=E@O2qZ��RJUY���7�r�-W�\�^�]� \J���Zgb��K��;������&"�?��/�bt���ږ�ި,�ݩ@˹���HPOdD��>���A��}4�9��&R����\JϷt�'#���� tڜ�x��J�E���f���ý�(I�\y�����p�I�|�������KJ��~3��J؝$�����+_/-o� ]��:.5�YD�y�z��H��ז>����!0�>� '@�0ڠ?��U�v���1M��I�������{WyU:�F��:��A�nc+�p��IQ�_귖��f� 8�Gʎ�o�%�〩i�5K�`��F{�Y�\'L����0��ߑ�-u���*�o��ٞ�X�R���%�^�5;�e�����v�-�B����֫�G[ �j �Z�Ws���+$��p�<>L`���@�$xh�)�v"��1�p^�Zu��]���.W��gl�u.�I�OϏ�Л�� GCjL������L��6�*ݯ� ���Ǎ��Ab��]�c���ݷ��F��V�Q�9b"F�q�]K����X��mٵ�pM�9m�li>���%��c��e�B�ʅT��::<[�J��?�*�~ ��@�cԗ�Ld��.^i�������x�=�p█�C�FP��b��T����#^���J��#'����܊�݅ �ɬQ���j���Vd#Ŵ#�P �4�6M������ͣ�.�z��嵗����ۃ�㼇�� ����N�!r�C��g�Ä�AV�1!7����>LHVY�g3���5�S��>i&�}H���~������!�D8:1>�5m}��Ǐ\���?��5���%��M���*~z�ؾ���5�3�=|e��7�/B�^+&a̯/:V-Z�q�!5�Y杘��H0�j`8db�B}�}[�Re�֥b-Zq�A�!�aH*��7ٵ�u�"��َ���x��O��k& hv�O�앫� p�.W�y�.߫�ʇvE�rCU ��� ���52d���5�n��͝���$�Q��e C��T�H�������M�[])�r7�l��FHt`h�a^oiZ0:19��8mkr�<�2^���N{������,Kqz�����lK"�����+:�j���;¤��2��,<��F�r:>��]r���_���^`5.��U� �7�6����z��JŔ� d3_~����Eh�2����V�P��};#M����}n�f�H���x��)p�I��w�Y�-�E�!����{��B�D�es����>�Wٮ���X�[����kj�pup���`��D�P���+c��pb#�gn�)�qZ'Q�o�G}��z���G�p{Z3�[E�:+-��)N�(.#��&� v���pm���?��j~�b��N!zx�����"�n� 3�w(t�/� S���?���0���V��B��;�F玩|ņ�u�~��x5Z1?��������ၘ��H,��6���2����FR!MqBT����*GMj�'y�0XA�4P�(o�����X�D���-�k%R�]�ԬI(�l�h��/����G7��F���0 D�?8��4�/J��4��`�$W���s��u��ʌl����2�>�������D��Td�������%���%=�.�n8����JJU�>�:��s�H���lIH��i�F��?��M���J�7՞�<���x���6_���.`Л[[\?��N�4Px�|�ʶ=�x�B��|�k����/'�P�z��p�5EG��)�2���[ͮNg��}sԠ���R�0��8�Ubkp�y�0X���$k4�Y7<�����d �(���)I���_��h�!�DR�N��_b�7l�'X��ASܫ30ڏ%�� �~�!�r-�iz�;&ΝO��,P�:�bQ�'�������ErX�ۂ��~ 9��|�S!e8�����3����������ma��0K U��ѢI���KBcoY%]l�{;M^�3�f]5f�I��*m�_��[���ܲG�wVb��������l�ixZ�H�Wz+���@��MK)��3O�"!a��5��́$�ޓ�{�-���� �\m'��]7�6�&���5C] ���ʧ�I�ɡ�iw�ȳ����a any<���9�:����Gm�k?I�� �1�9tO��z�����p}`�� ^�ѹ�)#B�a�ykgm����1n��4��r8�)���-a���z��Q��'槵��K1K�D�m4�db�%Oq7V���A�0�cd.�ӁI~Ã�Ł�����I��Ϝ�˘�Fx�SYӊ�{�QG+�w�?�K�2IڎR�w��8� QD���?�ƺ=���L�1Ǻ����~5�M����������c��õ�a��]��?������gD��t���j�a,�W[�Z�ݙ��C��#@h�(h��{�tt܅B �$4f>E��C)���d �x�պ��{} 8ԓ�*yέ�_h�y�OXIZ~�<B��S��xuP3�kb��ৱ~J�CFD}�B�=��%�����a-*�N���㍡���O�TO� ��\I�/�D����=?�T��V�1������Z��aSX�JW]��aU��`�J|�RfF��O�W"ȃ��L�J;�����ꢗ����о~����`�m8x|��NJ�3)־���I\C�bjL���'r�tRw^U��� <���^��p�S~���d�E��`) �CN:ۚɔ{�B�; )���o���$���r|�&\�á�m�$���Ɛ��(���Y��^���ib���[��~�F�Ξ`��_(B�2�ǜ�TQcͿ���y�)��%��&��!��b���Fjaѕ��+w�t')A�߂)[��0,�݄��7�DZ�hpU�����hZ ���J͔b,��S������$��{}����7�֎'�x�b���H +A*�)�GWsfXt]U+h`Z>��m�U�]��/�C���Qq�z�Ϭ���c���t+��~F��2H:����);?���/>��/|�\ A��I�<x�-�Yc\�7X���<C���H /'�nATQ6�q�����4�N�k[�
Static task
static1
Behavioral task
behavioral1
Sample
07c4c6172f2d35d1d6e2ee58fc835d9ec88d77e76dd767f60bf167760a362f6b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
07c4c6172f2d35d1d6e2ee58fc835d9ec88d77e76dd767f60bf167760a362f6b.exe
Resource
win10v2004-20220901-en
General
-
Target
07c4c6172f2d35d1d6e2ee58fc835d9ec88d77e76dd767f60bf167760a362f6b
-
Size
1.4MB
-
MD5
80463092a863fb1d17f0cf0ba8500ccc
-
SHA1
d4c174d12e08e277c62fc5cc7049d85392ea00ad
-
SHA256
07c4c6172f2d35d1d6e2ee58fc835d9ec88d77e76dd767f60bf167760a362f6b
-
SHA512
e5d29a8d90e506ff984947c45ea751e8bb139733353a94dd703b41cbb8f3953ef02714189be23542a29383891bbf201d43b794b6d9f6b76c1c47ec3955047019
-
SSDEEP
24576:fhCVHmFHgwBWSfRL0hD1wpZ2EgTzJAxiqhh1pivyM+I0GLAxEb:WiHgw5pL0hD1eMEKFQiqhAvrQG0S
Malware Config
Signatures
Files
-
07c4c6172f2d35d1d6e2ee58fc835d9ec88d77e76dd767f60bf167760a362f6b.exe windows x86
c7e9c68ed65bfbfcb8709531a7e03970
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryA
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
GetWindowLongA
MessageBoxA
gdi32
GetStockObject
winmm
midiStreamProperty
winspool.drv
DocumentPropertiesA
advapi32
RegQueryValueA
shell32
SHGetPathFromIDListA
ole32
OleInitialize
oleaut32
SafeArrayPutElement
comctl32
ImageList_Destroy
ws2_32
WSACleanup
comdlg32
GetFileTitleA
Exports
Exports
Sections
.text Size: - Virtual size: 487KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 174KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 205KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tmd0 Size: 112KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tmd1 Size: - Virtual size: 661KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tmd2 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ