<���{s���nIRW��_12��w�<J�#��)'�:�db|,��p|���)zQ\�E��.�?���q�9�Ǯ�N���[M����C�X3{d���n�u�3����!�&z�L0�4)n��[�p���3 �iҜ:=oU_��s\~v���!x�Y�F�mŹw�g��V��6{�cm�^K��!�X$fw��"��\T��pa�Ȼ�8���4 �����t��7��E�Xj��^���Xog���ө%<JqVv�7��}��kh{�omU� ]W(��{�"$~�ؿ۾"��`���meK�Wۺ݈6�Ʃ���hR0�½H��}�7���,����@W\6L��P��Q"ry�h��@?ˌc�u#m�/g&) ۿ�d���9]�oAP<�v�0^;e�\i�<w�NPVU�ɩ�����N��}���� ��&֚*搔�����tL��� Y�ʤ�p����o���ON9R��?3�R~�ĕH��O��lH�e ��ohN��?AY�Ji<���΄~�j����xoxBh�Ax����bډqU3��ål�;�ql���6��ZH��8^95OR6{Ps1��%Ĭ���o�.I\�<˖�,�e�N"�FP���5 �]�\�U c55� ���aq����?O-��&X�f.m;#u�k��n����R Z��K,�)�۴��ʠ��Ԝ.��� ��j��M�����r�ݟ�8��Żi�,�8�$�yDR�$ێ��=�慌�]'��~O��:d/���+�� ���� � ���O�}��Ӗ�"<��tm=��f��M̹�E��US�LqS� &X1�Jg�1vQ.ݝ�<T��NQt������q_ʵ���db~ �A�c'�z5W�&�w7��A�����,%Q���)�)�:�{��.E='�X �cN�S�����6����Q�9-uo[��2�7e�vL#REO^O��_��D� ���y� �(�0A4��jeᡤ瑽V�Qo�݄9����<����>��YY���"��������Λ=����[B�ψ� x�>t&h�����/�q�h�d]�8���w��Ag� U�,$境��`n�i!����d�* RE���n �6V���6�q�"g���C{g�Ɲ��.�{#(�dVj?��:<�ly���p@�1n�z��ÛN�U����A�ה݈��ئZ��eGV��}!W�i2&��8�S��_�9a�L�V�bG��=3*�[7����oBE7����n�I�ܼM���G=w��j�g�g��RwӉ�c *�جi�eIi�O^V���A9�����s|1��?����� �p���t������ �5�<7�}E�qo���b_À����z�� ��zF��mI!2��Vy:� M^�k�9��@ ��ݏ� V`����9E�)w�!��v4��[�9`= ��7r�\�³V��_Ob9�T�O��F�M6>��n�!��L!���r(�L�b)?��Yt�%��ČY1�R���u5�����S9&i9:���@o�`D1��:a8�v(���+_��zS� _�s��_�_�9'D$�?�w��.��5Yi�ݬd���)�5p�@���r �(��E�(N�J��E�v^�)z@�3���XƤ��GȄ�&U+%����B_�lD�y=��aO����6>�P�jYqڹ=]Xה�\��9��̣�Ƞ���1��G�;|�"��7܁��\~� �㱵4j�4�Ci����B��<�K�ؽS�-#K�&b���!rR�C#�����#�=݆'����y9Ϋ���gUq�(܆IEm��S������-\��h3̹���� �zTƐ�Ƹ�&���V��B�����X�0��`���E���(�P�g����ܪ�up��H��8 �����t�F�� q�r��\ѕ�Z�ݸF�5�=z���5Ͻ��=k�X��>X�q�|��dI䠃D�3�C] x6��=�ԑL�X�H�1 a�$5��h��*n��̀����ٜ�Y�!o���Sn[���Iqʥ���`�%PQg��iW������o���s?n�����usp�Oس�Yp��\��Ƶ��MN\*6|?یv���?��/7���S�� ��01.�2�g�L30��A�شXp|qp5�{0aFps�%����2�m�L,�؋#�j9�<��������x�ʅ6z�CzF�w�� ��)�|6 ��+z�r��fa�G��Q�8 �$k�*��r��[��'+R�t��́��F�6�v���%)�4��h ���ykZL����N�?�?-K����X~���d�w+�{������b��R��/���u�z�[� S��rT����dK4�!���L��i�p[ޱ��.$`���AJÄ��b����c�P���U��emh� j>a����䒔���B�xf_יC�����8��3�i|G�9�{�2C�iP$�9k��쁮i�}��.\D%�z�U ���{�eW+����% �=�R�9��w�^侮ħ��uA���J�j�nj(�Ʈ-4�z|��) ��#\T��džt^*5!�^��>��!�i��R��g���X�� �Tm�D��t}��~�,�E��^#(O椳�s*n(�r��_�&�����"�x�3T��V��]�=��;���u!�S{p����]�8E� *A�/W���%��F��nz|����=�� ��!2H,�%�+�a2��Y������ޒ��va6��L&���f���zXX�$�ִ�t����&)7�Q�W�=_�����!jr�A_E��`H�m�iu�{�6�ρdБ�7�!�0b~R.� �G�x%��$��1zs�R�Yz��:v����J�2�y������G4��m{ �Q��5�����1iY���Ҭ� >7�bJ��E�}�Cn�Z5Q���U#�������<g�1徙!m4�����l/�B�zo�v�7��� ��տ��N�@TC�_����d��C�w��UH�Y뵡��v�k�8 �XE��~p�괿}���9�A7�8�:}�a����6vk��5?�9�Ν���3�+���o��p�#�*��Ƃb@6��\;�)�Y�Xؘ�W�Y��0�_}�[�K`+���D2
Static task
static1
Behavioral task
behavioral1
Sample
d73280365c92c2fcd258c344be264e655cf58c9ed1db4e13c8d9abac90fab341.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d73280365c92c2fcd258c344be264e655cf58c9ed1db4e13c8d9abac90fab341.exe
Resource
win10v2004-20220812-en
General
-
Target
d73280365c92c2fcd258c344be264e655cf58c9ed1db4e13c8d9abac90fab341
-
Size
2.0MB
-
MD5
a39564d32adb05bedb24a557ea8fb1e2
-
SHA1
85a4b2f6d0c3c7861f7f5214521f04b47c226279
-
SHA256
d73280365c92c2fcd258c344be264e655cf58c9ed1db4e13c8d9abac90fab341
-
SHA512
979132ea7d80506e0681e558a59ccd7e0c6c4650837bf4443e5149adfc76b9ff9ed84d4d4adc2be8ae187f5490ef1c3ed781f434007f14a7b2e599c67ad93864
-
SSDEEP
49152:32sZ8QQXX8bbRPSurgPqLHrBwtL7bi1mwm1A7TAJrqmTNC5:paFXkQClXSL7biUf1AwWr5
Malware Config
Signatures
Files
-
d73280365c92c2fcd258c344be264e655cf58c9ed1db4e13c8d9abac90fab341.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 140KB - Virtual size: 468KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 31KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 6.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE