4����|j{ �x�����hRSA�mP� ��7���W�����Bj���a��gU2�/��L�����9@�_� �9��1/:������.��M7�H��z���y�|n�=e��dU���L��e�Y�9��ɕ��L��ɇ�k�~�;y��*��N������<��C��;^=���x��7���@�yR����(v�����Tm$'���\��R';�P�8>�����0�&�,@+X�;m��L[�1M�����̇K��������L���>$�|�Ⅰk)+0���O����rl��z�Q/�������F�� ���n�� ����Zn�]�5�M~( ����cГYZ"�����B��u���p�f&��"���3��p� *.4r�â���>l�o���Nb��/�����J���~Qp�m5#�ކ��|v�^?Z1Z�b`��K��}~J�݅|t����%D ����Mv��(q���`�t����d^���D��K#Rw"� e���ѱW+�h�7�q3G�o�x�S>NF�z��n�A��x�Û~A_������x��$&�j��ސ�p����(1MG%�kڍ�c4��n 92��!�-69U�5#aڲ�[���;qLH�F~�2�dĢx�&���� /���������?��E�-yb�$�l�gZZ�ys�Á)D� q���V��Q|��h�Ji�tV� ��`�B������7C��q�O��;��L ��$E��B��m�=ips�I���@ ��3c����}N�$|���(�z��} g����>�>��0��6L�?l��n�ٔ ��Ơ���d��A�R0�jv}2��ҿv]�{(�w���������H��~�S�˷6)O�f��)�j����:��=ـ�t/U��S�����%�]��^H�����X:ِ���0:k����_ՀM�=��w`�J���S�kf;u�L����dv58���ZwE���X�3ZH�,qX�3���3�I�VcD,, ��!�����t���,��q��f7�G�L4ӿe�4B&dMhKr1����� 5I��Pǝ2��:�EP�M��T��6���yl$e�_%hS��ي܃��/�1����I��aD��=N�g:���L�#��Ԟ��D+yPw6��ي���D0�u�P䀅Y�C0A<�OBǵG��i\y�C��;�z��-`�5}�*B���L��F��Zg�K�L'� �#�Ԝ�J~�YD1m&�z����U����T��q����@�_m�0�� %�)��cvW�$���@T�@u�9�1-����U3��V�ź�����r!{mی»�ǂ7�u����\�`!�o��,�I����=`z�[�kC9m�k[�eWv۫�jflwб��;���8"��|�Q��Ӊj�*ܡŨ���̹(iW�'�_����]1��l��P�lbASz"�@���r��Iȧ��Qƣ�K����ĝ>boA������%�]<I���?A���ҷh�+���b���^e��߫�e�ΐ��=}��Rd�t����n6�ǜ��#�M����)s&�^!H�l�F:X;y;�J��@c�ko�e_�]�����j�wI��Κ��·�#3>"��[lZ5���8��ރQ�� vm��ϙ;W�%\�j�"|�%o��a1|�e�=?�l �α�WX����LjDH Y?�A1|'V<�2�c}���lzW 2�}��pd��R oA��6�|��D�<Z,��X}p����GCA�:��z)\�o!�}���m!1#���P�͠�-����S 1�jq���N��I�)�O���?�ʠ�� p�������}���SM�=�Z.��B֒�۲�����xw3tm 2YȚ(�橷h�1�wR�B��Y|-�� �_ji�X�˳gHj'_� �z�< �9V�D0KO ���K�po������ �^B��_�t獱�Z%��TE���O��Th��<}_��RA��� ci� �1Cz�������q�_�J�?f]n�&�%��ȧZ!r�@c�@[�.��z��t>��t���[H,Л��e����dFFb�c�[�j���8�52=_��C㝆7�I�,����X�����������zn����n v����(�o��`�y���?�t���O�������ti ��S�Pe?�5�+���w��Qn�� ^U�Usţ�w�d�5�$)-?�� ���!u�����2���g��-~��c����G�f;h������ԕ_�Do/���`=`�vz�Ep���x��Z�[��I��1?�~�-�1r[�; FHW��^ ����@����z�{��Ky2����|��]~e�m��S��L�0ɥ!�0�������5�0m}� ���,H��5��_�/-�7߂���At&ybX�/|�` �23��yq�4o)~?����8my�=��I?�1�����������YW�F�����cC\~ �n�����aN;[t:�s�9z��z8w㫘B�1�v�p�Ȁ��E������w��z�3���X�����V��$Ѓ���9H���6�Zs?�{Kt�7�k���5�]48�l}�O}�U�F(9`b p������&����i����D�k0,ե�e����dJ`�yyS�d��r����fk�}\�J�N��RQQ'?uAdG��)F���I�*!"��/%q����q���rqI�S>��'��Y���H�_��ԣV}��Pq�0��tS&/�P�� W%�g����*��9'��c�c�� �������l��Qi�1y�<0�W/A��wJ�z�?#��5�����.���ԱD^�t&�Z�m��/:�w��:���ć����@��{�UAzF)!��|�ˬ%椹����,]0����Y��V�;�D �'�&� y��x��Qi����? �1$�i-��e���YV|���M��<."(����G|�|ʍ��/���B�پ�s�B���@����;���P�G��t8�ڃ�J�2��偶�tږ��p9����0� �~����7.2������b3U-%������`�!�':���^�S��1��6 ����ڿ�M�3���Wd�`���8;V��Dmq7�؉;�9j, �B��_����f�`7;�H���kF>��ӌ�1��+%�Xr�ˏj7����E�}G��Yò���"��iE�I� �zi$K�~�#�3W(������:l��>��Q� Q�[�N_v"�����~>KLm��������:@C��FO�2C��q��x<��rW��ѡ��Z/��B���7���e�� �k��/��0R��MTC=g�tJ�sq%��kҥ-J#5�������3���_n@�'%�g�IC��rL#fT� ���4X��b�!��O b>���BZo(�L?�PҊ)��{vI�[(�댐����[1���T������!��d3ݟ�� � ���0!,}�[X���U����A��Mdq�k���y���R���i���I��Z%��Z�U��Pqh,�D5c�Dz������y���g퓏>��p���bK�G��h��f(܌h�p���Y ye���|���?&�K��ߡd��k�W�j��F�����Y)��FMA?8[��Mr^Em�ݚ�}���p��O#�d&�K�P"��ڊ~��?Z#J'��(�=�v�T��� 7vO82��6�E�Gk&�U��'&�?`+
Static task
static1
Behavioral task
behavioral1
Sample
c3bf2979e5ccde1d2f5d07a93a761d0374d38b70e477704241703be0cc61c18b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c3bf2979e5ccde1d2f5d07a93a761d0374d38b70e477704241703be0cc61c18b.exe
Resource
win10-20220812-en
General
-
Target
c3bf2979e5ccde1d2f5d07a93a761d0374d38b70e477704241703be0cc61c18b
-
Size
2.1MB
-
MD5
ce8b35df4d953c4547ed648081a40663
-
SHA1
74f7463e0b442d9414ea96e9664f77af9f15ad14
-
SHA256
c3bf2979e5ccde1d2f5d07a93a761d0374d38b70e477704241703be0cc61c18b
-
SHA512
64b861dd81e138f869418761bb8c08a91576a1e3bcd0a90e7c8049ee1a3d4c6c1fcf4aa8b7f8a696b494e74cd5e73d1346dddcb3e0540afe87a8a488cee8736a
-
SSDEEP
49152:OgG3ao3PCkkUBlj+ajYKFET8gWlQACToyFekqdlMvXNx3y9E7u9:xV+6jUTnlF3gHECekqkvW9E7u9
Malware Config
Signatures
Files
-
c3bf2979e5ccde1d2f5d07a93a761d0374d38b70e477704241703be0cc61c18b.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE