���`��Jwa� �Λ�U)�̩d^�+�����k��U�p�Oϲ��cV�V�<�����(��5�����{�×����=!Ba�� -&��uHJ��Z�l���B�>� ����a�]�ͥͭ���?�c������c$�h��=���˥���N��01?���{" !`�E�NQ�k)��������{���1�Hc�_�����H+�U���@��~�K��*D����o��|��(��4�0X��_BiX|�R�&C�4]���9T��ׂ��h��Q��=3��Xc����Ab��D:�*=-Xa�F��;����#ɽ�q�*��J��AD8��!J��킄�,�<]�s9݊7P����v(o�=4�BܒKR�p'b���������!�UoJ6M$E�og� ���M}_��&� bhB�\P�6�݇���Ʈf��+����4u��=�8�ϣ�rQm�-�Y1�x�6��Nys�(�&������8YG�����$�M|`k�)+�� ˆ�(� z�����(�%�m�ܼxula���u�iߧ~� Ti��&J��o(��x��ތ&[ȕ��cc�~[wzS8�K�߁�!�8��z]S�ƹ���R�J��k�EY��������"5��9ᵪcy!IP*��"F����`Rb{�ֽUZl���V�g�D������c#��Y�<C;t+7��e��7dJ��/���A����^>3�B���6�p�Ag��ikE6���[a*K�����8hU<��V��|U��uh�d����u��z3V���T���Ği�����|��D��˙4.�����h0�VX^l��l�;��7�M1�r-j��G��7uj5r}<��0�E+`�e�ѐL�R�0���+�'����$)�8���Ι!�mcu �{9=�1珱-zܔ&E|�.��rB����ز"~���\tϩۑ[�"������s�i�z�� �W��h*XwѥbN�t�f19����T��W���|������㴺@��c:YL�!��73��q��k�ݤj�抃��aN���;�����K�<���ⵂ�|��1�nE��ނj4 n�p����*�$O��OWU���v��I1%\�.A{wlS�q(�-?� �E������� �I����T��|��PԞ=�u�D�Ɏ^IeT�������<��a�G���\�̷� ~���|�[���|>��܃�pTȢ��sxO JK ~�ڛ^�ǯ�2���Gc��=1s�w����x{�W����w/l�Ǐ����g<ǖ���L�*�6���o��kT��ɱ3�X�������!�)���$�Ue�w�l�;X}Tp�'Ub��xU�كv.����9�ߺ��z}�|����C�\M���Dx�$�jc����o\������q��&y&x?��CN�V��\�gN������"��+�82��Ws3�f1���9��Zo�}�����:B$�y�.��'*���[�Wd\���h�$�;$v=�=e�?����5���T��-���\�jp/f����@���1#6*�8V�BZ"wޠ��4ǐ#���3H��������V�>��p�W�)�G*�����4(�Ȕ�<ə�U�"��L��&�x\��zs|�u?��Rnهi�ZF�A�����S�ei#���<M v�Љ'�HH�;�]���gu%D��P�ٶ�i�6���3ǵR;�Z}ph^��}���s���$"��@`���;�rՇ�M�[�^e�WL�ې0Qb��a�7����L���0I�Hd�h�� ���VQ��#���Z����G������%*靮1�G��L��.�2�������v��Dz� |m�����H��h���pXI))7�^�D�ÆH��O nX{����q�%cW+P��|z����X{2�Hϛ���ӯ� L=�0C(��f�LUc��gÃ�A�Q����\�C��_���:�G��TQ���� ��y7�h[J*œ����pݵ��7_����уAYLx���X�05j�"e����,B$�T[���?�9����Z��u+HЈ� 7_B1��j����W�7z��� �Ҕ&��X��*�ho��>j����ϼs���&U Ү��-�׳�U�u^�y��i\������<�SM���f řoVǛ��uQ���"�����Ϲ�O�W���^&��C|*������%���P��n��EԴ�<���4���q��P&�����QB���������(�n[���y��a ����q���Ĺ�Ѻ�C�U�y�+�� ��m(�U��I# xZ1�@5��Y�,��T���.�.�{k'D�>9.Pr����I��T��EbKx�����^T�%kpl�e��0TQLf�,vzx/o�z1���B����/��T��G��x��{C)��)��,Z��T?���J�V�?��#dPE(�5�(�VI���5b��>���V� �5�Sd�l*U�Ź�h�,� �5�ċ��^��C�kzCim����@���:�����Ǽ�.��N���H!R� ��M���ٸ�4�7y�.Z��ɹ3;��>4d��/>8\�����y�B�����= � ,5���Tm2��>�d'���#m�*J?������x&��}��=:�a `���vؙ����p�f~��Q�(m�#ʔoW�^h,3m��� 6�=n�oj�8�x��ם�>n���c$�)Q�vG`�+ ��*�˵h�<�>�~7��F�T��;�G�J�P�2$|En�_�؝�>��Z�B�[W1ϠzC���~R"w�w 8E�- ���G=%>��\� g��j2��渭o�a��Q�R���=���C�77�u::�����p��V�K������S�T�'��v] �+�#\`�yl�L2;nN��)���<�4�&�'z�Up��*ij�RE�*V���K����#ƀ��M��?��CK��v�wY�u�?�����Q�@.�U����>F 3]�Dr���V��J_$���_ Z>~�3��B��,��'3z�R-߫�N��F_�GL��hn?�2�~ቢH�]�R��5��)/����,�Z
Static task
static1
Behavioral task
behavioral1
Sample
06db4a2d52f7d5225ca09c68613caa60fab21e430d2cb7a93374bc32534cc2a3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
06db4a2d52f7d5225ca09c68613caa60fab21e430d2cb7a93374bc32534cc2a3.exe
Resource
win10v2004-20220901-en
General
-
Target
06db4a2d52f7d5225ca09c68613caa60fab21e430d2cb7a93374bc32534cc2a3
-
Size
1.4MB
-
MD5
4e035a56218e2ffc839c96cf8bad2570
-
SHA1
22bcebb4f59b017b8b7a7ac87d8352c67c649ff0
-
SHA256
06db4a2d52f7d5225ca09c68613caa60fab21e430d2cb7a93374bc32534cc2a3
-
SHA512
7be5dfba1bb8ed85be25daad69490d5e7ce097d28ed4f377d35a485007e87ea2712380ed9c1c3a6eb31855e9965752ee103ceaec4970f4fc0ad60bf5fc38d157
-
SSDEEP
24576:56BqwJEiaapMtdb4CKG9jvQSKJnOK10om9EcqYtaLuS9hzB0NkRi0:64LtdD1jvQSKFBmfRujzB0Nqi0
Malware Config
Signatures
Files
-
06db4a2d52f7d5225ca09c68613caa60fab21e430d2cb7a93374bc32534cc2a3.exe windows x86
a3206b37990d936af9010765ad57bf27
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiOutReset
ws2_32
WSAAsyncSelect
kernel32
HeapFree
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
wsprintfA
gdi32
RoundRect
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
shell32
Shell_NotifyIconA
ole32
CreateILockBytesOnHGlobal
oleaut32
SysStringLen
comctl32
ImageList_Destroy
oledlg
ord8
comdlg32
ChooseColorA
Exports
Exports
Sections
.text Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 374KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 361KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE