��b��k�ɸ�m|�{Y���p����ˉz��������`�f����|�N%�o,�K������SC�����u)��o�>��jz�L���*;�5�"�EiLj9pES�P���&o�5����N:c)����:I���@����P��Q�_t���KS�V��� �² Z����ZRq@s�^��A��(��f�i��>(��S����3tuw,�x���5�y��:���V� �jB3bl%`�j�}�0u��)3D��z��ɥ汴��P[����a�ʠ����������N��4K�١�����$�)������c��h�p�3BSv�ҡ��{�D���D����Z^�rپ���ջ�泑k���o�1i��O@�4l�7���g������J���յ��#��#��$i}P�tL[E|�5Cά�\�1����43]u�5���k����&�Q�QF��������:?2�oOw$08vH%Gm��&F}y"��O��Ʊ������*�y������:U��?�.��ې:�|���s.ߴ>/�1[�)�c��=y�{� �~�GOP�� �JF 2,���,�����n����q���M��6E�|4o�d��2Q2�( �)��ve��e�������s"_qæ0�|�y*93�+�.W�/�Hh� ����̋�1ܟTK5�bӢ�QΖ$�WG�P��}SN_����B4e)w4������zk����4र&B���d����e(�3 Τg�xw4����{�xy�![�J����&�+C���)v�o�+k+CDcs��hf|�M�92/�H��{�9��S ��<�� ���t��U��.�Ӗbr_�n��!I#��| cЖ�=�U�+K?�a���#%fd��_��Ϻn |�zp�t�T��3������Xs��u���1���~�^9!�(�DAY��L-/C��ښ n��#��:�.������G2�A�h�k�dS�4�㴩�PLju�|����x�ϟ����[~���Y�J��hn��u����2��Y0�#�Б y�(_/� f����ޤy��mS�L+�S"��#�v4`���)����,YX���GY� ��J���,�0ѳ�뷙|�Z7w2/��Mm�}��]�0-n����&=������9�.��(%�����yS��$ �+ߋ��v���G��9���2U��4'�e��Z�Z� .wA�8�^v���!&��O1CE����/�0��&�d����@3<Q��j��u-���N��6vXbQ-�R�{]>f�H�G����.Y�����Zl����l�0$t $�;����mc_�,�R��������Q����|�֭��Y�S�c�b�gҀp,+ɻ����ԍ�ۉ�@Eb�E ��0Ij�(�Sm<hv����Lf�Ua �Qr@f��*��I^M�9�;��ZJ�����]F��D��Aӗ�:�=����Tbw�9�;�YH��`��{n�i5�g�,T�?#x���ܟ�������G{Y�jL}��Iy �����1a�0�lK�"`�� "o��4h�����.]��t������a�X�c1GݦN����}.��6b�7�;ϲ�E��%8l��]��n�ާCa����v�%�����\T���<�t4�P�y'�D�T�����s�'0�W�S@����1�o6j_#���� �[m�7���7�J���L�k���\)^���,���3q��\���{nQG�:�A�}:��L�Q �[8P�`G�rA���ma�&ʔ���mo {{��oD��y�ы�6��D"t�F;���Ҍ����2\��Ai�L`N�"�w�nY��ok�z��h@A���A4���h��1�����"@k�"�Z����y\�hN5��rT��������%�<��?�(�3J/��9t�ԅ��˫�z$N@��3X� �Ze��=�}�,@�\��+D�%�@�hߜ�~L�CJ�/���L���Z�Ȋ�R;,�c>�d��e�n����>ݏL���Y�YE��_���36��fxL6�۬�~��3��jO)P�HD���1�R����T��z=�>D�M{�Q�C�s&͚ȃ�����wl���,�a��lی`���u��[V��s6�`~���y��l�r�횥`dM���>T�����cc*H��iG%i$��K����ZU�?v ;�����r��aa����'/�a9������f�,�R����E��w�O��0���|�B���ܳvi�%�)�ѡ�1�k$���9>�Ѯ�"k� �d�E�ä�~��&�ױ���B}U[������~3�P^j���ɉ��i.bқ��]B�}Ч�]�_��E��)J�����e� �����Z<���E쟩�j�`�B7�<����e(�[�4W;�P�䳫�]����1�`7�� ���5Dn=ԍ�ۣ���Пu�RP��DW@�֝'iD~E��I��|�"<-���2$�Ik����M'":��(z���.C�Pg���gS�-���23,����I�'5��$�T�ē����-��ߡ��6 � ��Y3���ۭ�-,@��0��������_���VW�|Q��>k�)�d�ĵ��S�1%?x���hU{��LS�,kx��vط��I,Ķ�R��Jp�OCV���lۂ64{�G�Z��s��A+��0 �X�\�,j����Ƴ�X���s�p��ˑT>ܰ���J9Pi�0s�LI���w*Uj�)�mę�ۑ�^��혎����L�����'�sP��ÝN�4��B�6��������\����G欙ލ��:�<�? �r�np�ԧ�V�ϖ�բ��eΑ��x�rQ�W�`��-./'�_ܯѱ���%��|�* ��+�I�Ɖ�=n;h8/|LWU�^�P�H�d����}먢��T�Ry�wk<� CE��8��|$�4c�-�p�������._ ��EH�*�H������q�h�y��S��������B��`e�dB]��^���c�s���]%���Bf������u������̺Y�f�� q�.�4.��k����T��V�A�6<O[�1¸ɜ���_*cS��~�Z��3�U"�h�r/�2v��4��_R�#�%��W��1��#�"��4!��Aӎ��e���CR�y�uy7� ���<J���Z�I�{�����o��*�zv灻����ȕWL�X�saeЏ�)�H�&Q�J2W����� J���@��Ԍ�-w���71�f)��y��њ���NC�)������ ��Do������q��Rp?4GήJ�o��6�
Static task
static1
Behavioral task
behavioral1
Sample
6160f3966660b788ea437d5d202547e54d7532582be55d0d93c37860e912111c.exe
Resource
win7-20220414-en
General
-
Target
6160f3966660b788ea437d5d202547e54d7532582be55d0d93c37860e912111c
-
Size
3.9MB
-
MD5
01644c1081aaa09a39deb82c7bcc48a7
-
SHA1
0522a3fed1b3d73029e6494e4e3b1019ee40a48d
-
SHA256
6160f3966660b788ea437d5d202547e54d7532582be55d0d93c37860e912111c
-
SHA512
b403ed4cd7b93fbfe4419eac7afa88d57307bbaef8a19edcca55bd3c9f99847186a014722706ba949dad3f4f35f3988dbe02e3e547b80b943275ebc59f58e5d0
-
SSDEEP
98304:iq2jZUD9cGCMIcGDJxgQgEZjAgDZIuIsYOY1sFiAJ8:i5jZUDxIXuJEpNlIuZY1giT
Malware Config
Signatures
Files
-
6160f3966660b788ea437d5d202547e54d7532582be55d0d93c37860e912111c.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 13KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 109KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 190KB - Virtual size: 13.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE