��-[4?���ܸ!�b���l����.\�Z{`Zv�� y��ګ:h���L�S�T�MP�O�]����i��Ӊx5��Bc����i����[��Y��y#�1I�a f�= ���;:�?��\?u�P�����"p���AjT�:�Fg֍�5��7{?�;l�vBw�Zc'���; |����[�QトA�� ��i�����k�����y%�9���D|�E&�O�g�����b�j��:(�ڔ�dZn�55o�m���.�������_��O��gI�g7��%J�[~X����~R"z����&)��5����uw+r.3�i@��9��}�X�H�4�!;����ֶ�9�*�=��� Z��k��0��$�N�����KW�n��Ճ�|0eh(p�ω��}���bC+n��_P���"g�� ������y�l"ݝ���%��<8V�8�h��/�����)����f>ؿ8�dBj& �J ��YhK"�̎ og������cC��d�h���~"���u���=�"(�t,K�o�b��2���x�����4�+ԛ§��xc�C�:ݞ[*�W�ҹ����MA��t��C3�>�,-�����%� y՟�,�aF'?Cx������q��z8�bMJ���:"䫾Ұ�ì;&�N�*�T��^���V�ŵ�˱�>OE�D��^�u� � #�'��@M�ȭ8�"W��(���0��"�#��<G���� <$�l����~N�F�0h�������E�K_Kɓ�[��tJW�U̘M��<���_�|^� �o��K�`��&A�=,��fF�txn�u��Pù*�} uE��Ŏ���Ϫh�=�"��ԑۦ�}%S�t��iF�9^*�S]�3t�T;:���,S|��4�G&S���6����a�J�@TS��o����-�J�x(�2\j�5�q��bP>��g�H�U��id�n��{���!LKH�|��!T�P"�Vb�ƟfY�L���] ���FM�z�h t�S.�f 9��f}/���j̵�R��eJܠlJ���@]���;��⻈s ���KTӢZ��B��0��p=E��,�jDG]\[���W��)����]�[�Lҽ�a[�����C_)z�2�%G��E�]�{���fuf�>�v,�c�J��m�5� %�f�|��]M�f�?d+ݮ�ԝ���z�����'���o�^t#� � �(TMgӡ4��]�*�v�F{�!!��!j�"O�j����fu��/*N��%�\IL �voӤT�����`�<� �v��M��sȾ��j:>��IM����>�����}�Ħ��|#=���xΒ�OL0a+E�<���D����(jt�jZ���}�Qj�]o���g��V�j>���hˡ�C�6��i˚0�7�1o����hQO����Ro9~g{W2���7'�2iѪ������e$9T�<�� qw�u�2 �遜�]<�+� �HF�,gI;������4,F>p�D��bYť"W���.k�Y����2�LK�����f�N!,�`>$��ۚ��q�0j2И`�����>H�aqΏ���[�ˉ�6�7����*v����S�K@�k|�5c���{?2TM�Pb����e1�bՎ��2g�/���#H�����q_����Uv��Ś� ��m�ҸtV"��~6VhⲶ����]�2�x��0ҽ *�PX�8Й��+��Jg�l�)�����R�'Ն! ��f���J�x��@H����y��k�����ha�+�����ȧS )��`}1�#�m�%��\�g~5���3�p��x�6$-�@Y��p�i��������?~xQ��˨�Q��Q*�����������O� d ���E��|��0D�mP2,Mo��j��?f�iR����o���P�$����*C�l��/�� ��l�|ԅ_AC�N �M����?�Q��&�L�u:�������g�a�0�~c ��}G1��/b�`�$#��%�����[��OzU��������Օ����c�`U�N���kY�O�⸏�! M䌮%e\��4B�KK�Pզ��Bp ���m���qkE��7��� g��x����5�� u2�B�s:��!�b,̬�1��~��.`Ɗ����Ji��`�W"\����p���\�<����`J�r���J��v�r �n +`�m�[,�/F��*��F���R��E���XS?er�N��CЦP��Mצ��F��j���:����l�K#�z�����+[zG1��b̓u�H!�y3����8'|�RI̍֯��J���}��v����'�InG�����^���.�p�b/��D�>�i8�A;��*�T�pI����k��-�Wd���=�.斑 .�D��lI2"�Q�j)�k��Q�M�,{%��i�$�fg��Z [��7{"�YG/�S�d9���z��N�����ebC��jk/�L��^�o�sIh���b���A��˰���;� �7���c��T�4K�����~�?&X�3X�ζ�}�Qv����`��( ��e���j����2w;���"c2_S�t��$�١����ʰ X����#��K<�pWWjg�P���.Dw� ���:��i�>������kT���\ a��u ��,����1�A��Y˫��)��f$�ڇ�d��O'�O��$a�QƦsF�_� \bd���4K,m����b�a�6�R:Eh�r�ޒ������'u�e�.��_����'o7k(�VA�U�\Xj7��%u���5������&k�eS{r����b�Ew���vi���o/^`���~���u���>Jv(��>b��M3����6=�{\����/���@/<X78?�*uN���,�6����b$F��u�й �:!��/����<J��̟�<�}\��1]K������R:��6�^�F��a�&�pg�g\B��"�pK��e_^v�wA�d��� 1���q5���H�@=�Kޱ�]�1@$��-�~Y���+G:e�Ňk�q�?\q��w���n(���k\�k�0+�(>�t:O"�'f2���"g�$������ê.��b9���t�至��V��7(�M�(��'K�J�O�g�ߋ��w�UW!Վ��/�̔iK�j�ؘ�Ы��:�+�r��p}jT�$������T���Ȼo��S!M��<��# �sUI�=ӳ�'���CI�����%K�#�_�u�����6�2Ԋ��� K�0��tg�����H����@Z���+��[�S���M>e����d�m�H(kâ1y��K�(�4%sg�.���q�x� k�7�ϝ��:OF�̈P�p��k [J�| }_�R�7_؟Pg�/U?_��o�_Ӌ^ǒeS %�xS9���k���ߎ��[�8�
Static task
static1
Behavioral task
behavioral1
Sample
6e736c4bb791b83787d1866e1f286f52ab1a8fbc8a20d5061755b4ed7d99a2d6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6e736c4bb791b83787d1866e1f286f52ab1a8fbc8a20d5061755b4ed7d99a2d6.exe
Resource
win10v2004-20220812-en
General
-
Target
6e736c4bb791b83787d1866e1f286f52ab1a8fbc8a20d5061755b4ed7d99a2d6
-
Size
1.2MB
-
MD5
448167188d4f47b825a5aa8c0ac12f3e
-
SHA1
52706abe223080b9f905174ff3d1a1a35e3db081
-
SHA256
6e736c4bb791b83787d1866e1f286f52ab1a8fbc8a20d5061755b4ed7d99a2d6
-
SHA512
97b970972b29d62c40a06b0d2cf06424c20cb7eb1b2fa199c39ed6f3c9b582e84f89ba3083d49d278a4342611a373e129842b385ed3f9c9d91860bf97e0eeafc
-
SSDEEP
24576:QmO82iSkvu+T2tlgdW2fsJVlRnTR8GPPd6ZOJ6mYuCCN+R5KU:5O8bSkm+TgsW285n9bP+LZH5KU
Malware Config
Signatures
Files
-
6e736c4bb791b83787d1866e1f286f52ab1a8fbc8a20d5061755b4ed7d99a2d6.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 12KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 800KB - Virtual size: 800KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE