�7U�T}���[��B����Q�Yz���>/g�~�{rv�X�"G�������$����3����<-(� �����'�q����Pg���3+F��9Ʌ�.&�4����G�Źq����7k�VD�`��(7g�n�G6� �E:���ኡ��$nJ�Y�v!��-k8��W�/C�a#<ǻ���KK�T�Do��®O��zd�d��������<���ݲ���8 $�֢� ��dD���sW��C��hf�L���\�=�2�E�,��=˳L��g�X���? �l^Z�v�����'�]�29F�Xd8e9�eV�s��=�ܞ"=HY�϶�O�d9s�WLx�)��q!?#e� ��f�Wz�����������dS��ֹpz��g�t\` .�zf�X�3!���!Tc���w���q@� ��a�<����<�o�����ΗDi:ՠ����j��-A�� ]��u���r������5��~���S��~L���*.��I^����.��'�:Z��l*Q�P:�g�{��L*d<�=�uA[ $-��G*����t:4'WDU��Z�غMs�3V��56E�B6�jj�o����������uN�Zw���*G�b��ٷF�)Q����qmK(�a� 3̦��b�����b����6�'|َn�{y�A�����4��0��]����,F��[��u�u&��l[ደ>��!�[�Z�j4��F��W�)m�%{�6Sf}�|ް&�L��CX����8i�g��n^����o=8]/������{�F2r��)���'R�ε:�~!����)�\=�J��pc�>�q��=��Di&`ϳ`?����rv+����_�<��r��(������]�5� U�2��X���"M+A��pk���n��4&��o�!�]#�^�T�(��w4��@�r|t���w=I�F���1{���~� �[�����e����ɩ�YѼ�w�G4&%ޒBQ? !�tܲ��6�[�o�WO��i�� Ѱk�0}�wT�X��B�6q�֊��{+� ��=��F���D$��z��:�g=vr�%_���M� �|�`�"�U��\�*)̯���ɲ*���6t��� <�k�l"����U'�(����� A�6���3�A70��o����c�X���ݪĿj�h�� &4�J�����B�@��hu���>孱���YuVߤ�Iս$�=�@u��T�Rilé���g����~�����BF�ȶ��G�[;x�`���Ed�T评���^F��Pb�E���}�#|�����"��[��ZMx��e� �3�JbNCp�W@ΟpG������1��5���c^�=�kޡߤ��|�LT`��o��7�ۀɅX�`-��D�*� �}%$>��+�l�V�3h�D�������h�!�O���D�Pͼ�y����7�=Ӈ3'=)����v@�}ņ�雗�������l�bP���2����"�,µ�Z׳ꈐ�T�/�>���`A����U�����z���<ߥ&P3�����dG�;����0e���]آj|��7v�Z ��f�0�` ���G��. �W��uS�����㢮��%t!I���:�".a��=#�����F,N�"�Y��a��|�cK�6��d��'M� �0�ѧ�R�/S��M)���ߟ�$�*����Hf2���P}WClHe����w�U�U .����H�;�0gD�i�Xu#E6�A¢1��u��/J��LtW]��U�S����պ�-��.���C�~¬�~�w�/����f�ca���y ���`��1g��Sx�U�/���&3�s1��l���䔗Ɲ�+�T^;�P��?�U�!P�"��ueC>{0tЮ0u�jW�����kQ��5����2�.]�>��z#>li9A�8/ @VD[���0Z���J~�c:��N�P�� ��#SD)�;�l��o���w.L*�xMfY)�������j|��8���dYlޣuxD�1��i��<ֵ��iy"OplN`�,0JD�ZoYR��E*H?���3��%��v �_8��b*�l�G�����}��w\�ca����ʠ�Y��U��xN��E��8,eAf���]R��v8�����=��Z=���6:��6�G�י=,'��J+�oJ�����Z�ֈ���L\m���U2���(����ш6�˽�}�S����9�/�^�Z�B�W��5�`a�(��>; ֫#g�h� ���.M9'���^뽛�;�a|�aL��`�>�*�Ш�R�0�I�F��ʿ��!{̖��8߳%ؖV�sN�I!8s���7zB�����$�e��(v�rcC'����w",�|�8���o�����|��X�d��W�`�EV��(��G:Xd�����C��c����%�Z8@ ;?��F�K.�R����b�5M�j� �@�X��lj��(��d��n0A�y���V;����Bm,d&hn�*��뽬:煟�6�(�$��c��~�D�CF�!��q�� J;;�ܪL�Ft� i~�yTR9�����A�.[Y�� ~S�kLI�QrA���`9�%3�k� 9�qe*+��"�a��\�#���פ��������z7�L�J��ב�w ���P���H�3���*<P�Ա����BV��'V�$�hߴM��Y.R�H���ޏ ��En||B�>RR~8����I?p����nޗm--��,�O�BW��I��������R���k��۰�y��Ħ4�)�#�������2�^��i_�,bAV��n�ȵ� �� =�C04c�11Z�����nN��r��qݱ�.'�!ś��G�^M���l��)&�QՀL@)P'�R�2���7�]�nuH���iЧ��oo��N�y\*� ����t�.=x��:]����|������(Q��!�%�Q��^�̙r��� ��-��k��?+h�� ���z#ե���dI)2A ���!L�+Wo*�bG�����Dm^�sx s$:)ZD��}�w�8}r�䝯9��IN*~w�N�gA��/I��=��]���<���r�5a #R]�TPQ(%�P�����"���֏A�j��c�u�Xت����8��6�R ������F�r�wJ��>q�=� tނ��-l�lѽ��J��g U�p�f�_�"�#2����:{� ���=/��b8M���G�`��Ҡ���9<�a����B�W���D�$<v����!�n6�%���"Ɠ�7c�v�33��P��I �Hwred��Y��ba��o�K�����Ez\����N'���Lp�yQLz$�T��)"H_�@��pr�AW����p���
Static task
static1
Behavioral task
behavioral1
Sample
90f6b0a1f6bf9a503f3107325e0b4abdf8807bb971f7c37cc6a8ed71cfb0e8bc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
90f6b0a1f6bf9a503f3107325e0b4abdf8807bb971f7c37cc6a8ed71cfb0e8bc.exe
Resource
win10-20220812-en
General
-
Target
90f6b0a1f6bf9a503f3107325e0b4abdf8807bb971f7c37cc6a8ed71cfb0e8bc
-
Size
2.7MB
-
MD5
c300e95c5387e917ea8b820a4f12ff26
-
SHA1
06a3e25555589e730f632dd2873381846f9003c8
-
SHA256
90f6b0a1f6bf9a503f3107325e0b4abdf8807bb971f7c37cc6a8ed71cfb0e8bc
-
SHA512
e965a680128bc034617448149c43a500f20338e5f549f1e19e3c8f9f2b923b16b19354f6cedee327d1e829c920e19d970fd2c20a4b5143b5672c12449b5e2454
-
SSDEEP
49152:Iu3GPkg54jeclLyM6iDT1dYCHngsQAjE+Ca7rrExbs1ornY3dsZRKYFHE:f3GX4D6g1d7HnLZwqHrQRnYNsnKYFH
Malware Config
Signatures
Files
-
90f6b0a1f6bf9a503f3107325e0b4abdf8807bb971f7c37cc6a8ed71cfb0e8bc.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 9.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pwkz Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE