�R���;��/�3I;��<: Gt�ֻ�݁P��eW�$%/����r�^Tz^\�=�b��c��������6�rH�t�a�(��XVޢ��RRf2��n�yj�1�F�#�����ɸ潇�%���kf��e;Q*PoMc߸�o����.��t4��<��>��$����wr�"�L�`�2h��!|���I!��������p��`�hѨ����`�&�u�m��(���� ��Z�U�1o&*�� ���Y�u�%�<S�֍�5�Efت���c��v��N����r�||_Z�J����X����sv���3N�.����`Z�eo���cAP��]�l�W�Y�`K ;�ɜR*�&��2�E{�(�Ĩk�q;��(��*Wd3�!��~!Bte'��_Y]|y7��dBn�M���;vЎms$�� �k�3��%�*�N��i�7����0��� ���o-�t��,F�);II6�d��ϫJ�T�<m�����+y����^1��[L�Uh�$�//���~���}m���"Wl6�u!�l��5|��y��Ob~��?�����b1f�4��m��1��J� $1�9p��]�̋~���~đ�k^2�<������?َ���� �x2�P�p�|�י揉����e\ ���1�cb��MB��$��L_�A� ���P�*Ҕ��� N�]� �)0�G����0�A�ßud}h���C���E8dN&87�^Zle��;y���3�o�L���7�C��?��L����0�� LH!��H;��N[ {���gV��:6Ai�����DUz2�#�;��űD��������4H�H�Od �ܔcn�\i�~����_y1�=g�������u۽V���p���)B)&�TT��e"*�G�K�f�u�?��3�_��5L :a�t�p�2����K�a9 ��C<����x�.U�ħ�����������[(���QgϺ@ 4f�+�I�l��2��6.^��.�D��d-S�e�u`u��������.G��N�T$orE��7��w��M����6ښ(kQ�>�������'��z�����ΕL�sG+"��(�T����&��O���[�:��ֆ>�~�b\W�z�R�����-�4�z�$q� <nN��vz��5�@�t���:,%ͦq�Ec���<3?�_H�����A�n��6���<������`��_W�A�.䦐�t��L���s�����`�����/�I+lGk���"�_�R�D�k�����D~�ɥ'|k��l}�.���(b���H�����Piצ��^�_!��2@����݈]�2n�6i�I�[#'��eΣ'�ā�ō�b����Uj���ʘ���䊮�3�#�:V�� U&��0H�H�LN��'��l a���Hm��l��c�EKD�*�o��2t��"�քd"����_��\�d�Z^����M��rN��DL-붱;��|�R���C��b#ɠ�W$������#��C�o�KU����Mw�\��Frx�u�h�rW̮�Z������n�z�/��~�!5�������h�|�gFͧV�:^�!�Q�c;���!@^^�n�ok���Z9SZ�q��0��wd�=l��#o�"Ζ�N9Ɩ'F����n�$��5bTl�puK�]��'!�n��#����n��-( ���1�jY5-'q��5�6�*�*�@o�(�(.�%�� puUU�²���w��O+��Qq����G�7B���� fG\h�~2R3���K��z��r�ך�}/ �mռiw�sj��-8ܻ�X����~P_�A��pb��z�D_H��yɅyepy�N���A!���%����E�5�s�iH<�����4��j��Y#%@�{;R���Ђ�>�[��q�(s��R�;�D]LY7 �$}�7�[���mk������_��V��A��p���uiԱVHM`(����Z�4] �,3���2������`��X�@��ҋ�'5�m�}�A��Q�8=�;�<���_�)�5����]ǔ�F�0?C��jM'�j[,Hz��C��&�z��'�v��ɵ��HD�Mq����>,��E��-#� ������"8�����4ץ�+�o BDG����Z�-t 2�aN�3^T���ty���T���H��&阸5<��YP�0^H�%�b�ӹ�/L�l�*��lx V��UP���M�G/A����}^<{�jN���O/��Rꉤk�c;E������5W����7�=LRi�t<�߹Ao\�"�%�̳��xdr��Rr�N4�L�ghkK�y�D��6N���~���d���."`���W��"�����y ��-�s]�43-ޣ�I�9A����Ϭ���$6��]0�H���p� t���>5���u���b�� f�6�ܵ�� �ٹzd�s�0���[�1o�!l�"�:�hv�7�3�jC ����o��GO�\�Y�Y>���ғ1!���Q48*�rQVG1̅�<g�\PFxj��8��w�܁�� e�ލ�� �_:P {�~���?�T)�¾���dM�b�m��Z����|80����Z)���J���Ԃtڀ1g����F���e�aae�l�̎W��Y��D��Y�«�c��,�ZN'�Nj�:���V3F"��+�<���%<9�U��V0����ҝ �;��l���}Ȃ�nUTx�/�0����>��7�zw"CI��X���;��d����:��,�P�]O��J�O��I����5�t)�R�V:��k��B�ݴf�M�TM7���1}`�꜔<�{�3j�/v+zMڙ�a+������AoiG���.o�խm���#ƴ)�M�f����w�D2�q4���yS3�VZ7;1�={�V�x)U���� ����D���rC���U(yD�x��3+�ᆵ4�0�@YGێÂ~�A֢����+�Z��-���U?M�ߵ���6l#���e��d���@�.V�߮�`ӌ�&�~����8�C6A���k�����-�s��s�ek�H�6U�1<: ~���5|,��Tl�*�:�����id�`�B#�T����`}�����dB{�&3���R�6
Static task
static1
Behavioral task
behavioral1
Sample
f9a994e6e546c540ddb863a31066a483c5d8fc21478348ecf6a60c7bc8a01891.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f9a994e6e546c540ddb863a31066a483c5d8fc21478348ecf6a60c7bc8a01891.exe
Resource
win10-20220812-en
General
-
Target
f9a994e6e546c540ddb863a31066a483c5d8fc21478348ecf6a60c7bc8a01891
-
Size
2.2MB
-
MD5
954b7677eb947236a313bd1fb0407067
-
SHA1
77f87d4d8b12ba64b28cc8536ebf40dcec51f195
-
SHA256
f9a994e6e546c540ddb863a31066a483c5d8fc21478348ecf6a60c7bc8a01891
-
SHA512
1c1bbf76f125b922c3da154a781dc7a59aafb57362dd8a642a43a26d1fbbad463c9330c4f77c658c634b5064312d0888993d7384da88f9b303ce894ef8db6f1f
-
SSDEEP
49152:2pS0zCZLl3G0u84DzZmg+rZhJQMJDh3IkyRusbg:2T2hDu84Bmhrz/JDh3IkyRr
Malware Config
Signatures
Files
-
f9a994e6e546c540ddb863a31066a483c5d8fc21478348ecf6a60c7bc8a01891.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE