S^�� )��y��UG �j�]tϚ��cc W0�2G<%��Y����l�"j4#lo?��%� �����9y?KWn.�����:__{~���lד�}s�.����Ws����Z������r*�J0]�-����k����?f.�����P=�����2��!I�8�Q�p���]G�/�����̀���R���V��X���1����Qϋ���Ɋ,����PM(��⒅�4OX�<q���&"�v�G^��EP ���s�/�0��^Vf3} ���?��yo�nMga�ڵ���ƌ�MY�C�&&�ޝ��|�/{��7[%��YIt�ޑ����c�Jbd�%,�f�� /&dN����#���nDRH_��#(p������R�����-|�o�XP} �6� zW/!���a�{@�q�zO[����3d�t[��6��%�� J(�b���У� �\��h��JW�Hv��ؤ�V5 � $�b�7���A��e��7�e�r����WM�._%����>tzAt�?�/^Oq^1{����%ԎJF���|ck 9+�� ���q�i��yl�m�%(��v��x �"l8b�!;���đU�ɧ���ė�� �Q�ԍ�$H�@�Fr�������C]��"q���%�1ԛ�)@#�� H�_@�rS��#Vg����X�yr%ּeO��J8S��3>iDN�%�����t�c�U��_&��VW�mM�G�I�����FO~����Ē�����զ� z�\���W���얍 ����:M��Qb�48������0�(fQ$xGsv�!�T^F)/"�^1̈́|F�ƔX��{�gA��/����f�-X���2h�B�ʍ1lk��[|v@�&��:?��� ��Z�s�畃�v�h��ͽM`��ʖ'�jl�����!�r�*"]gƱ��Ќ��5��9������id��lMo��䂰���'_�M�V�������&�� ��3Ŋq�4�Cp�m��Z�q&7٬�U��#V,��:öZpz��w��E�G��!�!�Z#Lyp�N~��Տq)vlǓ��f�G3ﵪ������PL�v����%K{)XO��ȱ�A�����MD"��S�Q��Dƴ���Gw=�T�� $ ^_������Y�Ta<��wjy%�벘�&�:S���$*�Z��>x��(�n��6�*�Zλ$BVW@eH�������N�/��8'9i��a��lh�D���C��w��o'�l�i�_T��.�/��;G�薖%T�~���F)�uX��B��[Q����֎����饵{��p�9)�Y����~Ol!��C^"/�Vw���/�f=����L3�Tc413��k�l���5���·�b����r���3��)6h���#!i8`S�����l��z,镂t���[�f��8����r�G䪫e!郼0!���M�Cv��DĞ���;S>nP�������q���4 ���r�P���K�^���=��նp����̂?*e�o�qF�֤����\7H������m�o���V;��HM`��wC D�:���hK6���<*�HT+-�U\�k��*�-Q+�bm`��Ark\����(��ڞ�]��292Hxp����,�Y��|U�M���ɒ����$A�h���d&�;W��� ��moʩ����k�6���5�9�ax'��� (H8� j�\/��1���|��)6�cO���HI=w����}r-/�0�߱�����a׆pc��� �Џ��\r��[�!��g��z2K����x3��T���,B���ad8�9-�z:b I��.͖�△��c/�1"{.����t��1z�y�{��<����˼}�i�rd'W���ۂ���@�` ��+V�� ����3�6A�l��v�JV�c��-N˫c�Ge�j���F�{���u�i�~F�nR_��{�b�a�����W�t�A�r ��"��}��=�߮��9-�c2Kя�UN��LKф!/�c�� \��sP��1�-_˳�����KW�D��uX�V6d9�_%G��YwC���k��O��)P�-IљT�lRtZ��rG�b�|��W��&c�t,����l�`�0vg�4�^wϵ�&�� �>9�$�5��u�T���e<oh��Bfw�Αga�@�1>.~J ?���L����hszX���I���"��s�~E�a����Q�G+�g$F7�(��1���$K���#����CM^�����i���Vʴ�>w��9�;$���= ���:i�p?�so�aOg���~� �B�┢z�ɥ�ܫ���g"����uR�'L��ť�0Հ� z�65��7mR��6�^:�:�EO�y��Ȭ9M�/����d���)��s� ~V��)���2�I��{��$/\h���ٸ.V�s���x'���&��X��)dM�$���|gx��@��d�<����v�[��ۈ}F�7>��������<NƯ����"��+Ѹ9�:��)��6! sc雪�v�.���H/�pK�N���j� R��EH1��^ٽdb����H�H۶�$x�D@-��e�.����������ܙ�c>�Wd}J> ��u�4��E�w��������_�PO��Vt>t��f0-�ቱ�-l�WEk���fg<���)��c��¿"�9w������h�i|C$گ엫9�ן�pN`�ơaAK�����:�M��o���S��Y�ZLv�kJ��� #����>�T���-�i��ï;����0��m��=k*�"�R��wv�I�R����X����I���E w����N����B��Lg��&e���֚H�uZ]=�3-�L/��m�7�9Pw����u������l��MJ!�Ͳ�:�Q=3�v�f��m�+��u���Lp���V��d����-�A����G�+���4�A��|���V�·Z��!w�iҊ��(��[����J���cc������0�݀��ф��;�� ��֨�%e���:s��g��?�<�t&�XĻ/=��v
Static task
static1
Behavioral task
behavioral1
Sample
752bcd44e044c7aaf82cf9b3b9fcbc86e6ff09e1fe15836da7c9934ed17555aa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
752bcd44e044c7aaf82cf9b3b9fcbc86e6ff09e1fe15836da7c9934ed17555aa.exe
Resource
win10v2004-20220812-en
General
-
Target
752bcd44e044c7aaf82cf9b3b9fcbc86e6ff09e1fe15836da7c9934ed17555aa
-
Size
2.1MB
-
MD5
557831edc87c1dc2696f1dbfc6c1f900
-
SHA1
5e9dc0ee0692b51b373a37b1a44be6f65baeef86
-
SHA256
752bcd44e044c7aaf82cf9b3b9fcbc86e6ff09e1fe15836da7c9934ed17555aa
-
SHA512
4a5cc534351b084c698ab85c934267d3527f2ad5850741f8e83b3cc4f706b111119dcc3d0843afb2e09a344931233e6dbf3b32c7ba0397b23e4a7699d9187a64
-
SSDEEP
49152:GY8z7ebIngFL2+IdoqueiLRhzkFOup2qtxEd2Bk2ft0iBFdZN8:Y3k6/6bJkBy2BkGt0iBFN
Malware Config
Signatures
Files
-
752bcd44e044c7aaf82cf9b3b9fcbc86e6ff09e1fe15836da7c9934ed17555aa.exe windows x86
e248f641af3a71fbe340f711dfe1bbe4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
__vbaVarCmpGt
kernel32
CreateThread
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
winmm
waveOutWrite
user32
MessageBoxA
Exports
Exports
Sections
.text Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.VCrypt0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.VCrypt1 Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE