�<�%#yn�&E��_�.1@���F�f���#���;������}��\S� ��E�ӕ2���k��V<Y���`�-�Ip�n������>�� 5���>��L�������ԓ��)8��[���z��"�\2�ё����OJۼVqu�cy��-�q��K��X�o5S��j.����e��S�)W�t"���ʇa�����G:J�o5d{���:-�#x=�Aia�[78�� )����r�S�: �e`㚨�z���C�.��~�+/�ʬԄ�y��AƂ���������V��)-c'��j���-�Ѱ�η!f�y�OsKz��͡�e�F�-#`ǻe��_EV^�a��*W�o����g�y~�)��V����!�n�p��]b�������;Y����� 3�UkVt5sb"���:rv�������"k����W:4���ig��T(_���l^e� X��.�.H@UZ��"������\S`��R�c����<��r| �^F$��0 �`P�'U�4���e��{������#�L�L IVǛlf�u�%^&lZi)8��^H�·>���)&�q��˛�!�MXl�uc?��-GWpo-� ��$��-z����VL��� ���L�{�N�}=�0��*�iO�Q���|��D�W��.�"�����תM�}֍c�)8�l%# �l<k @]��b� ��g�o��l�}�� =�y�̛��vX�cwt-��b��KܫB�3&��r M��!���$���`91����*%� u���g"���:�+"�e�ʻ���1��F�!�⡐�L&�`������'��k2^&m�I�L�%��������w� DR�~v�-'mώ��4P!�~��~U�Ȑ$L�:�3$WzUS��n�g��6�L�U����֜�X��DŽ�c+���Dz��Z�U�y �ʞ��y%*�}0��lxi����5,w=���_���EJ I+}���\��������uD�b�����)J�]���DG̃��F+~5v�M"��9���)cSV{�}�+�@9>FnB�^�������G�����j`'ƼQ]�vcEgO�8O���ޙ�v*�v<�34�p1%�5x�`<�J"RV��e9��x�MFJ|#$~'ؤ��)�{X�A&��a�59ͺZ��\�q��A�Dl���w�Q�r����gZ�d�n�y�r�wbH���1d�S����X-�1��t��й�s`�T|z99% H����-䦍d�ىo��vP�š���[�V猟|X��B�=y6{0���>r1���*{���h��prt�����q5�W�I��ԒE�F�0ܘ�}2��ؓ��c���Ƿ6y��?;R���e��B_��2!������Y���tɇ]Ed���C��0p�N��K�GE����}Y4���v�����l1���f��C����c,|D+�T�^�qZ8��ø�}v���QVH�[��0'��\�Q(�0�'�����DV�@���9�H���v��9߽��B����*I���Bys�j ���|�v�5�-m�B����k*���@*j?h�[L ��X�bܒY����5� Q�k �S�߳�����-�����;1*�������Q�<�,ev^�Bq_=�!35][@|]$����bwn���5��F@e���A�TG^�+3d������.p#��zӖ�{��W0��aG�Q����J+��B%�)���CI���\��������HĢ��=��"<7)�W���?�Ճʕ��4�)]�'TF[+Ȁ��/H(�� �D�|/�B-L��éӡ!�`d,�9w�-;�-ũ2�nC�&�#i�$2�}5�ē�0�U��x� ��>�!ȹ�5�n��C�l�͟��&s\��貧���9$[�V�5��ӸFY�bN����$*�6)��~�����س���7�TO1���z��F�L��j�I�х�\,19]fb������W|�0^�cP#���TlR���8�ms��i r\�����Q�:��Bu�:I�n �\-C�`���Ö�Ve��8U���L��%?z�>��}�r��+%�N�D�8���|J�� -�I�\w� =[�%z�ۇ"��cs|;2J� D3�l�=����� ��uйI鈥9�D���ڮ%I��3�|\����V� �v���Sk(���:��x?�-Gn?��jzZSƹ��U�@N�j�f�c@��= G?i���%z��,�7�|t�]t��A��`���bc��ճ�k�c�,�DL'>{A���#���Z3+P���~�1)�����Dȅ[cΚ�TF�#� ı�ކ��;��To�"��$N���m������r��Fg��u��f5�����yI�����TH�!��0�yC����C���I�� 59Q���� ��96�R�5��1�\���fU)��������m�^ c����cx+�����wLe �8�����(����u'���W���(�<j���[;Y@ȼa�W4�c("�����ѩU'�/��������h��8Á]p]Io|a���X8j�:���S-yK�z������ܢǽ[�wex���-��k&p��gA9kJ���nP"�R��i1�,Р��N�r�G�)ξO�b�*�kt4�qw&J|1y��N9�(L�E7��) �h�ն���BI�+� ;;%��TvH�g��? �����s8��� rt[k�}���`�-/g��N������\����c�f���Y7<�\M����.tFjz|�y殡(�I������x�7?�) �����l?k�x�t�Q\1�b�]��De �[ZT_S��B�w��#��G���rM��Ks�@�4j�'u\ č.5=�p� ���%��V�2���co���O�R�HoՈ�Ћ�C�Z�lM��$;nT)k�%c���K纈Sm,p��s¾�Ȅ��_��'�W����b�6��[���/h/v�j��p�r���(���| �cC������]̸�dr������DW/4�J����E���P΄��R����Fm�we���^�t�&�\�|�d��c=c��]��S+Z�ە��S����e���&f���]d����y "(U@�����m��V������O�{kjA�D�q�g��`d�*Q[4I P�l���%�d�"^��v�=���p��ÔM������l�&{���\�yFc���h�톣hF&�u_<��zCe7�۩�O��8���?Я(����ik��Q�"؍���kX9��#�pM��`�u)9���� ;��Ƃ�S�|Tb�r����9G���3��Ipe���9�*�-d�����8o��<���I����ô��3�����ڇB��W��L������cp߰Up��L.�q���*�],���m+���E��a��z˒�-C�Öזъ��i,xZ%�|�F�X���!�ɍ�F��q�C*����&"�Rv��4�S(���g8Lk:���{� ���u�1c'mVd���.�Ǒ�"-� �B�<����O+*�����H�t��Yv����2Q2p='mK`ǽ%ń�F��d*�/����lܧ��^N��|Q���Y9���@�=K��m�7�PЧS��!���G���}A��l�o�/=NL��<Qt���a�@� �Q2 d���"�CL��Eu�6;d�N(�����ƹ�q9���(4n��}�L�^��oǾ.-�q �L��i)�P��\:����ZX��:���U4K�"�%B�V[��^i�jg��،ߋ�cH�x�nL��=�ِtR$����qI~�U��7�����4h U����
Static task
static1
Behavioral task
behavioral1
Sample
f3a148c2c86f7a10c18125927cd48525719c2105a5b0f2c039f0b5c4cc67bd9e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f3a148c2c86f7a10c18125927cd48525719c2105a5b0f2c039f0b5c4cc67bd9e.exe
Resource
win10-20220812-en
General
-
Target
f3a148c2c86f7a10c18125927cd48525719c2105a5b0f2c039f0b5c4cc67bd9e
-
Size
2.7MB
-
MD5
f46f8f30ce0dcfeb7640a34e3b969f06
-
SHA1
c5fdfc51b34ab77dcd11760c7f964057bfca25b5
-
SHA256
f3a148c2c86f7a10c18125927cd48525719c2105a5b0f2c039f0b5c4cc67bd9e
-
SHA512
150e0a39004676a242275371067bed90ba5a74d501d7701858f16dea588185a9d72e133c07b2b8e7acdf882562fd36d78d7e8c22d6bf74422bbef74fa8e4d8f8
-
SSDEEP
49152:kpV0dFTATmTOKEDZXvTFXVLXWG1yjNfo8ItCaWTYLmL2tLg+:kWsmi/t/T7jN0hytCT8LmqLg
Malware Config
Signatures
Files
-
f3a148c2c86f7a10c18125927cd48525719c2105a5b0f2c039f0b5c4cc67bd9e.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 10.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pwkz Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE