|�.������̾K"�#����OI����2ޣ����xs����-�-�r뭟�b��hpX&�Sz{5�J�i�K�c�����E$,���c��߉ɽU�v@@Z���3����k�����w$�`ˋ�����G�R�F��]tE�j��|,F�H�Dg��*ye%�(b� mĄd9�jI9&D# <�Nɘ�;D5���(\����U��z��ɔ���B8�L�P�C�o|Ē��!X�~H��^ uܾ�M�0�����7tN$�g�şTړ�\�J��l,N��(J��(�Nq���{cl��f7@/����k\�֣L�����2|ʴ{k�03�/�r�5��hx�g��pi��F�_K��rB(a`��oruN���ل���z�&�H��s�k� ��^��_A� ��6L����q�6��!x��w2�1�Z�O,�����10x���Lq.KF���zr�0[��v�ԧ1�(�ĉ���ຐ����xk1|#H���o�"Q�ԧ�N�U�D���c\�O���������IĪ��D��jq�v}ʃ�7Y���T �ϋ�.�,� �5��(�t"9)Ƣ[���8,P�dB �9���g�+H�̮t7w�}����O DP1<�g��2%m<�E;�*f&���*�?��zIe�;��@ߘc%�2��l���?Κ�d�9�K4���Fxw�5���8;2�K�%��x�\#<��!� ��d?C�dp�I�nε��2��\��PE�^"$�����ɫ�������b.<���a��5~�`��X8�ږ�4�r�* ]]wF3������Ҽ4�M ?�}T��"�InJu'ۺm� �^~�2�8����@r��:Gέ6�>�P�j�S�R>� ��j��o/-H�O��P��Ł)�d�@���͏��IIN]�4J���l��G̻�W���}Q�u^��� i7�`���o��jg�z���{�<V���g$�Q�k"��o���Q����y����[��?�E�NA�Ɨ����5K��ʒ���CN_;�����O�A�����w�*����ʧ8�.��4�S�t����P�P���~��B���(��f,i��zж��=c�܅��t�Nk�sQ�]%�_nmǡ��.Ġ(d��L��"�3l\?���h��C�~t��3(���3iI��"J[��<mn� ��ڏǸ�x������W\~�VN��4���L�8�t���R��"l�0�Y� ؙ����3���L�7E8N���:������8&]|����32\H�+Q�<d9e���*d���?sF��c��n����1���)�:X=}.�A��y��~�ً�BQ�+��d6N1��WU�8w�k�Pi�9x���➜���3HU|�1��.�Z�2� ��O����f�o(V,X���;��M\9t�c�_~/8�t�䃋�i���c�M���<N�Y�n�&�8��k��Iʻ�ų�S����5�u�F�YKJf�RP|�t��������&���҈(��/�QΙZ��O�orv�m��. >�V��V�,��祾K�:���p (�+�A���5��5l!�9�f�SPn�t������x>q����5�В=*?j�0���FP�����s�$G�ѵF9�J����LĞn;�쳙=��.Z�@`�m��]6E㘫zL�8Zޒ����cTrp ��`�D�_p��]AT���{pKq�E���2�D�0?�()6�jk��h}*�<5���5���f��s�u0�|T�+�ҭM��l�,�VX��Z�ӢT��Q!���.0�x���.S}�Lc����tN�E@��>�߆Z��z=�=�Kz��y_�Ԉ� �>=��L�'���6"�FM��A�o�h�Ot��OM��BMI�12���#���P&>z���"���-Y��vE!���*���SjOJ,��ыT�M��t�#dt����z��T�R��U�-��1�� �k�.��B��𠟣��#�fS:mf��T�z%ԭ����]*��mf-^�3��ٹ�z�N¼����ܾ϶�PahR�������%���$����Ov��@w����!Rh����ux��P�����LYF�=B=wS��Kb�A�R�u�(����@D}��a�X���� �?����3_�[��`�G����o�g��1֠���yͣ�/��|&�z�=eǵ-u�`��d��������s ��.������L���~߀ �0��Jd�R����o�q�y-T���>k�3������[��V�d�%9*�vg*�Z��ir%)EO�&����g�)�Th���� �(}�S�&@r�(�5�t�M�N_������ݔEǰAΦou�M�^�#ƬG|����h!�חx�����Y�]f��A�Gm�$U7���Z���U��1 >��� �8df��7ƟD� ����I(>șT*��q��iڂF>�9nI�T[�g�jT�f� �qEq2��O��J�}��c�C][��)�~��>+�r���}o`%1���߸>���Y|��<�`p<σ�^� o)�\�z�|%����;Y��z��fU(��P�Pd� )�$� ^u���� �z�:��E�&�/�ڨQ�� F�jBV(�Ա���>�=!���w휷����=��)�^RE��)il�3(H�:�0����K����F�� ��7��G� [5��2�*��%n_e�b�^қ�j��iC�p�\y��652�T � �X���N�f/�)]�Rk��qw,�r>p}�(���#��ӏ{y7Kc�l|�5��(��2H�i��=�����aM��!��Q��&]Dѻ ���&�,N-��z�$��?��j� �{��/�p]Ϸ��h,�`,��ק`�A���"���$>M�\, �RԾ�S��%�o����y�WJ�,��ڰ~D'NX��뤑���Շ�?��bˮ�x�Ԃ�T�� �=T����9\3�c����Ü��`c�5<B7�SF_��wyo�l�?|��2��f��j�:D��~7����8��ԱĨ����`�7� {~���V���iB��v$��༰�T?��zA&�6�ۺΗ5[f{�a!�"�����k Y-z�{���_s1��"L��|>b���Ɓ�&au�8���f�H6>�� �� �ؖ]؎j���m��Qm�md:!�#tƶU�����Ȗ��"ca��� @-�� @~A?�blh�.�I�م7�n.B���К���x-��?�]�z
Static task
static1
Behavioral task
behavioral1
Sample
2a4f994547c0cff4fa435dac811ce92c2465305e06487fce64e1f396fbef48ef.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2a4f994547c0cff4fa435dac811ce92c2465305e06487fce64e1f396fbef48ef.exe
Resource
win10-20220812-en
General
-
Target
2a4f994547c0cff4fa435dac811ce92c2465305e06487fce64e1f396fbef48ef
-
Size
6.2MB
-
MD5
cf0c5cf9569f64fd46d3303ab892e467
-
SHA1
d5bf04b97ed664f1b72261affdf230bfcd3cbe9c
-
SHA256
2a4f994547c0cff4fa435dac811ce92c2465305e06487fce64e1f396fbef48ef
-
SHA512
20878d508aa3f0be002bf5d086c13bd05c4407dfa643f15058e719ceeac9229af9369cc86e8c596ea6a338b48a672ef909bde20afc67be1d45afe098dc45c8ca
-
SSDEEP
49152:xu9DG/n7dDOkWRaxQSPs+bZMmWIm5CyIsapfNdcNH1t8jTMJSdWM07v+BMWf1xZc:OG/7hNzxhL+mWW3je+WJjWfLZnl3d5
Malware Config
Signatures
Files
-
2a4f994547c0cff4fa435dac811ce92c2465305e06487fce64e1f396fbef48ef.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 1.5MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 77KB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 194KB - Virtual size: 7.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE