@a�z��~�3������X�B2ڝ�[r�a(������u����q0@���?�u���~ ���%����g�'y?ǥO��C����o� ���h�?4/Q`$GeΧ2�6��?)�^_V��F+a���E� +�l����H{zX8�$�7�dd��� ���߳����eR�h�rM�*˴����>�:�Z���*�6�Ypw-$J@��O�=���S��ɴbG�F1d�[=�� ��,}s�ԛʊ��gC��X [s�9�{�nW3��$�mm���>}-��oR9J�U�k���&n:�,�d�����_��0����<�q��F�p��4l�v�Zz�UDeS\Zá� ���V|����FE{]��"d������@JXO��n�sR1�k#7J܄�%����Һq\�;Izx��CoL� w\��c�1Nj �Z� ʈ?x.LY@����gܬ���*�EEz����y|�x��EZ�G�Wڤ����� ��3�.UV�����O�N���R�?��a_"���#D,�h)�飨w$�_$��&,q{]j��k�=��B4���D�Qg �^����n6�U�Րv��X������J���G�2;VH �\Y,Lv*��=|���P{i�c�b�L�Å����R��"�1g�<�&6���� �תv����̦�x��P��jC����v&m����#*���)j�4�TjP�fg�2�IӮ����(������N�nh���*�4r�\�6�#Ht��x�o\�Z�\�������p>2�aq�/�_�<��k���'���yb[6�)M�U� �A�"�>9]a+�Ѥ*$�L6%���]��'�����1��-��Y-lxȮ�O�ǰQn�=\Tb�����m��J���� ?G�.���q��5��+����a+�8��A��i�bo��px�FIK�BHίpS $I:���ay]}'E�m�R��Jm�>�[�S���~ΪW�Ea�FS7����RӇ���;�Ҟ!X���2}N(���sJ?����� Q�D߂9ڀ�0��V�ů$�����}����v������R��Uؘ�C����1V��+H��C�^Mt������/v��/�%o��R�q5n�j��+1�ӣ��u��`�E��7� ����%%*�Q�Jbj�&h K� U���??����B��PD+��Ť��n�(��ab� ?��џ�b3�R�0���jȿB������O2�u�3� ���b� ��Y�n3�{ M�=¶�m��͋`hWq'GlY],�� �c��oj�N}�K�m� e�y'��z��� #7Q��z��^1����ჹZ��Gq��"��^)��Ӽ@X ��pJ�%��ւdtŝ�?@��Gݛ�et ��[���7v��ţ���/�������M3����I���/J�U�h{U����.������9�!�"�]Z��wDfKF�fƅ/=*����т�X빑���CHT�h��<�M��3[�I�JP���\�^�w_�<��Bn�屻����=쌟��ƍS�Qy+�,�t�YrWz��D�8��w��I�dx8����n�v*� �#�ܛx�Ev���Dw�'��;\�h�Gv��鿅���[Z����:^O�1<@^��Ȓ.�-���\�P����%�}x����ʄ��ɑ?}���O)�]1�;��t)L���B��%1`��N�6n*�^����9fK,ﰰ��kC��F9���et�)�X�N�R��%�1���g�ھ6ƨR�a~H"_�;,+��i�g\����<���RF5�y��q�T��%e���-y�� �>��Ƭ�J���p��?+^������wW�0�1�'�܀�D?����<��0g��1�.��W����`M�����iN��/3�ܤKH^���wC��{�{�2�B;u�ۜ*��X�t�͒z�n B��l� ������(9���v�A\�������y�GCƦ��B�&zXt���`����F������{��G$�ܾs_�����7�[�Ta�����$p�j��{�+̄Tּ�1�DŽt� ����#HvT�&n}���P��Z��+����䨆����x*��r�|�'��I����o�I&Y\�0����J1�[6��CC懥E��"�_����rp\��4}���H�u�ƑK�TB���j�)Le����l��0��.B7�.��������%3S�}+�UBYx�:���TK�t��W ���)=f�[�=]BR���"7G�@YUe���I+���r�"�Iƹ��I���Z��_QF�ݘ+;�|�Gk����0�zO5#���HnT����!�����g��w|F���Ͻx��Y^ ���4+^%��.Yi߈~��$j��sK���:�XK��A�m�T���=�dD�9*�6�U�x"�p��>�����ڒ��� ��+ �k8)p��� ��a���˶af�A%�Db��*^������pv�|8�=O�,����)�c����{ CT�x �`�����r��! ƍ1x��9:�E)��Gԩ�Ty|)bx��׃���fm�,y; ��ʬ���/�U�Dݤü68~��DXH�w�� �����P+\�A��B0�A�������m5ޱW�0��K�'�6/��Ϣ�2n���s������S��u�ތ�SKO��c����7Q�g��Z�`~��d�ˣ�iOPՊǷF r�����H�z�W���p�~t�x��V���6/|O��2������t"�ϑ��x�I]�-<G�~�+�xk�k�|窵A���m�6��w��C`A >��c]Y�b���/��s9���0�у�G�LT����i�a�*復����)��Kj��3��Qk�r�L�����j����r�y[��)A�L@e�g5�[��䒷G������<�Z�VK�(�����l3O"�S}����5�!�|�a�&R��Q��έ.ty�8��>�S1���F#�粁�q��awG9�"��8�$1��\�^(��!��k�s�'C�����$��e��}"�AtqOW�R����2R v`�������W�e-����h��l�L: �lW���G��K�����k��Z��Éɑ2A8N�Ϻ�I;�����'f̋!��'�}`���`�E1<}�K����YF�F�o+8�T�!���1q,t�l�1��j��Ph���`(�Q2J�b,�o�9�A:��:�adH�I��5��k�R �ʌ)IȁL(x��3.�a��;��t�8�1S���z���������nO4�����PB��il�~_# �(M��V��Հ��t5��J�`���Tif�ZF �b��3�7���} :�M#�>v3ߘ�;�:��M��%�=�%��>�g4��w�����h��[Ĺ_�hT�^M�7<.���Dh�Q ��K���{�L�@8C�jK�vc`�n���C�"� }�1��{��R(o�eى����';�db��:#�y�����,����7�n%D��G���� OA\�ކ'b5��6n��߅$���#��8�Ygٵ�� ��'�� �G�<���xaFU��wؐ���we���m'o?X�^�KI����b���7I�3X���ƅMQPc���0��kp��9�+[-�&�� r.�?�S�e��Tsg_�n'���������ݻx�,�߂8��u��p�b)Ȕu��>����������F���Y⇫�+�9� X2��/��c�}i�.�«j6�_�^*�9��e�����GZ���@©�N�}�ê�sV�W
Static task
static1
Behavioral task
behavioral1
Sample
01526141c27f05c0534286a37b8bb78ba35b53182c3bb46ef9e7186d5253a753.exe
Resource
win7-20220901-en
General
-
Target
01526141c27f05c0534286a37b8bb78ba35b53182c3bb46ef9e7186d5253a753
-
Size
5.8MB
-
MD5
db1c84a70f09f86c8b7f0e877ae821e3
-
SHA1
8b628d2c16054fd867eadc652fff39bc9b5da28c
-
SHA256
01526141c27f05c0534286a37b8bb78ba35b53182c3bb46ef9e7186d5253a753
-
SHA512
3de70175761269ad3222147fbf95a093924ba8406f4c19d27259ef0271c4ab729500ac7c7ee6bf4004e48ab2a9507dda21e2e063f740b95b0333baf6e773b8bd
-
SSDEEP
98304:EmiSm3Ow5FrLT3uRQZzunPxfcG2apTVDFjoQEKd0DwOVXi20QmXjig8amQl/k+sJ:EmpwnrLToiuJ0G2Ua3bXJHmXjipamA/q
Malware Config
Signatures
Files
-
01526141c27f05c0534286a37b8bb78ba35b53182c3bb46ef9e7186d5253a753.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 440KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 353KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 194KB - Virtual size: 19.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.civa Size: 5.1MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE