�.�:��H��h�M�,q,n����*�y��3��:���/s?D�o��O��c�؋>��S����Y��SA�7Vػ�ߢ5�le7\�������2��0Ǭm�9~f ���уpb��h)�yկ�F�61�**a�̏���HJ�⟀w��(睩��~c�V^���Z��M�F����� Ƅԫ�?sZ��;���:U��R �i6O^�Hzu���08� T�v�|�{� �Sp��s"�ql����.X^i�?��`vJ���/F��Ji��ZN�����f�jSW ]�y�������� �"��ď9]��5��˃��6�a;����"��Y {���`�c�cMN���N�N��@r��M�Z��[҆)�Mp�8� ���)շ����y���W�_u�����K~�p �k$�����+b�^�4'�Y��'�c��R���,��l�b�c�;���⼺t��R���}��Ci�M&Zc[E���;?��n��9�Z�����Q'a��=D���rmmгG���@�*p�R�xD��<&������yߙ�Y��h ���m��=�O���⯖�j�>�xF��2�4f ~Ӏ/��_�D�q��,�TA��?��E�J�E�Y�S!@��}<����$��nZ�+�c6=�2]���Dm���gߤX�9��r����yf <�uϥ�9g�,h4V��m�2ڗ�F��D�Gmoc��qD�������z��2��Q#���qj�|�iN��;�Fm�V�����@� A���x8�fq��۩K���ٟ�������]��`��A� /, �)ĉ�6�KG<5�X����Bp�V��i\���^0+� �*�f��ت��:Ҁ�~�k�4�L�)������=T����!�*�V�"�y�qm����s_rW.�����Mn`�pF>�F�QЌ�a�V��Qϛ{.��PÍ��HELM�b��g"��ұ�e��e��?�l�7��|�>B�S��]C����-�}�7+�^m��HQ��*l^���J�;���ii��s�+�pQ۸����SFQ�L��`��mɌ;�����3�"N�z����UB��U�������v"]j�p�p��Q��jh/)k���Hm�g�\(�56�A��W��?C{'�oaE��Ŀ˺��7/�AP�v�(��T}��ZN� h�YKD@ ����YrQ� K�L��-C�_su�#� �Y��c��ě�G���X� ����`3�>e���l���4�rR���C�*d�xT���e��]p���htX�{"e�>E������:I�:��� sU�+���n����ͯ��ޠT�%�G�lb����M����{fУ�u�rp�$���tkҠJG�)Fס]�jD�Y�9B�A�����Lp7lrf���/]k,$>�a��@��_<�=��ʐ�iu�)���lߙ~��K��}���o��t�{s#��a�RD���u���ǿ��br�#[�%M��/��O�2���E8���R�}���K�"D��E�^��~I�G�2X2���N,��}@�x���φ.!��1P�����ݝl��G����E�z��R+��q�Ôj����jr��ī[�ŝn��X�x���G��}��δ+�*�8[���ෟ�����S\����M�Xb�5���;ā�=��.��a�7mҍ� D9��R��тa@��ΉY&�v�B�H��T�r�S]ߙ=����j�Z��zg�n���m%a��5d`��&�1�g���j��f%����쿇�Y\f�[l��"� U���mڍ��rl���_9�u�-߳�L�2�*E�,G��㪃����^�����A��vups��O�qr�}x�Z��HWǘS�3�z��9��T0"�#:h)tʖ�[�� ]-�'�lw�1�j�7���& �Gzhvn�����Pu����d�&�ր�+FEo 5*��^ T���؈fIrPmW�&�}\;�P����߰,���LO3I�LM�ca�]���_�[uKq5�(�6)�j��߹��>�9X���vɠ�;E���E��D���h�ڎ;pS2+��&������Q��.�v��������2wR&��3���X�*W��uIͺ������?хǠ��iԯgҀ��-���a~9?� P#B��$Ĥq�Ѻ%(��y���XO�:A3�D�ޤ��D����N�D�پ C�q�P� A�u��]U�*M4��=�2�\�6X�P�QeS��?@0hZ'������[�� (�%m:#�����������NH �x=��LL'���W�oB �ʕKq�flL8�#��'� �Dʀ7��םQq���JܑD�������1W�C !���˰ϊ����3�2�e'�w��з - ,B���d4��Vzun���:�� �bݴ�}�_gZ/�>�_P+B� ;bt�N!��hG*,��3�T"h6���k��-��M�,Ϊ,�N���w�` �� �U�J=d~��x?��ˁZق���e��>``��R��!S����Q����w�/Ğ`Q�M�`~�����^ȅ)&� �y����JF���93�Dp%�s�04/nx�u$��Q4�T�������8TOJ̩����><�%al0��G�nN�5��<��X�7���k��9�~`6>��_�N��c�0,���?T�炿�#S����W!��9TS1XC���T�Kڳ��Y�$e�>- %��ϠC <��A���|�����\���Q���H�5w&��*{�)ܬ��?���i�����.N� ��������3�Ӥ�@���ď�˿|�T5�Py)�*��{��7K��AK�=wC�)���,��#�I�B4�c�߇�H.��^�jmf ���i�#�M�z��9�R��>31T٢t�K��^ZQ��]����QX��:�d��7���qgO��PJ\W����4��M������)KQ�g5IȨy��1� ���;����yN2Ťc;@��)�j�����"�"�B1�Pf��L����0��$�V����u.�|i���%��x��➃����}�oһ��dPGw��h˄��ӱ��۬��K�.� y 3�Pz���X����3`���슭 Uh��\D�{����T�"i��FnT�����# �YɣU*g��p����̰�ׅE �{����"��U�yh傝�;!zʱ����f�ȯ?_0^����?8��J�ֻ�Gg�6�P�����N��y�Ȇ�Z�����K!��z�L��{�bݑ���k�(�� ��;����DB�܃�.�����C���x�����{��=��8@+m�x��p�Q�˞/�|���Z�~��jV;� А�'UTI�e�Z,�P] � ���`;��
Static task
static1
Behavioral task
behavioral1
Sample
5e2c7cdc8c65b0cb23d07cea8dff20ec84a776544d8d102043f848baac0e76e2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5e2c7cdc8c65b0cb23d07cea8dff20ec84a776544d8d102043f848baac0e76e2.exe
Resource
win10-20220901-en
General
-
Target
5e2c7cdc8c65b0cb23d07cea8dff20ec84a776544d8d102043f848baac0e76e2
-
Size
2.7MB
-
MD5
4fc4a9669d8c5f8a57f0a34f10419521
-
SHA1
f96519866ceaf0ff44dea56bf3da77a56e6296c8
-
SHA256
5e2c7cdc8c65b0cb23d07cea8dff20ec84a776544d8d102043f848baac0e76e2
-
SHA512
8e9bb6200dbe9cce67f22da0ceba28f1d7b530912f889b089ed02afaca8470606bf56cb8117668f3260619f930ef2d3342229ab39ad4dc3d3d7293dd1a720ed3
-
SSDEEP
49152:bgRz6upopWkKH8x7GOdyQzFIDNJO8cWMdaF7ZnYHVcSJhVuYDxyWfZ:MQq8xzdlEO8b7nhAVusxxR
Malware Config
Signatures
Files
-
5e2c7cdc8c65b0cb23d07cea8dff20ec84a776544d8d102043f848baac0e76e2.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 9.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pwkz Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE