ڽ������=�5o�K��l�p��7���o�jø�߂������NMd�r���3�2e�E�:<D`��z�X�IhY�LsW��ۖ�KRà���������i����bg�}s,x�)��F|��6k��R�� r�盅�I.c'}�]HXZ�.�����A�T�^��J�_�3+��qG��3�r�з�O�|t�Ԑ�v���,dq k�v��W�<#�t��Р��"�#�BV���W���f-#N Ju�FU�!��K�U��!�������`:ݸ��$�i@����sy�_ǝ������5�nr�~q0�6Mc� ���"��~L��l��#������g�!5n��xj:�Z����@[<a�%�������-�}EW �l~F"�I�%��T �?����\0]��([�-�j\��?�����K~��d� xp_َ�g�;!N]u�i�H�etJ-6������ER�ԥ�a�0i9�'�H5%,3���1��fB���뿣�s�"�t�X����V�E���T�D�j���ښB�&�r�� �9�a�4w)H�<��`G)"s�vS��.���f4:f�f��Q���~�7�ǣ��]>_r��N�#�`/~ZX�v��-�2꧱��8'1A����'7�7�`� P [)�s����{PN;��N�]-�;;6nʐ��# �ung�D�H6�ޡ���8��RΏn��1Fp�FɋT�Ŵqk�������l�F4�q����]����!���=)�8���vP�cb�c�e�ݠcz��i��-yo���ާ�q�l&�.�V��f*��pr�s2`U�P#��L�Aavti�(T�@�S?a�-v�I� ��v��Drǵ;�;�2 ۦ,m9���^0�N9��%�;���>y$&�)BJ@;Ѹ~<�+Wa8Arf.�Qp��+%����LxW������a�8�dNP��|��S���������=������i��l�{P �����F�oW/��NJb{�Ɋ�}��|�H�]z1�+u\>j��ai��c��/��(�ӫo\yz��f2 G^��� ��J(op�Yp�<����?�~Lv&�?�f� }I�ܚN�ss��ʯ�X�����T� ���iö!"��~���� Ɩ�G�܀��ϓ�F`��W���? ��s�ܞ0lUQ�u�w���b�p�����\т�� ��m�&��H� =���[�t�s�Q��>��2��g�� V��QCs�B��� �^�^z���kF�5�G�P@V�=�UQ����&�z��!-�7�e�x�4%R�* ⡧��s��T����u���C����c�/÷�^v`}��.�����L�8ꦐk߸�E��p}{m���/��$;%9�95��h��Ogʣ�b$�,�,ܵ5G|�����oK�u��4m�ז j����Wԑ�z=A|�[l�2!A��K)R�Hb�*�-Y[��3l����0t��9]>5M���[�G�C�$�D��k��.Zc.ܒ�l���g �F�צAj�߳F�~).c0�JCu���?Xm�gNz �bP�'��K���>�OA�3^,����̩��4�����>mHM��o�NcynZ��pV�}�V#gŞp�U��c�Ф�C%���-�"���L�M�k�����JI��I��ػ|����k����9���#v'����%R��{w [x��Ahy���P��I���>f}�&��9������-a�G�P���#���n�{��T����8��c/���M��.�� ]^��� #z��AЅ����2�� �k�#�Ыl䜜�i71���3z��;���y�sz�>e�.������<th���W^r���0I�}�i���vNCʝ�>��aj8Y#RŬ?����U˹��1&�i:d� ��ߪ��yu2SŵZ� ;�;�wA�8T�;��+���N'OV���LB��pd��V���wH��F���q�Q�K0�V�I� f�6K�t��4���-��酨������\�.�a�c2gD��N�V���3Tw��p�+߆�0lj�[<��,%���W���L��DK���|����[�_^���M(���A���r|���W��"��B!��S3@�v�s�M.kW�0I4��F��dÇW���a<��wh�0��F>��Ɵ�O��&*�mb�4� mtU����G��� 6Mc�6���������hC�S��{<� �=��ch$��݈���ߌԿ�H�+@��e����u*�v�|8���`n�tܴ�ǡ���=c��Ց<=B ����;�S��M䃺N�0����ι���8Tȳ�Blg/0d��7O�w� ̼�Д� �0��H::n�W������z�W���k�%D���[H�������R��ca���a�N$<�M�ּ��2�#7��Z�2XZ����;7���!��U�K�ϩ��b�6Sx�t�y�F�z�hH��3��V�Ӻ���h��^�s-汹��þ��B��k���R/P.Ci2 �W٫r{�֗�B`ՊJ�B��2�����c�H��E÷q� S>��K���Rĕ:g���#��5�B��x<��5�ٴrB~,zᰙs�����zI_��#��p�Mo�7�P��4�/��!뉉$����<��1N�N�hw��]�^�]&n7[7���)�]��>�U�Q�_��A���j��c ��"���gs�z�8�^R9S�Es���S��h\�C��0;��W�5;Vi�ՀPV-�bQ�藨��� �~��S4�����l�spm5���q��E�Q�8% X�� }�]Vh���� wa��k~?LTb!��j9]Ty[BA�b�f�W���������N����qi]E��ؓ��,[g�F3ۑ���a;��v�$�/��$��zy��Dz����:v'>��M�����B%iQ���2�.���0/�u��ݎH�ӣ8Q|65���Y$�p�&#�S��8L�yyzG8BmB��ӲWO�у�ض�7Xx������X��(��E����;��$�������w�cP�́�2q�c�G�1Fg2���J�^;K��zߊ>��2;��x�X��7Ov�}4����j���jBGYԍ�;��B��Y����#u_>4Q�/f��0#1�'̵.t t��I�~��cX�s�ۀ�&a�d�1���-�w%�Ԕ��x�0l��� �7H)m�.<�����˓�r��M�a{��ꊍY�e=jHK�#�yg���U����=�%� ��92r �l�5o�v_8��#���-p�~t��%����֢�jG�� �eOp����R��G���<�np��t�����Қ.��QHS>XYpN�Y�?�Ki{[hXQ���}Dž<J��������Z�ܽ��AdL��M�k�P���A�XS�twġ������#�[���zݿ�V�%j@���41z� �h8�l���$S(k� ��������<T[|b�El�*5\�Rxr�a: ��2�2R�Í�b���� Sx�l�D�M.�f��ø���u[ɟh ���^b}�ra�C�L�`�םV���!G�M2����3W��t4MK�f��XOea塀4�.�-���o��WY:POc�(��,)��w�.:*�s�69䂿�D'��rZ2��Ę�7�o1�� �Ό��cz5k��]�3e��v����B�#��u��)BNS�����lzz$fڹy��%p#ͳ�)����3�8j"Ƈ}C�����������!���+��Ɓ���(z��"l�Va����-�XЪ����Q���A�e@��&�o
Static task
static1
Behavioral task
behavioral1
Sample
4e7a39e2f461ea256e7361e9ac7377ea8f082754e7640698ccf349df5af98972.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4e7a39e2f461ea256e7361e9ac7377ea8f082754e7640698ccf349df5af98972.exe
Resource
win10-20220812-en
General
-
Target
4e7a39e2f461ea256e7361e9ac7377ea8f082754e7640698ccf349df5af98972
-
Size
2.2MB
-
MD5
1b72c735aa2a283dea732c51b159ef0f
-
SHA1
6d6d4a832c4e1c3d058a23b98d88dc05592e5993
-
SHA256
4e7a39e2f461ea256e7361e9ac7377ea8f082754e7640698ccf349df5af98972
-
SHA512
acc6cc23825bef18626fb10afc4f268f99536276359a377a049cda730843a3b99573b81e3728e89ce4c4aadec3fadf925dd5cbe5b4ce1ef407c66ab71191a612
-
SSDEEP
49152:1TSgc8bKieeH3g6m+aJ/O8lBO+1iVQ+ixu7RdZT:pSgcIw6m+aJ/O8lBOwZxu7lT
Malware Config
Signatures
Files
-
4e7a39e2f461ea256e7361e9ac7377ea8f082754e7640698ccf349df5af98972.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 7.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE