�rX�t�sk�wiv�f����ͤl�r�-��{t�q���y���rf fR�A� �T!x}�IJ��h~ݏ���4��ُ���!��=�'���<����W��=8��W�����9�6af�᭑BJ�XV���y�(����: ե۔�^��Oy���I�;P��۫-*��g%TR#����!���}Ce��/I2Ux��I�ق[email protected]�*�0����[O��`�X/��It�����>����2�U�L��{��ߚD���.��{N�U��gU6o�s�hƦ���g$������,���y�{�"}��s�NU�b��z�1O�qu�� :ϊ�.�9�y+���;M?4>,f��m��A����_qN��ψ >�^��ɏ�C#�}p�PБ�sUOi��P��:Hj�o�B�@ ��<g.�r�Y��O����P�L�3آ.����o~��qd^�4u�)����B�&I\�%Z�oo q��p^ ������3��' f��Qp���CX�Д=`��r�F2�m�������+ˑo6.gIW�̓��{�0<������g�iT�<G��LJ��H��kُ��F���y��e��?>�Nx���\���"Z��6�e�oJ�L�� �������BQR��B��p4?����MD��`��r�2V�g���:|\��~б�c���,L�ﯔ�ll>� /��o�>i�ư�XQ�m6�T���x �smW���ͬ�y7��SҞ��NGWk�,��H$T:��1�IZ�ІInZmb4g��~e5�2shR�U҆���O�T�C̢8͋�S�P�/���Nٟ�"`R�n��F�bDig�ۘ���_��ԭ��0̊c���_<�Xrؕ�n��ipd!C��!���{��^�2�U�=���2gnd\��C��p+��B)C�;����43�����R��~Ĺ6�YuR|+���ۙ���8\MϠ���bL���Yl�2|�M�T���7�_�:;.��O���5�o����q�����}�Y��5���X��gk����S'/|b@*0����ѶݝN���K�����"�Vf�C����f��n�ʳf�:H#+�b8P��j��"�"�'z�im��� �%Uښ�gWGK�g��Iq����p��v|�˵��]�s�v�&G���S�[�U��RO��A�䭃����Ʌ��~4�H������?�(3���>2;p%H�c~4�W��=;���W�0����1�o���LKE��Nux�:8F%WC����^|��R�D��'��>���q�1�ٹ�p�&kZO� $�nd���dg8O����m2z��t&�3D�i6���i�C�N����ih��v%h�G�]��=yh<�����w�u�5j���`�+���3?_~���9��A/F���CyR��F�D����;��7�P��Vڍ%��Il�q�Q�x�ᝧ���7��$��R��(���x�_L�R�3u���!�1/oj�)�w?���7��~�#DS��[%[u��������C��.�����`��xl8H����-����7�;���A3N����/��67<�rP+��4ʈ=�% s�4�ՆK'�]IN��U��:9k���s܂�]oi����bh�RGk�GOa �J� �Ю]WcΒ�����ŰN��Գ$�q�I�4کE鸜�7K�p�e��Yf����~ɦ����kF �C��ȹmՇ�s_:�EAi�&�.�k����fM�h� mT�풜}E9ZS�����!��%��� ��$ �{/��'*R#�*{uH���C�9ڕ�����w�ޭ�D�8��G����s�{|#����o|���M�N�����A>�:�Ȼ)Y5p�W'� ��DB�Olp�>�͒�8�@��3#=�Q�����,`EN-�亄'�|�}��vL���;W�r�m�i'�N ����ֈ����h�?�V��(���Dj�*������ݡ��?����[@�`�H��͝�g���4&Pq���ҋ���c���1�������g/Ѭ��� ��9~�� �#HUϪ�w��Vn�m|��2�7[�����g`�<�a� &ր�t^��%#s�Tjs�:��J�����T:+�$o�>�hQ�Ng�+��U+�����# Lp.�H�Q��#K;D����c&&n�ޕ�������f|"\C��Y�1�4� ��4!�E�IwS�')�PP>lٮFU#��̧p��a���R��ʎ7�ఁ��֒Ҥr�.�>3���y���x�2�uHݺ"i�*�1�!{>�![����ċՈW��N�,6��s�Y�sZDv�N��h�9�d� ��])oi�Zl��D/s�,�����J�.�"읛��/�!$ _��Y�y慭c��ș��;��7�ߋ(�)�� / sŎW��b��������p����)W@v&e{-K�2��'�rXëӯ�T@��Y��4�1���]_ZQ����)���"鞭�Hb��c�=[�J D݊>�ȥ�ȉ0����Gc�v��3R�\�%!��p��B�~�Pa�g���ɖN~��xB�%��`�u7�ڲ�-+�闅��.g̳k���2��������Q���$2鈹��y�R��$D���SB�E������yк�$��tT�X���'\��Md��y[�N� �H�E�p��b�怓e �%�����0Y�."��%����-��"DKOD\�sP��$�)ᔯK 3�"l�Z�ڦȴ �"����P���VF��:r4\��_'�o�p�ʤ#��R��4��ޒj��-HQ��J��k�׆!���Q�+�[u��0�X��0:Ҽ?���]��寺���uJ��R���M[�I8ڂ������U$L����#�k�`N������guG�Q�#5|1p�����h�_��x�B���Q����y�uN�oy� �H�_Oy�?��sA�o�tJ���ҍ�y8�W���0�����&��{t�iNd�̚?�=<}MA��{�S�M���4�ש��>)��N�)ӝ�H� þ�j����������lŶK#3}3ϋ��EC����p-����a�x���0 n��S|��!і5|Ċ���ŅrH�6NA�? �٘{Ά�2"��14��)@
Static task
static1
Behavioral task
behavioral1
Sample
cca78145ea178eb9546263362c41143f55af8087bf74b0e455c175ec51818728.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cca78145ea178eb9546263362c41143f55af8087bf74b0e455c175ec51818728.exe
Resource
win10v2004-20220812-en
General
-
Target
cca78145ea178eb9546263362c41143f55af8087bf74b0e455c175ec51818728
-
Size
1.3MB
-
MD5
0ac2aedadec97fc87294f80ba2fc6ccd
-
SHA1
ea3fa8efdb38ca980ee79da0ce575aea8cff6a06
-
SHA256
cca78145ea178eb9546263362c41143f55af8087bf74b0e455c175ec51818728
-
SHA512
2621a7e4e34e54b7efaa78181657d75c19004a38fea6bcf5a61b06c7b95bc184b1a27fe2e862e717c87d11f68010e3713778dacf43873f5e946328bf739c4ae1
-
SSDEEP
24576:2xaDlNLiIwoP0U1L7Z5LlCSBkGXi0/2zLdX5eEQLv3iFd+7Fs0k4f:2gNLf/j1Lt5LlCCXi0/eJeDvS3+x
Malware Config
Signatures
Files
-
cca78145ea178eb9546263362c41143f55af8087bf74b0e455c175ec51818728.exe windows x86
e32814fc80c36a12014538f6463c00d8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetVersion
GetVersionExA
GetVersion
EnumCalendarInfoA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
SetCapture
advapi32
RegQueryValueExA
oleaut32
SafeArrayGetLBound
version
VerQueryValueA
gdi32
CreateSolidBrush
comctl32
ImageList_EndDrag
Exports
Exports
Sections
CODE Size: - Virtual size: 446KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 890KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 316B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ