�[���� �+ S�"SN��lR����):f#���樑�v>�r�_E���B�4x��3[����)� ��K�}�vc�[6h�t� uhT�?3��g����d/b���ɡ��굈pl��W2�d�T� ~��*��(S8�\�y��>���4����.�Pm��\��=*%��ׇ��yAj�T��uz]�?+���ۨ�gҜ�������1��7�}T8�Z{0G'��Ȑ���}�Z���֟�a����ts�����o4�TOҁ�\w{�ya�������X�bnHٵ3��������<�I������\?��� c�C�ߗZ�W����73#ʖt&�5�Oj��8�{�'����t0-X$cQ�l��*�A]�D�;�1�lD�[�L�$��� �aV�\�`��@�nB�� V!�"O2U��)����t�9�\��H�>�P2��E�:���A R�;0����/��]7y)�/q��&�5~*�?�fm%��&���ĂY�6f��GgmKD���K���Aa���~����#5��p���I��:��٪���H�0��Jv��\/��wߋ���� �oz�LO�M�W���]nn�ɽ��!�6�ŖUi���B�D�!�l��8����R�Kzc��Q�]1UH�\���*�~��ڗ��ܶ[eB�� i���-`��Y� {��C_���Dăh*�����Rԝ� Q]<�Mp%>L/� Վ�Г*�������Bp'�8j I������{%ְ[�rh����F�����{ﺛ�w�F����.�A�f��W�mN��xfG��Y�ʡr�����_r9�*�)��,�I`�$ڧ�X^�g�/;PŃ��p?���H�X)<UJ���<-uaǷ�s+��SB�P����}��#o�N�xS���}�VK?t�#HF���f�退�WJ�p��ZDKK]/��t<g�3���ϺZ���bœSۻR̓�ca�S� �]���w;��6e�����l"0V%��X����X�P1��k��<�w�TK�"�Z��M��y-%� �՞nVG=ٛ�9l��Z�K������΄V�`o��i�CϤo���O�5VX\�y�Ō�/������쟂���l=T�a:�^�!E?�`�����yz�SuMv��cu���we �z)L�� �D\�Ӑ�W��r4�D���?�g�� �6Z�����5��}����/�Jĉ`� �G3em��3<��=�&]��w:[�C�y�to-�PD��T��3[�Vg8x���C�%�Y{ҼáS��Y���zĐ|��K�j��(��Y�Ѫ�����E��a�8�z��]/��e�\�IU��!$);��=e�m��I�w��l0`�������5^1��jI��� n����y�ڧ7�y(����x�u�������� ^�n�~g��G�(.v��\Vh߂��Uw�KT}�I�� ��q?�%ѷ~*�m6��;��6� )ݍ$4C0�V�&& _GN騳0�=���]��txW!��僋���ST-MD��DUX�wV��<)AO��6ԍ����J�8B�'G�Ա�6)w�q|��e�'jS�X1���n�+�������M���=�wD� lq�ό���hއ�:u�$�P�1�-�M%5iE ����#������/���U���n���ـ����;�Oo'u�y���[ i��(�9^���>��F)�=�z����;鍷�s�lgH�F�P��������Y���d�ݛ�7��;�b�[P]���}+�S�ڶۥ�%��֙�ԟ&'7fv���Tr�d����9��F����3�oN�U�(H��i�eY�0���Z��L�������$ �݄f��RT����P P�kXӑ&[9�ES��ZF�N�5m�\����y���#��V�����BXC)*��n�3D���#�����E�T�ٕ�3���R��e.�b��5ȳ�woʀ���t�L�������~+��ne;[*�d�}���J�V��Ā���ۡ&�`N}_2(h�T$�%�,�W�z����'���7�7�m�{#�ܯ���y�!��C ��ŕn�EB7�rI��#��lXM�T��Dm����u^ l��JpKE�-B����~'��yG}4� ���5�@�]�ǺH>6��^4����Wo�a��N_����}�T�0���#���!r�����E�%>:v�}=Zh���g[)�s��i��6�,N��֟Çn�50�a�(-�c�<�N�����O[��e�r'k��3��!i�~�9����� �Љ9��8���v�)$�#�0��ݹ�k��)���ɠN��4��H��f�� �>�{l��T��.-^f��oY��/�#��9�z�1���?��"�W�� �EL���W}��%�~�zl��L��bKE�T#��y5Qms�����HOuj$��R�?�FF�����/z�C��${ݞ�}uDP���}ń���#��4�����}�_hSz�NH[ƖB�IJ�#1�0^^�L�7�j����g��]x��n�Li.�ұ�Ì��PU��Oi> +�]�,�k�W:��_�w�Ew������Y�%�@���Ih������7 ���R}d��{�DF�At��?�m�!&��;�v�Ť�6I�|���p���|`�z�����3 �=�Q�m���ٞ�M����3��PJ�E�A����F�G��s���`)7g2t@�OnO.λ�i����;Q�A����5�3٭h^i���+b���f����@J�~�B[��]��q���M�R1��1lN�= ���?&W��s*�Ϭ?�J��ŧ�{Xy��l3�{�a��7���� P/���Ŏu�t��gY��ʓ'�|�r Ί$lo�0������V�l�������X~� rDb�b��#jr]4�wB����D@�Wz��@�����*g�$װ�Q�e �x'#��tAڦ f�~m��n�(m{_��鷺�)�Z�V'w��a�ӿ~V�R�BaG�P��i�pw�Oآ�ι��=ܠc^ w0������Q���}瀮^U�P��q��elU��3WR[��� ���Z<V/�� 6�H���*o��q����G���c@Q=*�F0�_]�����T��-�����4?g� �j�Vm���.�Z�����!�*���>l��6I&�VH\�LJojx�RV�y0�eF�����L�W�*���]�X7���,(�A"���b�ڕ4Ɂ���+��Q�+��(�1>���uC5�7j�@��D� �OV�^��:�����?*���cР� Q�ͶNj���H@%K��:�be�*�������*�x���8���)�r�����X��n����x��� ���|�!����*��t�j�{O�٭�<���k�ɯ�% �ZE��@ʣ�t������$\+��2�5�o�[���5;&d�ߪ ���)wC�=�y_�H�8t��^���ɅFN;`�Wzxuge����0'ߑ�1L�Z�����ޠ��y�Q2\؍�[U\L�A2�T�B[a�� |�<I:�F��x�� 6+��7��l&Z�7N7�́X1`!a �R{{�G�=G)���S�]��Y�d�!��>��XŁw���ᢐ���~��/�g4x������\R=�?R�[$������f9{p�;|���H�1�% ��0��<�G8+d�/5�q�K�
Static task
static1
Behavioral task
behavioral1
Sample
e8b138ec642bb6fa3497284948f9b65d2ae98885b8e2c3c9bddba8a7d4c3085a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e8b138ec642bb6fa3497284948f9b65d2ae98885b8e2c3c9bddba8a7d4c3085a.exe
Resource
win10v2004-20220901-en
General
-
Target
e8b138ec642bb6fa3497284948f9b65d2ae98885b8e2c3c9bddba8a7d4c3085a
-
Size
1.6MB
-
MD5
701ab37cee459295a31dbb2459ef378a
-
SHA1
2540b89ab46f1eb8e5e99381de4ef063ef8e18de
-
SHA256
e8b138ec642bb6fa3497284948f9b65d2ae98885b8e2c3c9bddba8a7d4c3085a
-
SHA512
cf89ab5f1ef82a9850f54c6dd2dbb6554cb9551deacb8db0d770a7d82b2c9c1db5fa450192df0eac016989fe2fe2fae46dbbfaed49087a6ce773809c46af7363
-
SSDEEP
49152:0lr45bcy1XCnExhTxlAPWz6uNNdfTjEW85R:0lU5bhWExvnfP4
Malware Config
Signatures
Files
-
e8b138ec642bb6fa3497284948f9b65d2ae98885b8e2c3c9bddba8a7d4c3085a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 340KB - Virtual size: 680KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 28KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 28KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 168KB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE