~ Jsz�4�CReͭ'$�Ip-���74FK5��`DM��PvD=��fiFP�aƲ�B9�� ���d��j �i���J�7W�Rf����{�����>��2�{c���݃G�� ����t���뗜�j�C�LD�� P �����-vl�u�BvDEɭu�z��&���m�<ܦ�?��@����:�� �4�r�Y�)j}��,�U0�́��\X_B��uT�� ����I����(#�[��RbM��CC�Hó�R5N�z]�)� eӮ5�U08b���&r͜�<+х�JrIb���_)j��-\��������g}��D�N��P���DXoH����1��0w��(.�=���cr;�4�BiнJ�J�[�-' S?�8$�� տ�5l�^wW`�i#tlL�M�����[Z�u�B��-��pj�����5gg�\�)��F��G9f��Q��X0ee[7�G��U�`jy�������G��3�*l����������f%�������O�*G�6;�1�庳�hkb�t2�#ʗ8��Ծ�/Tc�C��Ʀ7:ֿK��_�+�ٔ!{�;�@$�]���)�r>4o����>��<Iu�q� }lO��X`�5Һ[��Z ͮ���1xl��|%V% ����)k^~�O�ܓ^7 ��&�*���<Gr1�7��t�3C��%,����3�O(S3�H�wW7#���Hǣ��r]������=8��2(�/�x�]�/UTS�ר~�Fp�V�ǚ������6y�S����2��k��-dHL��Z�y@���/�O��v�����=��o!3m��hh�n�^V¯W�p�����2_��;���-��M��̨9��}���U���a.y�#�D������;P;��2��/�(;�>������I��͖'��F��HJ�/�V��BW>b*�o��8&��t0�8� �+��#��]?���fdm�9y��Y��Re�-�Ԣ��RM�u�}a�a*�YA�uf��V��JR������ �PR��F+�dJ��e#o �B���|�����U�9^�iu�~�����z��s��%� �]`�J)���]���S(�˿��3���7���<`����j�ԅ͖���ߍ�]D-S��4�����օ�T�; �����O��� ����)�&�v ���+���t����Fu��y :��d?+�6,N�͋�����2j���Qf��\5�it��`c����j�E j�C,e4i�x���R�$��_�&`� �Rlf��>v*�OV/<���s}�L���x�m�e��N��������&yʴL�w��L�N��[�ٻ��خ�5GN��X��WC�D�$�&2�Z�4��GD�6�}�3�*��=�?�{ G�������В��/r�S���t�G��w Qe!���U�Q`/�d|� Q1(U8u|�CV������]�S.^(����im�>�C���Υ�bF��i����d��C�/!��ȶ'L�Ч�x7�FwH�!���4gm[A��@�T�ns0 ~ �X�<_��O�#�I�H:���{␣�����^y`ֿ��5y���;�_���msp?>�T�3b�Қ�HF-ٰƿ;E�b�\��m�s>�����P�����8�r�{�q��m��`k� �z��,H��.4h�Q����i�)xJ��7�bg@��$��� w��Q4G� q��8� h|���i��N�Lj~79��l�s�E]`�PJK��6N7"��^S��V;���,�TE^�1'@B�2{�l�z�'K�+p3M{���M�e�4��BޒO����8����:��8��Aᇈ�MC�aBc��g9�T|���W'6=��2�.Y��ؼ���$x�,!˷�,���/� �K�TD�U`� ����.���,\j��� Uz/j�j� ����&slj�C�w@%-��'���iP�=Ϟ\=="�b3�Z��`��F�C���F����Eƶ�p�)������ٽU\�,�r�.˒r��7q��cÍN��5<�$��?gX��h)8�,sg=On��`]� \F�xC� ���@��!�'�t�Yg~K{�0��ig�W\Y�8͉�>xX L_���f�����u��w��%���l�� j�Mi�6�>ky���"��Ռ_�Q�~�P!���푚��A���\:���l�=����Ҝ��`�@K2��y!�����h�9�D�SW����?�%���h�0�J�ۃ<�}���^��O���v+v2 �<A�qq�9��˔�?vzS������I ��?�J22L�������6�/qq41#�&m��8����������'[�u�5j$�Ν��GUUΠzV�)Es5 @�_��P��+0?O��������}�L���D���sQ 0c�.4w�9��ޠ��*)���!3��!�c��!��.��_NO� P�j,��#��%���D3��_��/�싼��\T��3ѹ�J��8��n@�3���B#v����;&���0�9�=���a���|X�ѫɝ��q�ƌR'�����)%~ш��b�th ����"���2���e������� f���`n���7A����/.�:����n���D1l��- �j�8w:nn�9b�;���C3�*���0�x^�x��_�z.����5�D�Vj63'V6(��p�l�����x �xf���ΗA�F�9J9��ex��B%����ch.*�o]/�;�]Z\A\!;C��$��3Y,8?�Wθ����@ ����}�,:�úf+�\}���h�цK���~��R D�W|���e@J�����榖�������x]�dk|���Œ�ә9Hϔ[�X��#��p������S:G;A];���m���73q��Y�k����N�s�&�!z��?���Χ�I"1���ky�I e���*����x����C]t��SXTc��o��R��F��$܉x*Ӣ����!�xocYȳ����������X�]����*�l"�w��A��!��9��{ L��ؙ-�c^�W��L��A�ؒ�PA��U����w��
Static task
static1
Behavioral task
behavioral1
Sample
aec4de2eff0323b5ad247036085e29bb47fa4df50130dea24eb7fa12561fe83d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
aec4de2eff0323b5ad247036085e29bb47fa4df50130dea24eb7fa12561fe83d.exe
Resource
win10v2004-20220812-en
General
-
Target
aec4de2eff0323b5ad247036085e29bb47fa4df50130dea24eb7fa12561fe83d
-
Size
1016KB
-
MD5
a9bee6c4ab5d3e0dde6c99b808729e2b
-
SHA1
be84121723c3bc12ffc1559e059bc7e63fca1f18
-
SHA256
aec4de2eff0323b5ad247036085e29bb47fa4df50130dea24eb7fa12561fe83d
-
SHA512
35a1bcc08e519156c29bf22fd17f4b0eacee7af53b2fd00ed1f9beed6d90cdd226712acbd1715781bdd9e0225bdb78175b720f870ffb9060be567a0099e3af05
-
SSDEEP
24576:KW/TWwqToh+RWHK0fKC/XBblYdKG1TUdqvccJONYqPH:KW/aBToh+RWHK0HXBu6d8ccJOGqPH
Malware Config
Signatures
Files
-
aec4de2eff0323b5ad247036085e29bb47fa4df50130dea24eb7fa12561fe83d.exe windows x86
e8d7d92c29b2fbf7da70a3a57e0a901c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
kernel32
GetTimeZoneInformation
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
user32
PeekMessageA
MessageBoxA
gdi32
Escape
winspool.drv
ClosePrinter
advapi32
RegQueryValueExA
shell32
Shell_NotifyIconA
ole32
StgCreateDocfileOnILockBytes
oleaut32
VariantChangeType
comctl32
ord17
oledlg
ord8
comdlg32
ChooseColorA
Exports
Exports
Sections
.text Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 223KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sb0 Size: 28KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sb1 Size: - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sb2 Size: 936KB - Virtual size: 932KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ