мT �1?��8u�_@��Y'�V��(�ݞ�����j�q��W�p,Zo�\����߇s�r�O��ow�.��k:|=w3�/��}�� �jۻK>���Óџ���F�j))�o�̼�f3���k7����5�˾rW�����4������L��R����DJ���Q�Ӫ��^��{����� p��!�m>1Rg�U����oR�����h��W�U{�����6>�h��ܡ�H�g����0�ξΥ�v� ��r����۸!���z����1�̨jx1U�=5���h�23/��d��M6���͟:D��8�����>�"t��$�'����3#�y�:����Q�%�����E��E���k����&u��(�ʼ��` �q��e���Sx;#�i��/�D��0�Rq�E�}�((�d������
Static task
static1
Behavioral task
behavioral1
Sample
9ea1d02dbae323de46a98ce51b158efde40073f823f81075f292651753ade3a6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9ea1d02dbae323de46a98ce51b158efde40073f823f81075f292651753ade3a6.exe
Resource
win10v2004-20220812-en
General
-
Target
9ea1d02dbae323de46a98ce51b158efde40073f823f81075f292651753ade3a6
-
Size
4.6MB
-
MD5
ac3392f18a9371d540fbc6c789441e6b
-
SHA1
be458729da3a4f057a88995fcac5f9bdab351dba
-
SHA256
9ea1d02dbae323de46a98ce51b158efde40073f823f81075f292651753ade3a6
-
SHA512
ffd89a8de9925c4eb2524064ea84c98af4ae64b0289846b49e123af6f9e18c5649bb2ed4a652dbe9b683a7dfc5155142bd9f9e5232283c6135ff573380851df0
-
SSDEEP
49152:WpykF7PN3taRHFP3clnBowGIWEiGYDBtcZ+/TX9i3CX6hXYYgaT2+hg3pM5MuXOG:WRFpQFP3aulBDy+/T4y0oA2+mWXO/EmS
Malware Config
Signatures
Files
-
9ea1d02dbae323de46a98ce51b158efde40073f823f81075f292651753ade3a6.exe windows x86
31c387a7a3c08899d571e915d2d1ffc0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
oleaut32
GetErrorInfo
advapi32
RegOpenKeyExA
user32
DestroyWindow
kernel32
GetVersion
GetVersionExA
OpenThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
gdi32
CreateSolidBrush
version
GetFileVersionInfoA
ole32
StringFromCLSID
comctl32
ImageList_Draw
shell32
ShellExecuteA
comdlg32
GetOpenFileNameA
Exports
Exports
Sections
.text Size: 671KB - Virtual size: 670KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 23KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 52B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: 1024KB - Virtual size: 1023KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ