�d�b��ȎP����|�\a~�=��~��]�\7�g�-5q��������l�46*q��5���Ӵ?�V�B2=� �B\��9�®�JQx�)��&��1?�9��J$6v�:��4�txY6���+��v��}L�9s�X ��G=*lu;5�%��{���dq���DE�A�@�����@���o� ��p^R��Ԛ�_ٱzs����ʁ�%w���×��ro�8��M��<@��{���ϝ6ֈ���\vP��r*�a�P!��/ZS��;��5��?��&�<�G =d��P�����o�iXb�����?R�$��pr@��Q �������u��]�{N���W0�?�]�z����� W��R��vў��k�C���,(�%��\��5�c�4�Qұ�HL��P�� ����ڧ�iy#��{[ A�Z�Yc({k3h���bوn}h��X[�A���5�d} ��b�c�'n3��[X(d���0=c��j�Gr����O'l�ɧ�s��?��ǐ&�^���%*��b��O�����|�Ψ�CA��=��vv�+��-�uD��&t@r� �ԘZy-��Ys��;_���`вb�.+y%�� �-���x�� �'lC%��-,���Cm��@_Ƀw���AУ1��ej����%te27s�^�#Pٜ���zvM����q�y*NU����p:��O���m]~\��k*Erf<R�y�� B��Of�%�/B�}����Dy2��˕IN�H�)D��[�f��e5{g����L��HbljM���^��f[ U�� �D���A�۹*O�h��6/e�&1T��@-o�����T��*9T G�\ƶA-� ��Q����/�g�K(�t�м�%|)M�������{��i�Q��{����'E���`L`��*����@�·Q���قi����l0����(C�UtX�(H��%� o���a���ܸ���[�Kl��*c�vEl�v;�����F�Xw~��Ab6Nhg���Ҽ�S�@����e�? ���jd"��:S�H������C���x�h��������"ȖTb������8�:V �Q�%�[�PfF�ۿXx�-��O��^H�EÝL��, X�r����_��3��l��rZ'�Px�vO`�6]Q`Ҏ�d�F�PK���+��@���h3y �����:�S̸|}��O�# ��`���D�|tE�Bt��T-ډ8�*q81,Zub��s{%M�* �f����!OzY���AeY���@N�b$�wH��6�yb^�%}W��SH�`k��'Ê/G͜�����C�ƙO��Q�����&Ր���lh�Y�274���j�L7��W�`s�����h���������F��i�� �����4cN�+����?�ub���"���Ӳ�"��,tSR�y��8L�n;�U������;@��_&0%��3������E��%��WY}J�iޞL�9��Y;���J�?��.����o�Dq��4��X�������G���G�(�g��+��M��L�;������{����N�,�̃X�VR�SH1!OZ���/�V�{c��~S����/%����U�6XT���#��D�2���*ww�a9j'��������P ��/�ט��^���e�*���o~�K�~����?a4*%��i#@���>h��z�,�Z� P��ِ�M�~��q��樉���T2rɃ��c���� ��9�ޑ��A��\�s�l�|O����U�g�V�֯n�+Y���$~���l�㽁�#��s��{�\ase-��7�F1�F�լ�F˼���C�w���/�{[W��A���!�}Ͷ`�Ix�\B�#��t��D���F��"�Q=��3lv��Lڦ��~��0�0�#�V��()�b1� ���]�YԔW^L��4��qĺ��D��=o��F�gp77���8�(�z�-��ѩ��E7��T��SX=������TL���B�ݾ�2�r�O�+��#n��:�NrM[��W�UO������K�_�K�RvMb때z�Ui�a�Gx� ����%H2#m�\`Mظ�����_�Vo��g�X�$[+��芃ف݅!���[f��2+� ;��`��P��;��[1��.B�VZm���W�x�(�����S�*� ep� $Ov��)-V��Ov K�@��O�|'�96y����$�KW<�����3PT(�V>��o��Mh�{�����t��e�h���'zg�I��?DL��ߪ�*����1�(�����0�b'���aO��(����=C�����hJp�>���� �B��3�7�ʧ����W]E]�*/����g�D3wQ��cEDΒY�O���¿��b�g��PBq�H�\����g�&���N�z�@����h�巤&�$���9�Z���cz%�/Q-Τ��1�Cӭ@+h�P١RX�%Ғ��� �HM�0�]w98muu&�fCj��}��?X�ʔej=����o�Ui�"�a^8p����4����\ډ0�3F1��fv]�sŮ���}B}��u/����NC�w������ �2>�l�����;�=�JU�^_ς{�8� f<�R�6�Ԋ&�\T�|PA]?h�bw������TI������.�����LxL�ht8��b� �pK�ɖ��۾e2*�/���,]ce:Dv��.qsYf\� �s>����E��� \��;^]K�C���'\�'Ĉ��z���QL�uw"�u��M�_E�cZ"�ŭ���v���}J[���\�fn�t���>�41���>��,Ez����uk��0����m ��t00ZH`��g�ݶ��,����:V34e {YXx���F��ꆂ��t�*ao]�q������q�dK�J�F��ݐr��z�x�J��}��O~�]�^ɼ����p��L��r����[paCm����(�����`vZȂW����Ѕ�(�� =%�n �}������[��K4u6���e�~J�N21#Y���&��e{��n���%(���$��)�pZ-���u���%�8t�����A"��i҇����ޢsEw/��YAga���^��sF���H�`2 �ұ�ט'��C@����7���t�_߸�Y�}�(j��u��-���&ޥ�����vc4���������v�:�ߞS�/�s���K;0�r��
Static task
static1
Behavioral task
behavioral1
Sample
08bf6760a8d9ad9ebfa698edc601e84e62c1bc126f7bb64b8a87a4dbeb18efcf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
08bf6760a8d9ad9ebfa698edc601e84e62c1bc126f7bb64b8a87a4dbeb18efcf.exe
Resource
win10-20220812-en
General
-
Target
08bf6760a8d9ad9ebfa698edc601e84e62c1bc126f7bb64b8a87a4dbeb18efcf
-
Size
2.7MB
-
MD5
39b986056d57ece064b9937159c756bc
-
SHA1
5055895e1f62cb36e496566c23c95bc79f61d103
-
SHA256
08bf6760a8d9ad9ebfa698edc601e84e62c1bc126f7bb64b8a87a4dbeb18efcf
-
SHA512
681c7140e1f63f35b46f3a80f43b265d66f75b42ac8d9a2ff466a20d24b4525f0ac450cf92c15b7527b4273417122f84e8f69b9e3382b449262f82adeb30c491
-
SSDEEP
49152:JFmx4/Lhg1wUyqxctelysOxbVXyvKfeI+dpUYOIIdMsGXs6TWz6k:fmu/LhEwfqxctelysOxbhcQ0dKndMsG4
Malware Config
Signatures
Files
-
08bf6760a8d9ad9ebfa698edc601e84e62c1bc126f7bb64b8a87a4dbeb18efcf.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 45KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 325KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 194KB - Virtual size: 7.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aexo Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE