ʚ�'>�h���W���,�g��U ��z^ȇ�3�fU���:�!6� �?��ID{�-�� �l�����(A[R��B�Ss��¸ m� ]�?�KG�B�DŽl;�y,��x���˞����p�Q��7,ӏo*���ᇉ�}����r�j���%���mR��7�$qF���W���`�>���0�~q�(_��A��I�E`�&'[0I���q�����y>���#y<8 w?<����%S�;��!a�lqZf�I���ʪ\%;�*!�gMw�.!�Zߤ��V6�hJ�P���>0����T���xB�p4��Z�l��R��j4�Ծe�=ZѸ��kYU�,Z��bش�0���oB����9h���<V���.�x�Z$�F�"w�����bDz�"��>�����|g��lӟ ������}��z�[�#B�� �Hz?:� ��H��-&��V��W09��d��S� <̱�[i�z��y\�(0�vDK�Q�Qc�-<�C�����8�h|�Ϟ��0��.q���GՃ+��ԅ(��2�*ý[��Q���c[��h���J8Vvc]ș��V��r?�`X�-���V:17A�x?�cQu:���O0 ���(�cb�c���;���փR e�2y���~8�I��PP ���ך�������&B���Ԓ���a��r��ז�c��Ԧ {'樰\(P��� r�e���#��c�/͗S���{&�����#L�����`�⽑ dz�yps� ��LP��F8b�`-�L�!��A=�ojN��>�����߄���%����3�s�;����?'13��+a��#�tci/#j�ѝQh��y�vp4�|~�ݑ� �8�Px� �H��y����~Xy�_ж,'E\W����S*�Fn�V��g�Q�'�=N��I��"CsQ��#�Y�c��7@�L�b�)��a6�����UP~%,[ބ���=�i��Sf"��'�H^��u9�A�៘��s�g��̿��P4��6�J{�Q5mA������Θ'�|,F��AJ�o��U�Ϛ����~����3$b��,��۩�8;�Xzp��� 9kf)�qٰ���O�s�a��1�B�!�1����w�*����?���2 )"����`%8�bU�9����2�:G���eb�҄C��v��|\�)�I�8���(%�.�a�2>�i� �3����Ar����X��B fS�a����ϲ��Y�E�ffO���.�z��îr���3em�6�pHеZh�m?Y8z⋊2@B���P��� ^\�3�wV�y�-{ۖ?3�]��V��;�"��^"�����ɛӋxC��(b |J΅I�V�Gs.Y��L�ق�]��LV���F.��bG�_7�f��#�=^p�V${���/���j�(��C6y��Y_�L;>�Cքo��6!z�R=)*��0g�$y��^���{V,Zo �W�gv�5�n���hp,E�G��Kt���Z����[BߢV���+�(����y�D(�v��ia�a�J�M��m`%�0��͞x��=�\Lb�Oɟl�H~;�������.�M�`����?y�2���]�ն�H����`)U�����Ǟ���g�@W�J��a�`A$�i-�Kn�_�3��Q�G��(X ��ll�&��WR�����N�R�G����������A�<rk6flh��~���jۿK?���ę ���18�� ��2�츜?��{+v�l�N����V�L��ɲ�Ҹ����`�џ^��Z�SWq��Ԃ6�������c⛧��BWr��y�f�����FD�7̽��%h�5TA��%JIY\�U,^��^1���S������0���UK|(�պ��wV�� ��@c��f�+E{eK����� �Lj�?���E���i�Y�S��~'�NN;d�'D�r���� ��d>hT)�����)<�,O����� �F��DFt2]�6����#����,I$��M��5s�M�-^�����ᠷ��G;Ѹ1�۸z�}O��������(�_SOSo6XiG���k[������� ��me���莃&�Ovn�6���I3����p�a�L(4�c�5;������~��[��ޫ��,����Y�����r���P�V7ܑ���mqj� sM0���>�!Y.�ۀ����'6X���ش[�����h���v�%-�����{�Z:һ�S���1��5&T�F�sa�c ���N�vҞ�#�2��'��䤋����B���g;�){���)�)�,�(e�[E ������g��5�-�2T՟3�oWS���ȶvӢU+n�#bW+|����F��dIBC`=Y� ƮQn�y /�l����X?�TH$��,P, ��B,YO贖�4��־�n���I�I��~�<�[̫����� �E����dR ����w��$"�Y����d���kbj.jޔ�`�FS�)���d�x�ٗR��?�������`�dd;Ѳ�aӘu�`0Jת� �S� f�������)�l� xN��i���oQ�c_��W���V��/���`�F��{�6ǥ��/J��c�$���*XlA�SK��.ƻS��>ޕ"�t��7�D�H�����AD6��t��CnS!����";'�������e@T5���� RP5�TN�N�n�.�4k�k��0.�rq�k`*@��ř�p'>����<w��gb2i��������5 S���c�PϷ��ؿ��ڱ��na�B�{J�tX$yc�>�B-��S����H�K^6�bc������ɯN����{�NC���T����y�[}���?�p�b��Y'])\#E���g�"���y�>�� ��!?N�M� �'|�5�N�V����ܥah-��RX�x)ظ�/X� ,S�T�zR_��3�6� ���1Z1�?�/WW>$'E�Y��c ~m}V�F�W�o�� ��k�r�b�_����3�)�l>{��e�!=L��c�5M��䨡B�=�n�W�r����p�VnK��&U�d�>:������R� ���Ð�W��"��9���dF|H�;5��|1M��
Static task
static1
Behavioral task
behavioral1
Sample
073d2d15c2d83cb2b64404c131a93f96ab8145158a086099b8b69ff055dd28fe.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
073d2d15c2d83cb2b64404c131a93f96ab8145158a086099b8b69ff055dd28fe.exe
Resource
win10v2004-20220901-en
General
-
Target
073d2d15c2d83cb2b64404c131a93f96ab8145158a086099b8b69ff055dd28fe
-
Size
1.8MB
-
MD5
eefe783209d0e6ca9ff3cb78398abdcb
-
SHA1
6102f1af55c156af861ce408475136c1e492fa7a
-
SHA256
073d2d15c2d83cb2b64404c131a93f96ab8145158a086099b8b69ff055dd28fe
-
SHA512
1dcb3e1daa20a227be3d496012007c7aee2bd578b34f35f5ee515569f4967ab1205b408d4471d120f82d17a38149e01ce5f3bb5a333f283a73ff444c313492e2
-
SSDEEP
49152:YB0kQR0iBSrOXYTmQUF8oewZwl/G4qn2LmClSvBd/d2QRxJwkU:Pk7Jr5m7ml/0nGe3Cb
Malware Config
Signatures
Files
-
073d2d15c2d83cb2b64404c131a93f96ab8145158a086099b8b69ff055dd28fe.exe windows x86
ef52a0a713c48b8436fafb9c77a23f76
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProfileStringA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
ChildWindowFromPointEx
gdi32
ExtSelectClipRgn
winmm
waveOutGetNumDevs
winspool.drv
DocumentPropertiesA
advapi32
RegCloseKey
shell32
Shell_NotifyIconA
ole32
OleRun
oleaut32
VariantTimeToSystemTime
comctl32
ImageList_Duplicate
oledlg
ord8
ws2_32
recv
comdlg32
GetFileTitleA
Exports
Exports
Sections
.text Size: - Virtual size: 726KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 187KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.GPP0 Size: 12KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.GPP1 Size: - Virtual size: 893KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.GPP2 Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ