7���4�Z�9�}�U��睄�̋o��`�g�R��t2�t��Ԣ0 m?�*�ArYW�坧�a;n�[ʹ�:�a�'�4�t��v����P�����fc����� � W��h�B�7$s�5�iM��/�4���F����,�]�:��9�ﻻ.B�j[�IT�ؙ�;p�wR���2a��F��6��>1�}�ʢU����0�K�ZݕE�(�G��G� +�yޢ.���g�\e��λ�$�b�c,������ņy-�'Ԟ36�����Կ�\Bʴ]l�*�p�&����f *���� �?��mt���%K]�g*�Ai/u9�,"'C�������0'��� ښg}���tkJvǴ!.o������<럞���h��jѥ������h:hw��n����3'��N��+?�rq�5�%����x�=ݽ���[�}L�J��ŀ(��JMu���[o�S������;�j������������h�_&���@�Jo��!��KԀB���1)�c2l�*�J�sBS�C3���%��sg%Ǯ[�ڔsvl�����y��� B`:Sxi?��������C�A��c��q_��\�K�f�@�������wєZ����,c{M�L5X����y/L�+����~+Ma�d� 䘽!�@({Ϲ2|r��Ɋ}�͙&�ɬD-)�V����5��g'��c-�]��jJ5\�-�M0�,�O�iU��NsL,�U��T�Y��<�a�H��ʾ���ʼx{����(-C�#J�A�����鈭/6`�|�Wl_c��3_��@�cY҅2��vxj�M� ����|�s���^4}nj��4�o�9E���{�]�ra*����`�i��S��;R��.�ҡ_7�#�(���d��<�#�%u{�n�ލ�(�Jr�J�x��2���{x&��uM*3�ӔZ�������ɮ�'#Ң}�5n2�^���y_ke����fݖ�&�4ޱT�b4kf2��gB?G�4��`R��B1�����L=���[��Jr��̯�w�S���0M����l��ٗ^�Hcg�Ð��������:������u�B�?<-h�s�BRz��)H�ӌ5�t5���eL��N&��(M�M#�f6�NK��q6C�'�yGn�&��Y;+"l����g�t.LU*���foT3��D`Q� :x 3��D���}!c$�[����gKՅ ��|U{�+[h�OF̥Ӻ�/M��-w<�,��W�vF��Խ~�c�3^��3t@���8wFp�B��������bI�%�n��f�3N�[�R��D ��S�ͩ�KD��� ���1H%]��U��Wa����n��D�N�0⎵ڃ,������A �� � �c��"�1堯���&aU��fop5(CX`��۹A�� ��h�ސ!��`�M �v:�Vm�dw��F����װq|C�gB�������B����h��["����E�Rѫ �U���02����t�ڌY�1��%���y�ƛ)uW��c�M�/J�3�f��_��"����-�qΐ��ly϶����g��� �`�c�c�V��m�+\.�0�b�㋨��D ���w����Q���|4FN:���wɂ����]!��1)�۱�g�0�3jål�D���\lY%��5;���2�k�b^��|9� ��T��&��#��˨j-1-�B%�9��Vj�[N��2X��M�.���˅���@H�����F�w�:z�K���m�۳k�))��YYWՊ+|�G�J�����?Bz��vw� ��R��C�f��}����r-����{��0տ���T±I���+�K�E|�a������1I� jLW=磉`q%�ڢ&m�[�ZkģӬW~���A�D�"Y�P\u��Q����Z�7t�k� ײ��쁂��va7�'����S��S�⦁��yǔ���W� a��R�������bH�(/��O�m�C�T�����lM��л��af�:�"�_�-��g�:5��G�?���DT���|�d�(\[�gg�s��f�D��ట���QO�vu� �������cuW��.�p6�E���kq��8lo�l". w��k�i��nY���$t �QP���.|l�(�F-ǿ�6[��'W�nB�s28���u���}(��F�r�&P���𡠍�����T�J�����&�}U��=��� l�͙����5,���b�C���M#\N�����`�&�jJ�lӪ�*��}�����|�������Tnc�+@e�S'�\��O����;��8���^N�����^�Ξ�"���%�P-�r�d��L�Џ�wІ�F��4��JZ�b�g����� �A�q�M��Tg-A��t� D����C-�e��RzH�6l%�qj�9����_����*�it�+�Xy3N)���%�R��g�%P�A� �)z�I�O�f���j����l�]7\X�����;�I�\#�[q�V���-氪�p����*as�#��oC���V�cm���a���aWh��MĂ�z>6����ã<�z|}���G$I�R��L{nkZ@�V�5eI��F���ʬk}P%ĠZ�~*I,L7�+��$ԟg�6�6�e���j��[pMmi��NM_ �� �A�w�!����=yn���p@uLD�{`�-�x=�1C]~����X�g�-U�pd>���>��"�D�G�L3~9R�_A�՛ݷ�[��.���퐁�13T7���D�h�'D��U����AP|�`�n����� �R�G�hg��/���x� d�-���0ޅG|j~3�r��j{�Hp�E&DJ%|���}�ZV������͈�L���8�Oc(�E�_��$ӣs� 0���$�RK�s��N��ʄ<��v�L/��7��4�~�b��F�T�Q�]{9"�� �<�tW�����m�| �ȟr)"�,��h���|{S��T'w5b�ш���C�L�*��(��ƙ4���P>�2�hg�{#�@SJ9�,NѾ��[v��-��+k�B�w����
Static task
static1
Behavioral task
behavioral1
Sample
50995887c3b6e03907a410b1381b793b07fd0ba96627cb2be22d8c7e838c3af8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
50995887c3b6e03907a410b1381b793b07fd0ba96627cb2be22d8c7e838c3af8.exe
Resource
win10v2004-20220901-en
General
-
Target
50995887c3b6e03907a410b1381b793b07fd0ba96627cb2be22d8c7e838c3af8
-
Size
7.5MB
-
MD5
7e52994c91ee1c913253a38b4fd547dc
-
SHA1
597bb330824996f334d55083ce387c691fc3053e
-
SHA256
50995887c3b6e03907a410b1381b793b07fd0ba96627cb2be22d8c7e838c3af8
-
SHA512
3357fe36504fa4749d022193d5e09718eb1377b89bc4154ebaa08de4c8485cef2f4873a514e6d13bbb20b81f33fc8fb8d8758037e6e7107b64715c4e4c0c2c40
-
SSDEEP
196608:QaP7fXFLmYsRzDzRdYriBCsoYnqKcxCjrTlJjJ1Dt:DP7cY0pdYeBCIqKcxKrRJj
Malware Config
Signatures
Files
-
50995887c3b6e03907a410b1381b793b07fd0ba96627cb2be22d8c7e838c3af8.exe windows x86
91a18535d107e279dd059fdb423e1734
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
IntersectRect
gdi32
GetSystemPaletteEntries
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
ole32
OleUninitialize
oleaut32
SafeArrayCreate
comctl32
ImageList_Destroy
ws2_32
recv
wininet
InternetTimeFromSystemTime
comdlg32
ChooseColorA
Exports
Exports
Sections
.text Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
CODE Size: - Virtual size: 330KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 104KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: - Virtual size: 5.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp2 Size: 7.3MB - Virtual size: 7.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ