�s��x"�'��0�*#�T���7�R�]��H�m7 �#��>��/�ȼkV�E�o1H����J�#ع���� �G?��:�E��%�P�p�y�5k}x�!�좒��l-q*����v+��p +7�R��2��w(|�z덢��%���ץ%by���ٷ����uO&�;�f��E<���������8��T��!r�C�9IB*��������[qD�i�y�ŧ��0G��BKQܸHoj��� �=$�#i~�Y�M���<���*�"�!,1g0H�|�̊�'oʕp�ZD���oQ� �ƕ���F��Q��N��w��B#��kv�Y���@��}r�/T � ���Z�%{�r���+.�;���I�8�&X_���g�[P�����^�'Ԟ�"8kO�(������HRK�!6]K���oj��\ϟI�V�s�J?��4��P��syZd�[�}◜o�dBE������s�'�]˪�j���v(���~7�:w\@��8�0�uʚ�8�ߴOHʼ���l�T��Q��M�������W�#13t���Qn�柷B��!Q�Ii�𛉫�\�eZ1��F��r��j^(t1��Q5�qpZњ.0��{��N�/ݲU$�fN�ӎ1��F��"���̄��x�U�����1s������Vbn]�_�u����P�$�Zo�J9�'Aa����@@l�+�����ӆ���"yFMVhajʥ������%I��]` w��a����N5��1��Vu���7��0Gm�M�����s+������k�(��1�"�|�lE�:t���Zgb+�͒)���އ�yn�hu�uO/$YX� ��7C�tީ�O�T��jW��^��2D�uY�Ez{z}�ݺ�YO��H�*��>A���rGY�y�鵡h��?�\�앱�/p�+��d�0���^��C��/��љ���>aƙ�m'�N�������~c���]C��ͽ������>ygGsd�O���fVR�,E���Dk���H� �Lq�$����������.�Eb�C���Xƀ*�`�_��" ���� �jQ�`K\z���s-yDgNV`cL�ia�G1@p�io4�ai�lhEԘ�+O�H��q���qk�����V*�����c~�.g��*�A�:�$����a�V9����e�0��V�Q�� ��7����q��Aщ�^��z��;H*Nv}- �N��K���ԍ.~q�t�-��#\�>P����O�p����U��������i�(p� �DG���R��Z��~�+TR�4��,s�G���LX�P��f3����C���o�g�@��rv�w�!Hk$k���xJ��0Ÿ8;b�,%�"��(�If]%�S�@�V�~�[�X��/z�o���o���1U�P����|a����1N5�Q��<п~��h��EڗÉX2#�-�Tn�1dN�K�Sq ���a�m�Q4ӻ|��5�5���#?��X��IoE��*�|]��u���>��fE{e~G�j�]�>'.D��D0ז'���^��"�,ȵ�2�����8KP<�zu�[ T�� �]�c����m�-s�L�T��a.GF��$L {��r?��Q�)S�6Ꝏ�pL���8fI��qB>(�GKb=H[���X������e �M$�v�62���l���Jr�AZ��Ff6��������C�ε㑴�Nȸx�7&�C�'yn���m����j�z�i�@��R�0��}���+� �*���P��E4Mj!u&ƙ{�e(&A4�Qf��W����~��m���=d�L�Ƌ�1ʥ��a���E�h��b��mދj�M�.˙����?��:A���Ʀ���}muU�\M��|pwϏ`��č�h���G���z!D+���]ak(��|y?�҄�R�&m"����c4����.�/��s���Jnh��� �T�/��t��$6#��v�k��ixΓx;��x���E3[>>��� �t�tY��5=�Ï�W�yql�4Oj�Y��6�ҹ]��/k�0J��PT�*BՃ�c2q�����&2X�a�Aq������-��x�4 `��� o��� "�d��G�w�.��]��/oX���`��<9ȃ�C�z�14�,Dp���Ԝ����k��%K:�R@�� ��k�JR�E�NK��c���w�}σ���Nk!��l];p�L뒏�@ٻ5 (��.�s����f,~y�S�U�����������s��L�*R�k���s(���aκMjܻ�L�5�,�;�nJ��'��-�vV=8-�Q�P��n��,n��W���q>��*u�j���c�}���J�>�=^�0��~�Ck��R���[F��n�\����Vw��8QNA\�@�VqQ����嫡)jI���Y�`�+l���oX�S%����l��5�C;g|�����h2�/�M'�w`�5~��]����3����AӒm4��w�e��I�g�P�ߌ��j�<�4ܿ�!, 3���w)��[�KL.���5���~�$�$D��̧�����1y�a�/�7����aTܸԨ����J���όEpv���z�n%$������Č$������L���Bj��^=ۖ�i�_���.��S�O�G�0J��D���X�G ���0N$�D��b'z�e����42+y/�f�]y�#B> c ��$��!����~�h�<��dN��8�@w��ڌ"}��H`���kJ���k�x�@=�CI�v����oN���f���Ko�/�8�Ш���j}�V�pɹ�3BFxs����{��H~�Y���S������7��]�C�Qu��������Y�]R��|q8�@�q뷨�'3Ǫ� Ճ��R���`a�������l��a���er��c�2Gb���\�N�������Ҏظ�u���T�'\R)ZS�-����+���ސ���SH�T0��^���o���V|~1WG����'M��o[�ؚ�����z�)�Hۃ�UMc�ۜ3��u!�e^�%����+I���v�Df^��쵥��'Os�����: �-�p#���Ŭ�����
Static task
static1
Behavioral task
behavioral1
Sample
fc777b065a543077035ef54e1cc85f0620f622d5daccb7af97d4a13371880316.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fc777b065a543077035ef54e1cc85f0620f622d5daccb7af97d4a13371880316.exe
Resource
win10v2004-20221111-en
General
-
Target
fc777b065a543077035ef54e1cc85f0620f622d5daccb7af97d4a13371880316
-
Size
728KB
-
MD5
1167e35ee741c208ec755173354c426e
-
SHA1
e148cb334f458e505bc94408eb832b4df4d8c863
-
SHA256
fc777b065a543077035ef54e1cc85f0620f622d5daccb7af97d4a13371880316
-
SHA512
da811e38b999e50a1bd3817144202a8efbab10a9b99620781ceb24e3967e195912d22a7b01b29acbc773841c0801076af8eb04e97246d9d9dfa159ecb2ff8386
-
SSDEEP
12288:W1A5a7D18feZxSevuNabBLNoVdIUpi5k+BKyfGYDXlNDDDyx5cuF6G:W+amfezSevuNqBSlpT+BKyf77nDDO/c
Malware Config
Signatures
Files
-
fc777b065a543077035ef54e1cc85f0620f622d5daccb7af97d4a13371880316.exe windows x86
89140cce30a78bc9f7493ad3a2435fc3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
winmm
waveOutGetNumDevs
ws2_32
recvfrom
kernel32
FreeLibrary
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
TabbedTextOutA
gdi32
StartPage
winspool.drv
OpenPrinterA
comdlg32
GetFileTitleA
advapi32
RegSetValueExA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
LHashValOfNameSys
comctl32
ImageList_SetBkColor
Exports
Exports
Sections
.text Size: - Virtual size: 628KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 310KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.upx0 Size: - Virtual size: 366KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upx1 Size: 708KB - Virtual size: 706KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE