ہj����%�mN�L��R��$���T�Ȏ��bq�!ij��_Y9�8�i�yc��R�#WVo�����H����LO�)�����EN�-��^n'��]�eFa��o/�5��R�h7{���4t�I��)�NƩU ��;�:h{N�AԴ� �1��GK��}7j���:9�b���2�N�T1��{�$��H����ںV���l�xl�%��s����f�#�:R�.�H�`���U���Cl*O`��T�����>�Ӫf~ G�G�M�<��D2�����yD��}�&n[�Y��+1�/uk�x�N8+�_�Ч!ǥ �%\�omG�זۤ: _�YX����}*X�7�V'��h͟� P����u�A\�&5��,p��r��8r�Qk�3�3o1]�te>�����_�<f�cd$��i�2�&�˿��\̥@�}��2�)p���m�;'���h�0����1Y�(�h@�&=��a�߱N��R��k��F��ƹ�@�&�kFN+�EEoh���O����QC:e�� K*/�J�� Tx���~��3ï���A���et�ړ�)K����t͐��D���\1���B�#��j<��y��MNh�a{��*)om$���t�Yo>rR��h^_G�J$��z>_���|�CItS�jG�W�|t��~�a ;���>�����JŬ��9���^:"��N��^����,@{�T��.7��>&&G���ykB;N��ç��d�6�E:���/���W�E$����ͅߨH�{���?�c�x���6q���fP��8_�p�z��(�e0��״�������m^\�6�϶��(��� �8��:Yp�����W�#�<L@��� ����"=���d���\;<��?[������rM�`��u�K����RYv�>5�JSi�V7 땯���'����c�f�i��� Cކ{�$�ߝ��d�������>ف�2-*�K�����d�Z`�j�]��tl(��ѩű�b��IÒ���I uA+� ߕ~�Sp �s�Ik��0;IM kn�w�0Y�_�oeZ��z�fb0Ф�C@��A��?U��r���~k�2�~z�N/��;�Օ�p�@��R��=f�$Ѥ3(����I�5F�Np6'�uׇ��%w�tNF]���?�ԯ���l���J��� �����RZ�v% P��TQ�v������B� oH28�YQ 8��th1w?��m��`A��@m��͐��K�z���M��xƎ�E��[ɘ��2�d+����-�}R��/X��D�#�4�H"t�d�z� ���)0Cӥ,7ƅ��3���UA�?���*��1�(Қ���!�|5s%��o7Ō����Z������g�[��m�K��[��;8��^�����ئr��HN᭜}M�`�;;��˂���^�x]��m�@ZD;.@M� dcMOq,+LD���!v�㝠��Y� ;���&_�ҌA�~a��A��M��"g�NO��� �Xfښ�>�:nz��rӲS �%g�j�V�.6E;�{k+��1���a�5Tt�'oDzJ�U�k�B�q����I�fJ&]> ]�8~�Q�� h X��Y�����^Q�B� ��i&������E�D���B۲�Z/ZLwH��2���I�UM�MKa.� b�ߺ�������D!P�,��v�����N�"���a���OSt��#������oƭ�3��[�Z���fn���C����Y@ƒ����9@�����O�(� �O�DTX~��@��^���[��"��#��:^x啨��pD]p;��G�6C<ͥ��k��aV�*�ŠZ�u�>�sI���O���ժ��p2��m����������F�r�����ڃ�7�/��WI��%������мpG֚��N(z����>��@�']�W��%,LT(���Qw�*�8�*���4�c�mO�����=P�K4�i�?�b����`Sa�����z�I�xRܬ~�7��]?�hX���?JBߜ�U;;��b�g翚���[i�y�~ƟUPYG/P�0܅�7Qxʢ�MW��I�1SHs���d�V�|��VJ� ̰=As[���2"|z���� 7$���[)5O_�"6����{�V���_? ���*�2SVzu�'�#�a�Ade��a/�rQ�kx_������]� �x�K���qfp�v�ᨍwJ;|G[���z�$G]b��3�e���a�:G�P�E�<�.�z2Q���Q�ܷ$���Ҿ.���ʟ)f�ytuG�P�L���ܤ,�{0-U}kߪ�m1��Q��]LRI�J/�)J��h��D=� ���� ��j� �6���h�e�g�W��P�Ux8�uĥ����!�<�^���c-+�ƍ��*��Z�m���1�#ٙ����D� ��G;�A�������I2�űweɤ����C��C�N��1>��e\���],z� ���}��E�0���:R{����F�Z!ݎ��5ޘV`!���3p��E�π G�:���<~�#�s#Ա�M�W��9�S�(��������+�K�R�р/�3m�Dh�khD��r'5�3��ˁ"�X��0w��M8�$A��P�]`o��~Br�c�*Y���t�������m�Rj>�@6\��8�({������c�u�9>C�P��ӊ��p�=v�WJ��.�a0*wT�?NJ��ɟD)�|�������u�,}���A���Z��`N�����-�fkgԘ�������a��38^�����5������"�G_�ߖg��4h� ЛTЌ�@u�#�����k�n���C��sf���@�X�gEO�:Z�#v����U����|�Dm~���5����p1����T�����"�dEHܛ�������m���Q��0R5�F3��4~\YEO�%8���(2zu�s;쿻�Y�Vh8g��P8;K���-�O����.�M��R`�Wy�z#�>�\`��+���k ��&��1F���!ezt��V[�8�Ԥ O�d����:b�N+2���R�D�����㧶ER��~A�8�A��w�R�2�T�!e(��5�c���h�J�D�,�-�\i�
Static task
static1
Behavioral task
behavioral1
Sample
7e2a7750756ff24772b64c9054960c5a7c75a78e8107989a96d9aa19c51a2f24.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7e2a7750756ff24772b64c9054960c5a7c75a78e8107989a96d9aa19c51a2f24.exe
Resource
win10v2004-20220812-en
General
-
Target
7e2a7750756ff24772b64c9054960c5a7c75a78e8107989a96d9aa19c51a2f24
-
Size
100KB
-
MD5
82e408b4b4058571378bc778a0e0eae4
-
SHA1
52df3f8bec2424b0d836cd7ba269bb1f138dd3e2
-
SHA256
7e2a7750756ff24772b64c9054960c5a7c75a78e8107989a96d9aa19c51a2f24
-
SHA512
6465348d73e534c7278a41e50a720304dae7802c3975ba3dec7b356b24c81feec75e125cd094a0e39a86d90f4593d32fe39fd129dcdd081aa1825d64d5a2fce0
-
SSDEEP
3072:37Bklz8+hBl9z7Pf4wZ8jQG6iHa3M93wD5NM9:eaoBv/PgwZ8jsiHmM93wD5N
Malware Config
Signatures
Files
-
7e2a7750756ff24772b64c9054960c5a7c75a78e8107989a96d9aa19c51a2f24.exe windows x86
b3725e86a1f4ffa3b26121915f15f4f1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord540
msvcrt
_controlfp
kernel32
Process32Next
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
user32
SetWindowLongA
MessageBoxA
advapi32
RegDeleteKeyA
shell32
SHGetSpecialFolderPathA
ws2_32
socket
shlwapi
PathRemoveFileSpecA
wininet
InternetOpenUrlA
version
GetFileVersionInfoA
Exports
Exports
Sections
.text Size: - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code0 Size: - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code1 Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE