�]I~�˽y��SD/��I�ƷAh��O��͞�u��3M�T�>����]3�Xv&�Y&��~�i��\��"�x׀CdY6��tg9e����[�!/����91�RM:=]����z���%���{Bؒ`��9|1�)L4Bw����A���l���]���H#��s�<}��rtV�4!V�Ka����C�5��T��"d�RY���v��\OESi�t����a2��E\��[c[l|�~^���W�����u��tӑ*NJ��}�l3g����yizG�����~�� PB��=_���3h����*�f�^������:kEb껃)C����I��'��n�� ����|zV y�|�y�R�v2ޝFw���������������ّ��k���~������Fⷌ��6=�������]���yi��9�0�Iק��Ï^�8=���UV)Z�(���J��K}��Kо� �m�NM�v�3�C4�Rj�����|j)��������,ޝ@`֘��V�!_���%7}�]���q-�ӿXZ�X.]gJ)������W�4mI�p� <�m�<�j�\Y��M'������S�g��V��FӄW3����tק���HD�<���զ�E�B�:_����kƼ1��� �_���Y��t���=J�m���N�v��qu·Аkv$��Tٛ��<���ʩ�E��:�J�+�V���F:�[_ϖ9=���<��+<1��p���=�=���k�iع��S}�Y ",+<����rJ�͎^����������eG��E/ς�n&��|��T�P@}Ԡ��r(�A^�r��,]1C��3{���3.׃6 %PA����"kǻ��$<�C�Η�Ua6��z lJѷia�"�Dۗ�� a-p���7��luVB��Օ4p 0�&X�JS����`��%#�(7�}���b��cV�՝�>�K�gk��{���4��Č�C����Y����;�H��TP�ls��&��[���nr��5�����9��zZ��T$�w=6������c�u�Fv'��ֻ����.���L}o�i��GA)��^W������]����I����8z^�X&r�{5�Qؙ�L��U�h\�pQy0�M)���#�Z t5s&� ���t�.M����<�rߑ> �&�;�|���py�Y�������/϶���Nr=]�.�y��Ӗ��g��(�T����F�HA�R��#<�$v�AAI��I�����'s�%��~�?38���I�� Obq�x����iI�j��^�=��٩�s�D�2��y�`10E�8�w;T��i��W�5����y���v�=k���&WT�O~e�7 ��)�/�7�^�C�C�7�������ӽ>G�s1��1]�ɟ%�1ʜ�������a4�l /���'O��&�(~L��.�����=��@xs�w�F�I���ݤ�<���&x�UH,�7 ��]�s���K�c����`�e���o���]I�0�R���$�ƌ&�V4�׆�-���p�7R�-}������e|[�>Dm��Q�o5�(皆���I�I�0�+T��Y9�W0�0�Xs�v�A6��0�@�ǘ�ʍ�o�L����_Q۲4�K S�[O�~C3��`����P�0���~�~t9<�-?�b������g.6�1ϼ\���h&��xhr ��ճ1�(ԲM��g����X9��s�q'����V�56k_�2����Z�}ix/�|F�E�v�z������nUT��wA9�b3��:�f�Z~�,���_�r�K>�� ���k���Z�&��<�HB�x)���k5�'f4� a��)��#gŻѓ����@,U�����P߲g���4�(�F�LvH��t�)o1�4��mb��Ŀ��$�cǓ7��:��: '&ʎ�����s,��.�;�ͅݞH�oe�c��`F%hKdXLnv��1)��*O$x������yA;U���r��J� CA��UﭰŃ�v��V&g}�]��E��#��_։��I�F��5F��5 ��nR�D��µ̳c��� b���_θ�Á��C���Ъ������Q@����:�j�%���-�� ��f+Ѻ�����:t��a=���-���.�{z�� �_�������Zk����3�հB5�E8����e.��z�j���*�v�\>���!�<-KL�VM�� �Z�j>w-��>�"��pz�|zj$U���|�'�1٨ ���!Jx[U��B��~kS)L���o�j��ͯ�v��;�p��|�,�=��:��\6��@�W������1$R6��e�룐���t/l/�l�!k���5E��(�n������D͂�!U�-�̕��I�OpJ�%��/��7&��h�e{��E<�ת�\ϵgR��~��S�6U���m)���2�\+����(2�R��6�"������������Y������� �&;݆y���rɝ���f�����B���r����iv� *�ce�A���co P�7h���x���N��$Ac���+���9����?г=��W'h�i��F)Mhl��KWы�h @��XL�V�s�^� �!�!h9���]8��_*�E\1�3���;5-�u�!�m>�b���:9�KE��<Q͂��db��?Y)y`� 4z�-�kg�!��ɿFT�:����Z;KE-Yȑ��h�m�������ބ��A���_�IC�Kx��v�$���_�v]�Pc�st���@��a���^�ۀ"�Sl�[ht�CB����2��U7��)��MJfy������X���W��Yŀ�^ �k��37 �?�^6�7�8ʈe8�O�\j��RUZ�,���w����$ZW@�rPF��B�w|��C��#dz���s���ošd�MB���f$����9`j�ȄTb����Er�-�/�+���\z}�$�n!>e��t��Ź�7�������_��XN�P���=�~��� Z�mz�'�,T('�� N�ȐU�'}�.v!-f���!6b�]N��+l$2�۾����ND�Q3Nҏ5�ҝ+�N�����AE�{��P��ݳ�EDz4�B*�a^,
Static task
static1
Behavioral task
behavioral1
Sample
86b77eb68433341d2ea7dfe22b5ce002ac88047eeaad386396f0fbfb0053ef0e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
86b77eb68433341d2ea7dfe22b5ce002ac88047eeaad386396f0fbfb0053ef0e.exe
Resource
win10v2004-20221111-en
General
-
Target
86b77eb68433341d2ea7dfe22b5ce002ac88047eeaad386396f0fbfb0053ef0e
-
Size
3.4MB
-
MD5
9e6a7aef5bee34310340e62ebaa92bc1
-
SHA1
da8848a5350e586681b61147e04ff4a43bad0226
-
SHA256
86b77eb68433341d2ea7dfe22b5ce002ac88047eeaad386396f0fbfb0053ef0e
-
SHA512
fb44e57196ed128435529c0cf2be684f91433f359df0c2691b17a1e4e6112477dc1832edd4beae46c20db714d0e36d7758fa0bb33086505fbd6d74db0bfb7d66
-
SSDEEP
98304:yZhp1wFNIVLfRlDVahCHDVhzfkyWyt3GFwwR0lC9wv9VRduQ:yzpjllkhyjDWyWiwR0pR
Malware Config
Signatures
Files
-
86b77eb68433341d2ea7dfe22b5ce002ac88047eeaad386396f0fbfb0053ef0e.exe windows x86
8108c5c51daceb6811f8daf62a97c325
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FormatMessageA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
FindWindowA
gdi32
ExcludeClipRect
winmm
midiOutUnprepareHeader
winspool.drv
ClosePrinter
advapi32
RegQueryValueExA
shell32
Shell_NotifyIconA
ole32
OleRun
oleaut32
SafeArrayAccessData
comctl32
ImageList_GetImageInfo
ws2_32
recv
wininet
InternetTimeToSystemTime
comdlg32
ChooseColorA
Exports
Exports
Sections
.text Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
CODE Size: - Virtual size: 330KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 607KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 317KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 3.4MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE