7��B7���̿���"��g��A��r�`��@�=���Dog;����)AB�3-��|�����8o��� 1ݥlv��h��$����24�����Hz�ڟ�s9XV_���v��PaJ@آ�Q<��;r�ڒUm���耂lZk9\,��~����y����A���fkg�A:�(�,����l'�� �Q��v�@���T��~Y��QA �4v~)�zp)t����&�oԑD)�L��C|p��%��-b�3)֑�X��m�ċR��%����?%�;�"�Fed*�h����m�0d,"�p����6���&�ԚkM�|4����n��8"��❥�MB�ƥ�+�{N�� w���.��3��f�2�A}��tߔ=��W��h���YB}RUdq�&-�K��z�sJ�[��5�ą�a����r2��)!�0S]/1�f�f�h%�k���bj9Q.~h�C��)��@��mZp��sjA�hc!�����3��u�v�(��K�z�T�ѷN�S�n�8X �Z7��ni@�]<�S��jQ7��� j���Iveb��˜����%��|��I3�fG����Y��5���0�<Y�^y�I��E\$�Zn4�N��0����T���ԟ�0�&���A�I�3J�h�~�}9T|����}�����ci[��������X����֗7���� ��+�y&57��H6XB����vY3p(j�m���ܻ��nA���DDǪ?x�B�X�)]�d+���Ǖ8��Û�E�{����K���O1S}�V�����wDTKs>I�_z�� �ٺW�P).Qr����͢81�E0����ٌҳ�>�@�=~�,*�d�\\U��Փ|C�?['e�U�A� =�.��"����d`�u�@f(��L�V� �.�wʌ�WܟS���!�TY����Zd��0ް+��<J^�o �6�eC���9�&����:�T�]*h�o��tJ��M��Q(ѻ;�Xʤ�����6���G����˲,���#U�L�B��SO3�����%�DmS��$��i�+D̩L���MY���ƅ�һ������@����>qX�=��4_��JӁ)���xO/?�J=��g���!��sMst�w�~=t^IԽ<ZXX]�z�-,;m����J�`�IY��=;!G��8~��X�N�ܾ�N0LvsT{Ĕ��Z�xON_��n�q�D��Ӧ#��Cp_a���� (Ým�D�Y����7tx��H����@��pC���7y���f�`w�Jr���[Wf���^)�pw��2�O��.��y�D>VZ��`h|ٰ��� 4���2.��2������#����D���;r�tK;W u���"�����f#�������fj��MJ6���-�!#\�Ke�Q��al��m.s�Eoȶ�;~�fj4�ZKģGw �������6Ň�VY�w�fȳ�e^�n���e�dQ ĩ��tt�g�9���1����`^��[+�qa���7�tH����G�m+[����÷c��"�fM����;��QΒ���ya��\75�|�$�v�K�8@�xX)� ��h�̲xq:��J�������=��'%���.�w<�����F�xG�β�9����활/��K�eJT.l[b�@#M��q�|(���"�_���mKЌ��l�"pࢭ�)rܡ��1��YH� A�O�;� ֬"ν>�,���Kܸ�u�G�_�Hh�1�3�-��c/�}j��U *[\T�� k~3�s틉!�V~���u�`_�k?��M�gn�73a�L[��龧�B��?�S/��To�}�|��0� d��A&ݕ����;B��x,�^.`��v� ��s`���j<l������r��>�p�>�2�6�s��-rrT���{��� ���ҕH'���A��t)�'��&"���)�!����Q�!L�����{�af6o�n� ٢ac�?��v�� ǎ�f!��((^��N�Y��ކ�z�I;w�cu��f��H�sՄ?���j���X�����L/���l x����S�=1pfL?f��c%�_X<[�D:Y��F7�~�ݡ�xl��P�K���E�kZ722�8�4_��L���5�1�kJ�6�����o����ة�G�E����?[��֊>=�;�������L��ʧ��������W���Q�f%y�a��x�`�w�����8&��Ch)����ׁ��eY�8�u��:\3`�=A��"a�����C�D']Ĵ9}������'u_� ��0�<ew�~y`D$�K���F�����1*����4�5ςJ����@��G ��k������B���չ��*�@S�1�ttXq����>�$fcFq����6�Y���=TQ_���+pQ���{i� 7�h��^IK�y�}��y *�o����]�XC�!U������@|E���j�M"�>y�oW��.���9E�rX����՜z���l<�fֻ���̷Vq�b�FB�2Q�Q�$X6�~�>��eS�2���.�{�t���ʅ�Ŗ�w�����t\p5G|���n��q3o�cG�8[9�"TU�L����k[|M�r�I���R@�5#`�B>~�!�w2�c��R^_�T���wz(������iwf���~^��b��%$�ޣ�F��(��| ������}�rn��9\r��bj1� ֏#H�zw;e4\e�.�M�λ� @��Y���J� OţA��U(���G &��m����r2��ڛ���j"�����Cl�\�[v�)r�KeMvྱ;������x�'��[i&3��M0������x��!���{�4'�J����܄����53&���jĨ�;t��6<�[�Ͻ���B������ѼL���9�+���d/A���)L�o� 2�)�uJ�Y86��n6�.-���ȁ��Q�7��V���a�&��?��Ba����6�%����u�z�2sm*��:J�7��{a!�<rހ�����ܖ��t�O���'�z?q��q�<��ૉԄ�� ��3��Os�s�Vh�L�i�b��/u��0-Lqr�`�y2'~Z�~�r���ſ�lt1��8|��!Fۇ����vZ߱����,9E�ɛ�JvY�����%g�p9�����Z����I�mY�iAcL[���}�Eo8��Cs�'q�3�Ӱ E� ��Ƈ��z��{�e����������5\ͼ"��'��-��Ϋ�c�b�KGh`4�qFs�j�s�.�Ok k��� �\xڕ�K��T��� Á[��C���܃^���$Ga����-0�8��:�m*�ΕG3u���[��BH��P*���Չ,�5Z ێ�8���x�������/u�3���9kx`�x7O��b�m��W��\f�j��#�~ʽ���t�H��z����&��c���hű9C�>O����IL��%�b�W����1�rT.F���9>�$���R��J㢢�7P�RE�(�� !mx<ar���i�A@�(Þ˻rvaLT�]�x�`��um�B� 逝���)�uWי(��$M�]��YR���.d=��<�hiՆ7��DI�#O�˵��������<�$]��{�����=fT_�;�n���xRc
Static task
static1
Behavioral task
behavioral1
Sample
36141266339446703039.bin.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
36141266339446703039.bin.exe
Resource
win10v2004-20220901-en
General
-
Target
36141266339446703039.bin.exe
-
Size
2.7MB
-
MD5
e37a9962ac2a0a9677916f2263e86b78
-
SHA1
e1a3b02df882ba2974cd89dfcb678a20545cc018
-
SHA256
1bdff2f8f851354c51077216a428d79a7d32e5d72bc44c830d62633ec946bf44
-
SHA512
61286034fea92e6d6378ecfcbede1f4dadf6957907817485d47ccc703afcedbb28894ef313a83957d65155ec68468e2a88c13db69c91025389425ac69796bc8c
-
SSDEEP
49152:aBxf85q4dE67K98j3H/7+/aHGYpG4Ov3WJV2dc2XH9qRlSkEkI0fTBG5:qO5HdtlK/MRpZDX2dc2Xz8Ib
Malware Config
Signatures
Files
-
36141266339446703039.bin.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 10.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pwkz Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE