[ ��psU�w���'��;-z��T`�7�*�!��j�`R��7��S�z��&����<"j�o�`qI������37HQ��C�.^}��/�p�A���̍�m������fm�<�Xܟ�:h��-.�B�ʍ;¾w'E]@r���������X(��Hl�G�؞��ȃV��� �y�:����h"E�+${*`P�Ğ$,u���2�Mbd ��ܝ�@{pܛj$�(ÞH�[�V����M[H,�&�������_l��L�v���0(��Yp�)����h߽����g)� ��)�$ĭ�~x��L@QmߒɮBK�V1��+ή'v��L��6�d�D������ud�B�O���Dڄ�ԳT��)�ub@�$���Q����u��:��=���xS����|�J=�I�����N����o��s̤xr ��ncq^Ԩ�±?a�b��nmB���쭷�t����].#����?"�d��L(dS��2s�O�2���Cm0p��q0W]�&^�t$GU�����\|��0xt����/bU���,uZ�? p����\�흪O W?�-v�p�YQ��8pB 6ʥ����j��LJ��~��G�'S�n��C�H��駫U��L����$6��>�7��rm�@\W<� h�}}���r��#��Zy�?\��� ��7�)>�PF+Upe�B9�/A� ��tt���Si�~&T0��Tz���{��J�8d�m[�AO�R]2�eDғ�{�+����DGrwdQu XDZ�v&M�]*|���䃟���D^Ke�� ���E�K������̯^�k�����p2�,�WRMl���b�/ R��H4�< A������>�[@�M>D/�}��7>�#;�V�Y�A��X�hV"�.=�%T獘�����}e]Y�z��5���C�a���z�aD1"/m� M�s���h��R��f���V� U`��u�N�v�����/�Q��V����/���EG`�LEqn8�K=����s�#m &�H����li%���g����Om����Ŝ��fC+ ��X�~Iy�$�hZ���|s"<��M]�^m%l����%P܄:�I,��Y���@�A��^�a�9ޅfY�5Ѱ�6����[����m!�c*� _a�d���� ��ܗ�B<1Br�#r�n."#я�ئ�=K8UQ���{t���VV��l;�~b<W�A��8+�h�<�'v�Kf���̭��7�V�*fO�a�/CW�QN�2�3�q�F�&P�m&g#�jY�LL�S�Ԧs�N-锏���G������(�N �=-���1>tE���:��N�����ۀk�p�$-v�W|�&\�ڲ�A�ߝ�I=��������_�i.C Xw���P ���kq��R]1̵�=���wтc>�N��X�N���I�������g���L�� ��W��O=�ix-�ѐ�<˱���b����K�6���F�ݕ��_�� Nh�.�o_3�P���W�d�G8��yؑ�Y�����# ���baͺ����{�i�I�%e����Z>KUX�w�s��Q�� �m�5�@X���+]𥽻ЈvF�����\-~��7�e�ɯ[(*<*��ѡ���>�}��&#�^2���ԁX+�On�����0`�d����B<�A�W�h�2���'@HoԾDžAU:XOđ��y �-S�aE��d����(�о��,"�ͣR`�<������q���(�L�K�V*��_;��rP�_ˇ"נ�e���;���Y� � �?�dI+�K���\4�PM]��.��a��h})�̕~�~ қ%�ڜlݢ(��į�H� ���A'j`b�R&g7D�������$e op-w�dR�n��[:݃0�ԸǶ� X�o��I8��/���^��굢�uȾ&!����Z���ev�j�X���Q��o��=�&}�ˉ��4cɭY�w�����z��Q93�ԢX�'�'�>��J-�P>�����E�jp�T��M��T�h�#���Pd|7]ɦ�0�z/)f ��[�a�U�X���3��b���&0%ݭ_���r�r<R�5G�ǥ���4���&���ƅ�6�A��'�L�� ����nOqk�.mY�H=��g���k;s�Gy�0�c�%��k����/^��=9NJZ��E-���c�;Z����Y�����,W�6\�����8i�^H��+w��nF�����:n�d{�J�.rp�X?/�@]�>O�����m=�OK[��(5TRv�;*z�5+9L�%#����v�.iC!�����b�g�r���^ �y�.�ZT'��:�;�P��V����Q�� Ig|���:�_u:u}��6ݍ6O��:� p��xVhy�J�X��BV��D����%��p3�Y�����:�w �!*4����e2jl�S��LX$V��!/?A qD�7�\�����a+`��߈렞u#k@��=���f��ߥc���աD�iq�Ц;P�g��v+x��6�&�(��`�4H��!����jW��C"��D�ū� z4 ���u6�]]1W��B�S =lmH%�bx�CT�����T�4�,�xk{����#� ��}�2 �k}�����>�=����0�!ϟ$U]�:>/[JXO�E���K�j�z��`C��i��p�w����������H���$�D~l����8���6�#��m�7%&~��顝��E�b�����!��l�sW�����"J8� ��Q\Tj��[��P��0����<zR��94�U;@�ܨX�?��3�PE���U/v��:�얖a\�j�!-iBM�u#�E����r����K���d ���P{Wo�k3t��N��0�1�1�BԚ�<G����%O����m�����o����h"�� 5C�D� �f�e���V~K@���^�W%#��ܻ �&Z�u���۽��#(��Js����g��]5I�Y�ɣsaܑ�ͪTM�Zp�����~���n�18&�>��}⼅H}���b�N�m[���ꦤ& �'g�W~��|[ �TH�JWr�E���s��/ͼ�~±�� 1��>�7�C���GV_���`�L�-z�{�vAԗ���r���=���т>�Y����bQv��U�����_t)��ʽC��)/��litl%���hS�������� M*�Lȼ��?!�Z ��� Y���*���d��4J��ޗHr����6��F�M~?���%8�JOǪ�Q�IA#�H�9�*�R��I����
Static task
static1
Behavioral task
behavioral1
Sample
73d6afecb6e66b60f99384379c9345514a2ef42196ce811e37eb6a389548c7f1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
73d6afecb6e66b60f99384379c9345514a2ef42196ce811e37eb6a389548c7f1.exe
Resource
win10-20220901-en
General
-
Target
73d6afecb6e66b60f99384379c9345514a2ef42196ce811e37eb6a389548c7f1
-
Size
2.7MB
-
MD5
03db63829881328d9dc41bea635ebcf1
-
SHA1
4ebbb4db5fdc2fe9abb67dc98a6d23cc8f2ddcd1
-
SHA256
73d6afecb6e66b60f99384379c9345514a2ef42196ce811e37eb6a389548c7f1
-
SHA512
22554bc3527ad1d6350743f166b10836f18a731271ce4481498f127556b6242e06ebc0c244af47e54d07bdc539fda3776dc6ab6ad959416c1babf007b73c0a18
-
SSDEEP
49152:ZVd8tDA+e7Cpm4n1a2UuXYM2T/AtAMLDRpRPCkrXZ303cPWVMfTdOyu4:N8t3/1RXYpYDdzrJ03cOWfT8P4
Malware Config
Signatures
Files
-
73d6afecb6e66b60f99384379c9345514a2ef42196ce811e37eb6a389548c7f1.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 9.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pwkz Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE