�2N�}��9}孠��s�N`/���/�<�O��[�K�ރ��V������e�n�0��F��R ��o�����AWI��*�en�\�;�����!)����v�>Ɓ6� �/u��j�O���� ���L�)��-_'eQ�����1������lJf|-��Aر-���r�X@o��[�~Ԧ��6����=î��D/@�Î~k��RL�������+MD�'V�oʭ��̩�ݛ�`n��VKx�h%b���k��%PW+Z=6����!F���emjz��{o ��Y5����<�[ ���k� ��p,�,��<����0"��?Q]b+� ��|n܁+ g�lm��h!����,��3�ִ��.]*�lc��������p�����]�}+4��b1�cYV ��ϱ� ��f��[�K�{K�)$��������S�e��T������ ��Q�F���洵Kc���~p{(et����N��? �;��(�^�`m�Tr����T\4FG��mQu�W� U��\:��Ip�=_~/e��z��=O ��u�e~=i� �ܙ�Z���;�3��e?yD6�%=�<���o@9U4�魔����=�q"a�������j5f8t��V��K[�O��a����h*��T�L��$Tk����.��3�1>\iiT�h�R+F������AP�rvݹ"�Hs�PA� ����||�R|��iO{��+�=�}��IV5�`�u�i?4�d������|��� 4�RV^R�]�Ί>��&2,=���xe��!�Y��3�B�b��K��7�/0\�t�6���1MO��d��F��yt�s d�?�y�`o��U4��%!��CV� $duL�F4ݼb����[�U� -_��-֖MY#'�h�<��P>�b�4��ZkL[�f��q���ERW��nr�Rh��W20���r|����{�gq�ENB���e���bĨIN�A(�#��;�����vv�˂���2����E ���L�4����g�W��E~��#��;�=�.;,V8}2��U�:�����3v��t�zT�A��i��f~�{��C���/�����{���D��C?����A6���\L�AG�z��Z��$�T�����f��58���^��_���Z��vA������o�ƖX���e�����ٗ�#rbt��� `+ǹX�uG�c������h�Q�\��2 �뿔���H�~��5��fg�L�?iVKu�J���(����L��i�Y������Q�����?5��M��aŸM��:>�-��>��ħ�����[���!%ъފRTnǕ����ǔ���&�eg�z��Y@�t�g��!��|���W�ǙhcWcX@�Ԧ��.i�C������EMIט��B}�uֹ�NϠ3� �I6�ZI���S�ڀ��p�CrH����"����Ez�c�'����3����2qt�W!�K�$��gS�~��q��3����?���K6���<�HᲠ��P0���h�����t�1#��j�_��VxV���o��}{<�}�~H���7�� _w�A�;�{Kv�),����b���Ѯ�&�c��`�iY^���u� �H^h���b9c"l�CYA\Itfbbm�0س��g�=��������M]P�?u�����D����߀�c7_Pb�t���У��Зٌ��-�)��?"�Oe�܁��(�����7;~���\�5xzi�մ�HIg �ޤtg�l��և�=p�Kk\��{y�O����ɬ��Q���z||L=���lr+����&J|zԾ@���`J�)�<�"��`V��ل5b�Bd>���(p����xk��n��Z�����0.ԏXz��^"�K�|�`�O#ݳE��c�'��<X����4��=��^�8Y-�a���$�'������,p�0 ��'���I��8��g���1���R���%M�2.S�KNm��ƴFQv.�I��$��H_o6��7m���p���H�;�� �����,�{����6�D% ,�o0��F�-Xn>7M�������^$�x6�J'"�B����^ɓ#�N �H�V"��ȁSEmq�gz����OGt� .Q�6���Ni��$���/�5��w]D���b��nR �Dty-[�߫�����QH�Ƶ��,Y�Wu��9��W�[,k���K���;7�B��'JQ�&���?��qT��F[��5t�]�G>g�p��U/Z�X5��}��e��ÃM���P[8[�3=�Q4�&\��o�ZƔ�̂̂Dⓒ�]�+do�U.�U&S�S�+��pb����tm��Ѱ�R�K���N���B$S%3S'e�T�f�R!!6i�꾽E{�9M�P�h����a��N�+�7@|(���n���� ]/��d�?�����b�2-Fr6�͢����8��T��9b�A���;M�d{f�q�0���ݷ��]���M�t�$ւ����4��Fu����?�Խtp� �\�n�\�$.'N���`*���C�� Τ"j�N�d�0�}��7��+�G<��I�s���#R���_ƀ8��EP;� �O>��]��~oI��Khy�c�.�4�@jЯ�@��+�ЄL��i�a�1� ���^������« ���hY���(e`rN�OiW�_��LZhK��лn��:+?Hl,p�XU�G��'��B�-kI�6�%S��Q�D� yŘ��V� �@���^�Be �� S���Cճ5�FRlV������ĎFa�ḯ�K�:���h�#qD��g�{�����O^.�2�y5�[��FN�D�jOKn�AZD�Aj��hz�1�J�s����xd�\�M��Y��']��]� IZ�i@I+�4�ʹ��]�A�%\ )�C�Zc���}7�+J*S����c^c�ҷ�O��2�����G��?II�E�P�%F^���$�qYǝuFe4�B����]x>`�B5��p��(ւ����}e|��fh�|O;�/Ė�w����lj�3tJ:�\0��l ��O�5��h����ө��E�]��N��k"�[�:_ܚ$y�w�;�����1Z��o.p��*��uJ�|x���H@%iE.a�6^ /d:�m"K�S�;�ia�p�K_�M'�H�Q8�S�nd�<��4h� b^����٭~��H!�WĊ��^��]��+OK�ײ<�A��9yM㼸�����f�� s�U�N�;�e��4�������r�����Y�@Rlx�����%��猪a�b��:}P� )_b�z��5P�Hn Y�83�օ ���JK+c���ے�����&KW�s�t��-%P������U(�Lי���d�����PMG��1�)�"��;ۋ��� ㉵<q�����0�o�!��R��g=�� q���V���Y�b���]٧�#� x0���z8�9 �YͰ�|X���bG�R����uw�lq��� �&e!k1���V�p�����@�6�G�%3�_! (ϔ�'[�9�9$-��(��c�C!����} �a�u�S�@Zp��]�_2�)�彲��TP�t;J9@ ��P��5�+�N;����Ci[�bY�c�8'��p�����K�+6���0ֽ�/��|��˿��J��&l,�e��l5����j܊��iFʀ��ے$�@%�t�}9>�>t�S��x���n��1Y�*��
Static task
static1
Behavioral task
behavioral1
Sample
29441808274223264244.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
29441808274223264244.exe
Resource
win10v2004-20220812-en
General
-
Target
29441808274223264244.bin
-
Size
2.7MB
-
MD5
46b2266d1f573c4c1565db2c8de3a2f3
-
SHA1
bb646a86a93308700492acc7c974bef022823d82
-
SHA256
c3ce8e8ba5c04ab0cdb8707b50ef1ba2db4fe009d2fbae9d0985cac7a3cf1f93
-
SHA512
29a6599733152105721b189303d476853e4a9700065bb700f8c9bc1f0284490587eb3aea9ae69f2fcfd984e1e80bfd676ff0ecfce2fe91fc8236d0e32fc25afa
-
SSDEEP
49152:3mIgnIzl08ShkMBUPPG/17k3h6aePP0YB5ugJjnSIbJoIc1iffRuihOdO:2PmHuZaPG/1YRK0EE3Qc1ifZ6
Malware Config
Signatures
Files
-
29441808274223264244.bin.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 9.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pwkz Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE