���}w����;�`:�6,8���1�VB{�B�d-��5d���m�~=q�`V�y�1ڬg������M������� 3v�7�}��,=~���Mu�:k�hS����. �ua�5x��NOJ���8��4nva�9@�/�E06���3��;:�'��钀}Ґ��c�͓�3$z[��1^�%�w�Šκ۳N�s�kĥ��eIs�!�sȗxs�����{uf�*�^�d.���>��Li1!nh�����\iZ8f(ʹ1��������qq�+�n|C{�E�8>�d�����T<���=��tS~��\���/��%��wb�m�.��Bȱ�#)үݰS�yf]7��ĕ� 7f\5,&�H!&]R!��0�:�C����X�UW:�Fk��7C�zI�����q��u���� ےs ْ�OS��[�Z=��7��μm96� (=g�\,�GJ稃������ϛ��v���}�ۼ�BQj�&�4�D��X�J�!�)`�0+Z��:3���J����u��M��{�d��Gi��`�zɡ�=��D�㐎Kkx��ʷ(����MЭ�şж{ОJ�`�)Y�U�J��E �FgT���[���D�U%��}ph�7�*0�J*�-��h+�HF׃i���a�4fG����a�E��W{3<5��z��!������Jg%*ZE�f-�j�l�_3�q�0YJ�P����{�z��W �}�:�~'�VG��뉧)ť"蕼C�`�{ "�-{ȾΛ���/�\����+���qK?�0y�D$פ�)Z�K�;��/H��:��v�م�71+g����_v�� ��IB��r�XZ��I+1�׀R�F��r8���t����{�4���,�4uz R)�A�-�v �7"O�:m���Z��A��j�H�LCu����H�A*�� ��PR���@�Z�ϙ�A�}��U���7�`>g��'��"�m��*�Tt}q8E�t�����9&�a2��"�h� o�����MlMXFs�!�̴2�knb��pg�;� �#$��W9����Y+u�Vi?=[j���?�������5PN3#�Yd����0���>]Na��f�����:6O�G��:8�&LJ���v`���}799��58ֽ� �qvC��k�ӵG*I���)N������,��&��, 46 ���X�h�����S<x�Q�p,U�Y��6�A7mo+1���Y�4����d�������>'�� �́=��?�o����̈��usѱȎ���Z��ݞ'�ʽ��X���迢�_��-�n���e�kfἻ�d��kU����qʻ�����B��иK���~m��l�L��4�V)L�-��oo��H�%�Ai�Ӳ���3������A��7n0D�0V���a���� �;MK�nB� �lԘ�ӓe'�3��Ф�j˘�\��P��Zu�-���5�t�R!�㣐م%���6y�i^�\�s+��P���B{�Qw[�&��~e�DA���v+@R�Q#��\P>��u�� cvU�lF�*�Q�d�4�τ�cZ��z����|w��]P�[���n� �.!t/��T@�x۠+?����u?�@�Ё�����a/@E��\;v�̾���rq"y�ƿ¥���s�!�~�/K�6�[�f�2���w�H�{��ք�tg�kxႛ�AB�l�֩��{#�\��ߧEA�����E����PF���e/�$�Πo�v��wdt49%Zڱ� F���M��D�!bp'{eũ��0��ҽ���ҭ��59�ikV��ԧHi#_��#}?�o��e���_Z��`��y�����h�p�P���c�(V�勶��Z��<[�i!��� 0���D-H/��CYK�*��H9�x��P����Fl����N���vD������{v�"N�1Q\OJ�#A~�7t���@`IV)LC��4�D�P2�A�OW����J����W%�� c�����a�%�� マ�� ^���j/���+������U9�L9��ł& E? ���ԫO,KT�`6�m��ʖ@�O@��nmwR��6r��c��n6��RYp[����ۮ;z� l���+7�9JR�X����n��Z�s�e,� 5���$?�hh��h�52�,*�6�'��mZ(DY,��`��(����ı�nN���x���g$�7�A~���#�x `���C���fϖҗ���Q���QA��jH��q�{��=��Mŝ7�C �+����#�oę&X�p .���- 2<���Lc{�'�~,���k��ѫ���Z_��{����rv2�ՃPI~)l霞��s�cL���פtqvܰ袟���9�,ʿ(�fDy��at$����=�#�������g�0��"]z���P�"��g�:��m�ʝ嵭���R���tNY����MF����u��r�����} ���ʟ(w��ֈ�;���¡ ��<0N��������qE���)�]�d7��|��1�*@k�����,ɜ�"�Cl��g�E،��' N�h|,���U4��8���p������%d��/!���l��UI5H�J���Ǹ�j�����~~�)�W���z�Z��Y䕳 �t���axg�SOp�'�jK�S۹��֢8۫?��KS^�i�G���tݿo%�����O �3��SA�L��-�ߺ�+H멼$�l�<��#�FNMC���ef[�>;ߡ.���#��_mw�45�ߥ}QL�u�?[p��>�o��(uV�y.8Q�g $d��sqSG�6��h�-jm�"5aѝ˷���jY#f����z�����I��+G�L~zT�$Ew~؆K")w�t��P;���3,堬�/�bRצ��]q��t]A{�P�_�U�>��3�g���N�){������j����N5&��&�%9y2R�uUvU�K�!^8����������)0�~�w<�14)��#̩�/����Q1���ֈ�]�kG�$�9K\K���f��@��~��'�9�h,f����J �(�1����Q����L�����m��"���|f�|�wн sD�
Static task
static1
Behavioral task
behavioral1
Sample
3776177455d0d807c0f4d9dddb132e7290c38b0c43a1fd7bad99b213fa420aaf.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3776177455d0d807c0f4d9dddb132e7290c38b0c43a1fd7bad99b213fa420aaf.exe
Resource
win10v2004-20220901-en
General
-
Target
3776177455d0d807c0f4d9dddb132e7290c38b0c43a1fd7bad99b213fa420aaf
-
Size
814KB
-
MD5
4550451b9925b935a0997d9c9eda4b8d
-
SHA1
50c898a8294c6c1615ef7253b95531c26a03006e
-
SHA256
3776177455d0d807c0f4d9dddb132e7290c38b0c43a1fd7bad99b213fa420aaf
-
SHA512
7fe4a31efdef6b55211825d960dd98857117c2144be2eec07c0751848cb66719b17ed1b8b9fcb7de2fc58ed2a224fa9f404154606d70310396bf34910dd36dcf
-
SSDEEP
24576:Nc2SRa6r3STKKvMLbJ8PMzv/950FXVGX3N:NhL6r3LK0P2MzH95e
Malware Config
Signatures
Files
-
3776177455d0d807c0f4d9dddb132e7290c38b0c43a1fd7bad99b213fa420aaf.exe windows x86
70ff1134aa0839d9f73a927b89b71b61
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetCurrentThreadId
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
user32
CharNextA
MessageBoxA
oleaut32
SysFreeString
Exports
Exports
Sections
CODE Size: - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.vmp2 Size: 809KB - Virtual size: 809KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 184B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ