�_�w�=�ʔ�W+�6FF��tB{���y��~'n�=�����g rID�&��;&��6Iy�b�p2�.��.�m��;��'ZAC�qJ� ����z�sKS�q�U/B��m�_��hS���Ik��\�u�+zg�)���n��F���W+�c&v��#|zm_��ҽ���e~A�iǶ�]��6�mLO��B&�����v ���f�K��� 7:\V�т ������~��T��IG�0��@͈��z�~U<�>��֜��X�qV�kXu �G�B^,�:I4mc �z}e�d�� 1���^گ-gRLp�`���������f�&�ɹ�gt��]�$2�WW��̭B0i�BjȱR"Q��J�b)E�7���sƌ��=iA�BCh�& �-�D��,M�(bP]�ɓ����i?��qy�X�_~Gg@H���&k��?dONr lo��n�������Ez��]��0�R ����5,��b��-<�I�,�T37�4�YUh��_.�1�R��5�a�����/�Βo����dW��� Hl}L�v�5��c�m���"a�닯��VJ��H�Ú����G#:�i-!��X� �F9����8(�������v��x�7���/z�, ���������L�iM�z�Pd�� �+4썏g���R������Si?J��4���P������uo81ֈ>ӪP����Ĉ�VY����ӛ����˛��]>LҖ�!�R �j���4�� �,���%�w���Uc$*�@�fCI�p��Z9_�[p��+����JH������U�3��s����P[�bֳ<=�<�EbJ�_���~!��(������X���::"a�`n������<�!�@�F�RB����݊�岻Mzɒ0n��퓊= 'ѶQ��ds��N]�Ӗ�O2�_. /�G�ڱ'{&w�2@��t&�7y�=�s��r+�YW����%0�3�d,�'�,��F�|w_��`)]�a�U%N0�0t3R�Lr���^���]��В�uzu{C����u�F�$�O� '�Ïwx�Fv �`��-<�G3�� �!G���U��Γd�T���_/�U��AǪ���M1� e����R�\T���4�U0�d�<=�>VI�$�È��Y�D��)J���_���J��H���Q%�SF*�o"�+:�A'뫚��|s�>7������go-Xm����i>0�IQ�0�?�\vւ�?���x�V"�_v/0C��y�Κ�+��ǐ�Q^���&��������}��DN7o�1`��S ���+{{�������c�w�iE���Ó�,1o����ȓ���"���P}�X�A�^�<!���F&���P�ز��w�:nǵ�����M�mƊW��x�,Q��L\���ff��� N5jŐ������e���=���"�*� /��n|;�虜��Zy�m�-�1�h?�����&�����6ێ���R�%e��e샸ш@ Q�>nL�Ԑ�=���fY�iy*[�ժAӪz���6�g姂���Ί�!�-��E[��C�y`�\�?�髐��kQRa~����2�/��E�x� �<(�\�lx;Љ@��>ee���������E!I��8����j�E�ˈ]GE�*�J�) Y��]�1�|�ct4�[0�~Iw�\qy���C�� e��6B� w*�����,��-�>��|:-3o���d���Xs���&��� �V`p_M��"ġ4���G"o./v#C9g@��M@��:�quv�R�6��,ї��I1$��s�Ƞ��FB��._�-r|�Z��B���aۯ���%l%\�#�Ť�a�J9�F!Z.�s���~��>W����n������{� �"��[̅�J��B�(�4��4���,WE�3\��1~[�t�%3�Ʉ��͐���R����)�O\�~��g� �}��Œ��6�P"�qs?~ΰg�� �>�+�$�����JY�.B`��7r��� Hڃ�~�}C|@� u�|t��+��A��K2]��:ai��`���$ڢ��ђ��䆽���:�/*�0�8��.�I!��kE�E��N�,Og��aZ����N�(1p���6��C`�Ѣ�u���(��T���#����Dd�*'�{�� X:����Ѩj��x����7�F�ТZ�7�Ϗ.�I��%)�/��jᓻ3��t�ࠊ��J����[/����\��������i��[l�ѫ��g5�I�8;JM2�Ӆ�J6��X��A3�I��К�"�Z�_�<D $t��ˤ96��V�O-�W����b�����>�ћ� �nj�pE��ĽcL�E��Y��\ �U�����?-��6����q�}�;$��,��T��a|�&�;������"9�l8��R�q.�{�>�����R=�� ��֖}*�S~��� l<�L�i�QZ^Ƅ����03:�f�E�*l���--��n:���tXJН��m��r���O��jCQ%�t^�,yt���+�����?8d�=],O��_�cd�.�w�������\�I�A���[�����u��t&.��=aZ�D$&�>��$U7 6�do�F*���Uh�Yɠ��KR�i7�V\=�q����*�>���s��aE ��f�y`������VQn픑�◛B������,_N�F�eQ����f'�Lw���mx�I����C.�ס�a���O��� r�0]���y�0���j�0�����=��^�%n�W�N\�Us�,n����=�$�V�ű�<��̻:6g�� ��0i�J���V�/Qn@���ā�&�.9��B9��T��1��J��>�OX��3b���Y�7Oi�qZ+�8Q�{[��j�r�ULWpZ�4�D�I��+;n�ړE���ق�a��3�c>���Gf�b���o���G��M'��Ј��q?�Lv��0�A�YJ;�����2�@���[S�Տ��B�>��f����ս��-����Yk=��d��_�P���X� s��A� Ă��5x 1F��j�м �2�����j��tmI��rxa��<�&ݤ��xu�<�����ơ��!���PJ|&��No5r&;0a5�B��>f(�47���́�!�S�d�7���F�#���#,GtW3~^����2��jA4�R��"�ӷj�F -����Ǒ�����%\a�.�ܞ��x��bC����D'N>���e���7��o���1�łkm��m��{,���q]5����K�I�Ud���������K �y��b��crS���y*�1��C済b���/�b��L4�ެ���Q����b��!u��� ���ʖ�^�Xr\1�q���Q����0���H���z�!��I��X"3�Y�LP�T�_w �JA|�9�/�N�2�+>�TT�*��Z:y���q�Ԓ͠H"�lR�ł ��Qc�kh,*���������.@s�X`O
Static task
static1
Behavioral task
behavioral1
Sample
326b7c44bb055f30aa6a924a9932d173652883649fd30e89d1539793930cc6f2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
326b7c44bb055f30aa6a924a9932d173652883649fd30e89d1539793930cc6f2.exe
Resource
win10-20220901-en
General
-
Target
326b7c44bb055f30aa6a924a9932d173652883649fd30e89d1539793930cc6f2
-
Size
2.7MB
-
MD5
eb426f57e7d5307b99089496134f82f9
-
SHA1
5c32ce633e6c1cd0bf9bc0c23b0060d965310ea8
-
SHA256
326b7c44bb055f30aa6a924a9932d173652883649fd30e89d1539793930cc6f2
-
SHA512
dfe643518ff8b525d42efe10498459cec285a28c7d07ddc787b75608df9fee055cd961efe767241c1477741b4ebcfffe097271df954303aed8a18c8e59468e1d
-
SSDEEP
49152:PB3wMMgNzLcokThy0K3yxDO/AsJDF0msLpqlXdKHwjjdUxWrt6CS+2FPuyb1oalZ:53wMxLcokThDKAS/XuihuWJgFj1eXoix
Malware Config
Signatures
Files
-
326b7c44bb055f30aa6a924a9932d173652883649fd30e89d1539793930cc6f2.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 9.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pwkz Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE