�����Rbq�������%�;��c�6� ?p�-���K��E9S�r������G�Ƃ��T��6K�u@����f�Ҽ�����s.�R� �\8��Ax�of�݀t��j5��P$�`C�bN���k�^@��{ ��Ŷ��(1��1glUHPHV���=S�t� ���W>љF�H�7FwO�3J�ym~���(J�Ҙ��B�W��z�T��\Wt���P��"���Y��j.��;�D$��`�̒�[��7�8�`-tEڶv��,���ʔ��R~F k��妿]�Z?��Irq�=s�-�R)1A\D0��}�����P��i� �A�NŮ��:�b0�`Q+KGj��f���p�9ƶk[��g@�5d��r����`�AN(yˁ3C���Zp�ȫE�L�"��=������^D���Gr|�ǴE��T��n����w�,��҅�*0+W��������ng�L[�6���x�9�Й���Ql���0��� 8�w�=�e�bpU���Y�̓��>$@bm/�]�˘G�0�8�ٜvV��DN_�v�_P`�c���~�c�;k��4���(�� bz=V�Kn�e��x�6�y6�~wm�nY;�Ky������Wۇ�`2���-�@�=+ߗ����-U��0�������\pai���2;IM���k e�����[4�S�0|fL�gAf�Rub�Mы�_'{s����#R��Zq�<����vi����! ����4��ح+���� >ءjD�Pڂ�v��}u�LN� L���l�h 4�;�NT�"�����x�A�9d� �V!vSsu�Q)��!7�ȦD�F�(G��d潜�z��3��#�O�ó���vv���Q�]"��d>�-|���KG�IB��UO�� < ��� ��#��g���Ẹ$�LE��ш�Uh� ��N���_���__/�8B����y�q0��U9inp�S)c,x���N6��ǩ 5�UT���R�u�����L����}����)�Dx�ҝ|@�"������iG��F�w��t�.�{��������O�N�U����`��-���@���G���g�b��t�̄E��u��f9��w,����=��j���d�2p��\~�!i�L)�t�A���H���p��t�'��cN0�nl���F�NV�bA JӺzK�B�����7�D���{��\9���̗+6�W��H���'Y~nt��ۖe�U>ذ:�}W���"&�?���/��l����O�{��F/��vjH+<XŹ!��Z��A�;-k���2��a;��),�+�m\��U_"�Q�˱w)AK�&/���V����R��Yn��Я�H�o� �[���|�y���+�3 ��^a(�3��Ԩp�M�� ��)E�����ݘ�n ��^�^�dߟz��`�7���K�����<(�S@+��dB������D>��d܇��!�,Ĵv�6�}����N�����ԏI�H!���� �B[B�yt�q�sFJ� �F���y�A����r{z5d�U����1��2hY�9��k!Yyn�H�k��j��N_aa�Jvt52����p�� W0�G��I�K��B��xǑ�z/��F���DcUz8���'9bp���=�ߥw��sJx�.�3C>�E�s��_��U����a��a)\^h�Z�<}�L,)�r�/�͗�F�Gc��"�W��H3�D���"�$`�5��cI���vyN��s��S�އ�k!1�k�����x:�|#�������S�L�~X��}�Lꨭ����ڊ���w�̦9p���`R_Z�=���C0#���xkt]�3�N+;F;�:�;/�N^(t?�o���c�=U�z���a�ŊQ��D:"(N�\=�o*��m���� a9���p�z����E����{���L�.� ���N�����b���1�|�٩w={0Ixb�6Qi"�����9FA9���W�P��^���h��������K1`EE�n��� (X�C�[����0����}ۜ��S!{�++�6��D<$K <������s��^˔]���X�\,��ޏ���8�p�|J�T��9�u_3U��»�J.h/?������ܬP����_�F贄����6!P[nu������~�e������W������A�O)Pg�����ḽo����-k�D���Q�� ��T%-��Cq���H�_���@���1�a��H��g� �@=?ہ>���o��T�L#\��1c��R.�2��`�^�>O���xr2o4����dAS'U�$k��Kl�87�i�ٔs�KⷱE�>[��~���_�E4�ԚLo-��pk(*��iG]⬁<��Я��T�8��-? ��h����)�#K�Ag�L����� �f��d���Ez����m�\w[*�<�ׯ�QB'52[�\f��?��7{f��,?�L<���wg��c��] \�����$P�0/Mz�(����#Q�0�D��P/e[�[p��U��S�KҺt�� B?w�do���!��U*��h�(���L)1z�C��#$;${*���� �3���6�DX�@b�(�����u����M�����P[� w?+��e`��w��o=5Wg�[X�?�Xf�ť���g3�|Q�\cSAO�xi����^\��{לn�^�s\G��q��T��PQ}=��b���B,ݦ���SV���| �H�n��ϝq# p�h���j�8���sx=B�]o"x[�RO���w&����R�KA@�ZUD��I]�*���t�l*Wf� Z� ,>�Q��"��s�DV3���N�˴�=��Ě ��l�U�=����$OT�5��xmk�hD�|~6�y���V���זvډ�[6;����qK������ [�2��!������*����7'�����(��ч�pp�q�C!�gH�ϦL�&�/�dzm���IE��*P�a���"��3L� ¥�u����s �Úg0����-i�g+x�3�V��B�ad�f���"�g\��p+|���#J�Z�^|���g��@�g��Yp�x�`�����ض�Lwy��;���l�����|�F&ߊ�$(Vf(�����t�l�#W:F�!�.U>:d E��Ul\���"(!PR��s���F��ͥ�e'�YJ>q�wK�r)h�OA�2#�M�լ��+��U����VSlV�V}�{�,%�bM�=O�~r�c���>�\Mu��vDN �%42��<H��kҁi�� �>
Static task
static1
Behavioral task
behavioral1
Sample
3146902054b83ea130baefcef703108770cfb60502bfe15e649b15c095cb8742.exe
Resource
win10v2004-20220901-en
General
-
Target
3146902054b83ea130baefcef703108770cfb60502bfe15e649b15c095cb8742
-
Size
2.4MB
-
MD5
2a5411e7062652be5c553ce1d5718c45
-
SHA1
b5bdb3fd6aaf2536febc1ae774d5f5d05497528c
-
SHA256
3146902054b83ea130baefcef703108770cfb60502bfe15e649b15c095cb8742
-
SHA512
8ab4330602f84e0fd6169c3ed2b910d6ea5dfe72253c4bb8d6354c3ded897b18abea60e37ca7eb0c55634fbaa3319bed10a5ed585de1bd90baafa7a1de6d1908
-
SSDEEP
49152:9Xjk8Oy3dGGrRcKLPxjobx8f1KLfPdDHN5X0dnvXoQYJPQJDo0AO3Z:9Xjk8OyNb1cKLPhobxqq90hv1OmouZ
Malware Config
Signatures
Files
-
3146902054b83ea130baefcef703108770cfb60502bfe15e649b15c095cb8742.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 7.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE