�W�q���e�5H��nַ���.O� i�����Q�^�3`"*@�*�~�J�5T���8����[֑��$�a~E�5i4�FHof�Uט��������ʬM_���+�>W�������qJP����ȕ��I� �7u�34<�荙�� �ȿdVܼ�k�fffKv.��6��6�'�$��d' �e p��U�eExƎV�����H����xջ�(�|o�_"��}ى��B�^�%V��$�/&����X���j>�ߵ�e�/woн�Ģ!ݷg�E��.����_����}�Ԛj,���3�x���=Q.����8��%��?v�V�aQ��㍊�[������Q�%7�g0�F�q�÷"�S;���n�W&f��>�c4\���ԥ��^���~�f�Q�Zˬ��r/)�����������DEB4��l&�-��A�����E_e�,= ��DI�"��4�*j^�N���Hɨ�XS��$e���nj���7�u��������#�g��p�Jo�tzۉ�ʷ>k=� эEp֎ _ě'Ӯlo{����G�ϴ��� �����5�������Z{[X��Aק����j�ְ ����U;���Y�����3M��9�ۥ���u'��/O�ۡ��'�CHB{;JѴ������8BY!W�*z[F��� ��o T7��^HʃE���G�.s�g�жt8�5y��2p��rp����δ�.�?d�L���YU?(�cݙ�H�u�~[/�]�(�����O�+�ӄ�K7R(��|k�/�C�3;�i�������9�?'������� V�����gqOΛ��8/61x�zL?~t\֚Su����%��+�4��QEc�ؠ��<; 5J��'k�3�[����}Pt��2ɔ�GA=ź�F �ljC���2����dX����-�k��ć#����1I�<F��D�W�5N $E��l<7��嗪h��X�����B[͛ b���8�J�I�"}h�U���K:2eP���U8+�^<��:!�q��%�����*pa�ӕ0���2�̑���q����ב_��G���e��]���)p[�C�ك�/���ߞ� ,C�u���&UAol���e�>�v�v/�-->�W\�E������;b6 \�$�4V������p�h� ��+�� p�\)O`7&���؇I�X�L�i� 8� ���4NFW�OEǞK͢�Q N�O��h���$�-P�͔�`�|� ���:�Y��;�����I��� zx�L��,��+�XmK��8��}(�iɭH����̄Z�d���h+�_��@k���^��c�(�]��$��(��g��J#m�?3��Ɗ��ŏmy�X��z㹁pc�&آ�ϧ�`G�c54�n�νU�N��8E�[d����ͨeb~8�{�����GCd�/���k'�1Z8�υ�ש1w���� �nP[��S��-�_;�N�wp���m���!(n�Q�~o����GA?�AI�/Cu1�MFٗT���9��cRۢ� Dm� v��#����o�����NK���u���@->��$��~ �?t�)����u�� ZQ��0� ��,٬R@�Y���C�n#�r�,0m�щ#�Q�(��`�<�e2�W-��3%)�xM�!Wێ�;+:R�Tl2S���z���{Ȝ;�Hü�'��Y@���BU胋�t��8e_��/&�Ki�hH�I#g�c��ʿDs[���K�c?. �L�g����BC�_s��D�X@��̦L��"�r�b,��$�+N��? 4.��Lh���YRI�ӓ�q����@�v�^���u(reo��Z�'_]C�A]�}���9�k���q=@�F'����M�r���"����� 2u�K�]�!��y&y+;���H�����ۖ��h� a���!�Ѯ�E?u� $�����J{����`����k ��)ݘ�M��!�ɗ,��rFù�X�*=�h�Ҹ���ؼ'܋�`���C�n���)���s?|:���2�Mi8 �5��H��i�އdfΰ�����o(�f�M����a�Y����w�����4�Q�6�-G������o���Ƣ(Ը���������J�w�K�k�ܼ(���OW��:�G�($��`lu=å�SR�5/���m��Ŵ ��K[}�lTM��N�:PJ�U���;(�A����d�uEпfq���%Wm�}���Ql�4K��ù�d��pgz�./�;��Ͽ�<�|�^��֥;r��}sh�J���?��(d�Y\�]�������E�R�(����R[���j��Ns�r>.�|п��h_�������k)Id�g�D<�̑n��A�n��_Y��(��*��e����j|ӏh�Ӛ��Kl'+X�to�3y�M�+ڜө�C �4�\���5�{6h�R��=� �Ԣㄐ��`[=�b/ƅo�SJH).��7�7X�FC�Y��u���0�Rx�S�kV9Z*T�*�m�}�-�l����`irS��K��R/-ӭ���TA-Ǔ�?`ȅ��S$��������ɣ�ɷ-�ӸH˫hTS�?��� Y�x�&I��Up�ț�}�C(.��e�7X1�M'������$H�F+� G�fFw�F���W"�<�0&�D�����Y�.�� QQ2�{���n�'`�'8���[�@���B�2�� -����*Ƒ�)��;��HӽO������cH�g�g�)��J3�����]gv0։W��:x�Q�c���t{�4z��Rf���< ^���]2�dCނ:���Q/Z��l�&"._��6NW�έl�+s�ʩ�Q����tw���z�)�� �M��˜��~;_`��&���������@���zi�aw�D����&8x�qC��joY;�S�dS��sfu> t#�����͞l��e���=���w���^l��mO�J"����n�����"GtN�?�H��լ��O�Ϩ����;��5�Z��]�o�tT�p�㕰`��t��ݤ��U��'�kݸ�����?�Z���w_��V����Mk�|i�*!77lZ�
Static task
static1
Behavioral task
behavioral1
Sample
c864f769a146493f00dd2b33cfa4159abe7e0b34613b4b4256cf46f606d719dc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c864f769a146493f00dd2b33cfa4159abe7e0b34613b4b4256cf46f606d719dc.exe
Resource
win10v2004-20220812-en
General
-
Target
c864f769a146493f00dd2b33cfa4159abe7e0b34613b4b4256cf46f606d719dc
-
Size
5.7MB
-
MD5
150c514af94c62f7ce0c72b942ceecda
-
SHA1
0e4af543b781456af185a6491b00c961926fb988
-
SHA256
c864f769a146493f00dd2b33cfa4159abe7e0b34613b4b4256cf46f606d719dc
-
SHA512
b0f9c0b2c3b8deca96bdd922da4519cb4352c3ff430b008df53a0001e721b691c9e5b5577c21728da8e97534a2dcddfa4a692e85882e5940365f1cc233872e70
-
SSDEEP
98304:ysFpQFP3a3evuuy1sFi1gsRRM/cQjaQGbc+tPet+g1Bew79roK:ysEo3uyL1l7Mclfbc+tPet+g14w7B
Malware Config
Signatures
Files
-
c864f769a146493f00dd2b33cfa4159abe7e0b34613b4b4256cf46f606d719dc.exe windows x86
e73fbc94a93b8ee7e0e1f1882447e075
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
oleaut32
SysAllocStringLen
advapi32
RegOpenKeyExA
user32
IsWindow
kernel32
GetVersion
GetVersionExA
GetProcAddress
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
gdi32
SetTextColor
version
GetFileVersionInfoSizeA
ole32
CoInitialize
comctl32
ImageList_SetBkColor
shell32
ShellExecuteA
comdlg32
GetOpenFileNameA
Exports
Exports
Sections
.text Size: 671KB - Virtual size: 670KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 23KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 52B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: 1014KB - Virtual size: 1013KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 175KB - Virtual size: 174KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ