����^�Y���� ��ߤ���������H��V���7扨�:wch@M��2��lx��b3J��&�.�p��IF,��j���Ԙ�.1i���(s�T���(�rǑ���}�D��HC�Z��\3������G�]c�I�2��뤦a]t���8kLu��%�|�oM ��t�����>��G�9�M��$�!�ӄY9H�G�x�x��w��^F����W�>a@�U@�H9a�<����[�K�w�K��[w���l�E wCRR����T��Xwfp2�qi�,_-!���=�:��c@EE8��,��$�&�O�U�?U���4�m k�/b��r'�_q�X������Ϡ�����u�(�Y9�z�Q������TW���Fvy+#s}�ڔ>T�������[�hN���2:�Q���(Yr�2?jc�F��R��;��'�['?�jg�B���^v:�r������V'�>6Y����y-����5BK̃g*b����y��oQAA�#7E^�E�����=��3C�w{0}O�"�ق�#��@ߑ��@��͂MaD$���������9T1�^ &��K8p���B�J"�+c^N@2ѫ"�%�Y�kԜ�x����h�4�78Y�!lҫ}�\�n����IĄ���t &�X���K������>)����z�t禾���<�����4p����y��:MfC���@/F-���'�ܲo�'M�G�ދbQ�� ]�^^��ð����:��r����Q=��8���l��s�!��+)�ef�C���:-�� ��+VX��9G��u/yj X�U�4lW;������m�QA�%{-| ��+����k����|��́�T���A���ǁe�#%v�1�_A���� �XZ;�LD���� 9����Z�%���P����r�o�$B��D���6��%���9�[]B����l2�W�j]��sn�? ��3@x8�#�&���e�UE^�Ÿ��9T��QOD��p�DO��3^fѭ��L���v���<��d<e�ɞ��!Ce��4�������<ϒ�δ~À(k9}�(�bM>���2����S���huG�Ʊ����b�'6�#1�h��*��J(V�Gt�e ����)��@n����) D��f'E���,C�a���$��S*����=!~�V���Kl}`'��L���o�;��B�8 ���1�tо�JI��˰��) !���� ���C��O���Q������GZ+E̪�D����!�{�i��P���?}6��&P"���쟰~��G/�DE�S�4=zf�7R1�M3 #f{H���� 93M��AgP���3��NG6��%5;�9���GM�V�`2��?�G6^�E�(��+��WҖ��.�feM��l�v���DYlG2ή'^�~Tل���x��Y����BŜ�{��9�qM�/�2d��M�Vd<���|���T��!�Sc���d<�i'"~�~���?s ���4�߶Q�8c ��M$e�٧�iIS��-:$�1j�۲�Σ\\Y�L��jew��:>�QW�q�I�0NZF�Ibb3o�G�u�P��B�ٓ�U�y�����p�c��zHr��z����n�W����r�Y��'@Mnd-mO����qo܀�To��z�S�@�.�'���(SK�T9&������D^� :�'�}����<�r�?5]���1Ӏ������3�G���ݱ�^9��sG��'<(]��[P��k������3�뾑�R��=z��h��w���X��vv��Ve��������Q?"j��5B����AQ���؋��b�[ҩ�m�f���%Y�kD (�(X��� {-K�N�����/����G�{5u��N�� !�\X�6v�ᶋ��й�f�ʈg#X_��'����+�@aϮ�?Eڣu��P ��<��i���Ǩ�o�����V���~���Z��ڂ�kg�d���;��h��Z��x�r�d'����g. �k/Z&�l���<�3�m Qv��].�gA�4=�Eyt�>!�Y�3\��|}���-A�$'�Բ���/?,�0��?��< .�S!h��|uƗ�)�+��9��IJ ����?�Q}���tK�����'5� <6s�g�������>��m�)��K�E�����=�~�(�G����Y�+�tl�#I٪� ���y����@��uc�p�&���&HF��eY�F�;5���%u�(er(M�d�Hf��@����m�[��Zt`vSU���I�]v��uy1x�_a�sЃ6��R]�W,����� �w�KN{%L"ޫY��}on5���iz���l�͈�M��w�F)�n��w>Z�b�[C7j̑��[�=iJ^��J���t �u~�&\�E��f�4z~8�`YL�\_,A�v���� ������������?&���Yc�a���>�rM'cP�G3��tO~�p$����p�X����+�T�5KN�����LK\ ����������S�P���"�Pw17���D�<m�C�w�*M��F |f�r����ڿ��@G.}��*�~2!Ms��^OBQo)�����s��KK�^Z��%���$�'��:�b#��V��-'����<�>����kQ�dm�mu_I�Xl�?���V[�G4#w_K��������#r&��m��fF��@GF��~��R�����&�� �Ъb�1�rU�_M�D?��镛��8� 9VFq �i;�����X\�_]o�lK��97���{7TFj��ufD�s܃f�R�w[e�_i�4��.�ۥ��)8'��3�p�JyT!�T?t?T{->���(�lU�����Ŋ��\@���J ��K?���G���C��0eR�5q��4Ϡ,S� R���(�|E�0l�e �Hv�hR:�/����U��>*9��[\F�\�~�3�����J2[ Gō���0���t��ɼ����!�7�V�D���FӞ����X+���g�\Za��z�Xw�����ި��7�="�Yt��ڭ�t���!J�m�y��{<= u� �a����:� ����N��!�B��VD� '��S���o|3KXpd�'�C��q�Ds�P�O�QÛz���=�z�1�[��y�%���
Static task
static1
Behavioral task
behavioral1
Sample
ee7879961e8253d2fa2f1012994f0b0d03bb8fffb4ec6d03e6b2c2051009f06f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ee7879961e8253d2fa2f1012994f0b0d03bb8fffb4ec6d03e6b2c2051009f06f.exe
Resource
win10v2004-20220812-en
General
-
Target
ee7879961e8253d2fa2f1012994f0b0d03bb8fffb4ec6d03e6b2c2051009f06f
-
Size
3.3MB
-
MD5
7e8b65aaa765d835ac96b49ad2b6d958
-
SHA1
1ccb7652328ecfccf1b7b9d813b2c4c247a9bcef
-
SHA256
ee7879961e8253d2fa2f1012994f0b0d03bb8fffb4ec6d03e6b2c2051009f06f
-
SHA512
a09fdb3da1e667f487f34cdeb2030864d6a345497466826f782ca7777e6136d763ee72395e0ce5c7915b89a34c87b6de56ef18c6057eb18519884e135caaab1e
-
SSDEEP
98304:2fAw2ov6w2GZ5R/bCi4Y7pjGg3CZlA3DOl:245oSw2oR/Uuy4CYq
Malware Config
Signatures
Files
-
ee7879961e8253d2fa2f1012994f0b0d03bb8fffb4ec6d03e6b2c2051009f06f.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 520KB - Virtual size: 11.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE