�4�|���O����jh���� [u�g����њbpW@\π�O<y~3�a���s@}G�vz��n؆����e�C��J��ӂKp�Sm3��/O��6ǠU�'M-k$�E%�U�8����%�؆(�Y���t �5�p��uLڥn�*��$%�F(̮.߄��,�:��;>����8���kH~����U�";O>T�����*���לt(�d>��(��ʼn�/��E`���#�����]x��XP�_��H���o�����(��PKڸl���Q�U�7a�X�B�u��9n�x�]WōV��^�l�U��#M@�к�G[������%��]!P(M��m������܇;��/��[7�s�uU�n�:DO�!�$�à�Ů��8�|́���B��`����7����F^��uj�֦�8��>�˥��_1= ��%��Di�t��K-BQ�����N�,ZtFl�F�~|�(���{�c�< ��\�T��kWbU}|��2�@ �j�9µ}V�����S���A����&��ޚjL鰕���N@f-��p��� ���b�(M������I��b=�����5pF$[�?���.#)aՈll|����'�J��X0� �Ms�j'�ηm�'�Zw�_�U����@nڂFo8Uu�zU^�@(�f� ��G흾�����jl�݊L�����Z���d�oK�f�����qZ8������=i�/a �LZ���ht�����Ld ���� 2�eY���q�6ٴ���uE�����m|��-�U7��������� ����&>Y��f��5��� ��f۳���*��Vra��4�� �oe��p13�̞_jy�J��wɜ�\i��#�!5�_����{���Q�+��D����J�T�L�~OV�h]N��̪b}*�B�d�z��=T���.E���G���L�����@I��@Ǧ�����Oހ:��I��.Fy-��,���H�P�"=���=F�?֩B�ֿ��#�,v��Y��h?`R��v~ۅ^,Y���u��p2[3o�3�ڍ�� z��A���m��f�̘�-�� b�8ӵq 7��������:��C��%���$� #b �\U�]�ˉ?���B�3�U����7��P�F��)-��z��j�v�.��H ��O��+=���e�8��rN���T�hmG�`�2.OB��r�� o0�.Z��ݲh��M���Uh��L�(�@�_���'t��9*\�3D���g:����D{��ܔ�Q��b���W�@犓F$���b���D_�Wd���� �ō*����4ɫS��H�x�{�Q�:8J=&i%�%��/ьgVJ��Fb2O�0�)�0��A��uD��.[��>�ٜ�t�>t�?tlj���C�;�����K6 �XzH�չRA�fƌ=�.%��zX�y��1R���`z��Y��#���`c��zvD��m�=\MآGx��f(�%��!��5H�Zy�dGR{c&Q����MR<W��'�HI�JV���$�X8���'�쁜@��}䵙X1���(xG���e��`QF�p��:A��]�s�5�G��i�9ӊ�`���o�8�G�"m��J����GTG�I�Q��z�C�!n��B�E0�O��+�q6�K������?�Sp�_�D��v��\i ��k��z`}��WY�/ ���Υ��As�E�ʁ�6�KӿX+�����"����OO��� g�ҿ�S�Zk�W\�vzai� g�. *1�QMTd9S� ȭd�ȯ,������t��ؚ�O+-25�V��i}�)��½S�MmZ>>���KIe�fL��ø�EZ���V������y�izW3��W!P�A�4E���=��G�����isz���� %^lя_@�D�n�;�@��Z�?f$t�c�-U�v �j�ҵ������O4`�mV��v���H_��S+O�o�����N���6���ֻ���i�!�S��_(ݜ :�#|a��+�E�H�1�#�F�ߝ��ֳ+��� ��C��\%tݷ�a̍��̌ ��Q�<�'�?][����:oh�k��t�v9k�;/��Qx}�!�,F��9�QA J������^�K@$Rcb�>�����5{�?ۯ*cK��J�Y��X �߽Aȹd?-=���=�$��<!B5�^�x_y�p�~A��.=a�͵�0���"e�l+�A#��ԯ4Qs+!��vW7�7���2��জ�U|���k�p"{^w>�����{W����ݚA��YVBE���Z�p�=0�&T&B!�t`�H�m�f�m*�tR ]r�#1#��u�rH5���P���;$P�V?UOwT����`�������P͞U����vl%��z��H�����[��2'��A�����aƝ; �/�'{���ɯ�馥�UeG�����=���[Ū�x I�wNt��<�$s�����<��V�j�7)q!�-�)N��ꉣ�Idxbp����ؤ��I�կ�t�?��g�蘷�h�V���P2ա���A�b�U{���Sj챣���{�-��i`���������m��_�n��@X��/�i��s���:�]���N�J6�V<+�����O=��+�q�&�"��V#¥f�c(?Q=X�{�RO*����p93�Hն�P�Z��>�3������B*�`���>�ٯ�A�2e���ߓ4@/O���>���{�q1)A�*Jڥh��H.R`Q���B\Wǭ�]�%�~�b�n�f���<�A��<L�&�'r�Z�Hɛ�7*_����i��a���0M����Զuޢ������4���_���z�Kl�:�q��9�q� ��Z8�I}���ՙ��;o����L){�)O��q�?�9����D�o�W�A|�N�`#��%3uR�����S7q"�G�.sB��[�U����5O�������@���-�5 ��(S��?��6�e3��� �����T|�`9 sU���:��ܥ�o�+�������u�__q=�#�Ȕ=3܇���
Static task
static1
Behavioral task
behavioral1
Sample
7d88d630e66302083f7f19a5b6409473570ce6ce4c63169bec851866e5d1a512.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7d88d630e66302083f7f19a5b6409473570ce6ce4c63169bec851866e5d1a512.exe
Resource
win10v2004-20220812-en
General
-
Target
7d88d630e66302083f7f19a5b6409473570ce6ce4c63169bec851866e5d1a512
-
Size
2.2MB
-
MD5
e1ed23c11bb14ea8873250b59a27d7db
-
SHA1
200704b8d012d0a9d705161a28e1598ec6081655
-
SHA256
7d88d630e66302083f7f19a5b6409473570ce6ce4c63169bec851866e5d1a512
-
SHA512
f1ccf74db0599aea7d0f99e45be675bc83554e823e6121322e8b55aae1524d269f4df540014009cf4e0eaf01ebf10fd8056c9810334f43342a79199274ea5086
-
SSDEEP
24576:lCAbMMDEEhC1UlBGYAcaRLHaEFjj3MNFvg4k1n3CW3Y8Ks7PfnEWQIH+TjbDPEB7:VbMaf6NRLLjGMv1HEg+fsB2lZMfoZ
Malware Config
Signatures
Files
-
7d88d630e66302083f7f19a5b6409473570ce6ce4c63169bec851866e5d1a512.exe windows x86
ae15bdb409895e4866d78b97ff457be9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetStringTypeExA
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
ClientToScreen
advapi32
RegQueryValueExA
oleaut32
SafeArrayGetElement
version
GetFileVersionInfoA
gdi32
CreateBitmap
ole32
CoUninitialize
comctl32
ImageList_Create
shell32
SHGetMalloc
comdlg32
GetOpenFileNameA
Exports
Exports
Sections
CODE Size: - Virtual size: 830KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 132KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DV0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.DV1 Size: 528KB - Virtual size: 528KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.DV2 Size: - Virtual size: 650KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.DV3 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 528KB - Virtual size: 527KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ