�_�k�'+�����"ӹ�.����B.��nD:r�K"z��O�&ܱl�Ǽ�Sc-���f-{�U�� �1q&�{ԛ�v"���=mv����]�ƚ�����-@�E�({�ʮ�3�� ��!3��Y��UP�����5��t�/9@��b���0�ވnPSy;e&'����~e�BF*��l��q7����Ր����^��yRE���� M>heu�Vc}�np�Cc-����܌���g����DWe�#�:E<�@�dh���v__x��?H�I��Ї �9]���e �S� �*���l�!2?& �uH7�7g�i��pEFWg�-�L>F�5��[��[�cg�0n�G�P��(����}��[����Tv5@{�@�yN���� �שIx�,�~hŽo�7Q <�����P.E�_���O�b�j��aj��(�l9ˤ��QZ[�GtWU�?/=Z:�����<����W��Bƴn�2ע-�p��/��0SF91���Ru���o�?_��P��F�@% ���-7���#;@��ȍ���ƫ[��ZɅwbɾ�qz��@7ا�C��'�Da�����#* F����c(4��i|:�(�� ���qm�_/Q�Y�%��gH"�<�j���N�pȜYҁ^�90{ ��e����:��4�^�Xj@���R�Se~8Ӎw��\:i�ԡ�&�l^(���9��T*wJ���!�^A�Ր��`������ݍ�:{>�j-x�g�^�D0���У��7�.�we��������*k�NM�r+=ə���JJ����N��_ ��OA}|�k��@�j\�e��Dm����<�q'Ih5QN#E�u_빪������E54�_�Ѳ.<��M� (<���Yq�tl�ڑ$� ��$�a�ժ�}� @M}�H��1�p.Fb�E1��E>ǴbO5��A5�w��p�v,$>���40��ä_���Z�0<4��"��8�fSh�e�K�G�8N4G�=�ȿp�?߹���1�ݳ����{թ�.F����D���<DU�3;Ԁ�4�-��(|��䦽�����´����I����~^��y�z�*��4,�<�����;�C~���$sĭ����V��R�SBO��뼙|]d�����Ea�\,�eETg���p�0�D���QJ!� " 7*����Y�x��߄wU��~G�r��g�Z>�����{O��5늸���3�<�DF�*�Ȝ<���!\l���p�{#D�S�!��q8G�}�_�[Vp��~����N~�y,���R:NR�{��6r��(K��E��_���[����R��Bز'���R>V�Veتk�a"�O����ÛmE�Ё�υa�,QV�v�k`L �ܧ�� �%�c<�w��??5��t��<���A6�/�, �$�������fҏR��,n�������G����}"z���<ڿK���c!"/oK�H='Ώ��hMbs�M)Ձ���+t 7�+���P��'�F,<�3��P���]�Ly��ٝ�^s�zL�gLC D��e�H���'A���͊�F��#@����]�I;\�s�K(�p��ߘ;\DC]�y����� ������x�����ANa�;�������`���M"u�_z�������vbe �漲T}��Qq �X z7T���Y�(3@�}���>0Sj��i��|smg�Ӝ���]����\����I)���<Ydt�p0�8�[%{ ���D�ã��Y_Oz\3Tm����,�I)���"�i3{��-^� ��N� bς��f��0 I������K>�F�g�����z3���d�៥cT.n�;/'�`����c�M}k��G���k��6`P��%�n�����p�dC��8���6;tŴB>`A^(��$�BX �BfG"/�Tؙ����9�3�X2;�1��f�ȅ��N�H�#��6�������5f0g$;o������.%�I� Wj�� p�W����džu�y3qeؑr�Q��kd�'�~ n�x�l]u��c����"#U�� �����>%n`����+�GW��[�Z�TpɄ�:���U�7bDf�����߰]{�&i��'��3�������;#QO�#L������.�5�=\�m13x[l72n�/|>dʎ4O�e�8����J�2C|ZHwܘV`ѭ��J!� ;�< r�gD+3����:O�±��UcY�1����_"a�P.�XP ��z�?���x�9� P2G�n+��h�7o3ei����һ[�r�^�2UJ��fDj�\��ΫT��B�$�KR���C�L���S2�y��e'7���F����F��0�Qc���#E��0�h$����c�4����W*q���:%I!5> ��곱�C�|@(?M>�� K��`����T�A�j1T肑??O���*���Ws��r��~^H������>i�]����)5���An��$"�v��0��H���_w`���G���X+ר[Zs4 �@�r E Ty�� ���F��ʡ��sjM��W N�S��b@�F��(ʞ#����<9��R����c�1TG�<���^?Y;˅6�0l;�[<ŋ:,3�����`�p�Y*t�m��I%��k�m��� 5��XVh�&[�f7��vʃ^)8���*� WYS�:�H}��XE�&�*�5" ��N�;���P�~��W���H��ᡝ# �;��p;�>Vɐn��j�\�D�f!��7�����2�K�$���k�=�ۘ��h�Pl9O�������� �!�ԛ �I��� �Q�1]t�i����d2ܲ7���9�W� �~�?@^�����hr��>r�C��3��n,��g����uY�"j��JH�k%W�]�Z=��h�9Szyi{��- ��r}W��mZ{/���:-V�kEAU��r6�r�������*��̶�$�#d<C��(���a�.�ҭ�^|������*�2[�|�r��Z~k��2��;����Z�����f &��əR��6��OK�ɇ_��+#����aRi�th��T�����A|������eg��#��j2��i��>\B7�G�@�4�|�K�j�������h�F���zc����eC=�����Tr$j�n���ΐ�"���w<9���;}Q B��X��7/
Static task
static1
Behavioral task
behavioral1
Sample
789630c437ccf2d7df712ce174ba2336792977a27d203431957c79163f9b9a05.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
789630c437ccf2d7df712ce174ba2336792977a27d203431957c79163f9b9a05.exe
Resource
win10-20220812-en
General
-
Target
789630c437ccf2d7df712ce174ba2336792977a27d203431957c79163f9b9a05
-
Size
2.6MB
-
MD5
0c717a4d5c7c6a0716fa3d788f0b2cdd
-
SHA1
ccebe3bfbd0f46942c27e898b67dcd56c2dd7e27
-
SHA256
789630c437ccf2d7df712ce174ba2336792977a27d203431957c79163f9b9a05
-
SHA512
314e1c5b4569f7ca2db449f4fe5d86dd56972ae59c08ce82618d889c2c311b5d744cb4d52fd7f89411afc30c7e185d8ef46274e2b205076b584bb74a9dd997af
-
SSDEEP
49152:DmVRGHUBcBLZ3K5va9tNCyK4Vs9mOpLbO88y8kiaAm3EmB5hwVjrrkxCP3RcdlsG:DmVRbO5Za5voN2aso4bOKiaB3Em1wht5
Malware Config
Signatures
Files
-
789630c437ccf2d7df712ce174ba2336792977a27d203431957c79163f9b9a05.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 45KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 325KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 194KB - Virtual size: 7.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE