�%:\�W��2=��%־�ֻ�����i���s^� ����o�o̿8p�D�l�!�k�����skS�(�.s���cŒ�2�.��q��|$�#�Yh�M2X���� BT!��F�@4���b%���I��/�]awa�[���#�E�9��>0����L9æ=� ��I9�B���o��Z��$x�&`�j�`=F�x%\.�x?.1f\h�-T����6�"�?^s�6W�ȁ�<��+(;ʲ��4m������v��R]��A'�������I��d�9���)jD�*0tk4i�7�����[�Z�B!۱�Jp��i4�eo�7�T���=(���KΌlW������[p5t+�LE ���ztr�l����u�Y�\ķ��xTXnU���i*�3�B�=_���sy�i��B��H�Ot}"q�`On�R�!���K��Ova��q���𪅮q�}���e�����c�˿9��;ppb����ݻ~��2��d�E�/t�Pwx�!!��a4�j������k�7$��j �Ԛ�8Â��+Y�^G,������o�P���s4Ȯ8�� ��r�C��8χ�y�)�7���K�c�U�&.G��̜.��A( #�7=�B���_l�"�`ʴ��$�t����W������o"�:�7� ���$6Vc��z<���ߌ�Q!-�������N��$я/2�@�x��95"��H��'(\<2��2,"�i�d��ͭE4}~���K��@�9V�iH���'�#����6� \,S�ÂG�G�-Q�H��{���Ow���Db�n�� ���gp,�����0�rIi���Z�Q�`hr��HG˚������1H"@�����`g���+�h'�m_����p�0����n��u"��WY������?[S�_��Xo�x㫡 jjN���ĦT����k}��S�u x��(�,w2>1\"��Ӊ�RYaz���LM��]`r_�+�<V�h'E]���L5W�8������nl�|�r`�̆���݁�ң���aߚ���p�}�����to���羕�4x{lo��g��Ul����I�����~�ɔ��Lƨ��&�AQ�bl�oՃ�6Ŋaq��� Q��CG7}�rǗӛ@2=�Ċ�����<� ��(a��UC�Ѧ���>^S+��z��LR���ܙg�P�gI�zC�l>������h��Y"c�9%V#M�܁��E��k���Ag��S}��Èop����۱�i��͋��wJ� �"B�+H�<(~��Scl�U-2�')D+��e�I�h�|�N_��,ã��4�+�����w�w՚X\(� ���ٶTd\���k�L�z��q���W�0���h+Ь�!OѬ-�Z�z�q�<e�*5��F�a��������DW ����I�袗���� ��1Z.Z�@˅!K��j�_�3}����NX�΄���fT ��Fj � F_ݴ���(�L�����jI��e��:��E�S6��x8�Q��*�{7���yf�s�l��C������86��]��� .b�^�^�Xt���<�E��~K�˓�4���Y���R q�=��|)��x��{z����K�uo��X���G`�������nt^��C[�j����|��RB[y�2ǴR��I/�z��8�wamt"��q�Hg���<�E[���5�RP�0F���.Ft��s?��kڜ�I��ӷ;G+f(��]ϲ��� �P�eЯ!ssM��!�t5w��B�}�����-���̍R1!&4���Y�Ӳ����--01�o(���j��4Yѵo��}�0���нa4�V}>��=AF�������<`~��q����%�|X�*%BO��kh24��<�"��}�C9���5C��:�^��x�_�DOA"�E4/��R�DV��F*��3��M�#���<��NZp&�1�4��Az=���xy�W�#=E'[M �(�Xʣ�����s(��ݴ9�I���6�lIXLs��ү��>S��+��"�e���=ށi@���u��H���Wz�� ���S� �-s�s# 3O�g���.����C�}��~�ǿ��.=Џ uu��!�Z1E���{��Z�-��!�wހ^��΅ �6�/��.�p�o4� �^��(k ���~��хl:�tl(���2��;�c�܆Wڮ�z���l>���Sw ��?J%���������o���gND��7Ϧ����)ֱ����1Ÿ��"�.n�$��-%�<2����}��1%���EB��츒tt$��ՁvB����'d`X���bB�.�7 �f8&��V{s�'2��y�Q:!*0s�ة�@w�gv�D����$���KaIb[�2��i�ҷ�G�����ʄ��s����d֪ �:n�b�O��"� q��.5H{ �S����5��������) v���QW������aV[V��2�2�̱��:z���t� ��C��/��,�$�N�ۺ��mtC��d��)��aԻ�!�z����4@e�>T!��! �:��h�$f(��|��MoQ��Ѹ�T&%�3��g��&則_���������M�P���r]o�Of�>e��b����� �bg�=�{D�%�MF`7D�r~��~���] B�z,ow�]%��*�X�ft��)����1sF���sL@�����y 1p���r�x�-M^����Q��ݖJ�5�ʤdV7ЙC�R���:��Qv��e�� ��B��G�N��N��/N��y���˕J4`j��������M�f��~�-%U�Ï����Ej��~��� ��L�fe��f�<�hߪ�W���Ǥ~� dP|R l��!�a��x�J��w��͉��6N��2���� �� �B��\�>P�n~Qk��F2 I`�pJ�U���u�l7b�\��WX��W����ˬ�)I�.�J9�EgS�. ��w�DC����v+*�r���}sY���'�%���B����ksr[~J�qs e��GN3q���{�2��m�oM��tH�f�5�/K;��>�ăn�6H|wG ��2�AC-W�X�933G��� Q4��a���~�R�y�a:�?a�E� Q=Ԣ-�p�WQ�N�a c",��4��g�L�� �{V71�I3O,�c�t�B?���] ��W�4x�W� {�5��1��
Static task
static1
Behavioral task
behavioral1
Sample
00106b8c4d67ffbf4d9892c2fdea4fe718a5269dda7ad3f9218523988f72095d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
00106b8c4d67ffbf4d9892c2fdea4fe718a5269dda7ad3f9218523988f72095d.exe
Resource
win10-20220812-en
General
-
Target
00106b8c4d67ffbf4d9892c2fdea4fe718a5269dda7ad3f9218523988f72095d
-
Size
2.2MB
-
MD5
49c440e7b2c1de456834cbdbf0f44b2c
-
SHA1
a745bd988ca86f2fec45753a0e93ac50fb8e2fb2
-
SHA256
00106b8c4d67ffbf4d9892c2fdea4fe718a5269dda7ad3f9218523988f72095d
-
SHA512
f1052e195b1c91daa3eb18b868cbe17900fe49ad0704aeea44cf8ce2d151db8a3dbf42ad27c8d4d83d52e14a2eed0e8832a5909be7c407b3b11f12d2076316f6
-
SSDEEP
49152:bU9skrOTCx8zydGbvkGP/MEePWWX/iWKsjEMRH7LdIYHbk+JOpZ:biskcCxxdbG3MEePWWagjJlxIubTo
Malware Config
Signatures
Files
-
00106b8c4d67ffbf4d9892c2fdea4fe718a5269dda7ad3f9218523988f72095d.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 7.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE