LpU`����=}1Q`�S����o�y����W�(�ѷ�u�SV��sèp<S���֕��&1nB�05��A����bՍ��eo}|ٝ���ˤ �Ly;�f|Q���� "�A8����7��F �����F�uҰ��<���G�.9M��1N�E�˟��~�%�G_�4�����_�+Ȩ��=c�P1��� ܯ˞LO���>����r8����M�O��_���'�a��� �d=.�>�"lS=���P��Z�ܟ%n�)��lm[����Cq��Q"[u,yI�0u���X��B;v��06/���)���rC쫆p���hZ��O�?)L*^U��f���� [i���� X$�����D����� �E4��DŽ�1ۃ�_k� עΜ��������@�ó=F�U�P���C��t��D��EȒ-�7D� �D���-��CW����� %uo��y6$��-��">�s���ʦ��f�E�2�ǖ�e���R��Y�,�'�e���^ Ы�c���VJ�U��~F�h��Ũ0�\�w( eB"M�qAD���E��d�:@�)�h�!</��6�&�,? ��^����3?�$3֯���]��9 *L��m���Q������9���Ve���k���,�2�����E��k�g�U�u�8S�Z6|:�����SҲ2 ��H���)L�r!�ʉ=�.����%�G_�s���ۣ �1���pd㪤Pȕ���>qT�� Y� 5�+/���zE+ �T:r;����B��)pL�c~�Pو@>ʊ�c������'\�qk�����c�;Y��%����B��z|�.�y$_B�˘��2�"�+' @��&���f�]�1�����=F�엾N�"ۈU8�#�I������0�ᾪ�l�����X��_��,�'"��WS�2\-�s#R�|��SI��%�J�%H�%�E9�e�8�8u>6!����Y�D�r�*����oWmחrȕ�9���D]�̛0��aDn#u&J�D��)-�sC ��-sꘂl�K%�4k�+��H��x�0�fA�Իl�y��mx�@�� ��p� �{g�@o�o=��EP4(jd�I�r�ޜ�2����!�"3���߲��v=�����[���J+�`3s�g3��� �j!����b��R�>�bQ����9�2��3��<Ƶ��`˴���b_x�};'��/���gv��5��v7�?#���A� �Omj��!���~N�2&�UnṷArpN8ɥ�a��%�w ��99��p�|]1p^S���]��&�iO‽qLjX��_Ʌd�ƥa^l����WP`e�y6=v�{}�>�v�)�G2�d�0���y�B'�S-��5E�e�!��v��cZ���/��G<�L6�\��������s-����i���냋��t5]f�Xzt�-x��@>�����e��س[����2iw���ʌa�*�!�و��Sp���=v���$�0�L�6���^����T����t�����kO�_)��n9%��Ђ��J��{&���%����T ���|�������M��1&�h����p�ijsבv薁��BW��jmJXY8`=u��f|C-,t��Ћe���m�SjH��gz~'q��J�h��e�E(b#?h�G:nC��)3Z'2+R<c���V�'�K����w��̷��[{�Q�x��6�V�IsTբf��A����`|U�9z�7\���)��@���}�s_(PI<g��������˺1x"�$.�z�:z�+�Yg��{[.ߝ��5��l�7[���b�AU4������[�������?�)k�����;�=�����o��k�C�[2#���-R��@��{��2+���Ja�4Hp����{,Y)��c3c�����Mp�pI�V��-&D��#�Z��ږ��I�T_Y�m��x�Uw�GC�ߕ��yힸ�[�E_2���>�4�Y�B�8�C����pT�øݥ(�w=3C�my�B���V�X����\��#�ƙ,@g��{�1�(�_��o,\[�'E^ЛI[��y�(�6�(��d�x��*w����(<`'��kL�~KP��[�%L=����!�G����f�V�;��ȓ9�+(���1k��z�:�2b���GLi!$�.d�D�I�Ӕ*夺� r��cܚ{ߴ���M8qU���m�^�g�ۛ���ew OwD�29;�2���Y0�|���)U�}��O�e$΅��?��9����]�p\�p���� �[���1R�'�nm��ķ ����BQo���p�G7S,����f��\J�y�F�-mT<��|$ha�U�Q8=�|�k��\<=�߳�� ]t�� %dHo�;X02�j���U��cA��� ����_9��V�7��u-����d����=��9n/y�S� �xbՄ6������^ͺG"A=t�j�e��o�]�����5��)D��h$N�Dx���1����9�u{�"n�Vކ���˭a��Ӯ��zԗ[��v�̣��r0I �1`M���b�ͬ\_�z�=�V>|��*�r�s��p9r�\!�# P���8��TJW�9l��v,X;�e��u]p��WXN���^���!�a x(�;�1��DK�@0g?o��^X��+T�#�4n�`��Fڔ��kV<�R�V+K 0F�����gP[2�K�3�G�P��o��wa��p��~ ΰ�'t)[L ����,),�m߉�G�֣�����~w���lL ��ͨХ�S�[G���gw^�@��]�Q/P=(�%+�s?�x5��z|�ĪC�k�k�ҷ� 8�O��#���6ѹLg,��$��&>>LB[[R��������������K����V��k Ԋ�<�J 'td��Vl<d}F�M�1��P�w�������+�1�ɻsyo��4��Uhs�����g�,�h��L$u|�{f��YjL9�cx��8� ��0�Z[�Z�w�Ĥ:��E�j1�3�X4��@�1��pN����v8��`�o����,�nvNm!��|3ʠt=�w�"�����U�8�جj���F���;�]�3�Tm���A<�r?�F%v��AިRI�ԫh�������%�{pJ2m����5>��c�@���EK��1,E#���A5�m�lL �|3���9��T�6��U��8�$�R�khj_���9KÁN�����@�.�:��atr�V��ٜ,�����*GK����|%{dNv���7�&a�h�J���1_��]�c�[���ņ��5��:�$OS`���fE�-T�T?拮x����q�α��*�W��i�X��I�Y��̛ܮ�k.�Ńl�d���ot��f<����:��a</���m��x���7ǻ����R@�:|ֶ)��Dw�� CʰH�$�9s��bu�Cu3����u�"|<�l7�J��R�����"0
Static task
static1
Behavioral task
behavioral1
Sample
cfd2bff313db87cd04f27639af16234881d043bb1b2ca998bcd304fad92eecec.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cfd2bff313db87cd04f27639af16234881d043bb1b2ca998bcd304fad92eecec.exe
Resource
win10-20220812-en
General
-
Target
cfd2bff313db87cd04f27639af16234881d043bb1b2ca998bcd304fad92eecec
-
Size
2.7MB
-
MD5
b885b872f0737de69ddce2e7a6407316
-
SHA1
00408f5eedb9fc29ecdd78472aa49843ca4071fb
-
SHA256
cfd2bff313db87cd04f27639af16234881d043bb1b2ca998bcd304fad92eecec
-
SHA512
cee1fcd97bce362edf0875aef4ea0115bc506655122330534e9ec9a863b289fb9ab8d09a6f7d948d47a0fcd7e143633e43d96531815c83830324bab4aa68a342
-
SSDEEP
49152:VQe2qyMM2mTSCaOu3/vFzaHKQUMkZnVHuIjZ2ZQaUeZBN6773N1xYwCJ:VZ7yM9/3/5aqQkJluI1+UYN6P3XC
Malware Config
Signatures
Files
-
cfd2bff313db87cd04f27639af16234881d043bb1b2ca998bcd304fad92eecec.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 9.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pwkz Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE