��N��v画!�U�g����A�,�ټ�����ϛ����&�5�F�EkI-��u���F*�%�.�a@k6���#��\�w�Tl�ց~�+��;Y�Vy�Z�|~��o�msJ�56�b�y����#ԫ!!��I�̏ۃ������TPѬ��zO8B!2͊졪��*Zl�"��ٲC�8�QaB=��Tf������0�N�{��2j�"����-���F�e�r�����(h$REhN7��뇈����� ��Y��G����?n�=����c��6�_a�}P��O4J�%�6��e�S�l���K���'���%������C����b��[0ѳ��õ�Ƒ�S���r�봳N�Tr��3�a�����]]��S(�{��4r2�\�-HmF��Qﺄ_���6�`�R�=����=.û�B.:<�� ����n�q�UV�c�Ɯ~�=Iv�9��K����(Z����%�,�\���/\-F��P;8����$���{SC��\Τ��r����jd��s�3���Zf����)f]�D_C<��k�'������S�}�[&����p{���x�QOc�i|�ު5��<8JF����Z��-�{������D�Ҫ��h�?�D$���T��<K�C�vlɤ�=������G'=Ua!?�]ܶᓼ��dV�g;����l�ר��^Iiho�-����X�a�Z�6�� �p��c>�ĽramNw\�C z�\�.�2S<Ӿ���l�����")�f|�:Xw$J��!#�/98�J~>������]%:u�u-�ʔ�+z����P��yX�U��o�W�� �{~�����!��ǚ ֶ���X��?��u(qzN8���C�V���0K��W����ߌAIl���0����J�7 U���8��d�B� Ct�XG�:����"�0 �Ţ��t*)����<���g&������I�4���P�5����S����A��!ru琚K� r�w��4{�W����bX�u���Bi�M��;��z�y��?U5:��dץ���T][��$��&��z��3Q��kf;�vC���90��(�����~~���E���QMiL�3�={��z���}"0F��!����E�6�`t�pm�;gm��x|�����G�� G���,�! }����=p��,i���3����V�8����v���h5��_�+OI�K��~�t��IE'mn�}��<� ��!�0�%�E��R�W�Be�jDW��͟�fnV�kT��tD�<����6���jJ�����V*����� ����R�]��۔�����8�����Zo�v��3ѣ�*����������N��0�)+�>e�|��VD6�,-�qx�~��oB'�Ф��b3~�����Ff�6f>;�o ����{�I�{�9���s�7H�E�`��x���a�b�A���J�R���o.�@��/OV�u�3P=g;0m�s����If�3�T����� ���'�8F�\�^��ɣdM�@��2�<ϗ��;�u��������w�2՚jS���#&�&�]�FG��Ɬ���^���S�[S���=2��i�-8�� Ҵ4S�a�K�ȯ.�3p�����i���0JYS�Ք�R�AC"����Sx��#�Xu ��ܺ�/�I9�̑���4}0���6�?�ek6� ��S�%�iw���G�|���~�[.�s����&��������a��AC�h�M�; �[���]��h���L$���7 j�_�%��@!��4%S�!���N��C˘�NON�R�8��V�!��P�uƤ�Ʃ]����OX��3}�lf2�`B[wO�`}�6��x7-C�e/��~�gjU&��������7m�)3i�F{k;��7D&%+�A��َd��qg]ѽ$����H���F݇��l2�P�|����9��|=�s�H>�^��?��ӑ����a����#Ġ&D6�l�����P5����CE8�;��R#�� V�2�x����#�Ag�� <ĜQ��EM��?�S�m+�F.NjU���H0���A*1�^<�iD��5�.�*ț�O($��S`!�G��e��Swޗ�i)G�<���5%g8>*.��c���,dp]�f�̤v�d-���{�}/Kj�O!��*��!#"�M]�42`�YP!��u�i�`�ؤ}�+ЗM̌���hd'q�XC�ɠ�#����w�6�v���?�+�[F��^NV��UH��{�G�=�.�3|f/��{6H�RR2I�s������O@���O�/��yz�:Q��c��j�G���?}j���>�$ pdUH:���>Sd+��C2�X��v��;{�'���0ژ�4wi旾X�H���G9p�+��� %#�q�m��A�J'�����j�o��@UPm��#$V���)(�tj %!^���[�+��Ĺ���h�V��,����5�c�.��cMr�V�������.�9����dؖd�c��*����]����ɤ�<dQ�>+��ȈdA�:�Mf*��GL4R���荠�U5Ħ���a�BQ[-6s X=��8n�\�v���N��^kt��_���6����>���KB�4�ʥe�����<��b��.�Ԁ������H�0xJ}]�!VЁYՏ��}�}��@<j�F #��Ѵʙ.���V3a7Bǁ��O�'ލ4�1�"�*�`2���,�I��ч!t�Z�MV �T� ��(�Gz��W�~��rY�����Ũ`n{g0��l��@��9�F��n�D���v]d�*��.RuƳ�-��b��XNs0ak�E/<O9����y��ʥ����!���J~aJE���v!��gZp��9���K**.Q��Yң��T3G�=-c����;�Y"������$V*�S�����y�s-M.��#\�����w0��nG���D���w��n���w݀����RA]S9� ��$/��y�=� E*ǍV�Cb��*�I���ĿH�������|t�R ��J��C��g?̄{�IJw1:�����8~Z�E)B̭˰@L2s5Є��&��T�(yR�uAU5& ��9R���e��8V�]0a*��������Wi�
Behavioral task
behavioral1
Sample
d8a1fb5dab10131c892b021772258750fa0571c9633d0a8d7eefbe387b41e65b.exe
Resource
win7-20220901-en
General
-
Target
d8a1fb5dab10131c892b021772258750fa0571c9633d0a8d7eefbe387b41e65b
-
Size
298KB
-
MD5
f34acf8fbaa1912cb8d4db73a4ba58f8
-
SHA1
025299542515f8ddcf28b278089147a5e4b63476
-
SHA256
d8a1fb5dab10131c892b021772258750fa0571c9633d0a8d7eefbe387b41e65b
-
SHA512
acb7da502d2c762c9a08817cb6d85c8f17033b9198c653be432cee5bd665f14dea363f29b5ffe149395fc385583deb560c093e2deea72f38b3016cf760c1e532
-
SSDEEP
6144:dp2LxJO5wuqiX7Ee8vRhU9O1ffEyhB9rqqO1ADf4lzTxmko:dp29JGa51fcyhBMKifx
Malware Config
Signatures
Files
-
d8a1fb5dab10131c892b021772258750fa0571c9633d0a8d7eefbe387b41e65b.exe windows x86
60bbde45deee13132321d4615d959731
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
advapi32
IsValidSid
avicap32
capCreateCaptureWindowA
comctl32
ImageList_Add
gdi32
SaveDC
netapi32
NetUserDel
ole32
CoInitialize
oleaut32
VariantCopy
shell32
ShellExecuteA
user32
GetDC
MessageBoxA
version
VerQueryValueA
wininet
FindCloseUrlCache
winmm
mciSendStringA
ws2_32
send
wsock32
send
Exports
Exports
Sections
UPX0 Size: - Virtual size: 400KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ