��rSL�OL��N[��%�3�6x!t���+����Vu���g��z���w���x���VH:X疊*k�#�{��^�;~XKKp|��� �V��R-!7S�֬���\�C�{��� e�f�y�ݚ����-��� �)�|��� ^�h�3�פ�,c���|�Aqi1��p�����R4jP�[���J���B�ees�p�ؖ�����3C�{-R�5Q��@9hG��JjN�ZDL�e%����ˆGU]0��(���0��!R����Qs�tit�3���.�#� �y��Ҋ/;L�\���و1��/�4��^R����8�ש+�ď ��Cl���'���U��t��, MM{��r�A@��g���R�������^Wo��L����qn��/҆�]1-]БѲ>Q���v�6GI!U��� W\�8l_̜�d��*Vݛg-,�=�L�;�JZ7Z�>�#��&[Ӊy[h�lgm�B��B>8h�<�5�,c ʒ��1M���f;U�h���b=��IS��U�vo�f4�O�҃g��涺�61,_�bm��|$uc1��3?|v��Ste���~�tZN=~`g�.�-[�uJ��� [���M�4y�������ΰ����1rp{�c2�d~k��X��<�/p�@�ͬT�����lf��`( ����\�j�YS��/X[��[�_w-[�/��:N�gH�Ԍv�^% 6c]`�k�0�����<���t�)t&=L�|\���O����{��#���)M4����XɴK���!��8��z{c�a-} �~��������T���r��SL�|�1���x�:���1�� �TM�`�+k�Z(��YƢ��z�R\�Ʒ���m-6����:��Zz8���TX��u5o�d�_�"v|�w�1�3�lne�H�J �H��`G>�qr�te�,@���>����dԱ`ý��m�n��̩yg�-�F���z�Z����)��xف#Ɗ�X�?a{,�-αKM�X�\,�Mh��� Uw�l��e[�iF��,�����L�NO��1�Sn��ʮv6�1�P�M����W�"Zv�/~��,��~G6�dC9,Y�!��uK㟮�#���}�Eh�y�w�L�>-�M��́s6���狎.ګ����IO�e ����|lא��;\���"�*�;T�:+��?��cL| �<H�u�w�RTj���~G{�qz�5�_Ku羺y�.���~�� �x�� u~BL\sy��b�pb�9u[�Y'H@�=��!�\0M ��\�4�(`��K�A���?C���In϶���q�>�b�mj���Dv7��sb�p�f� �/�7�K�>��_�?`l{���C=��=%�T����ţ�����r6�n�����������nݳ�`'������ 83���D��H��N�{�u�Ř�-�=$ӾCq��g��@��pS���mt�=l���]p���R�/����������m�X��@*�>�&Z.���@xb�\��=�c�\%���������$�O�oE�~�ԅR�6�� ���r��S�R��c�����X����y�m���������f$DҲ\.c�p��&^�CC��0L�zrbpK"��O���V�6�T�L+5��@���n��`s�f��_7�l�ç?uZ=��MR�;S��8��$�#���4�oG.{S��t[�}��z@;�f�Y�UZ ��2�&�ꧫ�Ge�>�����ɖ?�d:�T_u���r�^���N25S��f��Lݰvc�8c/T��Ǒ893>T�A�Kӿ�'E��+'gw����7M��b�P��m:Ak`� S^=ū�~m�����'��z������o��&:����.Tc�xب�!y&�yPU*u�ʠ�)13����y���c�����F��V�1���\ͳ�p��ٱx��$d�<'9�C�V/��ʲʷ���H�=�Н�v���2g��A��C;��㲅ö�v��u����O2ښQ�-9ev����̷*���� �PN-(��?Gs�5ّ���a���!l�QǾ�`}>���.f���?!�X�ٝ�E�o9$ ���\�5x7ÞDϝ����ž�z���(h��gd�~K��ۖY�,��;������B0��X�"��Kj�w4Q�}\�LTK�jf�����]�+��Noš�������m�]F�^��Ʌ�^��o�euP ;I�[��;�4tVEc��l�8) %��g/ d����)H:1W��W�w�ԩƵi���N���8K�L +][%�D��k]:���� S����z���Da$8e�G Z���(�\�����R�u�;ֈ�f�7����܋ �'�p�Rx&8]���l�dH$~D�H�m�6�b��%�@���[{��������>�V )�ق$�L��������[�0�I/Sj5om������l���{� ��(�~\z���jV·���h=+D�E��kC�<ڭK�zt@� �7G�/3�1��^�g� �#{_��8����!ڀ��0S\�����N��6�ܬ�]X�/H�dT��A��.ԜL�����]?��kc31c�k���E�w;�r������N?�=�#_���J��7�Q��a� �km'���͞��@�o���8d��#�::߮&��nۇo*)ބyc����ˁ�:n��8���ө^�#�[)�73趚a�;u�cr6�A����;RDӟ���06q��|�&pnT=��*۞�� ���p z{1/��I%놴kEFA�����O���jp���ߕ�Q��b+�� �[��|ۥ�%4�|�tT/�DZ��q(�,�6��'2g� � ��x`\�9Z��$ 0�O���Ѭ��[Jw�|��A*�K�ae`S#���'VD ME��]~�j?.$�۬vénNe����~-�H;�̸�me�]��ĺh-��B�����a�c����B�:&hY�������4��\m���QǛ�t��0 �읙S �v���r���c��z�7tȔ�3u�E��2��;�����Ƀ �|���V�iFoR$k���+��QP��qF�ävO(�z�X|s.�?�g]����Pw2U&�����Jv�
Static task
static1
Behavioral task
behavioral1
Sample
fcc95ebb45383f6554bdfa3d13e5607c4774294fce75f0d413fafe3437015371.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fcc95ebb45383f6554bdfa3d13e5607c4774294fce75f0d413fafe3437015371.exe
Resource
win10v2004-20220812-en
General
-
Target
fcc95ebb45383f6554bdfa3d13e5607c4774294fce75f0d413fafe3437015371
-
Size
656KB
-
MD5
73580eaeb6b585501c25053959868c3e
-
SHA1
df1f9048639e32771614bc2dfe2918f5d0895f34
-
SHA256
fcc95ebb45383f6554bdfa3d13e5607c4774294fce75f0d413fafe3437015371
-
SHA512
29624d59c645b2c51f76ab1eac061640fa64de18cbb9fe8e7ea74ef8f0b1e3eef7045af094b5e9510be7cd5c80aa64b73634c8c2df47cda3c8774164c35faff5
-
SSDEEP
12288:UeBa0lxE6/N+OE7GWK8HZ9sQ3Ie32HjQ1+uYcJtzn08lYmKBKj2gU5U70w:k0DE6/N+1gKZ9sNe3MM1BdJR08lYtn2X
Malware Config
Signatures
Files
-
fcc95ebb45383f6554bdfa3d13e5607c4774294fce75f0d413fafe3437015371.exe windows x86
89b08d91daef5b7e0f14d918bce2771b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
LoadLibraryA
VirtualProtect
GetModuleFileNameA
user32
GetInputState
MessageBoxA
advapi32
RegDeleteKeyA
shell32
ShellExecuteA
mfc42
ord1575
msvcrt
_CxxThrowException
msvcp60
??1Init@ios_base@std@@QAE@XZ
shlwapi
PathFileExistsA
Exports
Exports
Sections
.text Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.upx0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upx1 Size: 640KB - Virtual size: 638KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ