6�z�ĄڰN�0�kq��j�L�~KkpN�����,#R��r�^ ��H��`~.k�$��2��bvZp`���ki ��8����g�8�R-^�%4������������1 '*�b���<ĥ��M%*1�O��Oc\gѣ�,��*�_ :��#��6'�]�"%�Ŝ&���J֣v3�%<�-~9�k�y��%���7�hx���Z�MD��(�1fQ?���a���τW�ǻH<F��N��U��QQ7}x3����Y��wuJsƫ�^B]籔I9R��|.ֈ�0|I�f���"��Z��B9G�Liz�:P�i��%�y��n�꺏-�� ������L��n�/��e(�����7��Rut:��j�5���p7dD4���R!��.��S���8�i��֭��&��d�5�M?oQ�Qu�J��HQ����:Gڮ|�_���j<~�gd#�=;�v��UV��A�L��C �HB1d"GXm�S���d$����ii��=�8��N�.C1s�V��x8�L5kCRB����5�/i�M�B}HU_��������tx�WA;h��5�NR��V~���ep{�9�h��%:�+ڂ���Xeǣ��������"�\z\z��>8�,����k��9�L�.xTA��ǣ�n*U:�����/c�3��Tز�<�QbBq�/HDI��0x��[P�I�aRRJ� +�7����B��=���0B�E�m��LL7�p7�hM%� �͛So9�^O�w�[V�������u��V)`M̞nLy���"=�� n-����q�X��������n��ʌ�$�`��Oʱ�G��:�{�Q*'sR�ZVj��|D���&!������,�Hz�3��$��Z�P�T�x��PS@�E��v�����Htg���,�hD�>7���6co�ؕh ���*���x��c�(om��O���C\7�]7჻���{R�Uy�N������zR^�6��ɛL�1��Fn{j�@͖���P���>��K��䦆)d�)��|�!Y@h�Ze��7��ŝdk2`������O��U��L<c�������2�@ ���]������30n��N2&3��M��{� ��z�Gs_�XB1>ׂ"��kj�z�R��^ίy֏�g�����X��?U�ú�$����7�A�T�`����eX����Sŋ1,�>�}�7/���Y)�e���"�%{SoM}8�X�*>毸�hP(��ڱ�V]9��1v k�T �F�֍�L�I�z�p�wr��!�.���Iw�T}�<b����7 F�|)��!4��=�NW/��R)����C�"��).o�0}2|�.~2��[��]K��Mܕ5z��Ys_����lŴ% ��.�SQ���sy�9M$�O�|�L� BIŌ�����,���b���<MuH�X��@�,Z��j��pH��OG��*<%Q� �����zZ�N��5:��Jv>��o���}G�v���]̾���t*˗h�sNܭJ�r�Np��f�<�_r�"�-������)K�i$�������_`w����^]�!|������2��{��d��)��d2A�J���4�h0V�q#�MBjf��>���>O��d�T2��7ÿ F�����p)�s�mCt؏K��f~���V� �́���S���z����)�?寥��Dd�r��9\��������T��֙A��'��2�Xe!ĀA ���s�ȑ���P�;��с[v�n�m9����!����H/�5/Rm��r[dᣉ ��NL����#��ŀ��7b�y�:�a���g�A4�{��+��.G�H�/ �spE�h\�3�QV>��,��xyX+��#�u� ����}�S���5%�뎣G.��kV��&�RO"����י�!D�����"���[�Xy�@m�̀7D��>pI�rn\|�hԌF�jo ՚��s��(���� ��}�k�3V�R#s�j8$]h|�'��[�+�@�����2��,�9h��Z�#"��u�°X�cdJ���.||�f.鸒O�����.(��#ߊ��`V�E�L�Bz���<=��p��:@Fc.�Q�+�U�_P� ����<0*��MM������������wy�A)n{*�d����'��F���Y���>��!�⼲Q+X�x��\����H�a^ aKm^�V�C��>������;���h"e4��6�NkNXc�� l���5D|a��r��y�)f`�)��{ Sن5$����u ���O����0qo��h�˜��d�9��2K��I�'i�L���i��ٺZb\�-(�E��gD�u�/���)Ԅ�=!�P��(%�UI����4���>����ۑ�����R䢵mf���P���iޓ��1�-=j�+��L���B|A�Z�0&�(9�`��[�9����/�J���p�&$�QoPI�$�s.b1���Lm�;��Mܟ�gT�'=O�V���s2E2���������&(����JG��Ј ��\�b�Ơ?��;M�V��?��Q+���w�BX[[���bl�ɫiTIk��ϩ`��c�S,)_����Q����@����g n-�LhmB˔,�}� j�'K@���0�E �z&n*GDMg���+���,�IvJ�x�\����:�w��3��NF��9��6Sl���:� �e���DߪH\�v�KlTƯʹ�.��8����Q{"K����m��\@mlȇu�< K��i-w� �}�¦N�{f�3�pWL�4���P�?���N�s?��Ds���֤ϔ����C�L؍&A� ����oX�yy�^6"B������r43,������Z��$x�F�ځ���)�W�|oT���э�L�g>��k���"5L��r`ȾD?��N�s�r�n����/��j�g�ϓm��S�@uf�aq|�m��8C�z��<+-����=��.�7`Q%��n��+�Ŀv�,�����!b�y�]�]��O^E��z�8� 2�=�ȫR��QL.0�YV�&7� H�D�Ѧ9?`ѪoN��t�!i��xSM��+�{�4��)I�����*�����}'�|
Static task
static1
Behavioral task
behavioral1
Sample
e7e861c11130c2be506367e1fb09418fe8622ed6d3c995d8f7973a5731527e13.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e7e861c11130c2be506367e1fb09418fe8622ed6d3c995d8f7973a5731527e13.exe
Resource
win10-20220812-en
General
-
Target
e7e861c11130c2be506367e1fb09418fe8622ed6d3c995d8f7973a5731527e13
-
Size
2.7MB
-
MD5
a4fd5e4f4973532f7be5746f731c2662
-
SHA1
4110e7b7441c47f7dbfcd3be20a2b2ffedd9ed6e
-
SHA256
e7e861c11130c2be506367e1fb09418fe8622ed6d3c995d8f7973a5731527e13
-
SHA512
f3a1a463329be6512b3aae2b10304b844af3136f81d0257f0ebaa0383a22f77b69e82d21be131b4f5813ad5e8480150b70f490c1039502b9c3713d0577eb26b0
-
SSDEEP
49152:sAJUOVyTur2Al6+SWdZY0JRRvXT7K7iiE1yzJ/EOngx4Ulo4Oo+mERoU2WcQRD9E:yj/AQ+DdZY0PRPTWzE1cE8gx4U/2oa5K
Malware Config
Signatures
Files
-
e7e861c11130c2be506367e1fb09418fe8622ed6d3c995d8f7973a5731527e13.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 9.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pwkz Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE