��큼���.��������^9Q�}a�kJ-t8���3 �AB��RD��k�qܷ��P��A��`Xg��d$ �4Q��@? ����f3��do4s\�N�^��yq�=c(� [n��_�2��Mf�JYl����Nlsd�R��G�4�3�2f�{�z�l��yo��z�HN�+��+��geK����,2L��|)���C@/���a4N��j�n�P��]�S ��PEV@^B݂�!����dv �v���0�+Z0#+Y�����7\!���JK����� �pd�k�u 7�~t�l@�l�=�����C��� 1��ıԧ�-���"��6,��䐏�'�8r�G�;k��S����;!'�}5���ጧ@�0�f�m1*e�0�m��6�c�{�#�ѯ�� p�ǯ\5��h�T�(UN���_�@��f��xQ(IH�>�Z�*��{n�[��0E���Zj@��np� ~�A-�d���;V��4{� t��W#Oֱ��������ڸn�H�M�:l�\�����o0�z��\��J_��,�<���Z�1D�N���bw-�#b��iX�:�Aj�����7�Z���k�����<� ����qbm�S�J�y{_z%�H��{�G�FF1���C�N�tM�v��je巂�\ �p @h;��U� ���X���/@��v�u�x��(��萫�X��+ӻ�N�����a��YSχ�-�����/���W�y��^���<(-���B�g��������5ńkɸDv�o��=5@�$�4ǟ�J��Q��p�Z7M��Q[��)�<J���`wSP�/��W�j�����0J�4#3�GR�BI�(v��q�g� -~ ��7����mE���PHw4 [?�,��� żaW����s!y�e�\�-��{$������|��(��݈:����F�e1-��Rg�.��_�⎨�{�Q 8,��Bs\ �hn�3Q�nf���Sٛʣ`j�y������ �{,��l#����r��C3T�_f>NnU��P�%=���1>|Z���A���+�� ��l�a��܀�p� ���x�[o-��T�O)�t״�;J����EA /6^:wW�r<=��f��@�,f���U�z����L�~�>x"�BS�NU��:Z��w�*ܗ���/zs>hR��=�����-D����:�Q�8����փwQN���)��Y6�}���8�����pP�MM6!�;O�U�%>���Xg�n#����z���P�ԕ$���J�*�"���\�$�膦H_�}��K��g)��f��R�Ň�Z���2êw�L����bz:e3�6G����?� ��߂�f�C�Rű��w�Az�$�ӄHM�x�}@���/\��w���J�L,=5��R֘X��X4��F������Ү"V���F/yGBw�:b���'��)�(��P�Cn D"�%w��ر�w|���M5�7HRuI�X��zYc�3���h���TvD� @�"ed6�����J)_[02���6}�/�^��vK���i��HE���qH�V�܄҃q�������4�&�3z�HقBe��ܕoC�/¦���s�SZx3�h�'FF^��W��pV�Y����?� JU��P���rFS��I�i¼:�+�O1�؉��v�'����U��*a�;��x`q=,b���!��D��Zwŝ�I���#B��͋W�������)�fش�n\8�]g���י�#�³�ˈ_;�ګ��=~�l-Oz� ���[�-.����>��7d8���2@�Ҽw���^Ԍ[~B9��mC&�l����� �R���&5 ��3�6=��4��k3`!��,���>�Hz��Z ���V���Ex��p�{sDE��L��`���R�\2��g��B��N�����A;�j�)�����|�.r1�߄4�\U��}$�0�g����Da)T�)����Q<�Q��( 0H�����E��R���f�H8J���T�ᩎ?��D?�q�Tv��/�� o��cd�}?��bigT&KG����A`�Sj�#�����z-���]RI�l��ɹ�XN�T�8?4����ξ�� :�rS�BC�#����e�pA��g�Y��o�^��ڥ�m�Ѫ�n<�#� 3p�`�r-�jn����(s��k4��}I���ab�M��杣�l0���yWP�E!��D�G�"��y�Qڇdk�|w��D� /u�c���@�CN���^y� �b�b8H��{��]��S���ʆ߈2�k��#as ���z^���ǭ|�ɝR4+Ϣ*J�,��3�ꆕ̄�jn���V}!^�1{��k�c���b�_3�����Uk���-Tl����V�X�j;�+7�^(4��RE�Y����zuqL���d8�Ӈ�a��e��̯ Ww>31�G5D��\��UyaK� �e�"i�BY��Y,���F��}:�� �b��}� �G�� QGZ��I�������yN��Hĥ�e��9�ui�� �`�W��L`��3v�Ag��ޭ�}�2���튽-}�:���WD��\L9g�#��cU��Z���"Z�a֢�=�y����m��7��E��<=����4�?���ٌ?&��k�z@vb�}���k=�B�ơ�ܛ����X����t`��f��ey�A��£�����F�T�ç�yi;.ɽv>(��a3d��e�!h��-���rfGO�ʵs�g��o�P�Ot�>k�V�hh�f#��[�����&��~�;.�hM"�{�t0�6F[9��9ۻ!�흵�}"u�^��V�T�R�GH w���k��?RrchhVqHrjw�¥��b-�Ϝ[���U1�YT̒+�)Wh.�j��*���y2��B�_}0���dي*{�?�4�w�j�����=��^~�'n.�f�5N��kܮO�zA��>�9��Ѡ��O\ᑼ�I�;���y��O����q��PN�Lz�ֱ|��jZ�R��{5�m�?tF�1uX��j3|����t5�!{�}������W}[֟�Cr]�����Uˆc���K}�5f.UL�Yv]>_�y9%V�s��%�c:�-m�
Static task
static1
Behavioral task
behavioral1
Sample
89205ba24ad3d35be94ada876fa1140afeebdbf4d6083f31403c3d3e64feacfc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
89205ba24ad3d35be94ada876fa1140afeebdbf4d6083f31403c3d3e64feacfc.exe
Resource
win10v2004-20220812-en
General
-
Target
89205ba24ad3d35be94ada876fa1140afeebdbf4d6083f31403c3d3e64feacfc
-
Size
2.4MB
-
MD5
cad86870e1bff05cbc82390e827aed62
-
SHA1
9b3bde4523fb576f5d74be00ff8270d40bb0bac8
-
SHA256
89205ba24ad3d35be94ada876fa1140afeebdbf4d6083f31403c3d3e64feacfc
-
SHA512
77008bd2e89e99605325d0c1431084add67a1fdbc5cb03b39194bf484664c63347aab107dced74d9ec45489abf7e4d515291ce78806cbeecf615a12c80b32ab7
-
SSDEEP
49152:HpKoUbpzXJefuMwOvFSukyB/K1Jde33DifWXJr8Jn9lBCkC+Y/:HptUbpz5e+O0Vs3WeXJr8JrBCkC+Y
Malware Config
Signatures
Files
-
89205ba24ad3d35be94ada876fa1140afeebdbf4d6083f31403c3d3e64feacfc.exe windows x86
c4783620b275b052cf72ab2c4505b352
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
__vbaVarCat
kernel32
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree
GetModuleFileNameA
ExitProcess
user32
MessageBoxA
Exports
Exports
Sections
.text Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
code0 Size: 257KB - Virtual size: 257KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 24B - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
code1 Size: 1019KB - Virtual size: 1019KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 200B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ