�y���3׳�^~�������r|Y�����$t�^�cv��d��D�n�Ϧf��R{\`�v��`�����<8�8H���#���U>EB�?I;��y3��jJ��<�����>(/!����j�����K[F�jM?�7G-������p%e��A-<Û�5#?�����{������!zv/���pO�^��㗸��>j����g�����{@�:Fx�߾~�*��O,����]�{��[@�Y��x�Ґ��ʝ{�d<�?�����1H���oڟ��@���ҕ��&ac\9s�pT�*j�j����zH���7YD�ȶ���Ms����L,^ij���9�����)8�]pT�R߈��?t��V�.R���P7E&�Wig�E�����S=M�{��df�e���u���+����FL���Tsʀ��E:�S�� �l�I_�`�#=���F\#G�i���#��R�ޮ"A_C]����J���ch��A6�~��yy�������%������ye�zߏ�L�`.��^�(��JB�m�D��SN�OS�_�]��g;TWg�U����hO�!G����"y���ڡ� ��LhhG��J��hP/�A&�w4�l>HZ�����w\��?�-З����LuH� ,���P.��Z2B �-����2��v:��V�`j9���=)G��r��r���T�,>�:T($��u����Z��u���<A�?��N)���ʐ��!�F����r ����n?ϗ�2/���wU��p��iҙh����6@���D�nT ��ˌ���6���2n��ّ'!LJW������T�+O���ypi�"�@���̏}k*�05,:��7��ڗ��붫��(=��C!qv�v%�ͷ����Üs�W�.��R�c��H{����7�|;��=!���Ht�"����d0��ލ��S0�J��XǢ�\xe�>����%���ھ�x�즗�R� ӱ��Waj�o�;*�\dK���!��im��e�bg^M ��Ac�~�(�s����#�C���q����(�G��J���s��P.��ފ/Uܡ窗��ך��1��6;;>ԛ��S�&���ܦ�l�.D�=�T��#x��pK� <��Ske�*��_��Z�w6s~��l�Z'QŦ�;2���L�6mC]6�M��fT�؇�Y�t�O9} {9���zMl�ɚr� �D&����6Þ{��!���ge5̱�xo�"�s�7+��Zl� K|��3r��k鍶F؉_��Im��JTz@)E*#-����ۊ4@˞$�H]���י�g����?E^6�1� �u��?ZP�~���yƻ�yaBR��j�u����˃7�˪SO��)�� �2;YC�Sč�k"{��d��������������*����}�b��C�u��/\/p���9��Y��5�/�!�ÿ�9"���E�J@2Q,�քwq*滹�$����J���`��%T�)�2;Q��8:����g&n���9(����bNa�EaAF����S"����2 ���r�*�A��3����b/�� ��߯�λ_�e� %k}�����e��s����HZ�].�f���U��V�&�v܍O���"_��-���L��F�yI2 ����Om�|1=5����{�uO�v�c�O��ñǸ�g��5ϩ��÷HR4*�ޙz � e\ �Cɍpȿ:�{�Bb�^By�eN��� �U���UTP)�`�uy1���1d�B���mp��7���rcs'B�O�ȟ[��+�i'�� m�B���C �䅚��Q�;dq0�s`12��+�)��z𐝈 ]��8��%���������L�����NP6��ZR[Q���=9��*왥G� l��_��D���^���xӦo�P���z��*�i��Y���Q���#��C�vJnT*A�)�qE(4?b�6��IQl���iP���Ӫg���!�j8��ב3����_<���|�� �-����9k�p9y7;�v�g��O%�{��3F��ߤs6�X��0�)��dny�`f���]�W|�,��Q���]ۅ��]��՜x��>��JC@���ߥ���m( ��KAm�Zo�~�@�Dseo\�qp�.VA;.�*�9�C⾧�2��kœ���v/����|�8P~�tV:I:N���87\ʟ6!2<���f�PWR���5���@_Q;`�68���4��ѐG��$ ��j�е����_Ұ�h�/9��\�a�=�d�m'6�7��|z ��� ��k�n��A:�7m��+��Ed����c�GwP��꧘/ c�(�n�t7Y���9^�@���V��Q�lവ{L.����1�4o58�T�Iϐ�H#ߕmPM��gK7�hՄ��r����CVu3</F7VHbP�\�G+/J�e ���WnI�9�2�ن�z $�scXd����]+�M:*Ď��"���p��� �QK�7�vҝ������yN�(�2r��a�3]-$�{��!��MῆHO �J�'�,q��v�^f�F�$<+�Xl�S�b�œ2�ix��G�i�������x�vK�x��� v집�r^���:$���.&�����b���u6/�l���*+��8ȯ"�;V���|�|9X'c3y�|Ě�I���]�����DF��ws��)�b���볃��`��{��8D)�� 5t��a��C�7j�.����D���0 �]��a���F��'D �9�������3��^�S�J �H)'���5B�!���a,�ϳa�H4���:��m��4�6A�����=��5!����n����{�y���3��In��IO�d-傧��?6�HD�Nk~�un6#���x'6�K����Jys���s8�ֲ3搎�K��)+S��M�� �,�W܉hZ,n��H�町����WK(�����Ͱ�������6��fɚ��P%^Why<��c-n4���#Z�K�_���ȶT&� 0u���̲5p�Z���r�z��ۼ��B ���z�f�q���nF���|i~֔�r��4�`J\���,͏VQ�w�Gy �:��O�4Q�z��J.r����eK�qE1m�H!��BH�ޏy�bE�C�9����|�B-O<T���c�JP1ַ��>I�H?_'J���R�0���Q�*myYC?F1,�{�G��g������d^4�����8c���0�><���m����M����Y��O�_jvMG�Vv\������َ$��`E�dUz|���0.�D�uX}�O�)�pg6�>C�����5-��O�������&'����?Z( f!�~c��� +��QE�-����p���ٺq�ğ-E�aYV���y�7 �;x�YYi�A�#cJ�����.5���pa�ҫ������WL�C�#r�7�w�9���J�412~��Ҁ���R��Hy@�~��4������6j�}s˷�:y0-��f�;���8gs�u8Xʻ��� � l��gբ�6�V�]�.��J:������{q|��N4�O����ZP_l�������x���/���?x����؈�ƾ~�_߈R���n�{��G���=\]�j3�D:������]-���X�k�o`���\l�����A9Pe�C�Q^�{#A+�D�l����U�.Y��1�� E����������KXk�0D}����|tԎ,�A���6����J3P�� \PJ^|�E�2ʘ=�`Nc������쁛.7�r�� �m�4r=
Static task
static1
Behavioral task
behavioral1
Sample
7c42539869ffc8551ff3c07c67056169d72b3750b4cb889071cb330264a50e4f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7c42539869ffc8551ff3c07c67056169d72b3750b4cb889071cb330264a50e4f.exe
Resource
win10-20220812-en
General
-
Target
7c42539869ffc8551ff3c07c67056169d72b3750b4cb889071cb330264a50e4f
-
Size
2.1MB
-
MD5
17d64d625c415f0db46649e2d198a86b
-
SHA1
7084cda3ed6b664280621c91973e98ded5d38eec
-
SHA256
7c42539869ffc8551ff3c07c67056169d72b3750b4cb889071cb330264a50e4f
-
SHA512
35752f5048cbc3d03ce5f7e1cb6c06810c662c90664f6df51da4af9291d1c750c9b9faf0d461838b36d56f20a127020112570a0d42acb17625ec41837cd09068
-
SSDEEP
49152:LePDEfPOYMM1kCS7WFVn6Et8Q6iL45uhR2BRNsrh8GoeHjym:yfCS7WFVnKSE6X8Gosj
Malware Config
Signatures
Files
-
7c42539869ffc8551ff3c07c67056169d72b3750b4cb889071cb330264a50e4f.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 7.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE