QO��ɷj�g�4[���6��Z��>�J06�ě�={��&h�x!�R�P�Ƀ��a�L���됶���J���'Ѱ���$c�O9`�T�ft�����WL��ZZ��wZq@W����>w�Q���L������ӯ4!��G�LʏAΧ����������ؐ��5�E&�t��ѝ���k(:����C��Q �r=)�|8�� 3Dxҭ�g��qHH)�S2��)P��^�I77ɚ�ӑ���Q���V"fw"�*^S�e;ш�(����n�>�{���ϻ��=u�& ?��!�y���w��T���s"4b���� k�V _.ޫG�Qb��tH !�(k][�h��Nh�J��i�$I��2���Dp�8<��)3�㺼�9%���l]�.Z�*4�Ya@�e�� f7��]�G�����^�CĿ�=�����{�&s)�������2�ˌ�{c�����nier�����z3����������ҋ�,A���JXMp�1�*�m�@N<��i��r�`d���h�F�b%7J�dhg��$<8����p�|x�Z�b,�Y\���Cz�d���T�ܱg������z֬������rZ��ӷC`�l��=i,�� �9�~tufl(��t�R'-Lu4�p��2ކ�����f��-Wa�R:�F.�U���}b{� W�!O��P8�b�wW]�2i0��)��G�/Xs2(>��U�49}��.�(o?�M�e���*� ��!��0�~_������)��KdiO�Ւ^1�Cx`�b��Bđ5�Ri/V�CU�7h���eDV,�v����K^���Ml���͠�ɣ��6�U��@�n5�ʚիP,���|�8���j��61~j� l��}FX1�d[�g2#."L�����8�~��O[�vQ<%�˺��$"|p�-.�r�/ "�`���b�ǖ�Sږ�@��.WuV�:�Ы����뛃?A��[!cV�I���f��ݩ;��6<ЂC���j(TW�{��p>�F ��ST�T2&����;5A<�����e�p��VmD� 99�H\-��=�YGKN�7����]w���C�u�{j#���Yg}������t��<���F�?��p��!Rv���*�BG��!�*A��C��v��d� �a�[�ƩL�v~����7��B�_$bEz.p6�ۃ�W�x$��zq1�_c���g&�O�k��l�r���Xxg�Ŋ9�h��C�L)��P��ֿ� AE.izX�R�H�JF���J=_94uF�]�*t����_',wŋR���c��|� ���c��锪�,;5EŔYqW;���b7c�F��#�͏.u5!�|vѵo_�r��6Tt Y[�=�#L�˜�����\�,d��o��L�C����9}^/�����*A�J�b6��h�0�] �����%U_.�ۙ���K�p$ +7kDV����y��r�d��ʤ����y���#%]���:��o�', c;;E{�)�U���!'s�q2If�w�ytߪ�b�=�T���_�^�˭���E�/��p��|\'�s�|�3���T�_� �ʑH>5[�Py��"ϟ �N��ﳇ^�9YՕ�y&�^���fж���}��5��A���=7�XH�$���'��R;����1��Wl1\T; ��O+��hd �4�opw��g�:{$�Ѡ�1_*�"t�Cq�]F0��y�%d� �7j�vV�$�8^ �u��%��DX9��I0���b⎐�Qw]���g������!����R�e�p�kmҡfl*إ�ݝ�c�l�de��'Y�رYdW��'��`�="����g+>�#"e߲ ��: ��6C�q���3k+G��%��=k����M�O)v<Jxg�ޡ�l�� `u�m�ߒ���lrC�uh{�z{;�����C X��/B��ef�5�n�3�Q��@ ���i"�V�V���U�`-`'^�\��ِb�:�>I��jռD�òI��A����wQi#`�(<$�Oҗ�vyP�m���/g��əOdvP���Ǚ��!v��z~�D77�.2㗲ؽ5k�R*�� Z�gw�}�Y�N��i ��C��C��:0>�eG����wm��=�s�u��o_��_���HC2�¢�]d�:tȰT#����N f���G ?v7�`p�x���9F��"I������5�������Nc��-1ƒ�����RH��z��':'ɪ�d�t3�'{x{�~��y������d6��(�=F��Rr���n�g��#}7}y���m�pH ��~��6�����V�5֗E�LvX�ȿv�#�)���>VT/In�+����RΫ�]�}-%N� ��G��Z�z�-$���q�0$CDژ/��;��,_UZ���쉲0'F ���<%>;ܞ%�}D0�gA Ye� ��F�L�.��<�l���� 8:��V�����+�!7��<G�_%��렂h��vs ��k!a��E�"w�l�Ӝ�rqp?����f�[�pF]_.h�"�AG�Cr0~<�ot�ϒ���8HI �}��R�z�!U��dO�j{U�0�"AᩀӴ^���$4�f*���K��{Y<˸/5��|���Ai�+��b$��=rh}����@�Ɣ����@M�<�\����Hh,0.��N�ŏٳw|��Y��[�S�>�,��)�w��>b�'���frX��?��(���I�7oL[W������,�r�{��\Q�Y2�CJ:�F���Kc�ql�{z��o�����~���w���o"�<fAїu=�S��_iP��1��Q%�U=���@wd�z��.����a6)?,���1L,f����4p��F�ʌk���p�kK�#̶�=��O�߳��.�c���?}�Jf�!�l�J�*GY��Ϡ�弄Zj�� �D.�m\9�Ɗ��Kx�%�ե�z���;�6s��O������Q������A�������&�v��NJ~�q�����xg���y��- 7l������=V��|����苲ҷe[�.Mݡ���g@���J��>Ӄ��z�^N�a�ǚ��z.����]�S�NČh�( �+e��߮~���)/�D�+��3 Y䭝������<�������`���̃�/L�hE�]�eAF����dz�p��V����S�z!Jsa�*�٤�N�6�����q�FU�aC��YST�/c��r�R�L|�1�>�+<��H��]�S"E�G=B�)n��{h���'ݯ�Fʓ°��ߣ��!%C�W=����J�L���)>5���{= f�p{�O��u��hN�^��&߃}�pj�Z)����F���m�78> J���Z�`������0~�������8��)�z߷4���K��]S�ZJ�7�&w�?���N��=�;���G�(�b���-U+�2'�x��`P��]�lS��Gg���٘1��Z�X�cHE��95t�*���?[����[g�\����,����+S-��h6֎���xC9��T翍��-��yK� n\)��:Qg��aj��~�.��Y�4���-1(e[L+�5����qEl��Ө�+���$���R�x٠m�Q?j�P� xy�7Ժt���7��V�8B��N5<�
Static task
static1
Behavioral task
behavioral1
Sample
7ddbfee98503b76e1572adeeeff5de2d5789bc4ca358d0b1ddde4f8effa18396.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7ddbfee98503b76e1572adeeeff5de2d5789bc4ca358d0b1ddde4f8effa18396.exe
Resource
win10v2004-20220812-en
General
-
Target
7ddbfee98503b76e1572adeeeff5de2d5789bc4ca358d0b1ddde4f8effa18396
-
Size
1.2MB
-
MD5
60ce1cdc5c5442bca427633972cd4098
-
SHA1
7d0c7921713725031a32d01ff6f3897fb0ca5486
-
SHA256
7ddbfee98503b76e1572adeeeff5de2d5789bc4ca358d0b1ddde4f8effa18396
-
SHA512
99ca67157a333e772061b4a192ae51452eccf5c6cc3ce2976cc9a17dea808d06e887430fc995c9fd517d0bceeff747be73c6bd043e305b06e6fc12f9d5b86fde
-
SSDEEP
24576:5wlIkejMdaJtslsKdoGro5ic1R/2s0C4ComzoW/VY:5w1ejPJQdogo5i8R/ClCo91
Malware Config
Signatures
Files
-
7ddbfee98503b76e1572adeeeff5de2d5789bc4ca358d0b1ddde4f8effa18396.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 44KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 168KB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE