G ��0e�e��<�k���x1���p��v���!�R��<�=��Iwo����El��|| S��RM��&`�, �����p#�����������w�P4q��#��y�69L�A6�$����EC�c�9��rM=,�#�S���oE��7 ��{/ēDȫ6#��!{��h��ȐeIB;S�(��~�Mp|e���n�F��:^\a�_��?1�uC�fb5���� �Qe�*Nn'���DzC�*(�bPy�?:�v�2�j�� �Uy�<"ټ �o��ۼv�n�V4�~椉���� ")S|V��d�K�� ��w��uA{~K��T5 l�HghB�F�S�_��%��Ё��������<��9R����qpQr�IV��7��-L��;��.�ԉf}ڔ?��ZM���q�[l��$I[r�W2Z��*���а� ��=��k-�j���Th"�9�"k��4VA�QvI���Qhm&�8�my�P�ٶD��h��L5��*.�v���I��^� Y Z7f��Q��'��o{F(L��hc~�B�Ǝ�Y;�{�U#Z7��6rWXsB�$a~���|ךJ�iRԷ��vyH�� ����b�B�����v�ux�4����Y�ک�+߰�-S�����LE_C��ژ�H;Yd�N���٠k����t&!���A��M��7�<7ϧW��:�/e;�oev�?����Z ��rE��P���Ba,����رIԥ}�vmK�e3c#�UM�@{�bZA7c��n.�ɧP��h���W.���JQM3�B�[������+t����[��WĭA�^���Ҧ:�q��7��J��tT�<�_v�������Gǻ�9s"��B�H��/�x��)�ߕcj.�J���M�=��#bY"��l;�RW��$+���}c8{-/}b���I꣪�RE��fP6 ��gUuL7�U<t����#�.��1��>�N���I߹���qYN� �K �a� �N�仛��g�X%k�-�c>G�Ą���y2����('�d�V�B6�Fo?5G�'��kO�[�5��� >[&���ɛ5��w�����,к,�� 'gi�R�{ <z�D<���}�W;Ŏ:8��,�l �'�fN���oe7QP}`!�qF�����e��� � O $����+���-b���G����s;���a rK�B�%�2��/&Rx�ڵuP���Dݲ~�2v�lu�b���5]P���Ñ � ޫ����6k�aS�vcQ��Xj��m)�1ɍ��,4�3ѬOIL��X?�8���ó|�9�)���V��t#�O7M]� ������z��t��øY;�@&=����uɀ!��R*dU���9�7D�d��@��-�>�W����N�$n*�<@���,��Q�5��!�v�Zg;��FA�Ђ|��r<��9G'�cz Ǜ���q�8yв�wV��~}��w9J��V����f��Y� Y�7��1$]A�9G��D�/aYK�V.1�臽'XU5Z �v�<)���)Cv�-���>�_�f*�L�Т��� �� n'7�z��:�hY���p�P�[ſ<~'�pRx���&e� �����u�qTM� D�}iԾ�>�-�[�Lx�o�h����`���[$����ur�K��3y�/�`a����1F]w��"<�|N� ��!,�7��e :7��S^o���@L����� ���ݨ�<�ۮ�l���p�g%���i6š$���� ;�/S�y�U@�3�q�px�*� S��19b��_�`S��� s��VzY��.��� �|*��C�A����9 u���Z�>���^�\��O��O����/�Ԩ����x��jF�3�X6YV����%�n�Q>��A�D�ك��x�����[�*�0�gt�{S\�5*�r���#$(T�����ӚhR���_$�T���o5���nͦ0�O�b[w$�(���B���1]m&3���S�[�mڽ�\R}�c�r �X�Cz���?l�b��D�jD1�¡�7��!:#�>"�d]q�K���3���H^�I��ӈ��xؾ߭[��T���*-���xrB�Qz?F���=� �6(,���"K��7��\V�q��!�ã� �9���������ʷ7y����U��[D��4�h���j���͆>-���R�M,����D��i��QB~�7͒oY��&�G�"^�9#��r�p�e�w�q��JO�A#��U�o5��.�%)>��jX����a�킅�A���?M��|w:�Kڄ� u�q|��F�v�h���X7�a�GT^o1Jkx�z�_n2�6����1�pT��^��Ra\{4�Yv�H�֨.3����6ِ�vU�啡'n��y-�zWf=�����(2w�����X��K��R�z��6B�p���-Y��A��mF���a���9 FB�[����Z�A@�� a�)JO�������ʨ#�}���\��N[���z�푰����q�6��wL�[ս=KC���7���ҽq�lO���X�'�`�X����uNJ�9����K��}"�� rOY���ؔ��D���k].a �i�a��j���=��,��Qjܖ�GU.�AC�Qm����۞��4��jzл�� �x[���Z�@�q篫��O���}��� P����C��bqQǥ�³�A�d�r�=$� ��j^�������SaL��_�^����;1��б�2aH=�-���3���AKi���&��+*��e ���kH� �X��/ے�(J��)19����C���o�~1@�A�Rw���}i��\",���Q��T�8_���SI�0.���$u_�:T*��P���?d���c֩\�ہ���/,��I��&/*�����\�~=�xK��ׂ�Ɓ�H��_>�M��ahu������������i�2�g�A�:�S|��PY�-�'�|�7�d�x>ͅ��d�"6wC�v��ǎ^/Wq5/I�6��f��-�1+�Z8�_�Q����#��"�i���{u��a�L"^�r�������;f�P|Og�>������� L?� ���o����\I��ͯ�j�u�g� �c`��Ft4 �g��[� NxNiN�����uA�>�q�)�W� �y�����_�MÍ-UZ���ͥ�i����x�kd���>[��pd �\�j(5.�!<�L�m�)YV:�t4^�v=o��Ư"��x0���/B�e5w� ����;��������|]��WZ��Zx�בFl�rs��d@�@���LLH�L%?���-����.�"�\����A��xi���#ge�m�Ckb~�֜��:8{B��z�0dK!c,�|��� C�Z��e|F>c��������l�@v�V��Z��]�ĴV�<1� 5$*����Fk�E$�$�K}��_>W7��/l�<G��&9v$ؽrY���&�XD���Q�B��LpyY�2h���&N�F��ag�1���S
Static task
static1
Behavioral task
behavioral1
Sample
7a24e1673d6fe37c17e0bb4a68f2d05b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7a24e1673d6fe37c17e0bb4a68f2d05b.exe
Resource
win10v2004-20220812-en
General
-
Target
7a24e1673d6fe37c17e0bb4a68f2d05b.exe
-
Size
2.5MB
-
MD5
7a24e1673d6fe37c17e0bb4a68f2d05b
-
SHA1
5658d18a5015fde61191ec2868a1b74de4db252a
-
SHA256
0bcefc750b7a3dfe918f01bccb772545e9837ee711e56c72478066b97861d023
-
SHA512
9fc894082f1b51a9658194cbe5e523266aebed0becb895b54a6683345034e062b614c35182a52c5a572bd31477d3c8361e907bfe1f091d011cc208992048a453
-
SSDEEP
49152:+USCLmWMBR5Q55Iiw3OrVpx1buTkEpXGF7+9sIS/zd1kacJvuJ9:RXLEB7Q8CZ5BJ73peat
Malware Config
Signatures
Files
-
7a24e1673d6fe37c17e0bb4a68f2d05b.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 145KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 53KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 314KB - Virtual size: 612KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 272KB - Virtual size: 7.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE