E# r��z�z%�`��p���o�R��)^*cH�).|�6D��pD1A�퉦gW�z-���3M\6�$V��O.���e9�h�Ҵ:����&�A�) \�}�������t�]��c9��Nk�#�듹c��mWZ93WS�v�i�Xv�zPTt:*-���;��L@�����]��S2��y�|,f��uO�K��:d�b��d|\b�Z��̟�r�\,,*a�p�ڧ8BF>h�e�6G�<���A_�ZQ��T䦂�ٝ7lb�AM�[��W����^���*�� x=����\Gs�~{Xu3 ENΌ;� ^ft�� �^�v�Ǎ��g���E�"FE糜9��B������oE�a�����&@�x� ��J��1�(+,�.�#I����1s�b�^8�7���v���\a��3s�/��������2��e���[P��W��\C3�oa�f 8�5�4On�ZRM�}�n�-b4�G�).KTe��}��wg��Z4xF��P���9a�: wC)9ڕ�t����Wg��E"���2��) =�5#c�[��Eh�^���D��S5sw��>K���6:>5�ꎳUt�a;.*;17���7�[�K��@DiT�t._�e���31�& �b�����B'$��t���dXl��E���S��!Qz�v|�1�ε�ԙ�x^;9ɤ>���C�{|9� <!�C�_l��.��z�C�D��m�кvH4F"T���T�Y�s����o6j���%L�Ԋ�}d�X�4�E�ɐZ�KUg����] 7}B�2%xj��2%���k�������e��-����/H!Ӭm?v�z��X�->�Nk�@��ä��5� �H��=�6�<Φ��Y��>�"\~�F�Q*>ixQLԃbɁQK8jt��3tKuA��a�>�F�4)��6�q6�i�� ��0 L~��'w�v2��*uyt50b�!?I`v8�u����zaug�S�����逰1�X�r���]Ɍ�@��P9O�P"%�y�Ƽ�j�S;��mcU�����6����̨�8��@��:�=�о*�(���c- �i�_wt�o ��J�ϋ��UܗL�jI�)�@!�N�&N�=e{W]���: ֹ��������F��]�����Sk���w2�\���P� �����c|"�6aܸ�<r��4r�XC�$�.7�H?�}��\qo����tS� ӓ����g/� k\B��2�p���⥖��kt�b�Z:��C Z�� 3���E�:8Y#��)Qe����j8n^)e <Z$���D��P�C��ʏ�7ȴ����T*��ն�a��.�t~WB���-��N�����<�]x�%��<����H��K�[R��5g\آ��p"v�Q��<����>w^A�I��]��7Aǧ�@?�����C��H�}��C撛������猺�$�w��9�l�ɮ;m�a�4d��b�X���?H�p��Ƀ�S%��d�]"��u�8$Ԅ+�8rDȩ����e_>T�tL����`ZC�f�rk��[���+<5�*�m,�>q� !�ݽ1�a��b����RV���V��o�B��hC�v��:�͊���~���>��ˉ�4��c�X�\�H����r�$�T��q5�L�Ϩ./��%�`#�N��Y$��k9�a�k��~�c%%Tg�-��{��Dp.���a�F�ewH���`�4��%��J殀��G�a�0�-@�T] 11p}������ş���y#X�k��(�9�i�y������O6{#�GƳ�*b�-R ��<u�â�{�&�bVW��E�X�f��_t�,Ԥ��BX��T$�X�� ���Z�,uAv��L���+� u�_����D��uh�̏�߁������Y�Xښ\)E:u.{����>^��wv�;��KCk�+X �)�pe��~hBAm�q7��3U�_2���(a����|j�n����i�[�Eiw ���=�ر�/�w;�cLx��^��u[N\�6�� ��Zv�q4I�a�R� �m >sc ���������z�1�'0v�^zW?����}��6�wD���2qj���U�ǁ��b���'pa���Ѕ�۞&{5!�.���նH�2���������-DyNqkͰ��9*ug�N}��"9@��M�+��>: �S��j"�優`R�M$������j����v��ˈ0����`�;8@�/0?@���ݰ��G���- 1{uNW��:.�U),>����,�(��x�X&����ԗ+�*��|�^D {��5ͫ���P� �c|�a�S��T�A44��5gv��}�6�Mjb� Chz$�i.d ����~b�.v�>��}&����Ok^Kȹt�i��͐��i���O�i��S�`ʃ�������R����J�G3۠��eEm\�b�@p�zP�P"pw�.%ՌH��Nb,BC�,5��#f�>iz�_}���ѦtV���ҍ�%W�Nm ����F��@$`\��������|)�$�ET�?�ϱ�魖��BX�����`:�>S�|y%c�Hɣ1���T^-D�P����6.�L����cG{Y"���_@��Q 0G��5IwO:�r�;��Zև��U�ǐ��:��&���_X�� ����ܩ,�����qv!�/�8���m�2�2�&57���^y$[�p����oNAt�����2�R�A�攌����&n�n�X4�gT�J���G�e���Qʠ|�&�� 젩ֲ"vpo��+hIg)AN'ذ)"1��yg�313G��7jqn3*:���,X�%Q+I���w�,�گ~��&�?1\]'�Q�3�ڠ����E'?&�V�)#�܁V��-�����:i��S���h5Ћ9 ��_�G$-м�GV���%}�za�O�ю�%Xl�\ b5gI*�R�Os}�Q��]V���{��4��D6n�4B( �>��U��q ~�eAJ�Z�ݬ�-�1�O���3Yc�����'z��ț<!}{��_Ȯ�( �����\�>d J���ﵻ���`B��w��W��د�)8A�sOǚ䉷�����j��K4q#��u�ÿgX$uۑ���q�R@R}TdxpZ #A��l�(���1�q��V�eښ��tg�E9��lC��~m�_�N ]|�����K� ��l�# �%��Cl��~Ǣw�u�;���|!���\�a�����/��:�/V�kw"#����k��͊�0�n�id?�$��7�G��nF�j ���ˑ���N���%��Ě�~��1�7��dd�2%C;����B��JZ�����Aٜ��?���*E�hDmpW
Static task
static1
Behavioral task
behavioral1
Sample
77340f01535db5c80c1f3e725a8f8de17bb227f567b8f568dd339be6ddacf60e.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
77340f01535db5c80c1f3e725a8f8de17bb227f567b8f568dd339be6ddacf60e.exe
Resource
win10-en-20211208
General
-
Target
77340f01535db5c80c1f3e725a8f8de17bb227f567b8f568dd339be6ddacf60e
-
Size
1.2MB
-
MD5
04ae8662cb8528e336b46ae2405f2c92
-
SHA1
833137ae5978af4b28edbb7fa6f0eec0c448fdbd
-
SHA256
77340f01535db5c80c1f3e725a8f8de17bb227f567b8f568dd339be6ddacf60e
-
SHA512
37543ab66e8f761e9d497e2efe0eb59505e5f76b16959a5681f287c7ff8f9d6db7b1383f9c2b051075ddc33c8a734f5f56376aa23ca471bf3fd60145dc621d3a
-
SSDEEP
24576:ZK49WAoSCK9a/KkVltqhgyfZjsYO+VCSG4CpexsE9Wb5Q3+IkPis6GP:YAoSVsiMUj2Ye4CQywW1QbGP
Malware Config
Signatures
Files
-
77340f01535db5c80c1f3e725a8f8de17bb227f567b8f568dd339be6ddacf60e.exe windows x86
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 27KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 166KB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1023KB - Virtual size: 1024KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE