��67��-|d���Z��a�ƞzV}�m`3|yP{7��/֫��b�U�_ip'��m��"2ajv��i fĐ�m��Y��_�j�XY//�e���U���RmT�?��Z�RɎ�JG�$��5\���Ṷ���� �X}���-v�߯���e���ƅ�b��PP>��E��[�ӎ�YJ�Y�5������L>zXu�MH�R_�:�j&$��N����0-k��M�^��SC�����ST_)p;�����~��[ty*���ona�c�?W���w�%��\�Sߧ6����)��s���љ���ȼ8�NX ����OV� �p�q�>fWS5s���C��p*A"�c_����O��ݏ�G|E~L�<�?(�c��Xq�����%�j}�������#� ���� ]��E2?��*w�|e{a֢��S"��}����M�0�C����#M��b-XZV(�jcK%ĆͽuIveC����?��{1Z�Ǡf悀T�(��!"��K����5S6�\�(�AR�+�����2����%Ѹы;���-˘U�{(QD!ā]�F�\ tdDC��]��l�r�G���@� 7��q� 7��+��L��l�u���ty����p��$��Nޒ��SD�e�*.�P�Bw1���1��⁖�^��bYp��-{n͞:㖌����)X��H��1��;C����؋�ZN��x���^�8V�������ުd]qy�d� ���č�a�iӠ�{O��"�Rf����B�V@k}��t0[����c�-2����������a�=�I��W���ý� f��S}�q�"�$��������w����_H��Y�E���M���Fe��3ɉ�i�d��1���w�O��2���?A���n�(�@֤��Dt �(� @y�&�jKZo !��ـ��VU��n��'%k�Z[��69� !̰���?���jAP��CI@��Fy"�FM�ԏ���}�;-0'������*rx{]����n��3��]}�E�b�O�x'����4}mAd�>#���(�JO��[�S��O�����@�2����tN>�� ��L�9��+7�r�A@�3�0�(b F~��p��ԍ�i��l4��-_�3��v�`��e�;H����]��2�ʣo!���?��s���Kw�.�Hn����yH]єW�@+��Ԏ�:۫�6 P�˓��N�]8\���;j��p������O���uF�|U�^���Eu��,�Ӥ��S�F��n��X�#��Ʉb��J3ٻ�1��GV��m���;�ږ\��A5i48�h������z�����D�}����x�W����Ձ- �C������g�|VW~-�!�Q{K��DT� j���c�. 2�Փu/���%�n�W��7��P\Mh���/9֓�1a��t�������E�O77m�Ƒ���q�p��K&�p�YW+/�yp@ɩ54���`�~��+>7b�n�>)RF厂f@�� :+1�~ �#�Ž��~���ذdr{����c��d�=�N�ϊ�hu_������Z�}����4��$�Fڰ�uq����ݒ�4�+��H>����Q�(�l���Ǚ ���=��@=Å;2�fi��vk�uJċ#K)����N=TO �{ėI~.�����d�v�O�$�G��( ���d���l�x!\����~~-:��m��ː Y��y-R�vB�|��S}$㒲dUkf�XW�r��t��P#���c'7<1꧀��B�0�����U��@�m��� |�k0�ۆ1�S����fR�p�.ʽ�@{�����kh3��~kHk������-`8�~D���U�µxob��V� �G�Ku�!��%K=����Z�1)�>��@������(����)�@�����U8��[R�������Yd��~���Х��K]��t�8����6��EM�c-���R>n��X��J�B/��e��E���2٦�U5�����M)��xܿ;.�iF���̌�?�Y��^��j�HXV� T���� 97�l���_��`H ��m�Lx��#7Ö�i(TST�Ґ|H!F�� �E�x��O�m�S�W��)����2y�`�� � �Lu�CC�p�`EËi�VaG�����g�x����|�RG�eޖ��ʃd\^��Z�A5>5�Jc��D���h�2���&�%CG�^��6�� �s �t �?���Y�Ӂ2��[�˫��_�c�M"?�d�hNC�kwmˑ��J�D1�ss8q�A�_�U��Ef�^X^��Y56����A�.���s�(�B�Y֏�����0'�Grsjڻ�5�� Bl�+���.�i>��fˈ=���� }v3�����_A=�ez���pw�w0��`��w['�V{�dQlt:��E���u��ɵ����N���kS�64~�u�`�e�^��YӺ�/,DY� P�f�1��xJ���Y���g/M���rb���Ɋ�ԑ��2����$z��f�)*#9|���N��H�o�Ԩc�!��tp�Gq�e',Ls:n�"��!�,�l�D�)���2j^3�ֈ�Zѕ-jn�$�Y��Y߄^�ܓBKv��w:�]�\M�k.>�+"!)����?����x2�R��K���c7�Z�Q3�[�پYgW|�#h���B��Ꙟ*�3�C�y>��܈�V���Iy���M��f]��-�M-Q�� �z��.�Ƚ�Zx�N�2ٞ�C��/�P�L�&��-��̖e�h����K�$��Z`�<ŗ~v���_�7�u)��ڨܛ������Z�������Z:���E[� �4��:̧�4����.�5�g%0�D��ʬ+�mMenu���}��������#hHQ�+��&y���i���ַ�AI��( �"���7K�� ;�wuLrI�^��s�*�m��H,;L}�4������ Ķ��lV���դ���������a��b:au�����k,��4K�0���s2�4&�kc�"��r&�a��n���B�E���$�~�g�e�;�y��yL�~��X=��O�cF�U�i���.6��)�S��C3��8MAȉz���AT��O��BD���t�\�b�
Static task
static1
Behavioral task
behavioral1
Sample
74b1ed6099864ae63192fba47efcd28d1cbd4b96bf6984d64308c0690aee7959.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
74b1ed6099864ae63192fba47efcd28d1cbd4b96bf6984d64308c0690aee7959.exe
Resource
win10v2004-20221111-en
General
-
Target
74b1ed6099864ae63192fba47efcd28d1cbd4b96bf6984d64308c0690aee7959
-
Size
185KB
-
MD5
ba28917f01cac018fd35108c543ea935
-
SHA1
76cafe7830f5154572848730a02acf68b27066b4
-
SHA256
74b1ed6099864ae63192fba47efcd28d1cbd4b96bf6984d64308c0690aee7959
-
SHA512
229fe0540f81ef025a4a6b776c2b2ddbca0d0130416b448b14a8a306c2704f26108d60eb8d160ff90e90e9bbaa1b0c0cbee4fd005429338d629f6a191bf7d484
-
SSDEEP
3072:IO/DCCLdZj/RApeCxGobqoBH+Phb8bMDLXHihV7+O3RgDDUFpORNZKuxdH+UOUM:IFCLjrUeCxGOqoBHU8M33/8gD4gZNded
Malware Config
Signatures
Files
-
74b1ed6099864ae63192fba47efcd28d1cbd4b96bf6984d64308c0690aee7959.exe windows x86
d5e0355f8764c235b38759b860077ceb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
user32
MessageBoxA
Exports
Exports
Sections
!EPack Size: 40KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
!EPack Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
!EPack Size: 16KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
!EPack Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
!EPack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
!EPack Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
!EPack Size: - Virtual size: 24B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
!EPack Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
!EPack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
!EPack Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE