N�31+l�ɦ�V�nU���!k���Ѯ�����0�D�ן�[��MI�\[C6��7�Y��b�/���c/���A�'y�Y :�?~����qc��.*d�:�U�ķHz��tU }ڭGEVv��x��1ݢ|5��@Wx�<���~��$tF�H�3���g�r<V��VF����L2�u��h�>1�h�*�%'�#H�c��*����m�q�����`� >S�y�����c(����Ӛ�עC��c3�Z�[�O�c!��:aگ���#�߀���k�'��4Rl8�^p��ɉ�LCx c�ޡ���<�۷a��D�(~�aı�JH�܈�U8?bQ9=��Wq�W�a\���tn��V�V��&�ϩR���N:���*��'�f�N������{���fNyD��OpP�Zq潙��y�%_��O�����9rR�S�"��h�%�$�]d�c��̽���j�u�Q�� �wj�W�RN�.������"�!H�z�mgG�i�:��==x"gPl��Yئ�%Ϻ"-U5�[O��-�zvb�~5^7#���KT�H�A���-�(Թh����h�U�����S�EЉ�MXz�cJ]�B]���v6��Y���e^������ �)�L��������T�W���9'����߯#��(��ə��g����ڡc Vn <4��t��J�/�x��ݩ�)�!*�.���n�� \;�2�r���~i�fʡWe�������ZK�� �j��w0g�-��ӬF��翄������;.�7iV|�&Ep����3 Q���� M�e�ӽ���{�P;�)��9�������7>ϢP����/��3[�u�O�N��-)2�[PǪ|M���1��/���wI��X@�:��Px��DCj��]� U��V�k�V�䕽�tB z��]�ÄHT/vu��j�_�D�D�1�R �_�9 ���ŧ�v9ϟ�:�헆h�Ez.�c�h��=,o.��h�Oڪc5l���%��Si�<�Ȭ���XL[M(t�>[�RYg�ʰ��)�K{����[��Y��E�tA�F�!���y�Y���ΘU� �I��/�S��O�q���@6��5}�����5E��;�qDzi��Y`H����_@�%������1ǭ����_�H���֤m����atQ�R���d*/���wR篃���f�{|D���/j8c�4d��x��Ś0��z���)�$e�A��N9Ǣ���$���ᶳ��Y{?�%��a��o�j���� �Ț � �"3�����,_/� uH�I�&����<:_�䚖�b�Nf�Y�zg�+-ҭ���9ҟ�v�ۅ� ��n�xއ}�Q9�0�O�{B��T:Q����8]�O��]�r�9�^�vw�mXs����4��Lp}]J�*��kbF�����w�[*/�� ��3���ɏLhZ� ��:c�̞}���#�x�����lI�E���Ǫ�)y��^����4������m;�N�������hC�r�<�Q����4� 8��'}B��e2�w�D_� (!E�P(��P��qJ�Zk��F�U�%s` ` ����o@yb"�P��h�����L lԤdo���֟<uM���e{66��晥�<1g}��Nj�������5r�WҰ�mV��\��e����Kk�$�Wo���.�$1�|i|0Id�6>9�d����/�����ǥ�CCɓ\��B����}�B%�"Q��I��IrU�j�5����{z���ɹ=۩�O�V��R!�s�|�0=�!q.;G^��4 ��~g&��� �^�w���2CѸr��|���u������x���lzϸJEa%��E��C}��m��R�:���c�Ce��vմ3%bKCڱ�G�.�!��H��zơ���2�E�'���}�c>���J�C~P�b�{Od��� �&㼅}ӎܥ23=Z�!���z��� o��gj��`�2�-yE�͵�/y�sS������r�6��jW����<��&�v�A��n,= �2��>�IJۍ����Br�G��l�y��W��(����`]śFC��EJ�-�j�v!S������������� �QӣH���*wUzUP��¯�J.Gl^�;4���:��, ��c�[T�O���O`�KJ���Օ~Z��������D �Ͽm�JB�0��"�5�A�)hS�s$Y7<��\Irfn�2�����;��@H��Z��/� �Wm��Ye�V#�4�*�������;�%x}��H� �y?'+q�=��Ћae`�tI-�W-L�ۮK\ �+u>�j���^37��y1@�7���Ҹ)h�������y��K#��k� ���Z��B�Q��z�?G����΄ŝX�8����Q,5���tF+Z�,��.�\x��E` P��4���D.�`-[��,#� �ҍX�3�m�u��Q7�[��g�D�»KI�#���t �NY����]��ڌ&�?/)3�kc[����fṛ��t��.u���u��B���pc��8��G�r��eK�'�:Yv������[�^�H b���9������������ :���D�y��w�S��(���M�t�|8<����&Gp[�����'�.�l���.` �W�[�N����zZ�A���t,�:x ��.��U��P`W1T�Ӡ" s�}s��ܨ�bk����"�R���DDAon:�5ރuf51q�Sm��S�sHO��V��mau=��NJ����^wt]L�6��v��gP$8�m��a�[D7q��w���:����B�j^d>��K�_�����u�/��<5BtQ�W��o����2=B�AFz_���ӂŬ6R����a�d��:&��ic��6v�H���4����U�/��N��?��� �02PBmiȯ�H�+�e��@���D��:'w�띔��{z�o����f�x�Iߧ����k�D��������)s�2>����&�p�ďb?Ω�&�**�E~�d\�?j�k[����!�2�gy$�]�3����vi케(;���B(ȁ)/���'�N�$^.V�� P҆qI�"����m���I��*�% �u�sn�O�j)�-�]��~R��
Static task
static1
Behavioral task
behavioral1
Sample
9eda324cac34676b9e56ab5704080979f4428a8f424d6d1fec4600e95a208138.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9eda324cac34676b9e56ab5704080979f4428a8f424d6d1fec4600e95a208138.exe
Resource
win10v2004-20220812-en
General
-
Target
9eda324cac34676b9e56ab5704080979f4428a8f424d6d1fec4600e95a208138
-
Size
2.0MB
-
MD5
732cd1f44376d0e6a29e6499c130352d
-
SHA1
29ce9d8af4765335eb179e915d1599d4ab316a2a
-
SHA256
9eda324cac34676b9e56ab5704080979f4428a8f424d6d1fec4600e95a208138
-
SHA512
79b331a2a3131a5977b129df6352c92442a62a185c79fddb60132395f75c5ebd6d589f422fb9d4b0290c2771c1c470036078934154d7612e3165584dbd82c524
-
SSDEEP
49152:Yu/2Xr7HbtZ+9g9gC/6dcNeqW7Zzv8d/7u8rWKJ54qE:Wz+KfccNebpyS8R54q
Malware Config
Signatures
Files
-
9eda324cac34676b9e56ab5704080979f4428a8f424d6d1fec4600e95a208138.exe windows x86
25de728e2f66617a7198e97b688a6546
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
waveOutPrepareHeader
ws2_32
closesocket
kernel32
GetVersionExA
GetVersion
TlsFree
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
MapWindowPoints
gdi32
GetDIBits
winspool.drv
DocumentPropertiesA
advapi32
RegSetValueExA
shell32
DragQueryFileA
ole32
CoFreeUnusedLibraries
oleaut32
SafeArrayGetElement
comctl32
ImageList_Create
oledlg
ord8
comdlg32
GetFileTitleA
Exports
Exports
Sections
.text Size: - Virtual size: 709KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 726KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.csdn0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.csdn1 Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ