xzpu���'�g1ѯֆ�2�ޫy��1��z!��TV�{�%�P��k�Rn�f)��r'[�x�: �/4�x���b��%��q������a�����} ^��Y\+�)x���l��\����s�G�w� "����0S��b��������GQ�`Lˬ�7q\�������^�Wq����A�20y��թR�����־57��B�an���>�X��'�K�.f�j��:/f�ݎ���;�KC��v�gظ��g{���t��V��5#��j�]9�<)����_{Ex3�ǝ~!��ރm�@�n�{@�!�a^���-����2���MR�㊀J�@�V�㡪2��k���x�i A�����.��ἠ ?��SzP���w|�0���~�O,Y��*�r쎣�k:c��A=���'�?�ٟ�,�⏸f�v���I���ɤ/'��1hfND�4�������\�$O`�<v�[t�d'���ƶذ&p�+����s%3T��$P��l��8Zũ�חj�T�-hU�>�Vs�qF�W���Q72�A��F�Vt��P����|���?i�i�J0�R֥�-_Q�b�j���>�*�;��u��i��7�ٵ����G���(sMc2Uǯ�pW�`�(Z����_�V��ũ�¯�Z�@����£���ĺv��t�� *����*�pf��z���U���'ԗ8ɇ��s�I�ͮI֫_��ѥ<�~Vz�Ly��*���XLxy��D����,Kj�[��<đ|����3�RӼ����9��4��s�C��R�|���~w7�M{�uZ������}��/��}�f����T v��Ql�BB�m�C�0J��y�nMi0�b=�))vʨ;�d�3� ��.�y*����i��@�Ǯ)�3��P�&Ң�(� \4$r1*B؏w&���� V��p�KU!և.��Ym�]KNM�I��;ኙ�'�����D�P�&" %�-�E����R�cǜ����� ��h H��Ҭ:�{%k�`|K� 脔D�ϱ�qK)B�e�.!ڀ���҂O}/ԗ�|~�������g� �y��&��o��^�����H�kr��3�d�z�y��<?����O]����M9� ��(�w �fd��VgG8�i�#&�%y�/Bq*�U��0Č :��������C�fA�qڃ�K\��~�Rʟ,'����u�����1�yt6�G�96�g�b�̨`gG��{�j�R�'��qj�ˬ��у�6}e�,�TI)������V�<�ƽ%:+˚��쫋��=����F�E����ȿ���& p�u�����D�$l��<�>x��.�\�O|=�\�v(8�3��7����ۭ1�@�\y�W���_z�4 CƤ)R���H_�V{nM��Ϯ���< ��m�@e�&���+&�e��dA�:�T���Q��Ӌ����e_ͫN�UdF�c�����b��H�n ��,z�\��N�) ��D���/�=��"��ngl�,�$:�|�!��:.b2w���⎛����7����}�2E�D�Ŷ���c��X_*���<;�ZZ#��L�`D���&W1��R®�I�� mg��km�����aP[����}�.uˀ�����~�:�ř���/��۶@}D���L ��V+��T����Al5Ғ)�>q���Û�[?�-e�ɻ�M�芢���� ǚ/#.�Pk._�Rn�AR�r�f������#IRr:7��eO����u�Lwv2�_}+���)Ew=�6f,ұ�o��ʍՁ��'l�$�"���JJ��ZϜ�{�?��QXD�ܣVݍg������nK`$*:Ĝ�\��|^b�B��E%��2q���ɳ r�ba�%/'@]"v�� �0����)ZWiIZ<�� \ KXx/N;�_.B�Zl�P�݆cЖ���}#�x?�jy��x�U� C�_�Y�@�G�N�����/P�����VG����_ٻ���O��&,���/]k<�$2E�0�%�_f�R$خ7!i���Ѽ%��m�ݞ����pC���AN�๐�G�1����(�k�Ћ��=����TN��G��z�\�wK;L8�Z8k�k�Ed��1�SSAPW*��pu#��%���#-S6�� J��Yd`�G�_&�:��҂��qV����ݻ�:�8X}�Ed{�D�����+�����B� �kb�����!��Uz� �#lx�t`���r�Ea|��.v�W�Ԕĥ���f��1��U_B���[K���7�@�P?�ep�~�_*��*��J�*ZԊ�T$qm#غ�#�KbN�"Q'3��ݶ�6�.�l*+�bq��H�v����,6��t-<PnRkn�eƈt�W�)B�P�>.ox�L��-���&w��&D�չdLV����3I5ү�֡�L5�~�6����=ucDM^���^��!�O�>#��PIse�� �L�C��d^�͵�"�e�qUF�#��TЍޚ�=����`���.�"�I����^��A�8����L�X�M�b��ÊN��Tn���^9�f@s��( _����[�Zo���2a�R���'�^Ŋ�t}p���ݳ+ڜ`��yTZ����LM����?�98� P��2�ij�y݀(��?�i`�C�Ж�v)��Y�P�<�W^��-w�K36�������# ��am�����A������ >�Z����z_ L�����Y>�l*F{��}�Sȍ�(#���uy/Yݎ�{N$1����D��1s�`�[�av������eo4���%6�(2]��-�k�~�!91/�3$|g'�68|����{*��[51v,�d���:85��0dMB >d��B�*��ͪ�$Ij%�Hχa�)��.qM��x^���1<��;���F��Ivb^��V��ȑZ�YIF��Y���1l�~*9�o�U(��ۨ���mm7�F $m��;��חt.��b�ўW�NV���Q'����k��Y��#� B8��y����Ӄ)��Mٕ�:���w�)�7�|h��"˭�C��������B ��쨾7:{�I�Mmb�8-�9��:�� ����b��di><�(ϛAe���"�����~����D����c�)r��ݎ:�j�D�4�GQthl�{l������d�aYU�Cq+��)�0 �o�.n�տ�����%������Y�!aW�X3|Q��1�L|L�j���K�114bcB5����QA�<&��oM��t̽��np��eV��c;д5��@z�Rz�����F������GH݊5L�d;�~��������0<���m�k���S�mb��\9/�9:�H�+}��4�{V�"4�6NsR��1U�W�)k�E �`�¶@�q=�=;q����3V�Կ�#r�/�Tcfk��#��o��ť�6�8���M¥vd+Rh����b��s'�6ӂ����(z �����ev�d����&��������+Yq�iA_4�*B�����>J� �����rgG7�`�J�����}�G��\z��a��h�w��&
Static task
static1
Behavioral task
behavioral1
Sample
1f7be237346710c6988c74c6be9be6834ccdfba3f2536e9db6b7cff96f7b105a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1f7be237346710c6988c74c6be9be6834ccdfba3f2536e9db6b7cff96f7b105a.exe
Resource
win10-20220812-en
General
-
Target
1f7be237346710c6988c74c6be9be6834ccdfba3f2536e9db6b7cff96f7b105a
-
Size
2.2MB
-
MD5
f1f85db33d8f30ea635061863cff431d
-
SHA1
71a8a84d208549cef4f3496750ed642348bef525
-
SHA256
1f7be237346710c6988c74c6be9be6834ccdfba3f2536e9db6b7cff96f7b105a
-
SHA512
40dafeb92b08ea16979c90fd123b993590319b2bb020cb72295056064b9b8cf9ded0deb03f4cf6a366e89277afe0a4177bf0565ca15c757d0fecddc4d37003ce
-
SSDEEP
24576:K616YtZHoY6r9YSxip3GSCBucyrulSM3Bi8yRNy3IgeT5X67niGz63j/MXTpnjpZ:IqZIY6aSW3lr72HeT5K7niG2T2e0Lsi
Malware Config
Signatures
Files
-
1f7be237346710c6988c74c6be9be6834ccdfba3f2536e9db6b7cff96f7b105a.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 7.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE