���Z��D(��S��N�@mgpZ�b�G��:�/�D�[g�8sy%~B�y$�>�ģB��T��ۖxU�$�{��P5��l{��� �fYM��7�/�~y?�w��jl�Խ���?{ȏ^�CY{�*qQ�g}*���#�?����A�{�U=�ys D�k֮z����jr��&q�����!�FD'��E�y��>��=u֊��.F7d��^������bw QJ�<�cK-��E���xzb��ͮ#�G�NY���*�[%�̇J�8�j�J���ැכ%�|By��K�i��.ى���� �\0gp?6I��p�.�(o�]s"L��G2'y���#T�Ԝ�2Մ4K��7kQz�z��<�)2��E�}+���+G�[����{1����� i��u�.����ǥ����g��Z�ցK%��Iqt���оMI�)=�v�9�1�&�MG���C�?���ۇ�����S*��\L�� W�#ܔ@3d��j���v�]��`��7���ڇ�C�����!��<��5��hhe�����(bYː7�,|���)��g�%Ϫ�������)X�uV,ŢTp�0�� 2�k~9�{�)�v{ԇҺF & w":��w�G��[�����:��'�'�jd?ca>d�+�� �d��6lA+9ٞ���B���g8�#��ߍn��k�K�@������ً�z����!�H�n�ޕ��u��C�.2���!~}Y^��\&Z�B��G'��'�F�e%�!g��2���#f�C���g�B,��VF��>J=Q��?q���>��v�������7� �J�B.z�C-�g��x��D:��?֧G���z?��'�o^�wZ4>@>.x��Rlio=�ԵB�h�ȥ�,��%�A�Oa�� 7q|�D��˘�Y�[�<� �Ō͇��� ��i�0��`��"�+����,E�LJ�zo]Gp������5�N �y�sE���)z��yE3l�p��v����"9��Nk�" ��Xۏ/�(��Br~f�v�ˑl� �e.�0cʏ��c#��̜� w�ȹ�7ƆA!p�{�04N�=3��a=� ���")�e�u@4۹t�$��k��;�$Wy-a��1&��։ob9��n���ഄ�Y(E���D~nHa��˺�1e���,H�:E�0�Jޒ�z����7@����&�oﶿ5�٢!0 �x�iĜ��V�&�\ T���@��{�lQ$Z���|�>Z�:h�.*�����HԀ6�>V�M�<\�x�w�!�f�S�@t� !��HF�' �8�$�*8����J)��ՄdܲE����˃�z�)T7'��/G���� '�Ҹh��@�i��=��M�V%�`x��L:��N���Z��5����2c�/�ad7.g�|��A��*#�U`G��/GS��ucz�>��߫YT=���MSu0�7���Qg�*�㭇u �i�N��:0��uU^����H_���XY��d�a������H���6��*�4\0�n�� V�1G�n����13��!����XT$X(y�E#��4��Af���B3���h�Y���A˴z-#&E��Y�A�^?��a�����gx?�<���|�98Ƞ��Q ���t/������v0˴.�6�;?��_a #�kS��at���}� �U�ċ�u�-��'y��ȯ����sO�&�}#D�q*h�,m`�!�D�]������� ߥ�[Y8l{���އ��9r�/���4�Pep�2e����4��/5�������/��p���-��."����`)��慍k�m���Ӄ�ɒI��?���īo�VK����B�l?��%�#�2:�m�����_�DK..��Jm�G��AԄ9q��' 1D/6D���o�H�*~�[?���� �3:�]`�L'N����i���kM�V��;��đ�������� ���ݞ �y15����)�Q�4�-}3NT��B]��qA'��-Ġ�#�[Ƒ"���������lw�D��'(�`�6��$4�]�E�(EE6�9��u�����V֪�jM8G��CO���F�˝s9��� -TF=�@M)|�G��K1�P5�ޯ�Xԕ���<:b-��b�E���9׳9p0�zZ�lk$U���w�~��8�������� �2�T��������W'��k�\�q�c����H�3�{���h��ؗ�CTN�j��0]8ݮDhy���7-���ij?s˫��Sz����5�SU~4`�Ֆ��A�n ���X�{T0�$��d��B��=��l�Q_7-)�ڜ|A:��w{J����DC�D��e��sċ&?^���^+Yyŗ�|uqq�SBm�ٍÀ�'Kal?�5�V�6 ���K�B���PL��5QcEy�98��(�i�_�§-��퇼�*o�� �a���8 ��ϲ���rk��Y����( B|�0OE�e\ ��S��<a�7~H�T���/̜��;+�x`%���_��b�R�Dvl0��8\��c��D�����37�x��pr>�>���xg��-�����ʶrN�:R�\�5Q�E� �F��&2��8 �6!�4��v3!*"������_IX�R���H��"N�§瞕�# �^ �r�����IX3���[F� ����a�.�P_�T]���B�����12�\U�@���փ4��8P��!h�8ח�ʛ-'a�R��b*_���6[�����ҭ� (�28�e�&�6妙.1�F��:�i?}�˧�>�+W��ꎰ����M��L߇��������2�6^V���(����W<���)A4�;��w�x�ܔ�REńR8��)z<|&��I��#��5�l�Ԭ���^��0A?�5�����ߍ��P��*�$��N��O�]�]�l�G��F�c!c����IK����W1)��$O��p�����K, Հ�����{œ���:s��E��T�����80��n��l�������U��n���jTt[`��n�PJ�K7rЈ��0'$�~������)S�@~� χlzf���ßK�- 6�����a�2BcY<��Ž�u
Behavioral task
behavioral1
Sample
8493ca43806a05e01181865bcfcf1f6ab13683938944b279c3544c962b875555.exe
Resource
win7-20220901-en
General
-
Target
8493ca43806a05e01181865bcfcf1f6ab13683938944b279c3544c962b875555
-
Size
352KB
-
MD5
00ae7ba01f986808e7aa90eff237f542
-
SHA1
54cdad2e2f3c67b134701d62ddbb679728250632
-
SHA256
8493ca43806a05e01181865bcfcf1f6ab13683938944b279c3544c962b875555
-
SHA512
840e0951dccbb924def5646dc2be694e58529ffa30245a26ffc18136b8887c89832e612f9c185c0684de7fd7f12a181ffe0b0f5e4d66a775a104d6da36957313
-
SSDEEP
6144:LjBIbPaNxNjv2rKTm32NmJ/GzfG/IFtxEjmvkyGnoFHU2QR4C:/KraNbDT028UK/IXx+mvGoF0jR
Malware Config
Signatures
Files
-
8493ca43806a05e01181865bcfcf1f6ab13683938944b279c3544c962b875555.exe windows x86
7d0402bcbd6eab76b20e043695953d4f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualProtect
ExitProcess
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
advapi32
RegCloseKey
comctl32
ord17
comdlg32
ChooseFontA
gdi32
PatBlt
ole32
OleRun
oleaut32
SafeArrayGetDim
shell32
ShellExecuteA
user32
GetDC
winmm
waveOutOpen
winspool.drv
OpenPrinterA
ws2_32
getpeername
Exports
Exports
Sections
UPX0 Size: - Virtual size: 628KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE