>���b�{�� �!�G�:L��d��zXk?�3H^�C��u۴`��{a��.bJ_�%X�!��Kh؊L�o����`Ԭ)e��kdw�.o�ðk�6�R�*i7r� A�����@�D�6��\OM�A�N����FE���WJ �����5QH�J�Ĵ+����d��ۦf��8Z"�D4' :)�E����Z�3�x&Z?��xL���>��=ִ}�p'Lr���TQ���'�ЧԗJ�1�x�N�d�������F�=i�L�� \;GX {Ҫ+f@z!�|&��(�j�k�*�M����>Ar̹�p��Y�@�w/�M��+�Pp���`u����r��F�d�)�',��W�g�g��@B� �G����lm�]cݧ[J���r�ۗy��d�����M/kG&O \x/��g������~"��;���H�\�f�t6�*�>IS�`����%�^�ך �]"�-�����q�x=�-��,�7���ϸM���R��]b��eS�+_;�D���?���g ��N&��a�NYb]z�n}�5G����R��_CbQ��-���q� p�L��a���<��d��CE�Yϔ��7o���ݏٙ3�:}�Y|ǭ�jRS��1�sW'�OG��`ˋ�~�Ep�뿌�'g�;Kh9��q0�;��7��DV�蟇[#��� /��I�l���W�b� Öq<&}Fȱ�\�岛Qc��=· KUݾ�yXV;$��a��XBR��v�F�+jXs�:���S���T��=5�r�_i��s���K��3:��vO�ܻ��E�?ж�Ҽ����El�w㭆ڱ���W�`�A�t3'��<���˪P-�B�X�rd�HLpF ��_;�jz*���u��a�5���0�'h[��Q�X �7�4+YU�U ��ڐ�������'�n^���J��/`B2'}�ۧ���l3Z�Q�T �<m�L�.�ζMvl;�D�S�=����2A�=���Xh ]����2�t��r�����>>�g�+'$�i�v��u�U=Vq�*�q���3���[��U�4��]���%�GΨ�,�J>���;�z^�.�9B���y��U��۔ڲ�δ��ʜ'�+�i� �3�w�G@��6肳U{�e�m�M�ց�s�F�6o1�Ւ����)���l�%�9���(/��(R�<�2��[=�+R2qه�ß���t���Z� %�1w�d���W�,f�T�C�r��`5��tWM£�k�K���i���H�)�-Hʖ��* ~� % \�区�K���� �I�A��0g�':>�F�7Vb��q�A��]��Jߏym�RS��-�O�^b��L�o���W��\i�a�6�� Ғ$3Z���Q ��� ���r'� s��!���+�g�}�.��r����Y���������ߵ�ckW� � ^ۭA�D��ԭV��I��������Y�y���}�a{��ə���{\e$lv;kو���]���&�Vc���3�� }ϭ s��hȱ�;���3�7��&F!w�m��%@�!�&Q JN-��~�e0�Y�~�D7v!���brCA%=@���$5E�GIC��>И%[��Ɔ@O���*W�p1B�m�|�iGkv�Ӎ?��M�r��x#��Y�nE��*H9�ܯbJ�Z�@6���,��k-�]�/"���o�����#��DP"#��r��&?U�S(ֱ���H�r�-{79��q�h������l�f8��m 0��t���T��Kƴ"�k�1��S����_Q@�7<�����I�o��i戾����<=k�K����Z�V�H#���eT�YCT��H�̯bZ��� ˏ���s_KZ��ޤ����Z���rh �{s������3#)3�bZ5[c8�k!+��F�5��ZB��S��.� ZA��� j����?���A���j8��C^�߭Ӕ���:���$�!=�.�9u�m�+�iA���A�tx�������Q�:[�(nA�(KF' R��q{Uw��&uI����݆��+\��S��A��y�!�-�z6�DW0�&3�ӃKq�� _���P�Y�uZP�˒QS�7���!���p/?��蟚�A?���:D�v��X�6�BP�ĀfϰE=�"���@n�Fuk�a��{��U�:�]-��Dzl�tQ�8�����F�Y�<� ���<W7P6\�HN5�mF�oP9�'_��WU��=�zo�\�v$%� ��b|DnM��i-i5��q���ꉦN^[���]t'��r�:� _[X�39��j+m3�B��+ Ib���Fl���7j9�ܻ1��R��;1j��O=�^��El �O�hh��l+L��4�����而b����3տ��h���4nw�ʴ����e�(`�T��{��f*S���)��e?����B�lt�~Q0I�O����8�<,�M��m"1�ޏ��س�a��?��o*l ɏ�GIO6���G������[��ɛ���Wr��pT�G��n���z �>��ϡz�${�Q��j��X�Q��u�ܔ���msg���6MPp�W?�ňo����3�h�����&�`��m�wW��L���aw����ae��匒6Z&����Ta�D��(�v���I�����"d:�9�5�H�{ �*���\v�A�Wvg�'Ǣ��$㔟���f���K�r�ߎAsv}����9q����:5����ɸ���̓��l��͛U3z-1��$��B��}F��u��Q{j1 n8�EN�|謉O���8Qgs���"�`' 0�^u^�z�=�l��u�%���?3(z�0��2fQHp����#vr��T���n�fv�:N'�����]S�Q&2.�(�iA������ꖎ��l�1��7�8�+�2O` �Q��?Kl�=���Y��x�D5��IKK� +��ӏ��S����u3'J�:Du�4^Z(�6��=�@�f,���"��}���� f�|{ Mruk����^�Z�I���}�UR��%!�C�Zr���WB�' T�݀�����ջ���S���U0���J妆�́Y�����x���ғ�溃"���� �B�K��h��'�X��9pW��>=���
Static task
static1
Behavioral task
behavioral1
Sample
5375354015d90fc4d09b2b9fe1c928658de8e180e9e55d43bbc1c3d0ccea0edc.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5375354015d90fc4d09b2b9fe1c928658de8e180e9e55d43bbc1c3d0ccea0edc.dll
Resource
win10v2004-20220812-en
General
-
Target
5375354015d90fc4d09b2b9fe1c928658de8e180e9e55d43bbc1c3d0ccea0edc
-
Size
498KB
-
MD5
bb3b291601d82df3c41659aa930e60e9
-
SHA1
3f1c1a2132434f36e7fa7c6a7e49919539364b0b
-
SHA256
5375354015d90fc4d09b2b9fe1c928658de8e180e9e55d43bbc1c3d0ccea0edc
-
SHA512
71044761f6fadab316f659e5260501c398463901fefc45b4b4b52d7cdab39107aee3cbe4e9b230de30767ad78193f1bb2cc8b393d9e498453f7486cd8677b020
-
SSDEEP
12288:PCyJPqWLuNFw71CNbeg5XbtnZKYqy/6DokAI9:PpP3QFEMNtbZMvySck9
Malware Config
Signatures
Files
-
5375354015d90fc4d09b2b9fe1c928658de8e180e9e55d43bbc1c3d0ccea0edc.dll windows x86
dc6c89f6d2927e8f4f48993dda21fd77
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTimeAsFileTime
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
keybd_event
MessageBoxA
gdi32
GetDeviceCaps
advapi32
RegOpenKeyA
shell32
ShellExecuteA
msvcr90
fseek
msvcp90
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
winmm
sndPlaySoundA
wininet
InternetOpenUrlA
Exports
Exports
Sections
_TEXT Size: - Virtual size: 431B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: - Virtual size: 289KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 6.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack1 Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.aspack0 Size: - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.aspack2 Size: - Virtual size: 181KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack3 Size: 494KB - Virtual size: 494KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 686B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ