P��A��\�>�:�Ƣ�����_R��R7��;z�H~e����~65DB�@\g������8K˹�z�K ~�[�G��f>��S�Z�~y�t�j�*:ݝ6,�}��ϺL3Yi5�r�c�1����gy+=/.uBx63)z�ݍ�k���p�/Ǐ�9��w��������p��QkS3'�)��&�7K%��=(^7�`�fvk��bNJ���9�7��7K��d$��7+έ��uꠓ���U ��6�D� �v,��A���q|t��e�L�avT��pRt�!&"�����"f��!Y �f~c����:�:j�yz�¼�@`=')�~f���3�OBd���|s*�����7�Fm�(zvv���ʲ�6�����Ї�.�k�0���z�P鹊6%��%��S8��������^����Or�C ��m@�,�B�ٴ�M�]��Y�;�#��2|�����QB��xD��P,cކ������qX��\�z�0Jn$~1Q)�WV�~���(啎a6zu&���$�����ؓ�:+�&����'�?�e$&"�� g���!�e�VV� �P>�뛩qE���C(�fͮE���m��:D��BܳOu�.��rY����I����s̉���M�j�����-����أf�4z��DLUT�����]�|�~�Ldyn!��ye�N�&�I�qU��rrZ'O>�#��v��t����OhF��E�������[�Z��n��4;�p���@���3��d���@5/��]�_��t8_�B�'K8 ~����e��g�d��)��Kn~�U0� ����ObZ9�:�zZ�8@� �J���_��8��A�]X���J?hgjD�igs˅ȵ��ͥoTs橝���ey�M��� I���C6iF�K��5���Y��lm[^�P_�����{�ގ�v6'�-��a���0twV��14q�������ԢY�߷s�V����F���WoV��}��������Yp|t�& �[]h�A�tM��]Ƒ�ިl�l.:�o5 Xظ�}Q����:��x���������2��%q�U����_ǞU ��j�������P�w�����LX��:�'�]W7S1̦��(��uQ��η����&]�QDB�W�xX�̇�s4�N` �;9��߂c<��FH�7���UT?�c�t��x�� d�a�(��dZ� �#�5����['�;��a1�X߾.G�9����Q�()�`�~��$�GN`f�N݊��V�N"�Kڎ�� �n�|�z����WT%�ܫ�T�o��&��!}�(#jV� �yH�ڽ������#�t�����(+���ɫ�?܋��9 ���$���ٕZ�N#�<^l���=����0�� �(�";�Gr[Z>���~�{�%}��{�0G�&���V�* �ο�%v�c�>�Ȍ{߀��0ik��_'����kq�c�x2��$�ﵫ�9mO׀��m��&Slb7�dlh�DkM�z�����Fq�����=�T��U��,��"���x�G����~jr]����w#iOs����:���=��(瑜�����v Aa{�IAz�Cja��XL��\c��5��Ԏ�Ӽ��a�L�x}��Z�k�ȥz����X7;�kWA��H|�G`�������J��E*�� �b�MC/��U�l�o���Z��6)�2R���3�Yu�sr0+�3ɷi�J���{]��EQ�u�R�1(y9��hULz�.�k]2���v��Ry�Y]�Ba���j �#%������^�lZSp�A�t�V��q�2�U��g<W���}�]�jG S�gu�_�c�����;����$�)?�t�a�Y�!��b���O��G���j�n��9d����@��v*Փ�ow��e�iG�I�]��һ�g��2�Y� ����a��6����|�e9��M��Sa�"[�=U�� ��;.��*/ϐ�RO��5ϣ{Y\)��1M�Nl� ���e��%k�Q&~c�U���ۚ��0h�����{ǫ�m�#�H�_��_"��0�Ek06B���Aa�/�M(�q|���{�����bO�4 ���e�z����ܦ�uW�ДB�/xW��˄�k��,Vxf�,�r&T���eN1�>�Tt��n��t�x�>`�I ����Ѩ�y�&� �M��S�Z>�$��X{<��N� TK �<��]�Sp�I�x�U��,zشUY���'���=|�h�x�"�ym����O���aݰ��D�_�+ӻ�`κi�T?-]ˀ��9ϻ�[����hK���jԾ�r�d�*�� WA���I gA!�Y����{&32�Ӡs���Ʉ0C�ZvP������A;<)�^�DМX<�ﶍuZR��(g�R��Ira}7&;�YwJ,�ݰ�Y��b��B�UEC02�1)ev�!�hP���ve�KCHFJ�Ԭ����H}���6�6�Ӟ� z��Ǒ�`r���n"��<����p����}���>����`__�5&8��u����3�ج�~�%�'-G;kzQ�SdI �r�����S�o����^Ɠ���2^�d�zHl5�A��P����3څ ���n���*���D�EX0ą�h��^�H:�����n�hw�K�r�5�j���.�<6y]7�ΰ���,�����ĵ%{���5�K\�E�)t&VW�>�<���l�?rD�!&�_����) ����Z��A����r�&$����ӐC�s��yyk��rS蛤�2.A�n�}4��0$��/�ɷx�Av����;C�%?mG9��2X�y����|���݉:�Ƥ�s!�[�����1�����g*�/-f�V�#��Q'No�@�*4�)� 7���BU��:Y�n�9�� ~vY� ���ĤS�I]qi�s��F1=�˂��?�]Pln��d~��|4�Ř{���9���|��K�:m,���� xS��\Y z(F;>��u�r)t��9�5]�jW�����&�R���Аg�J��08�ǬE��I����4�����]{F���p@(ɤ����2�!Fg��4%�x�[^Ü�6Qf�"oU�Wy��XH�Vi���Z�b� �I��������}�!�[�>ֽE��;�}���$ ☻H���|��Բ"� }+���q0|���� ,�2#�e�1A���g����C0�^9�ck$�Ƽu�ei1���I����ޜk�[���ĝ�5Tr�����>����Tl>�_x�TV;�K���L��H�J�i�c� ������c��`�y�#������L��êdJ��v�&��LU��)�p;�Cf;�#C��آ&��ӹ�Ý ��FƯ�aͳ�*,����*���@6���t/�����G��3E]���*� �brmq��S�y����(Xo���n�lRؔ����#Gj�p��5m+�v�pN��f���}�������:tGr��6�e�>1>i�L�Ҭ��. ��&�-#�$�0�A��
Static task
static1
Behavioral task
behavioral1
Sample
9e860470cb8c69413b4aab41e6a714180f82d41a09172ce3ba5fb0b886ead74e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9e860470cb8c69413b4aab41e6a714180f82d41a09172ce3ba5fb0b886ead74e.exe
Resource
win10-20220812-en
General
-
Target
9e860470cb8c69413b4aab41e6a714180f82d41a09172ce3ba5fb0b886ead74e
-
Size
2.7MB
-
MD5
19208c31b0731f8825c6672a3ec7feec
-
SHA1
763c2610e3b06eb2242c6bd8aa8dc18c970e9d73
-
SHA256
9e860470cb8c69413b4aab41e6a714180f82d41a09172ce3ba5fb0b886ead74e
-
SHA512
cdba4adf7295f34f491710b9a3d9a7fa0707b33fc7cb2d47f777462e51b020707b9de88f83ffe672832ccbeaa9a672ebd204a71305240be407780622761c3e37
-
SSDEEP
49152:hlbdLEGmN6tDtn9J4FUh7/XL1vPWnrB/EkgzF4QgBBblHgvpa0hN/ipvVE:NIGmIb74FoXLhmpETFuBBhAxaANqpvVE
Malware Config
Signatures
Files
-
9e860470cb8c69413b4aab41e6a714180f82d41a09172ce3ba5fb0b886ead74e.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 9.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pwkz Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE