+���S�-����B30\���YJR��*M�A�Ѩ�\��=��I������v��������V�*�$5_��k0c����{:��jv���ڼ#�����!��k�@��`r��Oq�M~�Lci����m�d�����Ya%&��]�`&��&� 3Lm���Ȅp�IZ�\B�����sp�8! �/�Y^���^��*�X�xs���n&���x�����D�V�}�S���D�9���*�J�a�!ª�1�ac0�+o�Bl`���JJ� �c�"!�w4���K�Į'B��4��ړ {vw�(�._�Oh�2|�ڻ�.�k�ݕ& Qt7�ҫ}CB�e��F�O�̣i������[�� 2{j0�m���?�B��Y�e�=�K���լ�����W�&r��r��K�=��#����w�H�f�zY�h|�����OS3�#��=}� �~�W�A��˨�?�ؑW' : 5��ϠG�Y�sm��"�^p� m!�U���U�����dk�A\)J-9�c5y��O(H�b7��_w�K8̃p���S\�<�9��!z���N�Ti ���h�����z<Atq^X��(K�%M�L��0����ʓ��.��RH�}���^������q-�0�*�S9۶���:7K���<�L�h`������ҏ�C"����H��v��(מT�������Lh�z�8���qr�d��S���b54��r���[�1˧~�V��U�IT�'��[�e��w큶q1��7k�L�0R���ʦ��.ѢE��������+JZ־������զ�wi��I������zv��"J�lֵ�����l� �Z��>�%�|������ �5��U{ ~ȼ���,P��xœ�ڠ/����t^V� 0��\���*3U�� q�HM}���]`L�Sr�6�����Ee��*���kn�k�e*���虨k)�˘x�����B�de/d���{x�"^I��T�W{����-�������㛣&R>�:�eA�����d���\h�b���T�!�W�X�,����� ��7�@�c�$�iS ��� ����d�b?��Fu;�|R�6�����`u��"7D�# �*�ϥ.�ꍊi���i��!�;�4Zb��Iw��:2ZGgߛ��� �kSB�T�Q�� }�B�u���(M l��z���_MO��u��I�����O���LPuo�g)$���s��������`:��kxq�(]p`-��7��4jٿ(��6^=���������m1�̤L۫f�����x��Wa���~#�]q�(jC>*ܠ&j��YԈ��p�Oz�V�gw��<b�"%�ro�=[l�g��"@�r K�0$#��#�K���.'�����b ^�ի���!��Ԧ�m,3m�f�Fd��y��*W4�5{��Ƿ�v_�ݣ�p�5���;���c?� #�Kdc5E����������?���n'�D@�g����M��4���9���CX�w?���Y)�3zW ښ��^�@(�������I26C�J\<듶?_�d�#v����CN��i'��C����͚f�؋z�����c�4�.(�s���wx��t`T<l�v:Gçi�I���G�CL�xVsm���UY1�J��dL�;U���0u�;�q��p��-���ű]X�����+�{���7� ͇Y$�(P�B̋�i9�1�46}���[s�� 9�5&���|���d^�=}��5S���z������Ma@�)֬tQ�kN~a�x�&�3/l��>vӒ��ꛌp���k�f�\�ԛ��'�šw���ĝU���l�:1)�"s�%D��3���Ln�-3O���&�^��}E<&\h��Ju��n�=�='�l��ew�P��Hz�Ֆ(ϡ��/�)L ��2E0�,���q�bzpF�T������M�>,_So��ԽZ~��h�pa����˿@���2����c����zІp;��8�h���TW��Az�����Án8�H %������(c��'R�Z�G[���{?M��W�6�n��k���U�� 1 ���o.���e���`~�x{ɥ5Z��e}� ?����,�G�*�jӻ0jH�q�s ���p@���Ъ�,3<�d�����w)��,�Az+��L=�l;���C|$�"�l� f����Jѩ{6 ��dM���*+9��2��( As��;_��T�p�LG����&`6���e:��,Y��^ָ�ھ��Y{|�k����>R��,��[Ek�H<��g��u���WC��-�� Yy{��'��x-�]�Wsp���W2��'$����a�D�����%z�85U��0��V�5��X*�����\�:�J�(�m�@����N6Xw,Ji�$Q����Y|�1��ݻvP� \�"eJt3���$Ő5��.p��1�xޚO�iʐb��j�V��y����>�XkK���3:K�5^$��R���s�;� '诀m3��+�mM��I�+�q-� �����lo���&�*���F��Rښ~t���R��d�� ��u���������՝6�0�$Gu&k�w\T&��r��ȹZ�TO7ؽ�Z��`e�M�އ����>H��k/Õ���v���.����D�� ���At�w�#Ox�� ���X����p�c77�$Ɵi��Nw܍��[�|+<����hz&�t���V��m�i<��q�Cڈ�n�G�ѫ�磉D�i8�o4 ��U �ZmMhf��1{rF��E�t�;[��0r�=�q�JW�5�����J�d�(u��4)Ȥz��"6���.�����i������b�{�F[���R(����_b���̈+��K�~T�l���pe-���j���A|~$�x��|�����^e�+�ɬXv[��2��k��P[�����.���m[�j#����ǩ.ԍ�=~�[J�ç���}=2��Nu��t�l�J�g�l������-Qo]�����WP���)H�i,�߹־> ���ݟ;9����ԫ��Q�T�����"�Er����(���p��(��p?Uk���S���9��o�K��( w��H��`h���E�w��"�P� ߃�L���dd�Ն��%���4_��ʮ�[p�sA<t�rE�đ��7��6o)U,���w-��4^c����iV��d�C��@����/���7�1��oX�ɫQ��������+2���P������L=��q���Yk�V�K�sX� ��Yk�-���۠��3������`�u=���%q� �Z�[�����Gë���I���0`F<hJⳟc���N ��X�����& �h����nV��l���T�{�R��4�
Static task
static1
Behavioral task
behavioral1
Sample
acec2cb8ba414dee716ba5a90908121d64482a56eb2e8da78f7bf62f25846c63.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
acec2cb8ba414dee716ba5a90908121d64482a56eb2e8da78f7bf62f25846c63.exe
Resource
win10-20220812-en
General
-
Target
acec2cb8ba414dee716ba5a90908121d64482a56eb2e8da78f7bf62f25846c63
-
Size
2.2MB
-
MD5
b0e2f4f332576bc0518721f042beb797
-
SHA1
e79e20983ad2a8f68327750ce790e84cc3ebd47d
-
SHA256
acec2cb8ba414dee716ba5a90908121d64482a56eb2e8da78f7bf62f25846c63
-
SHA512
95198982892f9767e490a3428302a8be84fa8ea03cbe2d7c5b7c214f3fcd42770aa24c69271f038378223914a059d617264ae94f327601faa007ef139e96e7fa
-
SSDEEP
49152:9MSlDi3ntoJ4K8vq9cFEB5dVuxq4kaw+Qui3J7uJDgkI:5lD85qIEBD7awKW7uJDg
Malware Config
Signatures
Files
-
acec2cb8ba414dee716ba5a90908121d64482a56eb2e8da78f7bf62f25846c63.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 7.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE