���E��ʻ��R���3�_��GNs5��WW�j/�3�VI�J�KeA�5� +�B���Z��b�����^��" �����w�:��L���!ɋ�i�ھI)�%m�����M�ڤIٝdL��D���oKg��B%�_ !�� ǚ<�N�#R�^�_ �Q]���m����SGk�����i�(-�E��c�J�(K��|�Y��V��f:dsU3�#k���d�Us/�,�]���$�V �d�!�WB��?����(�q<�� ="0�do��J"uV�bS�忧;��S ��M�g����� �{�Jŏy��m�*i~rVϲ�,��t��^���M��G�h�72i(X:/vhvz(�'�˦t����t��)�hݵq���ԏ�L3��*>��$2�Ǒa(��H�m�#p\�KxJ(��7����y��>� ������i�r�2���X�_t���r\���,�*w�|���S[w��eO��[��扇Sz�O�DL����b��*��z���_;��/%�!�o�,�'c\��m��/A��++c�-X���s1�|�����&�Kb��ckcx"}l�=��R��SM.~��u���ܘ�����<@�'.���Rw�p�R�VڋG3�ڰηV�<B�0:#��4/�zm�ᥡ��Q?��w�=Z�L'pj��&�M�}(����N=���*c2���ϗUs���\�A�};��j���<lY#��ZEi�-�fW�D�� t�Qx�6�����9���s������W�g!p*m���L��K��E��C\���������J���)�&��ˍ3��6T@Z�Х�^�����j%����'���U�H�=��0�pg ��I��T��[�<����q8�рٯi�O��38��4\� �6D��"M�sa�K}��o��i3�Ѿ/�m�x�C�ӯX�6v�sC�Ό�������/L4�����RQ,�* �9^�-džE�鴩����Y ���i��$��#����yJ�w�Yb;����Ye�p�NSi:o��:����Ս�|�����ʲFz��Ǿ���n�P�Q(9��_=��yH�ui)���L���%�r�[���r�� /��xǪ�=.�?���!���q� �9���@9�u?x��:�c�qs1ul�!���/S!Fj�4����N��n�7�� ��}��Lѝ[uQ��������0ѐʁv�P�*�q������*�Ɯ����h���䰅�`��Sc���\N������qQ���-�~7EDmbt����F�YL�j���m��(�q��i7!I�g\1��v ���f�dI:�coϡ�@6�3�|�(��Π���I��Dɓ1�/�yfEo�>��iP�'K��Dk:�::��fT�X�k�Z�6����U����n�����B�M�gp4�T^�ס�V�&��0����'� Vs�n�0.L������ğM���j_�^�R���tj1z��0�+P�7cӴ+�����a6P��9��:�V7���s�4��=��&SJ���`��GV*��R��6��y:�R)K6�;�6M�+fF[�r��P*��x$ĦC��zR�X��h��&c�kZkdXyON�L��kYJ���h7��+����;,a��횆v 9T���'�S���js��tfZ/|Mκ��uv���(o0��M�Z}etج�j�ܶ��6�y��_ǻ]�?���D[�NW�mY8�x� e"#��,E �j2L���� ����V��?�W�;���>�Lt.��؝}V��C�Q�k�j˕$����)=�w�ۧ趢�8t��_8����bT��j�*��z8zȐ�o�}�J��r�F�/�/�Bc��.�]13�&�������qƫ�=`o�B�C�v�=�MA~9�I��f�*���T��LE1�.6%�eH�~�X���F)Ɉ�N���1K��b)�?xj� ����?V�Xl �X��tl�Q1 �L ��gaEZ~F5,�<���v?���J<�Q�*��Td���vj�ζR��B|�(�{�t�D�ZC�y�F(�{=���a���%�_sA]���g�Ȋ�쉬w���O���KC;��z���`ڭe$/� |-ŀN�W��;O��|⓯&ļg��K襴�����9�?�jD��ϵ�\h�J��Z�@�z��0�h)ɯ�$�Q�Pb�N�Z�����������X&��k����I�r�����H������`��1���e�Y�T��Ӿb0-�^(��}Zyk��T���������8l��!�derO����#�Cx�B�_��'�T��ma?�xɰo?�p(���QӼ��νzd�sg�ء�"M�M��F�x�TX]�'�hQ�:S���Ӿ����� �`Dr���K��#+i���R�L(é��a����eR �d���D&GY���߿D9���o��"���Ј#��,��;/6*�~��>���A��ct��rV7S�&���&�Zi�HyeTv,H@7d�P!�u�0⿇!Қ�ѻSR��H���u�7蝫Y���b~xӟ��I��ɸ�"���'�r^E��8��+�G!<�%X+!�KQ ��@�� �����|5����� V���I(�)�)b�$���h��G�?2�L��a����8ԋ��w+�G��v��\���X��!�8jx�G�HſҜ��y��L���(��?/�S?$C�2��Ӟ^�)�-e"�v`u�KQ�Gk�1[�i3�c���)���Q���D�:"C'h>����82���L�1E����F���1���T�o��W�%3_��u���τ[Cʹ�S��֊�8#P�~�lԯG,wS����}�.�� a옱e]ˤHZ���t��Y˻3�\-��}^�h�}Y��1B� ��� �4�J�\�տ���F�н�W��b��ڢ/E04������F�"6h#B^���4 �&)�T�K)�]�.��<e�p�3܊�cEE��z��ܬ�>�r\�]#���:�u1<�$��-��4�$Jh�b��E�r���M$!ع7���ν�̮zU�9�������tl��"�.�R]ß]P�;.�@f�H�(�]R���z�n�ÔH��s��g�OF�N��Eϒ_�X�]�kޞ5�lG��Q��%qz���BT����4m�@������3�����lĒ��KX7L��P���O�z���ץ~�U&��>�>�e;ͪQ*/����ֿ��4@N�N�)V��M"�~�L M$��/<�����661K�,W�nYX���U�����8h�4�빚҂���]����~�r�/k�6k��cI*9�.��y����.�"0��R��Xt.R?L��ZX�.ʹG~�wx, ڸY|W��'eї,
Static task
static1
Behavioral task
behavioral1
Sample
e1f14a44d63d931b1adc8aa4b7502489d24c61d24867cc5143b738271be30d06.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e1f14a44d63d931b1adc8aa4b7502489d24c61d24867cc5143b738271be30d06.exe
Resource
win10-20220812-en
General
-
Target
e1f14a44d63d931b1adc8aa4b7502489d24c61d24867cc5143b738271be30d06
-
Size
2.7MB
-
MD5
533244692811a045ab0196075601a5e8
-
SHA1
d767e5fd2e2ecfb84c6b698f3da2acb1b45e1101
-
SHA256
e1f14a44d63d931b1adc8aa4b7502489d24c61d24867cc5143b738271be30d06
-
SHA512
a2d403c75887dbfb0c423c8ca8d47a6f684f21b91b66ecad7ab2ccf6fab96f5a5a01efaf53fb03d47357dec6edfb5afa9ac9bd5425265fef5c264af9a0ba28b4
-
SSDEEP
49152:Jcj/tvWu3aPukI16LlRNYn1qgJcwCb9098ebMt0NunlgcMTW72ja:8/t+u3aP1k6ZLYnIg8ebMAu1d
Malware Config
Signatures
Files
-
e1f14a44d63d931b1adc8aa4b7502489d24c61d24867cc5143b738271be30d06.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 9.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pwkz Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE