���\�lO �h��2��- mm��Wv��jl��ۖP�)��׃Icc��>�9"b"�� ���(G����( Ok�ώ�Bs`�/�_u��J.y���BD�F{e74�pP�4��̍ ��D2��xz���OQ���ƾ|�~���W.�p˾IJ9J^LA�O{�����F������U�٪%����%��[���*�� i�~��v�~f:���o���������.�:��dD����E�ʯ����4������M� aB��|�m ��_��P�sٌtʒbԋ'��G�K�����yV�4�1��=�b}��[iײ�C���gvD���Ok�4�J4�����z��v���뗏_־�e�/O��$��>�R�.;O���w '˸��*�?���l'H6���:X�g�&�y'�~0_�C�v�h�f!��.��)e�W=�D"8,���6�@���/%4�=��40z"i:�T�Q�6V���҉�بl�iJ��+�X�%�Ƭ���N�وCՅX�����#��B��(�2r��v NI=F���p��5�8��4���C�nlv�[A���ѰHQ�ןO; }�mS�CL�r�#�q[^ ���������!� |���9�-��n�GC55�� �E5��*m ����&�;��`�~l��~�T���:N��?��~�H�ϟ�i���2�HV��ȡ�~�)�;b�<C��W��J��]����|<�œ��y��{����_�2�v��V<̅K�Rc���pJ��d���T0.�� � ���##��pٮ��(���F�v*s��,�/������M��D�������m)�aj`Oy�Q�ڢ�l� �+�����k��� $A ,���,ބ�I��M�~1"�(Qn�^<��vj�Q�_-g"��xi� ]�^R�I� ~�9 �x�];�C::"C�p����^O]��!�W�Y��a��,��_��o�� E\��?x|�@&I����TE��O״9_�x�U<N�w"�|�\�*r�= A�(��ޱ-W�P�%����$����%TY��ڛhٮ�-���yc��o�,7W���e����4= ~���%aӴ=4(��X�sPg�u����mr�t�z�3����7M�ׄ���)Y~^�}�����J1��W�~��~X"j�a2�M�Ȟ��ѕ��Ñ4 ��[Z�����]�f�����Fǔ֠����(�b;�!��괯Gq��;q�\N�t!)��Y�EHtޘ:��1�2�C4F��� 7ϫ ���Z|`�x)��\�;�=0��[L�;���:^�}�[��d҇�_`r��Z:�l7�S[b�����J1+!:m�������w}[Շ�p��(� c2H}�%e^��ճKo��F�|0ROv$(���7{^e��W���ğ����^����.�T]H�0��� �N �Aˁ��4��b��T?%�L�>qY��5�n��K�$�2o��R����6�ܠ}�䞛����M"/^�L%�j���NPL��$������h���2\�vzb��x��'n�\4��g�d���R$��?�{��/��{�m������Bx�<��cd�8�!��"3�{��W<��3sKvqWe�� ���2Ti��t��/�8,6,���f k%Z��P�ܯLp�se/Yl�p÷�=nd5&$��0Ol�N�0����1Dž�Nj_��̓22��y��G��X1���K�*9fC�a %l>��m%� ��½��$c�)Vv�����OBզ�b��%w*�:]{Ľ����U��б�75j?�t.)ěK #���0��>��:� ��2P��c?�V9Pm��_��\��Je�V�AD�a�5�RZ.�c������ D��kDJ9��+�Pl&Ĵ!�\ȏ�,u�2��DX �E����6�Z�IdQ�Pb0;?P��ȒU�,�l��5�@;.�~X�/O��"1j����i�o}6Y�ћ����BN�F�DE��4z��p2�K�4���������dk~;���è�zc=������teb�}��p]�]����H��`�m�}�����~�.�}�A��\�yz���/��+<�Tş��g�gKK 4U��!\V�"BU�M�������m�y�����Fd2/�`f>�1��sPC�EP^����� ��5�;f�L~��AF�����3��a3�I8��d��}$���8�<��ⷁ4�*R������g;1S]��Q��aS���R�9bS]�ݪ���*Zo�:4�NXD�CTw���-d�� i|����2���,�G|��簓j0��'�Z��)���:�y@��5�%�?��ܙ�nfew!�1�ߝ�/��2\�ִ��"��pO#i��(Fqg�%��\%�y�]N��9�U |�ΊI�&t��!�9�� �<�t�zE�P}����qZ��vI�'�YX%���D���8��f�B�r���n�f�P����9�M��}�\#����7/���7�$�Y�B�De��H.��[�9��m�l\�z�3���;���Z�3h��~����F�eEn5��nj�%�'P\���oƩ}'D�q;��D�i�d������Ø�s�Z������Z��1���tP4�GA\.<�bk�C�z\e|tS�/���6��8���`�9<�Dωʘ��@�X��j[�����)��"�u�<ҁ'���"�7�K�ʢ�R��"���l3s��4���I �#�/�T�OD��������H�m�e�����)��/j��pCk�>�f�8�_<�@-I��������j��lnoga�� P-HS7�'�%nv�M_N�kŵ���w�5�RO�� �������|Y"\�:���6��2�Dߌ��3���mϟ��U>iw�����U��D悽������Q��`,�f P�ѥ��~i�+GV��h�Dc&���W���LW�0f��O��ח�k�S6�y7�� E�)�����_�RL�?�_n�0�)��ē��5�?������i~�ir�_��<|���*�-�5�mD=8C/�ѤG����hӞr���;��NB��Q�=���C���~4�����&k XpXa@ �D�'��o�k`45@�X�p�d5Z�뱧����}Z)G"?�)H���9|�xp=Np�k�8�0���{�3a�5�ʩC�`&�Uz�ESB@v�0�S|��g-�a/#r�y�]YDZ܍^����Zָ lHg�4�5S�%~SL�����O~IҶJ$Ost,J�^_���x[�~���b&��}�ox�Z�i��Ͱ�źI+�3�Px�/�o���Kt�����%��F0;c���`w�]G2�Oq2�ė��r��m@�o��)OMٍԊ0叫Wp�{��J�����u�}���k�Ux�O� �51:�]6"G��?j���~�� צP�4p[5�ɭG������t�s��&�G� �iR�ufmN����$S�ښ'"���.���v�hH#�g�ON�る#[����}��@���3${����v�O�0����ʲr뢦�P�I︡/s@���Q���މ'�S�@��8�Mߡ� �"i�Fu�����]���/,�͍� ��[c���Ȯ��)�/�P��%8��o^�D����!=EМ'�?�"q�D&MCЄT�`�5��k���A_�d�r�Q����1�EB`�&�П��"U{ )��aq��9-)3�g�}��\]��9 ^���3����.���[�>��j�_H"{"��琔q�P_$��P��d�j�y��Un��A~&�M
Static task
static1
Behavioral task
behavioral1
Sample
fc1315535e4ce619140008787f3e3609d85ad33a54823d90d8873b3e8149a132.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fc1315535e4ce619140008787f3e3609d85ad33a54823d90d8873b3e8149a132.exe
Resource
win10-20220901-en
General
-
Target
fc1315535e4ce619140008787f3e3609d85ad33a54823d90d8873b3e8149a132
-
Size
2.7MB
-
MD5
65cd212f43179325cb4d9978fad2210a
-
SHA1
040d5beaf9b690812b79460046c5061becdc34f3
-
SHA256
fc1315535e4ce619140008787f3e3609d85ad33a54823d90d8873b3e8149a132
-
SHA512
f5e313ab91fba81c6f78d1d233d660b7ff4ce54b57dcf3adb2076f71a3f8150f016309e8cf67124d0c86ded1829e8b5dea791ee6de5fe87a74d4aa3f9559e072
-
SSDEEP
49152:ib8jSPgzYYeAwukhIgGhhYYcu6fuoE9cb8/wugNca0aylN7:iQjSYzWz2rcj2oEx/8aa0R
Malware Config
Signatures
Files
-
fc1315535e4ce619140008787f3e3609d85ad33a54823d90d8873b3e8149a132.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 9.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pwkz Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE