���G�C�B�`��P�FT�FC�J�e3c�1�V��iwx��-�B��"֭� ���A���qM�{^���pE��7� m���Օ�IO�9��n$+�'���8�J�U���u�u����;�x�@ry��:!&Z>hW��� �$ 3�����*'��ŭ�oN2��8Dp�T�$��:BQ�m����`=�/l�V�ρf�|���4:��|���C�pQ��2�K�L=!3� qgi���d^� @)���$���Ih����"�n+^��+��фA����|_���[��8�z�������S��K�&f#u�ϥn�>�5V�" �P�P�.c M2�l�7�#�����&ի~�ղY�m=lw梄��m�=ߗ���[8 e������S� �CT���e߰X�bxr�Md����=lI0L�}#v�^W���}��;Ą�>�#1�J�gG�<��h��Lj�▔]�h6e�'��CD�� ���"��&S��TC,M��'+FbQx� Z���8Bd3>��ի�F��\�#nL�W����0�,������tB6��Z0�����O��E8�dg��Kr�dW(���ࢢ5��.b��xdJ7e���4J--��n�P�1�r@�٤���i;�I�nĸE2U���/��0��a���n�I� �>���w�L�T��r��Li*�x��������tj?�|�^��4���a7o������-MnH���h��:�F{D��e����^2��+���R(�t�|��~9g�p�������6�D�o�\}1B��X�ѝN[T��"����I_Կ��;���ZK -�S�4~��=����u�Q�g�@���1�����Nh4�W��I6t�a(ŝ��g���/��� ��*����3o��|G�֪u.�a�V��M��l"L�'")����SE�Z^�c�¼i���U��Y�k�N��� �Wd7���%�ǚ�ܟr�9�����O��N&{�&5�}j8�q�묓���]���B��{�_^�-�D��K�Ղ�72v���2�4���1��E��7;�3pE�Tg�o��f�!<����_o�G�i��3��$�\Ӣ�Gx}$�)r�4��ήѱ����1�Ѫw�_�dϟ�N�i,tqA�V�1Ц���v>���������+������r���/�!��/jFA��&)��b#��:.gǍo��dy�LR�1�T���C1$���*f�'��G�B &�uQ�!�@��-;��Z���f{��M�#��;�q8��\��Au� ���+���1+N¡q"l�:G���X�yEo����Ok8�u6���n�љ_j�$��/˼��ͫf��_~���t���ׁ4iV�1�-T�.�[P98��ѹ���=�88\�w/����>�Q� �6?���w%ojD��_>U�>g��7�c#��^�R �t>⸻��"jydd��l꪿欸 ��ɾ�)�Yu7H��e���9��8W��Ĕ"��J"�4{S�(��cY}���O3��Q�=�����D���/S�K��a�6ڱ\)sZ�F�����E$�ͨZ=�䎋5��_k�hU�.HNP���ok7t���W\WіN���.��h7�����,ߓg$,%�^i3I&�!�_�x�z�K���y?ωȣ]v葆�5����1)�%��6�V�����R�T��o%��w���=��X��������2�����{Ly{��>�u����0�����M�/,�Q~��^S+�"�"MG�%۴�QXt�t%������J���eXt�����&�c?�]���|O\�-�L���;���l#��2��H�8����x���Ԝ��L�.=�����i=�i��[ �����Lޜ!���0��?��q�!�������գ 5�m�D�*$�jY����1Am^���:h%~_���7�ۚ��F�� )KeyK���o��b���/���������,xW�j�#:;/ і��Au��>��9�}^��Y�Ϭ#3% �0�+��ފ����`[#yH�$,%�E�f�*�\�,�1D�F�ĖB����G�����y����&v}V���@�v|O�)�7Y�z�Qӄ-0���"�}-�t�Iy���1�إ`b#�>���rȟ ���Ú %"-~�jb�@���\�O~1z��7����@���̼���a*i�k������?H�{-}�轢/:��ۗ��T3�����j��J�� ʏg����+��*3T�߭P)(�QI,r�����}�d(6�/�|�u�z����Cg3�Hm�!ʎ<���k� J�I�������&+�����}�z��8�#dЃ&k��Xz���p��ದ��y�{�,(%�ޕ^�]2�P1n`,����o�q����YzI;�kS �O:et�G��)�dR҅�.6R��V��Ǖ(@U �2�E�P�t�I�D�%���P䅻Rr�Z�����5}r�̅��D��"�R y���/��z�Sj�4U�s���1�������3�G^@��z��|��4�S���WK�h}�!�R�|�&'�+�ؕ=�>$@���,�㒹D�u��|~+`��P�c@/[�3���;=��J�]z�# ��C������#λ9����A�$h��y%����FnQ!��5��ϱ.5�x��G�U�I��<��]�Ų�H��ř��(jGn�Vf$5���TB[qP��������ؽ3�q�1�o�3hI^ �df/L��W�6c�꣼����t��"uK��4nj.��p�Y��e��;T������;�C�Ab���`gf���A/�pkꒊ�{�V�{������J���r���$�'��?htK���%S-V�p����\��:� �-�����*"c����F�;k��$��tJ� �6o(�4�I�����a�Ӥ��h.={�E<U��c���K?D�E.b�:�`�xgzܰF��S-_���XR�1�Z�%�ֹE~sT�]�̗x(�7el�'�c��6N)���?��68��Kc�a�d �F��'IvIL��룯�I{b��x+cy�0� S7Զ!(�U�}���2ؽ�����j��:�+����#�ڝ�|�_�Dvj� ���*����<���t�ÃKmmM�&�4�p�6�k������b6��k x��},� �w��v$8��Qay�Yh���teu�-��p������� �o!��W�
Static task
static1
Behavioral task
behavioral1
Sample
19658963328526236.exe
Resource
win10-20220812-en
General
-
Target
19658963328526236.bin
-
Size
2.1MB
-
MD5
dfe0ba123011bdca4de794f6f5509415
-
SHA1
b4260e4d3abadd70fc4377b0fd5e209e4a603deb
-
SHA256
fcc825b454f02b07064d57dd37ee6b597449c04b56883d7c073c571030cad500
-
SHA512
d10a018511d8176425de6abe3fd475eddd9c2ac411d6384e61a05ffe03a30e056a351c4340fa21479801fe9befd64d284d82d2854bdefc1a95c609b07d6ee4f4
-
SSDEEP
49152:aAxmajJyMYIFIT/O5U4ZUlplyKlFzYbxAB/Q:aA/VyMdFQqKvSiVQ
Malware Config
Signatures
Files
-
19658963328526236.bin.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 7.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE