��owГذU�Y�CW[I/�;�c_at]5P�[k ,X,΄ʔ���� =�z�c]�]��!�ar�UTyq��x�w3�TW`W͇Y�g�Le�O�/A6^7L� d�^�Ek�G��%���:��h����ӡ��s]�Ka�7��ۛ����6%��O8,i�p����00.�}}W��x.��F�'��_"�Ln���w�(�,8ܯ�1�Nl.����?�t��ښ�uP��7��uj*��mݐs��By8dAˣ#��Ǽ��ʼ���+Γy�'������*^W��J����Y�E� �\�� f"�b���%q����P���"�T�މ:�>�d%�R4�E��Ё�"��|���x;�x��a����d���(A�hg��X�� ��q+��%�օ���ɰ���L����Or��M�lX��kr�ќK���Eݘ�bs�n��L5�6�̛ϱ�ID��1��w���6��3R���^�)�t�M#�q�pZQ�wޕ7�t�d:��>�@[�i*q�e�p�tb�xe?�֦����Ԟ�5��7ۊ����a5�3����{"��C���BPj��#g`�ٓI�ĒU�a����m2� ����]4�T�}XN��gK FR|� ���Ef"���C�/ Q�/�BVغ�`Zlq�)��Q��N$Ì�>d��C�>����'�[<�.�"�P�>b��e>p�8��R�9{x�tON֝�e7�2����%+tr���!�����M+�㌯�^�m;�;:ZA��<��ZB�kGr�-�%�E![�G���2�ÚJ7�0�v�f�m�a=;��-i��z��s��l�%� @ʿ<%fH��E�ߡ�0*��&}��.Hxۚ��[qyo����4}:%��cn�);�}� �<M�>>c;?��T���k�1ؽ}�������XR��tɉ�j��P��^��� U7Tx�d�9e��G�ǟ,� ���H�����^�ݿ���#�nPU���n�Vx��!0����S|��.ꊫd��P;�,d!^��I��y]�S���.X :���a�������ygrM���m�슙:E�h�K���E���s�Ӈ�V<�a\��f"�}�r}@�`:�%�vhZ�@�oh����=�I�R�� Jع�ۅ�}ȁȈ�[��2�S�J�E�=?7Q����l�#��(� OQ�?�|Zפ�A,��E$�i2_i�-R)�0�=̵�>ja� EMɧJ�'b�8"[�����w��b�O/.L�~����my�k7o�͙>p7�4�|���5,�������c��y��|���'����Z��5�����/b��ۤix*���^���5Z'i{�yB�l?�v�^p����R�c��!�!��l�|��t0WA��+�ϭ���&�א�Zš�$Ћ?�Fucݭ��������&u�x�� ro'E)����s���b�`@Dmt¼�|�� z�D8��\��Z�������e(3�ȡ�0��!C���[�AV�����aHc��]��=7���a�&#;�3�f6h�����.b]���B�"��q��4N������d�����X�@��O�|i5D�(~Ϳ� �O��|�*β5~��HM����o���"<�Eć<qڷ��֓m%�`EV�[:�K0���ȫyO�Z�8������=��%P���}�`� W���:l(�������s:z�����)r����JhQDvs�0��*���pkX�x ]S=)f�N�f\�B�u���GD�L�,��xJ� Y��O�C(�9ـ���:Ě 9.�fX"�AD�G�E y��f�x~�?�Ǟ02�g�z��|Cmd��`��yY�=��mܱ�����z�n��7.e6�{�c=��Jn�.���DE�bV�>�����t�� p��kBģ9���v8�Q'U ��u��Eq�şU��.���[/ �'Ǒ.�ɹ�uō�C�-��{��p'er�������m�����Z���=�Ua��{��e�Rυ�&n_�� �����_L� ;���?��>���@�d_���}o3s$���̓���$H�`�g�����[n�����@":�s�F�n�z[��Z��[�1:��b��'��fi/���c�H�N��ȨP^�]�9%��p�|_ܽ����^��k�!��V E�YD6��X�E�����~�&�R/�.2�܊�͕oC��ݫ�e�sP� ���wH�����;zU�p� /�7���d8r0�i��pȹ����h[��ch���1��ڣ������x?��qr�HoV�+r�vp��(k^��+�`B�!�����?���{�H��X�{�O�kg�,?pJ�Lý0����pxI�H]>h���C��C��T��T`����IUyF�%�$�oi���(��o���ۯ���R��#�-]\�NǠۜS'���"��Ū�e������n����B��M��Ec��0{8J�p��R?��I�zs��5��ͤ~�k-�ҝ�4A���Q@�����4ˁ}Iy����'��g��"�6N�E蟺��%d�^V��_V����P-�+v��d�ȭ�1P������X�ޣ!�l���kGS��A��>\�8I�(6����'�iJR���hFZ���p ��=�9M�#m���~xtCv���xxp�b���j���;@�\�0��Q�����od���G��ͣ>���E�Ǹ��Y|�z�:�9l+�^�g�ȁ=T�M�Z��Y���Uh����YEm}���y�������}hB<�8�w"rpP�;*8��-�קٱm"Q�&�K����cZH��'%j}���]e���[��,���s+X=�+k�Aő���u�Pm"��a���g�$���������pH�dO��)� ��_}@�P�)R�K����_,U��cЫ�-d}U�k����G6V�Ӫ,R�N�>�P����0�ji� 3X��!�V��9���Po��ȵ#\��uw��b��t�&�M�^�m�oP ����Y�'-l����㗊���Z@<��.�)��4[�� o�8Yd�Nz/�+���W�w�;9�[����d�$s��gpˠ� β ��������I�F���V�6PJ:;MAA�S,��}#i�����>A�JM��O����;0�a��5�'&��=���C�eg��g<�������D-4G�������|�*��� �p�+xa8�� ���m0��o*v����D"�w�)s$P�W�D�~[=�X�*Q J�ʜX���|,�,�}\@���~뇧���~4��_�b�s���@:��t?_{H9��z��W��~��˨xRm�i3�O��G�ϑ{֜ �D���?���n6���
Static task
static1
Behavioral task
behavioral1
Sample
e0b7c23920e0dbb946862fbbbdd55bf2fd400e654c352d7e5d46b250fbfc20d6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e0b7c23920e0dbb946862fbbbdd55bf2fd400e654c352d7e5d46b250fbfc20d6.exe
Resource
win10-20220812-en
General
-
Target
e0b7c23920e0dbb946862fbbbdd55bf2fd400e654c352d7e5d46b250fbfc20d6
-
Size
2.0MB
-
MD5
4b2f52a5a9d6f4fbe5839cdeba0780fb
-
SHA1
eae2e0e28d503d2add491d00105e5ea72606aeb8
-
SHA256
e0b7c23920e0dbb946862fbbbdd55bf2fd400e654c352d7e5d46b250fbfc20d6
-
SHA512
384490a7c9dcaf3139f5cc9e253eb914dec1a1c15b860ad53322082118a36727bfb9f267fb6709410f93b8c113ec52c4ad287882b1abef5b720e1952eeced28c
-
SSDEEP
49152:eBKnLQEGjYIDTI2ePP4Qudz7XxlhcJj9NX9qCWpCS:eBvjYIPI2evudhlGJo9pN
Malware Config
Signatures
Files
-
e0b7c23920e0dbb946862fbbbdd55bf2fd400e654c352d7e5d46b250fbfc20d6.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 7.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE