���6��>�(2~1��Mn�G=��'�������W�.��B9�1�Z��Ss�� �s�����yA���ؔ�=I��9)���eyf N ���G����ɅXC{C�l���W��a�P��@�.7s�J�~��^ j�ݶc[��rĥt�c-�\�&��ܠZQ���X�H��ܖ�h��B�����/ߔ�-�W�m3� �(�<�$`��N���P������tE&��1���D��l�i;AA1G���-~�S��)�;��e ����?p�3�ґ��?'sZTz�c#�ɴ�E����m{�4��!p.bԅL��vMq�?�0�gE��L).4nє����pt��g���1�ap:�a��kPfhz��� E��Te=�����7�GO�(g��vw�p�7l~�&cM'ٱ���R�P`�z���I�w��:��!���"{����^��7�>��Z����_�GM�����r���fph+b�(>6̲�ڣfS7��_ƥ?������`q2���[�S#i�w tv�vf 8��tx*:n�i�;��m���'�Y�s���ϻ�Ye���b�h�岧���z�?��9Z�(O��s\���D�GA���o`gJbԬ&�쬹�DX�wdo�Ԛt��9��YX�� HwP��dH�rߎ2f 9od�}�6�;��4���.?��%�z+8� 8�k��(�{������H(�������'���:�`��e~��`��(�Sb�;P�!UbK0� ��QM~U���R�^�\���� �t�1j�f7��UN���!露�������:ڷ+��7 �����72��i�+x�w��Y�bI=��a��E� E���w�����@i����tu�+Mv?�Ղ����_w 6�� ;�VyԖ{�*���ZAǛHE�6 uM�\���7^2?�jr�i�</;�99_aS���IP&no,?�@���b�G��p�� �[�g�Y+�]�6^A� ���S�>��T����}���#m�:�(��P" i���\�2���-�z�ޓ$̌�������c(ǘ��kc5�:p�Q�h�&sg8f�~��r.���u��జ����:��,U��[��%�����k�����z��i�t��~�(�il�����ͯC��AA���,���,.0��:�~7D|��"Ꭱ���= n�i#�:��ˑ�){s��Z#�3č�[��rk9ubǖ2�!��g���SY�p�&����\��wW@��e�rX��m5�҆��6$�]y�D�}HX�鄅���r��%ZuB-�~��:r���vR[]�6�9/�T-��J���� ��o-#�����PT5���M�j��xa��C���U�=��c3��]R-ٓ�P�����c�ϔ�7◱�(�����)��Y+�8S��r� x��J����Z;<`'�ֳ����sN�\�� 41��l�3�����?kɗڝ%ojtg]��7,Z�ٰڈ, �P8�OA1m�HWw���c�4 d鸶2�5蘰��^F�ć�E-Pg�����O�E���F��~t�,"Z~䴸�څz�dW���ز>)o�D>F���ĵ?�w�F�uKA�����/���!��n���SnW�v͆�q�j�������Kn���^�1�r�1�s&�H|ƛ �3HC��0��Ȁn�"��ݷ�� �_�|�䰌#i�wyAڐ� �%�ܬO ) |ˀd��,�� �ʶA�&����L�F6[�A9LY2�*91n��'����=�h��`.����݃��2�VC"-A�� ;�U�D�u��\ ����7�`k:��u�~�Ձ��O�;���T���**�zJu��^���+�W�臭�hTVE>r���o�6r��i KM������V�bIY�������"��C?����ǧ'���Wh_H+P��<ޮ2q�\����gD��n�����!k��$��:Z�K�A�' Ijmޥ�p2x���t^����־��|�$yݖ$�ռ9�vC� @ m�������u͐6����s��9���0 S���- [о)<˩M"N³S[���#�?���/��C9��M�9�����t\C����AV��ۖ~��D�%�DȔ��H#���Gz�x\��j��ߢ�GP�wV�r�fm���|�q_]0�j�?w��N"{����ݫ8I����)S�R�@s�J�/��7�J�����b-$���đ�����@�A�������������ϸ�{@�U�a�%n�a�qQo ��ֶp����1 O#q�T�WvW@���dI��vamT��@o��!���0���d??���� bQEԔ4��?��[��D8I$y�� �%N�"��Q�m�Ԁ����$B���ؖʎ��}T��N���o�Iͼ�k��Ӗ�=�6���A�Z��g����g�Y���[��GY<�����1������sT�Oj��ߑ�|���1�q�I�\����H����u+ߑ�b`�~��n(��.�����v煁����!�,vIpq'���p�)N�.�Sŭe�*7��&��������o�\�$K$�������zf�R�&�Z莁���E��f]����������%%�hv��jq���!��~p�3����d���Q������!����g:*�_#6QCE�����n_F���S��}^�A�`�́eno)�jMw��6�h��m�ۤZY$�E���v�x<jܤ���(^<�����˘�����§;����b�+e���~?���¼�B2�I�:ЍF�mjNr�y�8�7:{D��1?6cp�@��t�{���V�B�F2�Q��L^�A��ET������JS�u�%/��ٕį�)2#R�Ϗ���$S�^�@w���>��os����R�!��"uQ}X��<�}U<�7q�t�?*�Ok[��E*]�|���g[U��>��������g�K�l!|���i�K-��D�"A���!�NIv^]��@:[���r|���B���@i��X��|Ƙ��P��I�E3���K��{#�3:�ufϏS��`�ĭ_�4m@<f�:�e ���f�G_�- ���w�3_!��5�Sf
Static task
static1
Behavioral task
behavioral1
Sample
f15dd53edc8bc9e737aa7da24770dee5af73b72624727db7c1887a58baa662d2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f15dd53edc8bc9e737aa7da24770dee5af73b72624727db7c1887a58baa662d2.exe
Resource
win10v2004-20220901-en
General
-
Target
f15dd53edc8bc9e737aa7da24770dee5af73b72624727db7c1887a58baa662d2
-
Size
739KB
-
MD5
10e7492f1e123a769351973c8d4fe5f0
-
SHA1
172086b743de62d5b9bd556917db56b36576849b
-
SHA256
f15dd53edc8bc9e737aa7da24770dee5af73b72624727db7c1887a58baa662d2
-
SHA512
7d8a7df656d34c27e16ae4650bc72c6cd211dfd29aec970a0b4a6f2b6c85e504ee3c99dbe1c2c57bdc2bb57ebec6b50134b0a939c3a62a2b87acd69bb2c41b49
-
SSDEEP
12288:FWNbl3egcdYYcAVyXXPE9r9d5IdCChAHVihyI3qd7EToMXCUoRT/E0k0reJi:FW9lugRxnXfE9Jd5IIn1/I3qd7EkJh/Z
Malware Config
Signatures
Files
-
f15dd53edc8bc9e737aa7da24770dee5af73b72624727db7c1887a58baa662d2.exe windows x86
97a58775ed4b1ecbc01d3d61c9e23b5c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
PeekMessageA
gdi32
GetBkColor
winmm
midiStreamRestart
winspool.drv
DocumentPropertiesA
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
ole32
CLSIDFromString
oleaut32
RegisterTypeLi
comctl32
ord17
ws2_32
ioctlsocket
comdlg32
GetFileTitleA
Exports
Exports
Sections
.text Size: - Virtual size: 461KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.asppac0 Size: 68KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.asppac1 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.asppac2 Size: 585KB - Virtual size: 585KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ