����&����t�2�o�)�`�u4pP!H���IϮ.�4�d�6�E����J�C��)0P畾%����y7�@פ7<�E#�tQo�1h2��ϓ�,8K��?q�șo�-�kB%�cNX�{���,�<�df�ŧ��z3�Vt~��s���� �ȫ�2!�r}ǭ2��m����_���ȩ6�Xʺ��'j���C6��I�C�j�F���dB��]B>�V����v�[��s��2$l��6h��Ԣ;��-0dS�!���{(����N9�S)| ����vX��P�Yq�^p����z7�og1���??+�/nwf����Y�) �̥H6�Ã��z�[M�kpQ �&2`��=SD��hpR����"m��F2�w�m[���|�?�Ğ��6re��ܧ�+����+�� ����k�E'&�F���5���K��Yz�Ip��B��[���]��)��x}��K�M���̲PD�Q�{N��kqJ);���OU�?f^��J���r�ߞv�M ��v����Tċ(FH��n�1�d�6�y��>�����m������i�WW�\��@��DGrA����*�5_d� �j ��ŷ������3�./r���h��wg���JC�� Mb=N��B+˧�Y�<0Ay�L|K��x���mT/y��|s>I�U �o4=̑#"���d���)5�@/�� KG~��E�4��E�c�ʍ]L�p�O�� �.�`���F�h9ž'�Vd���g�v����������~5.��(�"��ƫ�uÏ�5��v�4��� ��V#�o��_}u�Q�č��d�XΈ�� @0�����h���-���G��V��z��Y���h�Bk�Z�[뜟iQFC2Ź&�5���� �7���)��JT�Hب���%���D���V���Ej� �#�*>_7@>`*A�;��Dc\��Z ��m�5[�"rU�<V&Z�Fp8���<��&�왳��8'P�v������6r5S��4������U�ń-�B�L%vG�a��A�w�g`���N�h*��|xf~bo;7��t�6q6)���(�!)��]���g֛0P����D�6�n#�l���Ԓ��v������cu����w��դ�mY�e�패Α��`coiVGN���!!�Z�x�M93vg���=��kLj���</���~�CS�a���� C0K��(X�2$-���Q8����~�� �[R�>��-&+��1��;�7�B��� ���E�ѥ�η�1ް @��ML�[��KCݠ�p��p�`НF�����s��M��'�]H�U��Z-����R���/��ƕ��^�&�vG�����&V�Y����-@}���>}�� �j�ʯX��������Z�\)���9{�m4�����a2V���_i������T�Ȭx���ib4>�p�O�QZ#�T��Br �Q�t���N*s�B8��k������ �٪� ��������LCi�f�w���rKp����{���~T���\Se���"���-��nv��y�8�7Ȟ��� DB�����Ⱦ��ծ�,��@Ц�"jZ���^b`�ǖy~g��4���w�"�& ��������y��a�!���`=L�J�6��x���[V��o�|%*�oy%��1氱O:��+���6;���Q1n^�2{����m��HP���BߠBL&�=��:����CпG��*L{��z<#��v��>0O7��s!S,�~�Z��'�����R�x���>`��Ԏ�Eu9�"�cu&�q��&iZ���:�d�T>�l\&��$�}�O����_/�ҧz����Z,# =J �n�Q_��4VӘ��F�"���B:�eyfp�ᘑb�DX�퇒�z~�G�=A?)�R���DA�d$n�����jI.�h�r���8�HpxA^�*z+K |v���(!sM��݇<Q�C_�qg��C��1����;��"źF��+��(A�)L��Nb+����o惐���Ē~L5�g�0�����qq���[��&��u?Y���:5,��\�����A�t \�SP���N�U��+p�-:sk�'��njp��d�9�g-�@2�WM��#�q��v��lS�7�kfD,x���� y���c�=�.��U�z��C{p�Wcm��5C��!��/>y�n鸴�}�m�V*��z��B���&�DRح6����ȧq��!�4=�!3DZ!C���s��1��wF$��t{鐪"gM_��!f|ع/} �+!:���Rlj@�'.����B4�v�����F^z��QT$DUC���>�2�?J����MꔎB('�˫T�c��|�?u����{%y%�q�=��!�;��VwH�D��2���sj��]g�F��ա��Fs8ɒ�4���Ӷ7�B�HF���Ģ��b���pG_=�h݆���IX�y��ym6���a�����*���S霒����.�P����c���|�m�?���g��18��~����e>R�a�Q��7�7!��IK�r��twce �@��y�!줽��iw���3`���?-����`����JpYj�&���YU6�Ȗ��vF�#�y�?�NqxJkT�x ��H6G��y�M�=�.��2�����>q��*�.:3�,Q��T7���$|��e��4�ۣg� ��T�!rt< ����8/�tv5-���O0yҽj�G�v����tU�M������L�����(=p�p�����W5{�P�G������2���l�*]������-�-�R�O����R~��Sl!@�rC��5��Pi`v���xoJ���p!���-+�>2,t�5��C��f�3������zޢ���CgBvsW&Q�X2�)��3����na���~$���鍸+/h�������%l!�"u&�2j$�&j� ��c��ȝG��k���o2Zֵ4x�����<��G^HѯGҹ}~�E���o�F��*p�?��8�g�½����{���jq��wz�����9��,�3��g�m*��䩸�G=�;j��cLj#u1�؇��4��"Z�m�����Th8~���T�7�x��0��z�3}8qo��~v���_���E���b5~U�Ϲ����f����-�V��Z�PP( ��xz�DV�=�Sx�?7�8;�#3B����5��a��;�N�ɇ���������𬹱Ij�0GJ呫H�n��Mjª�JLͅ�g��a$��6�����e����j�v�h�!0ʄ"��*��o�#Ev�}�F)>a�������^�%����?p&�?_��\rgL ����ڻ�t&�!����g�o[B[Ų�ҵ��3�N��D'D0y�⧚~�\}����L?��_��Vo7��@+�/ b�HIҳ�-oƎ������[��5��
Static task
static1
Behavioral task
behavioral1
Sample
3BB7DE18AA3BF41486368F0AB8A77075.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3BB7DE18AA3BF41486368F0AB8A77075.exe
Resource
win10v2004-20220901-en
General
-
Target
3BB7DE18AA3BF41486368F0AB8A77075.fil
-
Size
2.7MB
-
MD5
3bb7de18aa3bf41486368f0ab8a77075
-
SHA1
d69ea96fcd57f87866c96192e1f2559c7b42f798
-
SHA256
842cfaf8872237b4cb84e9092948869ff1046c1719e375df31e689bcd916dc20
-
SHA512
22af0ba28fa73c742dfff8eb6c3dc1edd7ebb235279eb1c77eb5a8f49ea12af0c23d7916377ecae0971b8294e1307093a690e6079a59c4303a99ecd32ceeb8cd
-
SSDEEP
49152:+ZfNHiTKk+6cKFtYS/WTt5EHz0E/TATh/G+zpcA8+CRVtxPQzxJ8nwe2:+ZVCT26cSYSwb02pc3+CtQf
Malware Config
Signatures
Files
-
3BB7DE18AA3BF41486368F0AB8A77075.fil.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 9.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pwkz Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE