/��y���`���&���zGvX�'�e��SъzW�*9�0��-_3����<-�m�����7\�Fܢ��\2�H)))<d���X��6f=����j�_đ��M/W1�)��a��k�e�������Ӫ�p �s�h�W[bl��j�"�ɀ; 6kh�{'[���5H^+Z"��a��geo п{Ȍ^��3�!2P壶���|ò�px�Y3��B�u��l�z4@�V݅a~+bSɿ��PX�A��K�j��!ʹ��w�$��0��7&��7���U%F����S�"h|)"�*���?���n��$&���p�� ��,��K���eG7����X���-J��'�Yr����~uv�44R ����ŖZ�m�ȩ�ʱn:i&Rx��rF��Du�lD�}��Z�f�OŌ���r�6K���[WZa+��V�S$��X��?����Δ����0����mЖ�J̓a�{��������s�h=*�Fb��]p�5{�&�aL{C,�i`͌�-�A~�7\�����C��K���=��>�$7��}�ѱbl�7p=7��]*�H��x�O����Y?�s![xBT��=pͱ,w��$h+���%���j��-�>Sᝎh���h��j�)��ۃ6��'bN̠���v�a�i^x<��R4д/�6 �Z6(��N쬵���Jx���U1ZCF��v"���1߰B�y{\�=��F��.ؾ��Z^m��B��%��F)�C�-��c����/l,�l���L k6j������k���~������*_C����S!|!�i��C�5k:�n��Pς�S!�9�͟��F��@�<��L����3V"H���>/e��ˉn�kL�IU��ΨU`�u|���/'��hU�x>���H��[C)`�G1��Z]2��f���������[����&c坌|��^��Q���k��{�Q����6�d�����)��og$r�����!�5pJ�+n+]J%Hu�r� �%&_�!D~X"�������cZF�\z�`�ꜳ���?v���ɕ�����=`"&��un �V`��H3,&�����)���'d����Z�h�z9�xp�(1b����8#S��q���۟�k>8�P]�R��r�kU��f�=�Z]�x_TE�㝊��a�'U�d��x9�&�����is���] ��nAAiZ�+I$2ĚLv�~vS"�&� �-EDD{h����\;>os +;�OV �v~z��Ñ9��˧���E�u2���V��q��¦(�X�*�[-}=[�=��IN����{$m���B������g��==[�q��(�����v�����y��X���A���9�z�N�a��bG�p?�c�szkzb!��Y�[פ���c8��{p��L�����θC� ,�z_g�}^�.`òHUD�<݆�:�6�#�C_��ӿ#���3p�W�j�8p.9�j�<�J�L[���G<�Yo�����]��\IT�)��ˇ~ �h+.A�A0����Hp�Ҫq8_n\�ncr�M�Egx�v-������Ecm�R���r[�B��q_��;���S�%���������?.N.C��@�Z=��B�����ܿ+��r�r��q ss`�w+@e��jߒčiƻ����C���1�ϳХ��;��<>�����$���)l�H��ڵi��L�9����U����ι�8e�ֵ�I���.^/�71eG��r"?������w�@oD9� �-{��A"������V�-]����t�Z�v����0I����U7��� @ə�1�v���������Š��;�������e���RۧLrK+� ��(6��Xڟ���Sb � 9�o�C]iC�\�J����0ƭ^/.N���Dki��ȨP��0�t¾r>�Cc5$�3%�)�>���h��Ad��jP쬎cC��M\��0���s��ܩo�ß2ϵ��6-���N(7��3lJ^vܽ���@aD��j���2��'q���`����$��o�����fHW������6!�i���$��a��L��*O2q M����1�v�yq ��"{����_�� B�$|Wz��fOwV���Q>�Ʉ�0A��h0�,��y�s\�����f.��TX��Àm�y��P�mx�B��6�0����=�s+d�&'[ӫ�؝6��P���gp�'��=�����-�e�qC0r ������g��u�:p��z�ډo����dM�����?5�H�s��J{7�OQ� ���� }�0�w���R���;���"�jSg��Vt��O?�e�UcT@- ��48��@�->�uwT���1~53�]�*r@�Yǚ_'���n��'�HU ����?�jc<L*��ZOz�9Ћ���8��"����ծ_�/X�%��g� ����e��� � ��t6���s�b� ��{�CH��Q�2��S��p��}e!R*EU��>%18��̳���y%Ye d����F��D\c��Ѡ���&1i��r��J,-tY}nꛦy���pmySf�Rpl������z_��C֤ pQ;�$W��LI�۬�v��8�"�Y�`3S6Y/R2M&f!j��d����5���6ba��\���q\_�dS���JSɹ�3��VV���S��Ū �:�ð��,�O�ʖyܣ|)cr�����b�:�$}��om��d���&2�g?ĭ(&v�5���7�~�� z1 E���k�y�qq��gTQtl�qa�-�S{���ҏ� �Fc#�fW�tFfW���7ɷ�'�{yZ�J�I�&�7A��$�R?Aa��U���c�ssg��T�-��7&�R���Gt_�F� %0_R5�Y([v���U�4�L�,9I���)ϳ��f��g�ݷ�~��j�7��U�����ܠ^ ag��G�)��z�K~�x���Fn�V�� �bBf_�QT|o�a@�� ��7��.��W�%��˯��H����S�ρ���(Kd�)r�M�hz�,"fK� �¦f��%Q:�G ���7����þyJ*R.�+$F��&�1�o��������}�/���{�1��J�sƈ�㜞�Q����e����'4Z��6i��F�Pm �X3=9Tܒ@��f%�58��3���+ 7r�v��L�w~˩�^���Ϟ�۫��t�L�>T߲�G��/x�<��)0�����$��G>.�n��A �z��V��U-Y�2��ԧW��dӐ@��lp(�bME���� �!����ġ��AUa�,X{�E|Uk���)��s�T���k��/Q͑��&U��6�r�,��TI<�C��/��
Static task
static1
Behavioral task
behavioral1
Sample
040a5d6cc3d671fa01d0b1e0d6ba625cea80d95174ec18e251f492f3e3583563.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
040a5d6cc3d671fa01d0b1e0d6ba625cea80d95174ec18e251f492f3e3583563.exe
Resource
win10-20220812-en
General
-
Target
040a5d6cc3d671fa01d0b1e0d6ba625cea80d95174ec18e251f492f3e3583563
-
Size
2.2MB
-
MD5
3e3aa16db634215793db4ae1020e9339
-
SHA1
e252bd73777b89481f0a9b474a129a4e67d0c867
-
SHA256
040a5d6cc3d671fa01d0b1e0d6ba625cea80d95174ec18e251f492f3e3583563
-
SHA512
540c67049d516bf1276b9bafb267030b71f7844be12e2b1cf8f56d79ff9653ca0dee727d7c9f4f9b34085c4ab02711ec2ecb9ec4ec031a5cd284f9812391ad0b
-
SSDEEP
49152:yHXH3tMnQ2KC2sl/TGN9cZSs4gD/LA3VYdINUWy3gCM:yHtMnQ2V7SiCc3dINUDg
Malware Config
Signatures
Files
-
040a5d6cc3d671fa01d0b1e0d6ba625cea80d95174ec18e251f492f3e3583563.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 7.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE