�8��������:|U�,T��?*����/̃��TB7q�W9?%�s�+o�q9��`Z���H�X�dh��Y"UܖXͿe�"Ǒz ��u#���m4:�D�$:����"��!ͅ��F��Φ��خ;J��� ��xD5<��/�.�g�Y8�Y�b/<2��>����Rs��kGE�}��T�.N�M���ͱ���OԠ+\!q�D�դq�Ȩ�k �eIm8n���m�RST�E������� G��Ͻ�m�6���OM>� �K$�Ϙ9�[����]TtV�� d� I�{j���M��C)��%OŻ!B���%/�q0�Y��_>��D�o�~��g�6�����Z���^%F��U�*��u���@�9ߵ�ftq�Rj}1�Q b������z�qE���7���T|dk]M$���pFD�πV���9� ����낑����y[.mzק�T3u�ڞ�ͳw��m����\�U�l��K�#�3uP! j^��Z���n�3�/�h__�кϹţ�_7��& ~�*?:�p@6칾��0eo���@���+/���^I��Ԅb ku�i)�,��w�F�d�`�����|�/�*q�[�y�t{4z���O���Α�y����K�AS�G_JR �[��$ ����E��١IG�闍�H�����x�Y�w���y{�r��< ��R]iY�j6���Ђ.�H Iѧ���)v,N=rAx�&%�g�md�%&��ǒ ����x��(x��>��V.�f$W����T>O,4>��}�^;AĐv�cWĠ��������})�,���)���x}Iەݍ�=E)s�0g���\�SX@� �� �� �&��]�n��{�;vWrl�:����j��vk��0�R��!Z;���� ~;�����ť���m=���7%�e߸��zy�gg�\x��W�R8��bB�b�ۯ�W=�#�� k_e�0 ����ʼ�r����3���ۭ��k @̟0Z��'4���zѫ����M���Rp��W ��UIokkX�bfspeh��Ս"� `-�c��5W��ˉ��](���7E�* 'v�O�1��/&����IQS�3}����m����u��[�c���#�7���JoZyCR���"�����Vʕ�B|�@m4��SD����<��ŹDR����Z�u�y�\�&=ه�s0�VZ���;k3�Đ7í�_0}���7���!t��F�vP)�b������ \����0D��*Z��'��N]� b���ʴnyF���vd��5�V�R��Z�K�T�{�f�Q��ہ�}�0Zk���N�#xZ����������[@ŃH��u^ $`d��G���@�^���?����#AW*%�#��e\%Jzڞ�Z�����ƀ[X9��ZZ�B�Ʌ3覂����Q��u�g7����V���U��;���I�+:53$��ӗ�dl*�?�8-�x&Q_�L�?�K�"`����H�|'*8�8�Y�x3�6��-%��z� ���i��ʼ�V�h�M�L�jpu|ֿ���լ-�JV֣r�^�1�g�h��ts�u'�$����Uv���@�xqed �jJ�R��ԭ�қ��W�Dp��V�.�Z`h�r�q�"*y��u�䯰���2~(4P)��eG����&�T���!�hu���2sdz%up m9�q�s�y�dM%�Ub�(1T��4b���/��qy@�����~��?��<:J�g���^�6�}�(���KL$�d�)2|�_v�a���]�t��L����R����ԡ���? ������~�&�նk�%��0Bu�0K�[j�[ R�r��My��e��i�}5g�C�:�0+�"�'��W�1=���X�G#��c�]<�?��v���xl�T�}B*�_���$�pA4���Ź�J6��A�qYvNR� � ��̱��ZJ�����Ǩ�tb��0�;6����+��Jp�n�)�����j#��o"t����i�쉚�S'�1� ���=��E�����U`���I�����Z8�-_1�0l q�X�]�B���Mtդ���������p��$���E������[���$��>v��u���H���.��`��Q�gQ��o?�|�5�M�.�w����v�;o�a�J0����X+���a:K'�/�1��ę�pY���/XA> ���>���iz4���m�-A��+!,i�xV����6��i����0�W�T�R����yT�g���h l`ᝂ�,��N��j�<%��. X?�/�:���Б�"c������:|K���G����97�}�f�S�6�`h�t�����抢J "A4mo�<���I�Y`���rp�!��%ވ���ykK�0Ă��R� ��7��ˉ���KCmK�D_0��U�r'��2V����XV5s���hY�麿�����#`^q3V<��ŝF��>�d��%M>g�. ;l�V��^=��J��bq��^O�k1��9�Rp�aD�Z �ӈ�S�.�i� �|s=,����f:NI���p#}�/г;�&QީѯhU�+`�Z�L�S��w�8̤���Ƃs�����n�ժ=7![��w���)7'mv��)/�XЁ86.ֆn`bb��L-�o9/�A]/�S]�i�w�Xk���11��i�S��پt���L2��a��8�/����מ��H��Ǭ[Ya��D��������H_0e�`�x��8��P�c� ͅ�?� &���,���g�ΎV)/���@[��]|��۩k(ҡ;��>�]��5���Ӵ���ͮ�R�^�*Q�j7���Z#�?9��W#�#Fu FI�J�&.��� �*9��Ζ ��Q{��_�n�v%^2P�u�U�ި�L���ť�϶)5\q&��2�4I.�#�e7Í�h�TH����-���lG��`���_�U`M�kC:JsBK"��R**�n�~q%V�j�ʬC�WS)�u��c^d�dr_,��8&�ũ�gb��jC���W��]�_��qQ����|���E�b�ԄQĜKDK?Z��`5 ht%]l�� ��}N�@`:n��ed��A�`��;$�T�)6
Behavioral task
behavioral1
Sample
ededd607c8842afb175c0941c70d3b9c69fb9a1eeff5bcf0deb94f65dc3ec7d6.exe
Resource
win7-20220812-en
General
-
Target
ededd607c8842afb175c0941c70d3b9c69fb9a1eeff5bcf0deb94f65dc3ec7d6
-
Size
150KB
-
MD5
0c8372e6f39302e2a644ffd333c879ee
-
SHA1
70ee33cd58566b35f98977dc4f7601bc70e8b819
-
SHA256
ededd607c8842afb175c0941c70d3b9c69fb9a1eeff5bcf0deb94f65dc3ec7d6
-
SHA512
cbd8da8f9884c9686c1d51f8b28235873a922038c82f3acd80bb42f2ac71e95e1ee57a7d29fdc60a4a17a6eff5a8603316ff6aa8859c92a299a763184be5777f
-
SSDEEP
3072:pd3lfdBsC2c/mfgbIrvwEqobl61PupmIycMnZI5Qi9YTVXAP9W6HqP1:pd3lfdBZT+fd0EqoMMcIyVnZIKTViKP1
Malware Config
Signatures
Files
-
ededd607c8842afb175c0941c70d3b9c69fb9a1eeff5bcf0deb94f65dc3ec7d6.exe windows x86
b5eed80d43488a7f1549c16b075e010f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
ExitProcess
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
advapi32
RegOpenKeyA
gdi32
GetStockObject
msvcrt
rand
user32
LoadIconA
Exports
Exports
Sections
UPX0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE