�jV.��g}�^��]��e����@�W@[0��J/C��H����y�5+�jK�߰�iǽܣ�8���!��ƌ�5Pq�&(�k��llw���o����|NrP�:ցCzs��G9ϋ�*��*+� ��/.cj-˚sӨN�pِ�n��j����$^=����|�9�ξ������(��ŷ��l��������q�i���(��� D9���������I̿R�B�M'2�G���;-<sϲ��]\�3���z���JZ0���ұ�@C�f�IXY�EX��r"HV��)�ue��LK �:0P܅��?���k+l&�ٌ�8�6쳭8h�N۵$��M�\M֤-�8�����[ɆGb����Tf��������|-L��RM��G+̗�&t\D�r����]du��)���v(�� �j-� =�6���e_��U�.���e��V�d>'@����n�����#�h�:�LLّ��IW��[�I��4�\B�G�)9�%2[F��\\�h��U*�(�L:*��rS�M�� 5}�Q�T�q����o��H��h�s. �{��c�t�K@Oo�{��+ª_Fne����e��M��>�Q�":��ї$����s�#8��`�ʑ�\��&�K]j�05���~%|��#��;»)Ei��c���_���xA�X�N�u��=Q��E}��zô�uaepUҫ;�=�-�;nYV�M��d�I2�.�:<4��:o�����CN��2 _���.���~��xyN�2fr���,Q�:c��E��5,�*\��[�����G�y^$MB����/�R\2ف�dT�*�e�w���������,2W�������}1œ�� 3���e��k�Hr~m~��O4-�M����Xv蘤I�����g ��&՟)�@?����QU3?`�2�#�~gX�!We-@^�HZ�VܑU3��֣$5����e�L�o�*�1�Y���X��<\��6�c�T���5xV�����J�"�'!Vl5?�G���&�&]�szT�/u��N��#}��A�~y x74���?s�����Q��Q�w�R�ڇd<3�7���!-膰?��h�7��b.�G�fa#z�FM����4�Q;�#n����{��hi����2ۅ�S������'oT�ts$������uX�~�M�r1!}.��J&�H��0���d�}�0���k��ʲJ2M ?7oKSb2�"m�SP�'�tM����H�J�L�� R>� On�$2ذJ�?�I�d�m��H�5��ܣ�y��}�%�.8>��L�tb���^`�O�]� ���,�kF�rI��X��7Ge�Z�o]�6�a[4"�L��3I%�r����2[�2�����?��=��ݐm��!� ʁ���\�x���; ��sɯ܊0W���|�1�,c��ab�\��dS2�#Ӡ)w�n�" ����lN��U�w�`d�F�6�d�&^W�š�,Z�5���= Wu�g��Χ��:Z�6�"�bEn_Da� �(�$mW�mg�/���fVL9��d��g�&PC6b�\���&:Y��$�a8�k)5B���>�[{O"ƨy�IU��hGQ�1��F]���������bo���j�K'��>��bU�.��e��e�x���3�Eq�Vwf�XN����W���s��}r�}p��2�ܝ������Q��� a�*���*�Di�;�<�3�(�����*�>(|�T`���%��Ė��O<=r� ����1$� 5+AL���xg���z�>�J]k^��p� �_) ��=l���9��y���+$O�\�J�j�W��>g_�c>w�w�?k�aT\���\�}��XϜ8��?���%C�ԛ�O6�+�w�b��(+�L�w [m�mX7�(��r�d9e~�>��%�W��+��w�m3�9? j���M�#��j5�B��މTT�ܱ5�m[ �N�y��J����"I�k�����&�d���r�sa�3�Dj�,�t�^�i��-�!���"S�����,��J�;X2�I�x�Lw<PP��*V,��$����f��-��5H-�|��h��m�Ш�=�q���<)"|�6�S�X@�$�8�4e~%����h���_��`�#���=��ť؇��];�:-�� BXi#�.4�!�=���[?���}b%ۓ/� �|ivJ�a���4m�ȥ>?��̯��O*J荢����6a���n����� �} -�!��,���^`��6>bj���_���X� :����î��Y�%�B���t �+L�������b.��X�B�#����ڲ�P����Ǡ;e&ʷ�#�2䝄l����j ��7�~N�K��G3��X{��8�@��( ����&%È#&�6���� ��X�&o=�>8�����/�I`���4I��F;3F��(����j��}�1,���pKFk�{������sG�����8������5!$��S^ �Z27��u��Ʌb�i �q�l�DGr��Lhm��u��S����d��cY+wa��_"�)����DBw���mBY�Nڑ���{F5�T=��Lt� � ��v�h�n\ +�UR� M��I�Xg]��G��m���0���m��u~>g�w���_��8#�~��J�!}$&,��~+F��?���U��j���t��۫Uٔ�h#�R���qG�p�M������%;kM� �uȃd����S���48��A��uCtW��>��c��CY� �,�� m�[g�a>=�ϕL�a g�1���ӧt�����[-��b#��:��o��kۘgs�%b~�q]��к��p�Sa�[ֻ|���C#�e� �OZ�ڲ��fI��Jmьs�H.m�^�4��S�o������&\�dM�eY����Y-���F ��G�8n-��c�]�ЛI}JTg�(`W��6�w��~�d��ą[���T�Q��Nlu��"�v` V�5���27%͙�t��h��O��~e�A ��������>=:�֪|BT������JϜ�Q�,L�y�s�%\�K$���:�M{5��?jN���;8�=�wq� �e�ņcC�2b\bG#PM�NX�>֘�`4q��=����Q=��Q����%�0����sz+\:����VG2c@ᷘ�]q�7}��@%�I�fjM�����n�9����W����B�%���}�t0sqq�Km��d �^���/��RYq S�����:����H�)�\�Q`Jh1�����"���J?����ӯ�vZD��:������EFW�z��շ��ᖟ TI- U�� i(P�xpE ����pJ#�>���ɕ�a�B� ��#C�~������@{8� ����OqsT6p�����a3B�Ɯ��=�]PQ$�M5"h�( �G�����J!�_��'waSաOZ��q�@2�[*r��Ī�2}���?�̥���-,��:��};M��=��x��nzƪ;���
Static task
static1
Behavioral task
behavioral1
Sample
dbbf5a2d7eb02186176d2949799e846e6faa9ea6f97b36312a5c3759525248c8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dbbf5a2d7eb02186176d2949799e846e6faa9ea6f97b36312a5c3759525248c8.exe
Resource
win10-20220812-en
General
-
Target
dbbf5a2d7eb02186176d2949799e846e6faa9ea6f97b36312a5c3759525248c8
-
Size
2.5MB
-
MD5
3f8f36afa408f5483dee0e1042d2a666
-
SHA1
4a34c216e6f6f2707ff3594e78b750dc8bad64ed
-
SHA256
dbbf5a2d7eb02186176d2949799e846e6faa9ea6f97b36312a5c3759525248c8
-
SHA512
21023e02fd9e4211b154ce95ce5079e9acaede66fc223fb91213fd652aae4f0e7fc1479bec6ad9441a7cd3621d6ea67458482134cf98644decacadefb430a06f
-
SSDEEP
49152:3Gk5kGdR+nYdVheLETKU2/hMDAXU1XJHaBbAc1wfHA8XcQpwEOdA4PyxHyBXWWQh:wG7RhUETC/EJnRT+6uW
Malware Config
Signatures
Files
-
dbbf5a2d7eb02186176d2949799e846e6faa9ea6f97b36312a5c3759525248c8.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 142KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 81KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 194KB - Virtual size: 7.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE