�^*9��O�#�5���KV���.�3|��퉯����E�]�0�`9��<@4P�g�g�N���s�_�e |�,�{��q�ȫ�?SŤ�Q�Y�F�+i94�0�T��[Qg� -濒$$1����1P6�l�"]R�~Z�g<�<U����h�^G4!3��[u?���%�h�ոhӯ������oaшԙ(�x�,iVj�.���zz���N���?KUe�r%k�>1m�R���W�Z8�3{a�1o^����0��=!E��3��V��9�����_��G��������)�<��I+y��ED�笹��My�G3�PB�������hDf 8��ƨ��\s��Ұãψ��i������2(X�CM ���(��ݸ�ZT�@�������2�AY�! �';Tο����p ɱ1��K �(�0Qv��6l��Fԯ׃���ԃ��&�OY6#�:}����5��O�)[�����N)À//�z�!�!=������Ul1ٮՂ���EZ��X^No���$[`o�Ú��Z��^����N� V�f<�9R�>B�X��N��D�Y��*��`F�{�� �҇������7���j��.j�|p}�1O���u�u�f,W"� ��p��Y� *�*x��{����tY�'�& �TG����@,t�]� ��&{�K?~`�ƾB0���T@��`�LB�@�aɱ ���Vچ;����%o�w�ݞ��}��[C؎_�a� �������_1�A�����γdT��|^X��sz��N�[j��&�TԴd����#â��ᅒG; �R?u��2|5,"��ʼ$w�����X���s�v���_)�����cثx����4c��j�+�,�wkk���{�QÚ�jGTf��ҾǀJ��*=)��כ��αh����ݺ��W��}}<ߣ�;�fv�2z��������⍐ �N��ij�=�3����������~�SӆV!7(hfdބ���h�o8�°a���y���`��I��-7��"0(Ŗ��e�m6�J��� ���Dd8?� ���m���K�E���4��ǁm�$�K��]a��D��P�|E�7��$�� h�_�|��W��K%s�;.��(�o ��D��c��,�j��'��iF_��[/�:�ñf��hR����En��L��4aQ�ñ�S9i�nA��'�l��m�61�{��.x��{�裻N���������]l���~V`\���Pb1,=A�u��*���;; 6� ����3���[�;��&s�G�;�`���}�n6#�>a�H��B������o�2n ^/7��ʉ��'�f_���;�D7���mE/�Α���q_�z닖@$>?���I���⵿%��g� ��� �3I}vDB�w,����ww|�φ���9���4Z-���Ne�u��*8�lVvm�;����.L�߂đ���Q�_7Gkؔj��c�R]���p�ڦ�vH&#-�3gH� ɠ�%�6봗��������0���A[� }_���YN�c��y;���pk���j?�%6��E�W��D*Z��x�39o\̯��ͳ�Xڽ���i�RG�<$y����*:��R4�����qn�'���MS�g>Rm� D�_U�]%"=A~&��T[V�!�sey���?�������r;ek5��'����Ҙd��!ثmC�w&m4����e�ƃ]d��l���Ӷ���>�7H�-���D��.?��~R��4�p��Ԛj /��ׄ �{�����1�Z�'F�������ݹ��Ehd9(���Ȁ�|~N;��:#����L��|�r�<�?O�ˉ�M83�Y�t@���6,͖�l0�zCņ�$���%���̅�� �1=��?̘��H���8��*NI�|u�*�qh�'V�6�s�;�\�<���������3>���//�Z2�=�=Ưb�] ��PgޝN*�7翰Ϧ/�����>D蔊bW<���Qc�SZ�c܇O*O/Q �]k���|g��7�U$���{8�PlUf }�k{�4�hJ���wt��%����]�0�E��(�N�w�«���Hf=r�&-�}����Gs��{��qY� �����)!���^�QT�Z�,t��ћ�D�z�)�!8�P���/_� �����O��v����� ?L�=�*Ÿ��;��Ÿ�)����lyD+�wXД,��s�y~#O�=&4�y���#!��&� p���`��j��4���)��3�j;�6h���ƢN�'0�D1赩���o�X�m�{�"�c[� \���Nb��.��zu�3J)��i����2>ف�\ ����+����>�P&���O�Æ�'��\r�mW�%Igޢ-��%v�k:2ǵy� ���\�z�xk������R蝛GRԻ ��x-�L�'Um+�w'EX��gWs}���P��l�i�H;�n�O����ϻE� �'7j`綖�C�����"K��gdbtƪ� (���]��`[��G��� D�0R �]��~C�xOZ4�E(�ׯ����KpJ>����������l#=+ftN?�ԋ��څ!?v��-F���+����ZZ�\�iIv��s�Z��0��>�&��k?�2�ס�G��a �]��Lr���6�����z�x}�&u������P(��(�H&���[>]>�U����0^;d���&�i����Fs\�9��X�ڟ�B��8�.G@��O������@�?^�O[yj&`f`Y%��Wz�a�1��&���Q�[�Ӝa�}ѯB2�]§J�s5@ c@�� ���Ah-v���*�j0����Td�丬����r]��#&�9��@�_[�eؽ�5@;���ڊT��z 1���kL>�-��f��l�k�O�Y���fkA������Pd�s�á����~l`6<�z7���p�kɫ*6���)�`�E,K�8�ؿq��@6#w��D�a�*m�L���{��Yq�� �hW~$�5+��|�U����sG@��iQx]=:r�|gt�:)�[K�B7VM$� )��,>�Lvbn u:�)���������2pW��� �fz ����.M<���\�<`e鎒�}w>F��'���d!.1ח�v�װ��F�a����*���֠p2rO���3��F�;�s&���1oѻJy�y�ol�J�W��?��sA��cP�ǖ4�?r�H�4�_�料�ΩήC]6�+��k�{Y͋l.�vS��3/i�3���b��>�:>xcȐ�w���ɃΙZ��q���eIx��$[�0�� @_�W���Ħ~ET�ei��r�$^R#�\��|��8�Ζ�MJ_�^��}<�7�� � ��Uh�)�ս)�{QX��IT�hj2k�������l/��C|cA���v��X��9l���F74/��vfCpyt�z>�W���x4U�� �g�ʥ6�� nw�Mr�h�6>Rϼj��!"/O����A��C�!�7��| lgg��i��d`8<5��ЗO��ו�=���܃黩X���X���/PR����q^���U�/�B�s��/h������/��*俁�����W� ��t&gif��'{Ց��r���4>0~q���:� aid���ht��&@���,/����a&�0�<�Ǫ�$�ȿ������"��|�#�tv�� jbF������A��c��U� ���`��QPz�L��C��0O05.9�^�֓��~o;]��ǒ�ِ{�� B�՜��'�g ��'%������ 검��v�,�Es���Bw<D~�
Static task
static1
Behavioral task
behavioral1
Sample
6870f90f9b47b507038c858809c2a6bfe4448e4fb17ace9758f2c005d7468cfb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6870f90f9b47b507038c858809c2a6bfe4448e4fb17ace9758f2c005d7468cfb.exe
Resource
win10v2004-20220812-en
General
-
Target
6870f90f9b47b507038c858809c2a6bfe4448e4fb17ace9758f2c005d7468cfb
-
Size
796KB
-
MD5
920d8fe8edeb7d9f98f792e73b4fce90
-
SHA1
d4c3259cde3aef603be1de154704a266256be0d8
-
SHA256
6870f90f9b47b507038c858809c2a6bfe4448e4fb17ace9758f2c005d7468cfb
-
SHA512
3fefb80a4ed0c7c6e1d10cc4cfb70deb6ea9377a536996c74deeb98cfd58a666bf3f3055771c86965e21ab4e1f931d39618bbceba40b228e7340acf0aaba1fe0
-
SSDEEP
12288:jh9RXjlnC3JyDrSect1HY6gJja3UoHzlQQm74u7oDLxuqAoFW17blrb:19RXjRuJyXyt1HY6gJObHzl4RA8BbbZ
Malware Config
Signatures
Files
-
6870f90f9b47b507038c858809c2a6bfe4448e4fb17ace9758f2c005d7468cfb.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 14KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 171KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 606KB - Virtual size: 608KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE