ץ���#�����e:��WP�J�u�ꍽ���WW��J1f�K?h3��PT ����|��)m!�����N��y���*�����9���j�g�䂮n;���w��m1�w���>^vِˁgZ��_�C�Q�V�諢} ?S)���n��g�w]ȏFR�L�6�����ES��c!�����ƚkՅ2]�%�2`�' /���wr��D�.l��d���Z$$���r+�Ʉw��2�6�#�TW�;�.�Ϩ���xm<�:�/$h�|:�ͥ�a��~nD7���T<������&�Xϵ[���i���3B;-!��� �ug]�Y��d�tj2C�������a*��X<!�ʆ� u����m��^�|N�3��;Eɦ�tQ�+�)�N9ɥ���.���f���qߛ�wB]k3X)!6�>��1����������W�6A,���1���We1�1��G=��S�OvnW&��7Շ��3�QX��q��l'�v~����/�\tt� v�zPs���"�t�ཱྀ6��$����@|BT;6�۽-�����R~ ��Vam^�v���p��4�v87���д �鬦N����^4�p��1��������{�u�|P����hB�#k���A��$��{�wN�G�� ���L"�����q� �c��"hͦ�����8���E�V���Ӆ�{;�H��ۀ��VYy�H��ٚr�?k�l��� ��{�3�l)ހp���`R�����6����+c����2��Τ �8�!���ą���&q�r��i����>�����x��b �C����?�6_>1��y_J������H�SPQqDm��Q&�ͣ�"�W�E��q�p[Q;�|�V�MlN��i��F ������hG�:�.à ��Pys-�����j�;�gu"q8wJ��� q�+7iqhOqVI�S�V��ҳ�/�G�f���I�ԕ����`Y��p�A�ɭ$�G��4Ė�l���!)�U��Z6<Lb�b+DFN�������Ƴ�(F�2,�� GI䏓��o,�;��DF=wva��Qv��>Qo��������������ܫ5���U�'���7|i�A~��ʈY<���+���"Q�O���)Q��eV�$4]��ZxF�U���0�!�3�kXǂ(�>li��I:�����5�b�(���N�(����C/UM�W6�e��DI���#�aK}B��>W]�t�k0�������f����� �h��� �ѥ���,���i�|<8�x�?�)�>��=<�Zb��d����6`B0�Ct��}�Dh���^?���O>9x& ��HQs�rA&IXܘ_�V^�ϖEFoOr8�'K�X�B���n3�į�y'�M30&_mgyI8赪�Ro�����αm��"N���c�|�q�a2��ô_��'��gU��PP�xJ��P����t�� �����N���n���:�R4�-(�U���҇Y&�,Nv��b�|���|��Eȹ�ii5�<�-}��v�#0�v�@tא�.q�V|b��@i\y� h\�/=�8H�Q,��_��G>)�ͫ��8[!_��j�6���ϒ��$��ȁ����2f��t׃� (���3���XEW�e�������"y/�lsr����4���́�'X�N��'�o������oTL��L_н�IDS��U��%ؠY��F�E�%95S��3��ewp[�Y(A��=W�\p>�45��iƅ|?K��p���z�o%��r���K+Z��� ��U���M�*'�$ �+��;k�[(,,�i ZjV���ϵ�pt-�,�'[�~GY���i�-v������i�C]����VP-���ؑa�� �Q��L:ZE����=�rw[dIP�?��\@��Z�"4��<+��ƂX�UĠ,��� =Y>=���l=;"D����f�}�Ӌ�X��Q>��xQW�c�� �^T�s�� ^Ĩ����C� e�I\DSkrg�A/�ku���J�� ZdF����X9�Z����3�3����s���1q���꾏�x��~�~��c��,�����H���nE!;1��ė�o.LJJ��}�� �]\��@Y��;�*��"s�zUk�.�5r!Рo8,m�V�"��h�ytً�l�pZS"�X�ۊ���tW0��$i��q? Q�=�e�V �����"�!ds�m�H���:"��<@�Rs�QH��(K�%Nk�~����*l`o7KB����6�"M倉W�d����pu�NP�%�z�͊}.�����+v[K.L^������\���9\��i�m�T�߁I@�4!W��G ;�Dts�������,�|�_A�lC�/�E��U�c���t�Z�kNO[�Qo�}6�Dzs9ky�4���v�\��]gN�Pۥ�(5-��8���n�TPo?n�SqQEs��3��?\Q����Oޅ��} t���kc��̈7���c'V��6#i��ǔ������Rڛ�`M���%t�Q���Y�Fx�eX�w�+?�{�ܡ���/��K̞˽��ﺴ1��Bш� �9>����Z��A�lj�%��Ю��o; �=��MT�=X�����%Q����~k����� ��Zށ�.��+-���nh*VTo ���bQ/��N?O��G���r�B��>_�'�����Q��T�əe�^�n�H��][���4�����(F�oZj��I����}Ԑ�@I&�-��TՇC^x��5��|ZA��,&NʒJL���10�z��i� �!+wZB�Ѧ� ~��Z?�F�m~�S�������P�av{o<>���M�~��������P�VZ;�@����'��% �HYg 3�w;`�(Ш�Ia��QY{v*b�����"�Rt���~��n/����dZ��+���'N���MYV���>u�'�7���ƃv�,0ƚi�C����}c$4��ثb^�P�0[{ ����Nod�I���a�#~g2dP�N���\��N=��M@S�O:������1Hw���q�<� W/V~ 5磿V���vy�E��7��/���s3�������d�9H���E�Z��b-�H�qGX
Static task
static1
Behavioral task
behavioral1
Sample
1807fd636fbca7cf5e25df2b693a5db29b035247193991313c61c443982b36a8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1807fd636fbca7cf5e25df2b693a5db29b035247193991313c61c443982b36a8.exe
Resource
win10v2004-20220812-en
General
-
Target
1807fd636fbca7cf5e25df2b693a5db29b035247193991313c61c443982b36a8
-
Size
1.4MB
-
MD5
619d2447c9b75e2281b72093e219b35c
-
SHA1
a2963bbefa47771df9638cf3bb7e4634146bb814
-
SHA256
1807fd636fbca7cf5e25df2b693a5db29b035247193991313c61c443982b36a8
-
SHA512
5d5043333fc087912b22fb47f263468a682c53236f072d0004fe0d44edd910f206975bb32576662dc4137e8293cc75ec43b6a36e5fe32d7f4dbf64aa7d7e86b2
-
SSDEEP
24576:yfEgeeoQ3li/R2sKbmOvz/PDvG+9cfVDjXby+j5OYS+UYRxCcQBJYD7ymg:SboQ3SRtwFzrG+kV/XbhtRS+zGJK
Malware Config
Signatures
Files
-
1807fd636fbca7cf5e25df2b693a5db29b035247193991313c61c443982b36a8.exe windows x86
4bb79fa28e2f6507c87bc3b00b264dac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
waveOutWrite
ws2_32
recv
kernel32
lstrcpynA
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
CharUpperA
gdi32
SelectPalette
winspool.drv
ClosePrinter
advapi32
RegOpenKeyA
shell32
Shell_NotifyIconA
ole32
OleInitialize
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
oledlg
ord8
comdlg32
GetSaveFileNameA
Exports
Exports
Sections
.text Size: - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 374KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 366KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE