�ఆ��������TQ���S'-o 0�x�ل����Is^��#{;����Ę�����m��w��\G�'�Ʀ���i�H�f4�6!�>5!��]��"�K<��y h���������ߡ��W,z�ս�g3���=b*�oغY4t�w�q����$�Z�z��MS˜� %QԾ����g-?D!qz,��0(�ӗX�}_$j9ݢl8%�P̌�qAm!���7��$K����; ea����A�`�b��dQǘ����4ӶW�%���� K�����y�mu���>�z�PtTV�]~%>2��B3�Ȋ�Z紛�6lKr76��i���z-|����5�f��ip��-O��J�5P���C����U��L��� R���鍫Ρ��:����!c� n%Qo�<c&�-X}|F`H�Qq�����링��J�;�.�L��gV�z워��ƍEO�{�����2���i���y�Q�W��q�(9�RT#6��J� |��8�'<����ϲ�~:!*��ɤ���jf�x{cb�]���,�O~��f�i�o�dY�7�JB^��"�θ?2n�7��;�p&ȉ�zϸ�#Kq4������P�G~Ώ!EUƐg���Q�)*s'��.��Sp�MWEՇ �5��؝A[��z��'(���.�3��9a>�������Y3哑�PO�{TQ�1�Z�����Z0Q����(җX��g�����8��U���<�7@�����{���@����J|� �[9�g���3<����*,{��m���‧���p� \i�k�W���ZV Z�S�B����w��5�s�ϐ)��h�V�g�E�I�Kzm�:'3�h X��.N�W�j��琛�������d^R���s�:�b��Rm����0F sG��^\j��a�����*�_�%8��`-Xܗ��/m�/��?xw恚*��ʓR/�Y�ѹo}��< �u�{4 ��]sA�Շ�95��3<}eY�V.���$�i��Z�a<U5u��Ui1"�b�ԙlI0�q�SO=��rF��xg$��J����t��ť�~M_�N^���aC�y�"r��v\��?�"�����\���j9˦��4�۸�!��h��R�!����H3�\Y�l�W�x���Ĕc�"�wD;=`�_�PՆW?JwG��=:h�'��)UFC��⍒�5zRg��INML�A=>�%Ø����H��=����I��8̤�^�" �H�᰼�W�����'{|q����[!S|��k1X�y�/ޝ��K��X|���e!C�X���?�or1�K�U�`�?tq�Z>�»A4����0�� �L'hWd`��6�q��U��g�~�o�ë��B�F�2�@��?a�WY��dˤ0棓��PW�8 M��;����c��3�p�O)�<v�l�f�ǟ��=���V�,^���QM��m`M�߶ ����|M7����n���9-�%W�_g/����ڸy�S��jm����d��t�:ƷZ|�|��UM��dm��'F@�B�Ml�(���s��&�������xmu�tuH����Y��[�]��~�|<�5�˯�t:����E�@�RY�?�d�}�����3_`��a1P[��n���3�B�?^�)��#Fz`���p�h�C��I�.�Dçj��o�H�nd��%G���v2O�O��� =1��q�ʬ�u?��ߟr�,1o�P���k@�@�%���<3�$����L�s2����Fl�$�.=�2�Gn��������;�y� ��qٽuN�fmצj6,��0���*�/��߄�Z���~��8n����dʜ�����p� ��$]d�l��7�lC�g�����藟�>*��O'��ՒN������5A �%��+R��m�� &s��g��� _��]a�f&^�hj~J�����q����-�u��|d��~�d�9�q�B�%����; ��5��8U�p�����]���vx�Β�`FV�>����1�ʶ-5��n^�~����Z�<�&G2�Ǵ�f��u��`�4Kr�m��Y� <zG�^�'�'|��W@��t85�PYՁ�Ʋ��C��{za1�"�l�b��;� �[���Z��$��Di��B���? ���D���o}Jx^�c��Cՙ]8Y+���Ϲ�q̀4{��Y���� =�r<����.���|���3�0����ց�5+�� ��n�/�2Ij�6����ǿRG�>y�w%�m�A̲<��m�b����i=���.��/G��F�@�������z�J�m������gɗNA�������Q�J$��إ�$S�v ���y�^�Xї�p�L���7@��f�&f)K��`j��� �̡��z���Wv{� �kNj'a�$yl�Vɨ�&�,��� ��#��g��%S��o �u^�"o���{CUq~P�V��d�.;8`=0�i��^�����.�.u�R�.����eȭ��s�+e�u�2�5Q��赀E�ۤ�f^S�4js~�K�'��]�q2U�"�J�2��9[p����7����}�8f%l�����rEn4B������/�US�n,����r^�@��M��_5kN���p0�2Gj��y#3��e�Ne���q�+5�Ӯ�+�����d��4���~��{R\2�/��W�VX�����oi�z�lRuq�C&���;���_�6��M�s`e-�x����/m����j����;�K��Ps��raں���]���a�J�1��":��UX�<Χ=c�� Q��Z�4��LD�ށ�l�>#,J��m,�'�`�����n%Æ�;�0��c2��7�ԤU�kCʹ5@x�����<\$��ƷY�y�δS�$"{��8�@��mL����~��V�QΒϸ�R���oW(�[� $�[;Z�s��VɌm.���E���q���%,����鄙��ܢ-v�v{Q�A�a?WC�>�KS4S�7^�+{��8�*��h��2�,���<]�[a�h�b6�����bF�g�=�F��ӏ��}�}[��c҃�8mzN����;c7_��-*o�L`��ȣ��r�wV�3��H�6�6�C��v�ь϶�-��.�d�YH�.�/�x�Sx�����v_r��i'Dc-�j?�fi~�����U/���$���D0��S����G�1�s�I!O,�^=��,�eh�V�gˌ�:�0�����nS�1t-�Kb}��=����Q���������*�:�D��H��_���kK�)QC��L�}�RA!�E#��Mu�A8l�~-B�\����|��${R��p��D�� Eٷm��u1���o�?�1�L��p��,��H�8[ˠL�T>���,����`��d_v ;�0J��mMw%$`�ƌ�~���r\j���u� ��x��|�r6�,�ŕ��z\��~Y�U�d<�����@��7A�0 ���?o���οn;=�)�(6}q/wl���3�P�-�,��b�n��M{��Q%oY�(��v<��6:ٛ%#�F��Ԣ�.HB��� r-H s��"��Bv��[b�����_PrY#18�P��r�{�J������ DުYj'η-a��b�b!�"jXJziu 5Oߟ��3.�3ab]�Ǧ�R Bċ���- 1��٣p��}�� 2/��>��c�?�}�Ř��;�"'8Rm�P�R�P?s���H+5����No��\�u��Z��"��0�9L��/Z� ����[P�r aY�3�-���x�f� �*��7�x�� ����*��S}7[p�k)
Static task
static1
Behavioral task
behavioral1
Sample
69366638da92e5871b80c1b1ac5c36ca499a407422137b34b43d948546a190ef.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
69366638da92e5871b80c1b1ac5c36ca499a407422137b34b43d948546a190ef.exe
Resource
win10-20220812-en
General
-
Target
69366638da92e5871b80c1b1ac5c36ca499a407422137b34b43d948546a190ef
-
Size
722.4MB
-
MD5
a2d302bbecc9b38529cc016adc334b17
-
SHA1
323c64e329187281a418195191f5802a79bc70d9
-
SHA256
69366638da92e5871b80c1b1ac5c36ca499a407422137b34b43d948546a190ef
-
SHA512
9c299c215b2769ba3729426aab92e198fb966bd411ff550b0771c02404e550451ba8c36575969f5908c3a8dc40d3de670eabe4ba2bf5b06235eb1117b24c2b37
-
SSDEEP
49152:q+G3R8rSAZkqqKR8GEOWT+RvTKVrcxO5VJhOYJH3/UTM:q+G3+rSikq7R8GEfEagxgbOCOM
Malware Config
Signatures
Files
-
69366638da92e5871b80c1b1ac5c36ca499a407422137b34b43d948546a190ef.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 73KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 402KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 6.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE