H�'�/5��_ J(���cf�?E5�^)u�˹Y��6����؆�b�7�*�0:��<Ü�3C�*ר$ �� �r��b�����BV�6�I7�0[��)%�=��d�w��"�!}��퇲�,��)i�����'<9��zњ˘��5�*SYE�Wk.7io�gV^�s�e9�oإb|w���z����#%�1'����J�q�� ���9����f��YV�}42�����x<X#[��ބtԗ���V�."��;�4��~�Z�엤d�Z!I`�~�����3�����h��^WN�/1b^,��<P� �[R^�_XK��?���/����:(�����KR{�\J��C������'T�d���8�S�� `Ó=Y�h������w��|RV��v�Ќ��&~��=���ǣJt��s����z����8K}z�&�i������͇A=������tE�?��z5��ص��DNm�����ʸ�Ýw�E����鹻̾zJyuO�o\�3�o�� f����#n�ǚ�F���|c����/��w� ێeO�d�2?@�ځ���s��*���,f�S���eD~��������7���ۊP0�&9��ZKx5^/�U�0W�j�WG�JCmr�ԴFP��C���7R!�\����M��>J㌺�/�G�}ޏa�ꭤ�d���;�������]��unOpI1|�j�o���7��|衦�6�^�{�x/S���}���@Y ��/���Ыm�˃�����P�/8���BITu��^]G����?�:��Z�:oz${�)�@���W�!����3�i��<A+bJp�ظ�B����b�M�kJ~Yn�gZIZT����!,�GTZG"�@��~�Ϣ��V�m�����Kg��)�$7�����f��>5I�Zz��������� ���Qvjmz���}�����WC(��| M��/�+�ml,T7��Q�ؽ)k��e�."$�J���]� f���C�+`�7Ձ��,곖�g;� ���e�k�ϰ�2,<:�v�8�斪�,JM�J9oG�8_���'o��c����+�X��<�����z �O����?6ݔxꗳ��+�|eBBa����A��N N���e����ەL�ͷ[D}���<�~)���!��H��rޙA�4ʡ�p�&��()���R��6K���5�㧄�&<P�� �~�o&�ӠB�'�S��LAO�{L�(������cY�,]�6gD���cXf��dp瘺�I�E����dxv�*�y����.0�#�9a.��{�D2Z���LB��o���5�f$>X����@������ٮǗ�r�����]���{?�(�ج�;���>=O�?X�4� 6#��p|�k[�7/��W��l�?��N��`4�F� ��0W� �����!���@1��L?�4���<�$Wt*Ƹa߀3�v�t:^��l�$_ݖ������"�F�\/f�%��?������Y~|��H�v�W�]�Lj��1z/�n��ɥ\r+��K���� "J�Hg�dT�G9䒀���H �^�����A�^6no������Q�'Ypi�����K ����YX�Hб��ٟ�<lY��@^��!�Gi��B���!�b]���]�4d�CF!�����'�a;�����~��g�Uk�a��b�J��d��qϗz��\���hf,P��w��ѿ{�߷:�U/E��HR)FN��BS��w��n��ɡs顛�It@8iU`���ۜ�C&���N4~�U��l`� ؿ4��ҷ��0�rP���[�[�w ˢX���gy۲��[��p2n ���h߿���LJ8d[iֻw��������ϼ;���(�/��!����!�g(|�2�8�%��}'�*O��&FG)}�OZC;��*ܘ)�yw�/ ��%����I��!������_"s�8�V}�~P�Wo�м�_�L�)��S��s�/U5n�V��{�C".h">ZVt���ꢤ�:���ʝ�B$����֒�]�d��=C�f�]%�Y�X����D7}��-M���uD�o=Yy��{��4S[��=^���!ng�XU51�]�gj"��7k-R(������o� ��FXU|c�r� -��"���S}~Z8Ri���D-�L$-e��C�i~���[:NNZ���@0�8������f�랱�B���z6��ρ@L��^84#���5���&�i�K�u��䥎�"����4#�-~�����sRӬ��F�ƃj��4�x8�v_F� ���L)e��m����ʆ]F�]7܇H�@���d�O>B��1)V��? ��b�2�)��2j��Wf���=}��|4%��K�����*͙,wu�=�����`��a�M�!Y�w��1�mz'�ɩ����z�K�^�����N��fz�]\�9���H��h��p�|��B�{Ƣ�{��<�$��q��ʱ��E�8g��'i��27$K|�Ӵ xX 8j0�ǟ�F��ݍj?j����wK`����鍇��߬�J�����,:%2�L���e�T��A�ST |�gO������7�Կ�8���K�埥��j²=�����!�вR���4G}�~5a�@��i�I{u�.i�I�[qIdv�x��� �!T��,k-�yE$��=g�^�1��\sH�s��ɷpG$k5���Y7�gpc���7�z�jj0w�y�H�жC��}�]/C}A��`�$� ۛ����[:G)S�l��Mƫ0Q��D��y0TAE�����dɬ!����\ɿbMcO��-�S��D���ή�d�ܮ`��(�΅�n��QM)����L4%7#_��/硷�^���陣7���0�k��+����K۠/����ݱ��t9a�m͚r�}�����G/`ӽ��HW_�%�e�*?��G�P7P��I�3Bޏ� q^�+���NNLFM����PR- wM!ےu�Q���(LL�tE�U����G��!.�_�a��w��7k_i���hTt/c�:I�ͻ%W���"CJ��o; .����uX�_��US�d�|�Ue�����*we�x�p!A�-�eH�;�x��M��v��R*��}{U�|����`�w�P=�>�em���E7J�s���:znㅴ�U��B��*H�� ���O����b�?��*��Ss�ۑ�/ܮ�-y�7�^�v��&7;O�Mo�.��3Y&��D�&� �Y�^��_�a�o���Z�*i���sي0�`/_���p�ȾU���Sm��NҿA&<?G�jcw�� ���Y��ug����� �7���/����aW�s�;x���=g(�{�����rm��e��'y�<=����T��n�a�Kg� dd������̎��V�~X�'��f�4�����r��s��]٤�%��J[Z=lY��8��b?���=��$�p2���O�����7�ҩ�V(�Rr�8s�U��\�D������Sj����sw�ܨ�@�+�"�����Bc��qw�Ǹ���9�T<?�>��(kV��>8q�~�C�SSqD�@x� ��D�NBT%Y��,�k?��q���OwzP�#̼�,�Xn̬:z$��'1��l+�;��
Static task
static1
Behavioral task
behavioral1
Sample
e8b2b0611d310f51bfeaaf7e56d4c6c0687eccfa1401a59d42c42641b6c8d8c1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e8b2b0611d310f51bfeaaf7e56d4c6c0687eccfa1401a59d42c42641b6c8d8c1.exe
Resource
win10-20220812-en
General
-
Target
e8b2b0611d310f51bfeaaf7e56d4c6c0687eccfa1401a59d42c42641b6c8d8c1
-
Size
2.2MB
-
MD5
0d71a5083f54e393500b021990922bdf
-
SHA1
21369e757aa7bd6b249e578122ef1d5abcbb48e8
-
SHA256
e8b2b0611d310f51bfeaaf7e56d4c6c0687eccfa1401a59d42c42641b6c8d8c1
-
SHA512
6d20dc4dd298fae6f66fc672513ac80cc1a82b9861733201ad47be9e2d29b799d445d016e400fe3e4c38eada41cf7aa75866545492a381a472aa7ee21dbaad56
-
SSDEEP
49152:CM5A0BTcIzmmhqzsQcO0KySL/ekPOy4+ZHAcwpX4fmMipfGSu/KI:CMS0BwIaAjLwrtPOYH1wpoGA1/N
Malware Config
Signatures
Files
-
e8b2b0611d310f51bfeaaf7e56d4c6c0687eccfa1401a59d42c42641b6c8d8c1.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE