�������}<��5������B��Li��z.�oS52�<�Ź�z��Ay��͐0�i��\�V#�nSJ��9n��;MImL4V٘LT�&w������E��jC=z��4�_`7S���ɑ���To��#�T��U�u��k�0i�e�Q���g��C#Z�� ���we:.D:����J$ ԓ����<��Q�}OD�${R��+�YW����lJ%����c��:z ��������4���됒�eDQ��%�-WA��*�Ud��<%�R7à�c=��PTWZ�������PO%����DHo��4˹�F��e1�iHARKSDj���.B�i� �$��R���5Jhiu� Ąw��Գk<�5%~�[�!��q���n=�.��2��Q�H�&: ��*���^���"�V��� �S�18%�E�� 6Yoy ;��7ϗ��0�|�9�06���ҷ��㸯�0H �6FPkP�׃^i��嫰���\���M:����M6}: G:'(��H]�c*�� ����2tu��.�v'�oQ&I��� ��p_���t���o����M��CM��Q?���+�|������F�i,���<*������!�Q�u��ԟ�ݙr��$�9I5�,�G���^\�y�On���fy�&� �T���\]`����<��1���f���ی��}��w�u�I���H��4�P�� "���d%�*N�Իe�M�մ4>R?�|-�����-a_�Z�U_��}[�7�C�R��9"�$叶��� ��d���V��� /(e�'�a��b��lZ�*,'S.8 �/9��ey˻.�轶�ey'�������+�bo� �5�*e��k�������J�F���A�F����R��`iF_| Z����L�Ν�|J�*�2Fa"CMyB���<^� Ѡ��2�j��� ���!hU�3�z�_~^�#nSl�b�]�F�P�����,��$d]�o�V�I�r}�����a,�'N���=z���'�!��Ҥ��p��{�-��W�@)ԑ}���G�������]X~���7�Rk����\Z�&�D�����+��<�Ş�y� , ���_�_��S�Z������I�/������ӎ�Q�d��9�J�vc�N>�`��������}[�%mU6�C�N�ڡُ�_��J�يzp/tn�|{@�<>E>�����!�q\`�'�;�D��_���?tʃ\3��/,�:5����U�ʙ"^���'�H�'݂�L`q�k$/-�:��T2~(��+�ܣ0��M��'pM|E��d.Z2FW�"|6�Zk�n�R�|�S2��b��2�缿?N�IT�j����P����W��K�g����?a�����S�_ޱK4�>�] Zꜫw'���_Jm:��٧@�~��O�ٹWe��GK�8A�=<�+R�dH�:/:�u�v(0@[� )E_�*?\{�8R�GP�K�^Q^S��f���J��R!f��T1�m���f <l^;@>V���ʩY�Z�@����[�Sg�M!��<�%hV�͖�5}Nۮ�� �{�LPPb�;CM����z�%���s��x�]���b��/d㴸t];&�sN���/y��?�`���ƪ�}����rҏ�+�}��k��-**��UA�8��k?-���N�����Ф�CP� q���i�!=���D;��_ht���2%/K�W,�l��mū`��bd2�IwN��Y�����tB�พ^�v�PPbW���~OTm��$��`�K�ɮ���KN?;�D?y@�u��k���G��K� ���3:��l�?������S�Q�,?(��I&{Q�j�G$��t?9<�,(nO��H^���bu���W��|`������V1\�� F LlC�b�.g����0|@'�-x��Į_&Ȅ�������&_�<f�}�!���/:�u&��F��Xhp�b��@DM�r�O���Q�� 4�@��qt����,���vT_O����Cai�q�Q/��L*7��8V`�+HA�� ����2���g�>:�vE���E�� �E�<�}�$i�sP 3L�߮i$j�T��9���o�Q��Ne5A!-6Ϥ�� ^�ls0 ��BZ9�K ],OYe ʤ�5[�fm��כ����#U�Ŭ�ƀu���HrjrЈ��Hq�����KÙPz�˴�>[~�1)l���,�������JK��;�E����Y���q�G�^~.d������)��i�|����K��$�JwSlD�q�A|��ڹ|v����l^伆V�9�F�ѩ/|A�:y�;��]��;��#������-��� �<���QRGg���"r��x� �p�]�j�P}bW��S�2��~���+G������Wo���ġʁ=?W3|� 0�tM�>a���C�q�B��y�@ ��a���#�۬e5�?�1�9jrرswM|�l�KV|$=b��ႺD�k@J�r���Ɩ���`��:�d%d>��ǝo���A:�j�<`�9���X^��/�e{�'w�� Ek�4�(2�i���EIzz��y���R����7vk�R�(?�a�h:,�߭<� h�M2�<��ЀF��)o��S,�����3gK�ו�b7 >fv���r�}�)^�S�? =�|q�TP0-����bq��ٓAK^9z���wI����*��mdm�=H �'W���Hx�:|O ƒ/�+��e��$�P����;��aUR���Kua8� rk�GL?f�_��k��:�a�������,��0�I�'LJ��'2۞�6V|�";�ymCXHЅ��^���}QxOt���y$�����n{k��nT}�}9tvum����s���*�œ2��[o�}��̾�s��UV�� �6^����8wR�\v�4S�U�,�����??I��+�lK}�9��q�昋�؟BT2�LW�C��QwW����SK�CQ�T�o�>�j�A�����4����7Riy���Ox������>��K��n�I���x�U>���_�|)N�o��50,N8��h���W����U���_�t6IZ��P\r%�[w��m�x �I�4�n�v��U��6�:ר��[7���� y���&t:�9;�=�i�����%����> �V��Y�FK�B�6,zR�ѭv9}���'�_n����b�w�m���(̲Ѳ�ܖ�i�u��K��C�
Static task
static1
Behavioral task
behavioral1
Sample
701f6e20f0089aaa00394916abbc688c6055313a790cd2fd64ccb1c9c253a03d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
701f6e20f0089aaa00394916abbc688c6055313a790cd2fd64ccb1c9c253a03d.exe
Resource
win10-20220901-en
General
-
Target
701f6e20f0089aaa00394916abbc688c6055313a790cd2fd64ccb1c9c253a03d
-
Size
2.7MB
-
MD5
c72a0710ef46c94f21db5ab8b15102ad
-
SHA1
a4178459395820f72ead29bc5a5e1cb482d72234
-
SHA256
701f6e20f0089aaa00394916abbc688c6055313a790cd2fd64ccb1c9c253a03d
-
SHA512
e44ff8a77958202e42dcc299b05171fdeba000ac385e8ccc484cee7ca67ab4b6bc148475dc9054b7c56e0428e41de0406899779e4820b347532b1aed0329078b
-
SSDEEP
49152:ZZ8OxYe/eMfeBeshWc58FU9ygtxbYScAn4iwVK3b9NqWzQjKQ:ZZ85elGrIcKU9txcU4NVK5NqRKQ
Malware Config
Signatures
Files
-
701f6e20f0089aaa00394916abbc688c6055313a790cd2fd64ccb1c9c253a03d.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 9.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pwkz Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE