�f�$H� ���|"d�Y��3n$$S��Y��q���E��Ϧ� �<�>O(=i�����\Y�&�l�V��89�J'r��*)Ow���˿���K�V+��>����%��J}�-idt= c��y֧=T붠/�e.�o�⠾p��i�=��b�{�"��&���������[ߞ�"��+�K�״)6�6�~�r_�� �.{���6����},ݦ9���\�J.h��~�+��� �؎���XW@OR� �S��h�$��1<.����b.��#���b�܉\C!�1�W!EϾ�a�ƛ���74AT���{k~PsE�K5����0ok�\!N*˂F<=�3&�+D�6���sE��0����-�B�}jh����3@�Pa���g�\���G^눟�g��L$�S���b��{���S����x�SR��\�%׆����醗�ŻC�w�*kx���������Uk���H4�<~��\���Qλv� f�S�d���q�%�j#]g���4_�vwx٢���85�� &�5Qb��͍ ���?�;���Qe#���k��J�Rpǀ7��=~ζ:W+�2����U f'���%�^�Gt�v�M�32>�?rكq �����Z�����]44ZGn2<����\h^��Ca�2�.O�����NFU�%�c�@����f�X:zVa~�&�t͆���&ri`uH��������V<���8�YѪ�!���j�>��٧�5?�W�i���}��K�m&{���$����dv{2Bq�dDwޏ�&��W�j�����?P2a�Ŧ��q��w[�D[��J'�&�Q_��m�åK���]֍��F��2����.�ӊ���~����� ��v)��J��+{.nI Mvs6������V����?6�}��<�����N�&�Į����H3����X=�w���A|`|A��[��Ǜ$F���G�&p�r0��/B�o)9�d��?�U��.��L���C@�.*�iM��6���g���P���g��>�N���2 f��O�q�&�8U�S�>w(175D�r�t��R�C?�B����cb��j�wޞ*���%w�@�����{�Z��uo����w����O�C�u4!�'!�-5"� ��m���2� +D��$��@o��"�o���V_�?1p��j�XS�<�E_S���ب^��8�cI9�����R��Of:���ڶ�V�gC�v�܂>������@��V�9�f��&.�,A��>� Q�`c�%0:��紕`���{i�n�4m�0Oa���v`se��@���1p7�{�R����.�cӋ��G�Ww�|�..*��f��s���A@�{S5��� `�r���Kҧ����d���)���àiFv�U�ݯTE��e��p�"�DL�X�A��H��{��D�� ��qJ���W�ѽ�\=j��G�1�$H�R���9Ƞ�s�O������0��^��6S5�R�ֆ\�$���Ak�ڼ�#�ȘB��?� 3H���Q�U ������x����Ms�&�0���5�P��8���+�o�(I���Nʦ�4S��A�Gjj��e��X�;|j�Z~�T����Y��=㽀�b|!� O�\i�j�X�H%�S�Z'��Ɍ �0��W��[�+����=ִ�1 }��s�n�&�A����2q'>Dd����r��[�G��9O��{ʕ��5J]8��U�i��`����ê��glm>������츔����{S8 w�(����*�z����>�eH�C��S��5*�18$�-���{��5Vz @�ǖ'f%$j�b�6�eE2�Q�y'\N :����ZI�hr��J���g���U�i;�/-�F�i��D�S���DԜrW�����0���Q��� ��d�G�q1� V(���r�m��M�:\R����1�30�[^J�,3��`���P���Ѧ$ڋ�8�k��y�+���ӡ%J]�n�f ���ALd�f��C!38����*�6V�I�k _��}��Y�;�q-C�ḪA�(+=��<j�v1i�-H�`ϒ�Ҷn҂pC�1:(ޡ�J�Q�����7�E㋴#�@�߉��G�r���<�=��U��f����g�����d�+ic�*��M�˓je�E5�H������y� ��������xJ�~�i=����p���b}x�Z��Vzm�ԠWJ�6���o|�8��CH��?s\$ �r�`XUx�\L���Y?�7�ވ�e�P �"�����h��4�69�L� �L'��m���!A�(NaEenS�)sn�� ƕ��h�%��W4��Q��d��^����_�.EY�5A��q��x!�'��R�+�K��i���������ǎ�@��C���ֱc�su"g<&;�0�y��\� Y�ϩq���u�����"����O��!�@ �i�H�m4�5���C���-_|��W���zS��O �k&$�o�La�`%�h�d��ۿ�I53������-�F]FU���Z�5�$ȕFQrc$]��!f����X�ڒ�į>G��th�&?�i�l��ǟK� m�Q�#�-�'y@�Jc��p)�T��o�����p�� p@OIi����*/��yeQI��LC�����k&�n�$�n:���.��(��������W��hƣʿㇲ��u^�y� ���(QJ>�M��� 9Km��w�}*:��>��Tm���`S���b+���T���C�R>�#G�;��?^.lk�]���@DgR��G������/ݞl�Mr+�Tܤ����4 W����[�ا3��Qr�y{�P+�:iS${�b���(�;�I9s�����o����K�)VKl��î,�����"�r!�E,���pqh�%�do������/'����#%��ZZW~W&7plڻ�J�u?��,��1���K��1���N�c-��*aV2�t����J(��#��Zbw{�鉮*T?=ǧ���fA���T�v��Uk'1`��D���2>�:u �XMuB9�����zem�����-����hol��Y��y��}w���o���gƪ<z2�/���S%�
Static task
static1
Behavioral task
behavioral1
Sample
307ea21a35bf42881eab79044f038390e17a5ff60f9f3adae6aada6565592b87.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
307ea21a35bf42881eab79044f038390e17a5ff60f9f3adae6aada6565592b87.exe
Resource
win10v2004-20221111-en
General
-
Target
307ea21a35bf42881eab79044f038390e17a5ff60f9f3adae6aada6565592b87
-
Size
2.3MB
-
MD5
eb0e5c25cc00f6ee80c9f8d175c99bf4
-
SHA1
7a888a94f79f370b9a69847938befc816e11cf16
-
SHA256
307ea21a35bf42881eab79044f038390e17a5ff60f9f3adae6aada6565592b87
-
SHA512
1ea198143a1b0ae9607d323962b457f74df4570555c17653ed27415b284db87482413a30778cdf9e1069461156735d08e06e7aa4ac124c46783ef67f6c1f697d
-
SSDEEP
49152:t45bfr9nkZFIZk27EIwCYGb+OVzRx9vRcLwzyfzW1Dj:Wbz9nkZMk275wFGbhrBwCQ
Malware Config
Signatures
Files
-
307ea21a35bf42881eab79044f038390e17a5ff60f9f3adae6aada6565592b87.exe windows x86
a57cb592a2456436cb7363b3d7636774
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord303
kernel32
FindResourceA
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
winmm
waveOutGetPosition
user32
MessageBoxA
Exports
Exports
Sections
.text Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.VCrypt0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.VCrypt1 Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE