�0/,c��J�ꔂG$���:���s3&U�0�L}��?!�m���{e O|(;�K�'��B�%N h)����u]p���L�pZ}m�J���a��a�4�Ҹ�l���U�Ε��F�c̅����V���O�h����1��6���ڦ��A�fp���!���]����-Ŝ�H��_�����Ý�۟����e(z��\�B���mر��P�p-���Gy?���;��?���!��HK��gܵB|f������&eQ��G~D,�{���zy/�`(>����_��kR���K�+������Q������Օ@2^]>�w�K�t�o^C�F�{�t��'�Y���� G~�mɕ?���݉�+.ɘ�e��K�_J+��1��;�0�G�R��b(KM�g�1�d����`�$���W�K�����ڪ� j]��� z�\��b�Uz;ҳ��z�l@�m{���+�1�Il`�'�����2����dط�mf����>Ӡj�D݂�C�o��|����dm��U�B>�ԛo��z ��$m�I!p���|(%�dz���6�˛�8p��a[Aj�� c�kz$����8�d�}K`x��0u��*۱��� xh��J`�Ѐ�/���,ы\��d��|��ʟp��v��u@�c)_���$�I� 5r��:Ԕ�S��a*d��rݹ�h%w V�Ӻ|1������"s���V�ݐ�� �F�LO4�C���7p���o�mJw���CĿ���x�S�1�k��ր�H*�@�?@*����fV뼽��~m�ē����Kލ��r�U]�Yѳ��Di�H{����řg����6�뢮^��bX�$��k<Ͱ����q��e�E����&�99�䍒�3 @ S�����z ����`L��!r�����!?�Sz��ɹ�~�����B�u��d����*��T�U<@ �3͔����/�F�ah��1p-��6�=�a;[Q0:��y����k$"�?���F����aDO�E�M�$ѹO�\���Y)3���|�$���^+�1j#����dF^�o☍��q{�B*��*�]q;����6���* ���_��kK��5` �����V���)u����.�R�vf�{-+H|�i�"9'��(�dJ#��;���J�#3���ݲ��E�o�t��5���]� У)?v|�V����E-��5��?��͂rm���������l�W������u��PyrIh�r='M���mV�>�\KU!t�4ԴW��b��$Pv� E�D����`��$�,���ͻQV��d=�Pt�62����7 `�`$�X�* ��Da�fgN����=O��>��e��y��x��jGO5��i�A �x�n�2���x6/����F`[�BO�j-DV�e>�+��>�!k�~ �`;(��0����ccdHdx�J��RT?���knj�ӯA��耑E����y�Rۿ���4�0<G~v�*��~^nXij���$��]|,>��A��h:[yĥ:v�R �<H�K8����0_l�{��(�: ��1 � dcP�0���Z�3�����\�]�P�Y�b�F�)� �&|�)�P�&��)�����S}��Z��R����iL��&���a�1qX�/���<���I5P����C@�/N�ץ���[� �ց{敌�`�)t3$�T���y������6p+�����t�C�� gE I��ʒԽ�X��h#y:���{����Rw��J�Km~��0�V�SscA�ad�����5��3�E$�O���~������V\;ށ�74=�Sa��=K �rTA�q���y�:����������Fׂ?6HТn��pa��@з�i�+/���S�4q��y��jy�"0�|f��7�R�-�-���{p9�Tݶ\b��*E��*]"��+I������(��>��]�cX�2�'�d�տ ����/�(b��[ʲL$�}���4Tx�U�h���o�!;��Zk�����*���F'���n]�鑡������؟NK~��ve3�vy((GR8��x�O}�g����UF�ހ�f�]֞X(���?k�(V:�nq�2�����e�K��I��$i���M Ln�BS��:3��&���&���I�vB@%�p>7�=�y�6�L|�Lu��Ef�젗�k����XA.ʭ�+x����YOE1�B0�'c�C�����"�U�V%`��Xd�w�ދw�V씣�57>E�f��6�[g�ӆjVk��z_2�j|�����_+�_�m��?�i��w4%�m�Ot����?�0< u��:�j��sn��`����a϶��9HLn.���a��0��"�����5]A��;�gl?�.c6���*����߽�c �[| �뎚�?`�D=��$�1ˆ��e@Ý�w��ϐ!d�k"�*�.DZ�c��� ���i�2���րC������Kgq�UJ2*�%����-uzU���jx=]zWi���v%��j�����w:V��EX�4�h�]\(�]y%F�zGn2u=[r���{ ���ʼ���X�vþ;��W"�/�K�U�N�K��!��P�*A�hB�6Z�Q�פ{�z�N��^�� 2��֤@�@�����߀mr_R9�#��f�}���l�� �c�N�T��K}�y5�7;)�m#�vT���q�aɍV�R9�p ��X�;��+����>�k+(f� X�+L�M��%��M��Dz2xs�$ƽ�������c���-�R|�_�d9.�x^tx��~\B˹9�)�n&�id`ɦ����D��R���%[��z!+�>f��Tl���R9AXO��Bf���6�*�x@N��~ͰK��x�=�T��{?����4�p��/BG7/����mI��ID�G#{�P��!�u-F�fB&���=� �b'���vFՍ�W��*�����c�@�l��l ��o�M7��'�b��&�������0vPi���CA�4��&�`��a���'�O]V@,����ffX% l��o�ߎ鲚���a�dȾ_��f�:�7 d���W��������؆�bKZ�� ݗ tOw7Q�:=�Mv�ǡ'�Og�)*��kF:�2J>�N��.y�����(��# d����6���5\����&��l�ש(@�Aq�3;Eȣ%�MM�k�����= �z�'wOÕ��(��Xc�\QjX�5˸ z��'�9��qr���!��l��͍ϟ�S���_�D���*�����8�Xj�>�ab @�R�p�p3S�'c;���k�.2�F�T ��M���rh e����4�@��qi�lL�+ �PE�t�pvV%��.���dD�z��2�����ߜ����H%�����|����H��/�{��>9�ұ��2g :LWA�p1�ԝ��V�@�;�è�V�;���`m�5┤P�ဲ� �f���]1p00@���h�ZW�EI�Ηn����"�� ���ƨhgl�T���j�� �;Ee��߯^2yq5�t!ʙ����N�Z��C�r�C ��z�VI�T׃���}'!���5���[Pnv�߾@T��Ty]v��� Q���̏J��h+rmHo3d��
Static task
static1
Behavioral task
behavioral1
Sample
661e7fa1d1e6d6f6075e778a37860bda4bbe9c407b1dc41298b1fc4f5abea2c4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
661e7fa1d1e6d6f6075e778a37860bda4bbe9c407b1dc41298b1fc4f5abea2c4.exe
Resource
win10-20220812-en
General
-
Target
661e7fa1d1e6d6f6075e778a37860bda4bbe9c407b1dc41298b1fc4f5abea2c4
-
Size
2.2MB
-
MD5
59af86112d909203945c2c7c90619ea5
-
SHA1
4620295a416ee9d529c301cc8b77835dd4d99734
-
SHA256
661e7fa1d1e6d6f6075e778a37860bda4bbe9c407b1dc41298b1fc4f5abea2c4
-
SHA512
7f8c92a647a62b2755d12231f862b76ee2c28c61bd642c84a75d0c8cccc3663e6dd419c06817dc12261d95d763a311d152b73d20442bb4f957b862c99f6b5ef3
-
SSDEEP
49152:Dx5aZlC/gpB3lGqVUOCL4k1OimoZ37Uim+gfzSxBcsGH/FBnRx:DbaZwEBVGqVUOq4qOfilgbSzXGfBx
Malware Config
Signatures
Files
-
661e7fa1d1e6d6f6075e778a37860bda4bbe9c407b1dc41298b1fc4f5abea2c4.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE