~w����O�A=<>�����-Qf�Q���k'a�mGZ��d쀜�����+K����S/�Q���6Bl^N/���ï��x 6}�z/���4+����)W�q.Ј�x55�/�?/X$Z6o��&n�W�W ��\�D�;.�bz��(Hd֓�濠,�gBc���`���V�"z�_Î t� �`��"I�x�����aͫ9).>�%�����=ɯ<����C�d:�?+G�kkm�{_����͡�n�gO8�Z�|��7 ��~a!�Q �����p���_fP�g���������n��[Q��#%r���˙�_HUE��� � ���M<�������$T�x�Ԙ@�DG1�-��꡴hl� ?w�_ngh;�����V@�m˃R�{�Q�_*�O�O|P�fH TaZ�����"G��fO��x�.t[�����~ik���Y%���|fH��rEu��9pϚ�G�%O����;�eM����N�&PE:բ2U =Ƶ��c�O�w��=����M8�%�eq'=VY�e�)����O��K̀3��[(sQA�S�~B�����Yby4h�b*uʗ�#��&�8��.�5������f�>�ew�E�ǃ��G�ߘ5Y�*�Ѣ�,>SZ%m �W8XRi]����=�k��Zȫ��{���]�Jv���遛��N�Z�8���-=y}���k����L�Py@�v�q�����},�ĸ^�^bwI�>oe,#�-��M��Eք?߃���~�:xؠ2��Zo3y��Co���}$���@��-�Yr*ef'ؕ����<�d*o� � �/�A@���4y�!^c��n��iR+M����1���ַ��ƞ�p_�9�:���Y| a���cs�:�Y���H� sƓ���1L2c�����8ӚɃ��� ��]�2���o��lǂO�,5�Q�'�2VB��S��I�3�z����[�P�d�K��1� i�:��0��w��_��eO�]䅾����� �4B����l�"`��?�1��F�/ .tf ����c���G��n��dB�����e= �`�0]�Zʨ�����螻p�-��8ڔg� �P!�6K���I��]k�@.�x��3B)�}��5�s�ar�d�H����ޒ5J����%#�*����̈́�y�6/X��ڷ��G!� 6��;�)�}3YU76oR!�K^Bf����K����u�J�qHht�9ƾR��<U3��8��U�8?�? ����^�] ���W�\�W��+��wƺ�^�&)dБ��9?��@�dǵ]tŶ珶�������S��k�c �����h�����k��Nu���{d�IX� ����9Kh7�������K4��B�<�Ua<��Ʃ��Κ�_�?/�Z�� 7@��J�&�������2nN�yb��zՀ��xةս�ߖ�]�֤�5b�J݇<����f�?P��W\Tl=��$H��FS��݉���"Z죨������]U�b�T���������b��,��σ��Š�~;#����|�����nH�rk_��� $-�{����m���[g{U�4�����I����]��;���M���>N�f��]<x��=���'rDl����x��?�ظf��������թ?���Z�G���<�+�'�F���Õݦ`w���[A˩�s�I�Y��Lh��N�Z�Wub�����"���E�S9A�ý79*�`1yγ�hwj��I)U^���y� H���e b|Z�ڼ�;�kʁd>|�!E�!P�x=f���%�%.c�)��]�M��z���<�,�ds?��EZx`k�Ƅ��7��-堣O&Kg(��Ǧ<�&�喨�,ob�Lzy�R�ώLy2����F�x�X�{�k-$�h���Gq�<䰶]Y:z�l�t)�|k�����&�����1� ;��zH�De,�=���6�X���(�4���v���xr5 �AY&_��Բ�[ycRԙA,pb��<K�҅�;��G�����m���� �U����\� ��%5\��W7��t��G0�7�+ID�*��_������{�qQ���XTR=�݄�� �Ûn�1��k�W�6=D�Q�=d�uV�$�z� �h��T8�I��aس�UUP�|�]�7D��S ��=T� � y�"vs0�xEۆm�����@��+��yN���i��_���"iw�F!#�X� X��f)�����s�GuH�U+P9WG��:����m0Hk^��y�MC��x�OQq��NOf��|���d�*�c�2�~���p�%p�P��?7����a=� �%����ލom�}��k�����3F��C��G y�Y������XuN�6m%������$�4?*{�1���Y>z�X[.��l���+��w��B;���t<�^��MR��&�USl�����=r0�Nn�������߉����IZ��Dbl.</�=�]Y%1~������`Q2��m��Fy�R�u���)T�+��� �;�<����8�� ^ ��{��Ѣ��3��qq��� ��*A�R}=׀ TEAw�ȋ�y�E��oC��@9Wz{���٫*\��;������w�'�(D�� QT���X!p�Tʣ_�Xny+��6F��7Qd�g��+9�n4������L��ۇ�:Z��� B ̳g�j���rЮuY�ra� A�J�tu�FYz�D�-��S�]�;�U2}�)�����a������g�+�/9Wa$���w*4ǰ��P/����S ��N2���§��v��}�Oq�Dő��^z�6Jy�|��$��� ��1�F���aE��I��n�}�|� K��#Y����{;n�j�������0�`-X�"j��W��~K�:��]��#��m�?j$�ܦ�ج��=G;�E�S�>l�z���;-p�O�y��ӓ���9G�Ӱ]���W�I#�$B�y<2V�� �~��L�v4D����'��3�Қ��1��ܸ�rm�@5�E1�N�8T�[�vq����t*���ҽ�tI�5'P�30Z,��߰Ew�Kd8[��D��W��8p�/=���܄t��`���6����U1xI��ر�M6�:q�F�"T!02��^�`Iz��y/�V�j:d/8��:Cy�g�`~�.�e�NNlu�B@� DŽ�+F%U��)���/�J0���f]i����i�X*�ǫK��4��v���=�44Nu?`�V8��2xl�O��f�h����:���;$���w8_5�ԩԾˋq�S��]�!�+������p�EX�]0��}�,u�z�s�u�;�b�%J���
Static task
static1
Behavioral task
behavioral1
Sample
6759832152e7811f880487cc74ff1809817fbe8ef33f804b50a10979b2a48214.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6759832152e7811f880487cc74ff1809817fbe8ef33f804b50a10979b2a48214.exe
Resource
win10v2004-20220812-en
General
-
Target
6759832152e7811f880487cc74ff1809817fbe8ef33f804b50a10979b2a48214
-
Size
2.7MB
-
MD5
ade4c9cb80e41c175b712d3075691f94
-
SHA1
6c117fe51a327deb9e9da8a519781b3e609bce3f
-
SHA256
6759832152e7811f880487cc74ff1809817fbe8ef33f804b50a10979b2a48214
-
SHA512
494765acf400f8f257e92b498e7ec80eeada602a779947b2b121e6412348a9d1e2ce7f32fa6a33f0b3890a6ecf64324765cea7355382ed451e4cbfb723078929
-
SSDEEP
49152:nfY6OvSy/VrME6Z+bA5KIb2bldhPbuFMG4iyfqUy3lHwO1LNgQ6o0jvTULvDW2:fZOayJ0ZqA5pbMljPbu+G4iVHwO15d
Malware Config
Signatures
Files
-
6759832152e7811f880487cc74ff1809817fbe8ef33f804b50a10979b2a48214.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 9.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pwkz Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE