2H2�Z�6��)s�<��[J��>R��1����`�<t �4�z�ȽJ{}Wa�}GTCs���Z=�����/�S[⨣��ݣ�S�sܮ³�7Sl�k�*�/�8�%&������1M~JƸ��Lyf��!}�X�蓟h�*c ��c�AM�Ď7v$�x�Q�L�е���孃 �<����~�J���6�Y:��YW�m��5um]S�H����L�FNu|ouD��?O8W�" F �+/�������P/�rZ���8P�:�[��l?(�#�v����'Ŀ�OI�|����9U���-;z)`���W9��1Y?���\��>��o_ 6]��j������+)�7Ʌ��C�6���0v�B,Sm������Ȳl�"8�砕_iihv��^�:mnl��j}nH��(��ZN����k.e�O��&_��|[��F�T���YL�\�:�^z���*_Ȅ������5�6��'#�Y�s��O�98�t�tu��z8�1�� j�39κ���s����e���_V�������wȖ�E.���Ű�����!��]�t�b��{��Ev9+C/$�!�<�f�%5������ E� �7C�k��]�L�N/��~�Z��֣�mJ��kJ��҉"XR��K[L#5�����g��v���������|������OeP���-�j1�nr��5�?����i�FmО�v&���/����u�kU������1�Vb��1�b���!�)i@l?d���;�Z�)���� �L�Z�+I�8�m�,�D5��g�� L��_�����cWk-o���h���_<-3P8F�z;��LN�>����[U#�;:�)G~��B������@�ȭ24���f�Q Q�-�$�R�Ƙ����Mw#͂ʻ��x����״5��;�����_�<� _I�gdžy�n�j��-Q��8��������I�J�i!2�%��:e��r��xeN|�2]��/2ccJC�\O�?����RF�16��7'[ƓE�ٵIMv覊I��2��_��\؊"��_JG .�+�y=�&��J��F��Y%��?����W�_����Z��p�&X'X��v|C4 ]G%/�X��9-z��k�����"�hwK\��@�� �IL���y����[������������p�/��!��Fk�^�2A��� �����usq�y�������^Ň˲D�+@W�@���T��l�n��+�c+���ds}5i�K�=>o�W�,�����Zh��'�mfV�еkBɠ�9`�뉖2�?_g�l0&��5������D�� �[�cl���<;����� h�a��3��F8ϣG���)f�9�I��� G �߉�Z�9��ݑJ���̎\�vH�Yl��@�c��|�E`�p�8�����'��3�jr,?�M����Aip�G�LBNp��/erY��♏�(�эn�`@�ܨ"�Q;��OgL��L���-1���X=�8�����碢�I &���M�`^ �����ɦ�'� �8�f����*�4� �O��'zt�PRM�`�={TjFU��a�� 0p��x :�u���S�� ��-\8�#�������m�3����mL�u�?"��c�}��m,G'�a+iĬ$̐2!n~Q��S#IUQ���d���)�Aw*�mB�M+KU.�����XV2���K8e���Ί6�]� �.�-WP���>L�P�]�B4���K�)�x�^F���V�6|C+"t�n�������k�Uc{�*�`î�D���5Q��j2{���~�#�g�*�uO,�>l�Ue�bt���|�]��>`�]����᾿���NI�����c,�\��Vs'�M'9�dPcP]X ��Tj6�G`UF�q+�=��2[��� ��,�(�uL�G;��ģL�Xf�)=�V�� ޅ�F�M҂�/ģ�;��ݼ`�@��5�P��"wn�o �آ��]��0*���Â[�eU���p6A��I���<j��l�A�UD��+v�S�nRe8v�H�[B#U�m���rUYiÔ�E{�6�,�ƺ� �mu���0���Fi=���k$�=ɓkn ��#N������ ��ùz����+/�M�#���Z�K���s���=�۹�Dl!�ܥ )j#�5�o#��FV_��hC��I���O��� �V�����~)2s����J�)J�����M���Im>��b�^ *EU9�R3���w�����R�~<��+;��mOo�h�4x8�D�0ח'G��]i��ٲ��5ωWJ�ԑuK>p�f3�߿���� �����h���J�z� �������v�jX�)p-�� ?D�֣�(j��y�8A�wj�]1H��f�{����ib}�D��Z������,� ��'c�2!z�&s���8�#��?��d���G��aJ��^N���8̝F�]O(W^����eIV8#&u�84Mh@���>�:��W�net���ݤ��Z���*����3��$���F�41^�#��r��m1�XK�̦ώ~̃�Hʄ�aCЛ=t�-�MRI��R����t�����B0�N��x���������θ!}A�X��q*C��������ԇ>�����0�7�iN���.|g$i�4 柨���4��|�7�6��V.���A�[)�M�2�ǰ�E*��31�Q�KL�Ƚ��7�=_��t�@Ox����iz�B7� � h�&g"{��+�����xBԜ�T�3����%2�?^S<�Z��i�8�[��[z rJ��H��eo�Sn��}^��@B���e�( ��鼖4eI~R~�Bg��X��e�5�H�������芢b<?�R`�P���{ ,͗5�s O�2_���X�����;�b�ɻiհ�P�"��o���6)9%?�2r����ۼ�k����#,�H˅�Ɉ�E�l�p����6W��W�Ֆ��: �|��8������$js��V�~�/W�8G;kvn��oY���``��9��ɐ �.DC��&6'�ek�DW��3�*r%a�Q�H����F�G�`Ԩ��� o�5���L�)h�HVCD GOr���ȑ�$w�;}�7oǁ��P+����8��x���W[)���Ԙw��G�3�w����K# YTl �xV�!�D �Ԅ�����9?�j�|d&�h���<R$4*cF���2^G�17ڂD�V�sv���Y2L�O���1��zo,=�4��11/��:�Β���)%�3`q��(��s�n#T̩y
Static task
static1
Behavioral task
behavioral1
Sample
40055385413647326168.bin.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
40055385413647326168.bin.exe
Resource
win10v2004-20220812-en
General
-
Target
40055385413647326168.bin.exe
-
Size
2.7MB
-
MD5
d05d2f736a39f54a64d7d568688f0727
-
SHA1
a59c827b6f568575a904413000ddb5ce6996710b
-
SHA256
6f52104eb251923b1c163c2f74ee8e0aaa3c7f2bf659784e84172ec54c1c55a8
-
SHA512
04c3ff4004f44c8742b1b18760ff2ca5696e1a8139f584169446daba795bb30cf9f849bfec9a76c7244209ed875fddd754c4396b4ec90b02bf91a9fc9e0bfd5a
-
SSDEEP
49152:fo3vI/bV/jKruvG7kNpwE3s4bM00X+pWT5NPgvhbPPL/yAF9rdKh/Z5bTeEIcTZG:ivgJ7Xpp3QupWT59gvh7WAFOB5/eETT2
Malware Config
Signatures
Files
-
40055385413647326168.bin.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 9.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pwkz Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE