s����0M<L�0�\�LS ��(��-����P=T��A�� �v/bE����$y�������.��ecM� }�b z���Xs�ٔ����|��Ӵz7Y��g�>��@��p���w�їɄ6�Pk�S��A*ze���UV.�� ����&����u�qx(e�����mT%�j��[��gE>�O�&�(f�دA��=��yS���,4{�Y�J-�m�{2<!Rf�٠#���l�<���j�l���l]Ai����W�G�U��#pT��,�Q>s����@�p�G/PZ��@ٞ1��콘ߎ_>0�i�6l���8�g:rSG�E�X��������Z蜁&�qf�u(0&q�AB����и��-����mT�B/�VR�%�6��o�F>+��NN��S#Ո���_+�݇�o�����P��Z%�g+,^��8ÿ����Y�����:�U�)�f�����~(@]D�c���4{f��*N���ɱ%�<�ۄo�R�4�W��#��YgI�N�{�N��K��gC3�%��&�G�5�+�ۍ҇�W䱏�c��fI�h�)W�.<�ilY�r��$�A��F�P��?l=��7����A��[��_��]؝�{*�z^�RVM}0�Lf\���r3���e�`���\����?f��)^]z���V�>�g�>� &^ ����3H�6шpQ���EfԐ���Qh� �\�t����0]XA�gYpD�YK7�I���$a����ֿ�����@���?D��ց�0����?o�>�o`l�0�u�9��L}���N�G�2aRz�7�9�B��^��8����3�9�/��w~��'�������1��b�-��h�t��h.|�=��DE�8��#�Cj�V(1�JW�/䞇������fL���8D4�V;��4�M��p�� 5�d�A0��[V@�<������=kj[ ���(�;)�ȣ��T�h���!� �+��/�,ڻ#�o�ϱt�2F�@�1Dl��� ��зk�o�0�7�"L�&�ܜ���@��!B��Pl����&D8�=�Kc�~G�߁�emm˴㊤v�u�lvr܋����^�o��n0���~?��-F+.+�"��n��$�8*A�Rxժh�7~�*�]W����tЅB�Kˬ��δ�Z�+{��(e��/*���:eH�]���;AU"������]&�*Y��q9>I^3<ʗf���>�D�o6U�m�П{�l)�b���5������հ�7�;� �=�r�%��{{�m������[/���`&��!r ��CNH�r��/��3w]����\@�`�~Ag�43Z�s[�����f�� ��Q�ޑ -C ���N$�9"Ij��-���4����]��}7ċl����D\@�=�C�C��fz��n�n��J�˳kvͯ�x�f���P�j?�l�ք��m��[���2�@kQ;2ˈ�<�r-�9lU�/@��j*���/�������G�����p�����r�6@Ա��uI1�æa�_^�N*����L��+@����:o?�����l^N9ԧ����2 ��K�c�Ð,��ve��K����#�k<���b`���G��@�'����f�4|ۭ����d,��mr��#<�C��gu�~�����aA��&ٺ t��w>6����<�ΕN!�˛�1tƕ,�3�.����Ξ�]@�;?�%����.���_�����Nڔb�o�q-����7J���}�I�]����%+��Q]:B��?���������+hiG�/QH{�N 9 ���$�`F0x���l� �YEn�%�]����煠��%�H�D*�v�=����nTqI+q��+$�`N�����Fh9�E�t���@l'�ݎ������h�� ��E�#��V��Ҝ��c�]Jm� m��B�����/�L��{�ui�X�b�G��z|����V;@j�Q�<}��BV��d���"s>~KnBa�����e��e\��[y��|p�}d����y��=������*ӣc�j>N�Q���A�q�J�x����&���ɺ+��������Ժ��Q�c!V�1�v�|����b/��a�~��k���������^�:��Q�� wħ��ٻ@��܇眃!~��o��x����z`����^"�;�ʟC`-"/W�+s��h�"�5�"�B�d�Ǫ�D{�Z���Ǘ���Z⯇�\�P~As>�z�,zx�XX yIb�������߸������usD���*�ut�E�ŵl�8�� "_�qn���a�x�7Bi�)�����c��(�����x]f�0��ox$�08{Fk%��ƖT�I�_?L�'�"����n��f�� �mP���#\� wr.91�i��} 1�%�l���Jp$�s��/��0Ϝ�_=g�J~�P詯Cr:�7��o��UiQ�����#\Gq�_%��.�բ89 ����HO�ÔV9�.|�E:[����&��s�Ylv���>[d3��3�9w\��V�c��@���/d)�3�]Y<���z�V�B�� ��b=h��k��*�r����Y+F�cW����z����3d��$�4��M��]�`L��D���l��aHѴ��p�eS���~щ/� ���K0�mzTщ 9��T�|,�,wh�=ۧE4�#��uh��_%��jG��� ��W[>R���W��1��l�����E���������,V�P�,���-��r����6"���oi���r'T�������Ű���@x8T���<C�]�[ �eOtE�𤙀J���A�}⧴c9�/r���-{F� ���ޫ�[�&~Ԉ@�SN�P���lT��le��O9���P�G�E�[���;d�͉�f�$��?A�pvV�d��&1���Y�}T@�^��&u�ٛ9�-CǞ>?@���v`��6��:$����_L~����ٌˤ�f�ƍ��Ñ�Ob���{l����e�K�v�������J���FM�>_ο�qe�E��ޛ��˹v���CQ���ށ�jOH��m�n�u�#�Rs(fJ*��?*��Q���������i�g^ �. x��8_��&� >ð=�\�x��?�ն�F�3��0&�J :�#��p������KN�*�}Y���;V�_�F���(e����e?�x%D�)ɖ�]���C��3 ������,����ɱ��M~qM��l�0Xd`�&zw<.Bٛ�=l�6��$3��1V��=#r}*�n]���k �7�b�f���(���CE���2����럩l�ԆhfĤ/7��u8B %\?;�����Ik���VCX�%(U�s�9-�f�`�h�8�R�"�xg(�g�4���q���'R������@t)��mc�W�dM�w���^G?�!� T�K�WG�� J5㉸�n��p�H����δ��$śl�cw 3IwC�r`;����5o�A-w٣ِ�������m�qW�َ� +��]4��k����dhm�YgZ��3$�$�U�����Ȼ�}z�:��:�j ϰ�V�Q%ڛֵ��L�%��%�����x�}����*{��/�Pv� m� �|xg�K�_��>����b�a��x�`�~�?�i���gëwL\b6 ]��|n>}@s �a��)��� H���/�[���u�<E���� �p�_�O�b�D��(He>�08a�l^|;���/ k�����S�ᣐ#G����ܫa��#H^���}���t�)
Static task
static1
Behavioral task
behavioral1
Sample
fbd15bd44c9d1a77b6aa08f35c0af6d795baae915920cb2755128a26c8c28905.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fbd15bd44c9d1a77b6aa08f35c0af6d795baae915920cb2755128a26c8c28905.exe
Resource
win10-20220812-en
General
-
Target
fbd15bd44c9d1a77b6aa08f35c0af6d795baae915920cb2755128a26c8c28905
-
Size
2.0MB
-
MD5
f80b7dfaafe4d604fe4ad3d3c90437da
-
SHA1
da7530c52bc5e431c9f3546bc0ccb4d6e43b02f6
-
SHA256
fbd15bd44c9d1a77b6aa08f35c0af6d795baae915920cb2755128a26c8c28905
-
SHA512
7a6e662ffbb8b0c4c95480f6bf780b1951a2f6513cd47c552df072e312a893416448009bd9b50a478a5c6e5cf9499cc33bf2cdd882ee8a6e7719b1d830cd1d00
-
SSDEEP
49152:dwYmoNnrC/F7NxWD6h+L98uQX/abDs/hDhgyIQLREA:dvHnrujkg/3/hfR
Malware Config
Signatures
Files
-
fbd15bd44c9d1a77b6aa08f35c0af6d795baae915920cb2755128a26c8c28905.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 7.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE