�_r���$���n���e�TҰoY"\rDI�?���1��=�x ��:���y���% u�����9�,K�a�V��+��`zު)�'�)~ �أ��`����s=Oʹ�F"�-���-�x��Z������ ��5'��xlg�u")�p�+���77K�[S+ٮ�T-�7�w|#r�)r,)Zw8�0*0D���2�r|�x �9�XJ����c-,I(W4��u�Q-GF|��Yr����N� ���=,����H I�iϣ�=� �`�ŽB�iܗ��,�[\i��5W�X��B@���L.Lk�r%����7.P�*@&h:�)h����|��G�8�/EJܵS�*�fl�xM[l�Ɗ�#.~G��i8}9�� }3 Q@�55Y�Kt|�=(Y�m��t ><��PD��F�xlD�juu-� M�O=��p/2O��[G�������-�#�-��|�4_�~��qľ�L�:V���c���V�J[9�r�j��o"����C�v������sn�����͉]��v�u��.\=�@;̵7���u̘�0��S�Z����KHV����{�?xg/ ��|��!vt�H]ۀ514�C�5-��Sמ3�H�d�����B�)������;�."&4����+��Zq����8��V�D�#洸@�"��%� r�����D�� p.˨�S#�z�W�\���"�{���2�&���O���/��,��~S��#Y�t�e��Z�>�+F.�E����r�KbZDw{��� ��`�t����E�e���ɂ� ���?�(l���5.��� �ў�*��Aވ���*�O2 ��.�9�*W7fU��[�P�a�7���}n�S\Y��u9����Q}e�*�Nh�u�ǨB���L��K�* �&�V윦Q��a��pq[��/�9�➳?R��+q�2 I�ӤH�*�}<7w;���uN*�l�7���rGJm��`�Ʉf��O"R��G\�L~���R��@�* �����U���jp�P��3��C֡СJQS ���,������2*5�u��[_�,�B7������1�TF�T;*%%V$D��W�kN�y�����J�P�@D4;� R#p%]9� `�8��a�0ņ��)uS ��iR�O���7��Q��Z����'d�z�Ciբ�jer `��@\������(蕯R*h��E���,�e�V���ܰ�TgB{���m���.�4}� `���u���s����liDpJ2��7��!�����<wV����`��bK��N��9�笳-�����l�B$D��j�6�Ɣs�1��<@j�C���=�2F��r�A��.~Eh�9ϝ�~z�1^��¬a����#�w��G3�p�X�zu�c��]�Fu˗�:�1EX����sk*~�2�zʄ�z�)ںu���ċ�'�M�/��ɵ��������ׅt��p�y�1�w(�Yo���e#��9� ���Ļ�sW�K� �¹ôY|F{4��_QS�k$KQ�Y��(�W�\�ՙ[yN���G2�F����a����Q��[��7IUr�� �6�����9�9냻ڬY�Yna�7*2�W�*O���LO�W8�?�B43�b�%�9���6p6���(F�'����n1F�(��!J4(i�F?o��ڙ߲�%�z��.�p���-혩�#�h���R�>Hr}��������Nf����?"�mh�bi&���`�������+K4!�w�U� ������������ӥ.Zuc-��F �ge?��3_����mHQ�V2:�C�:����Ȓå�eGG��<w'8c��\��C�|�������nRS?Gc2Na��m,�#�s\q{C[%0kͅ}�C��M ;��Y�D �����IOG'����������#'%�Xr�Ė1s�d3��(��=��DV*U�c ��T�y�Q�D����������r{���u͛C�E�a �o��ui�wFW��R��L�>���H-U�S�bd�W�g�7�J�nԧ�0*�cW;���S8""W����kI��U�v4�H�"�[���C'(�5�|mO�ʅ�#c���"Nr%�e�Z�bGN�[/MW�YxY�=�$2�o���A�ag_B�~�R� Us=W-��:�Q����G�<�&��ꔁ����X6)���[�~�!��~$�ti�-���[a|Qq:��h�o�C�Kx�Yb�\{\ �ݮ-�!��������u7~��DfJ�\Y����YM#�R|�����Ȍ�ھ�3�,�1%���O�`��FB(q�6NS��G���c)z!K���T��iy!���"_��;+���;��n9��I�w����̽�u#�㻥����S��H���͞+�������f!����9#X�⅓+ .`���@B��i^��5��{5�H{�sҭ��$?���_%p��M����B�}Z#<������OD���w����,��c��(fr�j]az��SC̓�1�v���Z�V�w������d�����R�/ ﹹ�g{X 0ܤ�(��+Y�"��R^ύp�*�4 �8 v�њ��l�^���[�_5���9Q���[�GwV��d�W�۲��uM~�x"��~���#W R蚤��3A�����`�&������ ܉t ���&��`=֬[�|�S�Y�+e�؝>���",��Ub/�<�� �^�]��Z�j�̵���K��ω��ޣ 0��"�XT��a�e弼���<�:�Urj����7H-�� �S�����c�]:Zt2 ,��9t�_�¿F�~���w{ux�H0�Un�K��5�[s�P�WGH-�S�ݟ1Dމ��H�-���9���{s`��b�>�Y�)YBt��R�����ҘZL�ܛ`7Q�+�5pj��j�V�ӑ�]��߷� ��q<� �4REz8�yC��g[�M�}d[o��l�>�p�5�I���R�F Ԅ�G"� �kа1絶�2�ю�3�����`�;4����I%�� 7�!dBM2 ),�*��Z=�8Z���������x���;���@si-s��ㄶ���V�J��A���yϋ��,���<����ύC���2��m��>w�7:����\�5�C%�)Z�\ Crg��%3f+N+E_k��խ��͘�n5.��1�ʻC_|0@�.8�������Fg���M~�پd{�SƢ*&[a2@�����{��o��J�ohT��{)�@$~n�
Static task
static1
Behavioral task
behavioral1
Sample
6ec2a7497a108851decf0497bee3dcef84a4dbcd43a699c531465a84f1412674.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6ec2a7497a108851decf0497bee3dcef84a4dbcd43a699c531465a84f1412674.exe
Resource
win10-20220812-en
General
-
Target
6ec2a7497a108851decf0497bee3dcef84a4dbcd43a699c531465a84f1412674
-
Size
2.6MB
-
MD5
bf599d1612d5de7ca8fdea16632a63b1
-
SHA1
80478e186dc8aaf482b9b197c651b8782e109a19
-
SHA256
6ec2a7497a108851decf0497bee3dcef84a4dbcd43a699c531465a84f1412674
-
SHA512
d0fabed7d489fdae53d538a842660280ab884ef3c051035018686f9cb989ab459dc7e663fc47d8d709a504ea0868050c4a44ce2e5fa5cbde7fe6e3e1ae16e187
-
SSDEEP
49152:/f5ogOEiHx51+56F16ogFaVN+we4Y28Fa+EQ7ujORpkLdZKMef6bL:/fKnxvhCoZV2pk4ujORpkLdUMemL
Malware Config
Signatures
Files
-
6ec2a7497a108851decf0497bee3dcef84a4dbcd43a699c531465a84f1412674.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 9.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pwkz Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE