��2k��������|O/j�0���X���O�:9�W�!w����}�@��?��k��Y{� ��n+��tǯa�PJ�K�.�e��4���^Vr��ƽ�:��d���_���̎*C�q����9�,=7|�ds��[�� �N�܋��(�U!����c;�&1H��"�%�m�JUVޙ�_x�MPVbO|�P\:����$$�+���^`fm�i��`���͘ ;�o럶��=')�8����-��H'��|���Q]������yKC�&2��c��A�P0��)a\�Iv�0K�YBȀ�`@ �5e�q�f��@�Ǽ'�f�H�E_��9e�Z�?m�JV�:�!��a�k�it�AP���,n��4��k�ZtVq.���H�L�f �dq���J��8�rh��A���j���Q��g���'��6"�`s�U�)�2U�w;�0Yyq�+�;�x(�fiL�T����e��[�n�!Y�0�g�=[�g ���"���L���}yǫ��I�H��]5��> �����ՠ"�lt���6�{���Y���m����j�1�"ω����Ri$`ؕ4;��1p���Kq489v��o��sM�ӆ����,AK������=��4:;��]M<�Y��:@�ezslL/ �!�c�4[/��f��G�5/�� �b��S���bA�'��o.l���J ´�FjcV�K(����ʬ���ž��D�콗c������K4m��)��EPz�`cջ�F��"x��H�I����+8�Sy��߯uj�i �X���;FN�De�����_���6RE����Ee��>�Hun��ᶚ�Jzo��#���|/��\�c��{�v��acg:5�y@�h�~2��MJ7Ku�p����d<����Eq��yIC�!_&��ЗL|��°zW�1��M����'v�����jQ�i-◞]|�u�\o���Ts�R��z!�l�>�̫���.^�y�WB����ۄ�#�������v:q��3yQ�y��D�ZS�y��*~�I��7d�WI+0HT�y�7�:0��\p% �5B��l�����M��~Ubus�N^���e4:6�7o����\5�"<yK�6�R2�����tT�F��0ю:3#-_���>3M ~Ҋ/���s�[S��:�xh�8��f�c�H�����0��>`kv-�NOg�YH��`��T�tE=D�t�.���w��Վ`g&�`�Z��}kԺZt9�>O (I��J�� �Ӏ��48,��\C�АE�w��i��(�y���c��G|��/�^��2��PKM����lߍ��8�vZ͕L������9A��ݷQR�v]����(�OͬVQ1��$���#�P� ]��0���*T���r���B~l���R�a ���e��;7��ԣ�)�G9�1*h�,(ć*�Ģ@!�X���uSV�;uK��1[v52�|�����r���!��amy���>�n�y�W���cL�y|�v���h�4���%8ݧ���Tl�CH"v�`s���L���$u?�Pg|DŽ&z�ڤ�9�{(e|PS�v�;n���AֶX�Rj�r��� �.V ��n,N��ܮ̆�~��z��)B��HbX�M�X!R�}�F0�j�n��\�+L~��s"Y�i��wo�gv��۫��Lb����=��6������7Ab�U�!�uA�B��C�U�{(겞Lc[��v�;5�Y�E~'Ԏ%�10�-���@��-��|�اO���w8s�P�~V����yk����p�Ɏ�kؤ3W���}����ٷ��/��{֖G]em�!��qs��`��P�L���&=M���p��m"����^LU�F�KY�������Ytq�7����,������������h��_��R8�<q����!A���J��^>����M�����O�I���8��4�X'�I�h�;�V�� �%�PGUM���(�q��`ƛ�]A�&Xg1��!}��� cͭ����M{!��9����{�����` �^$�Ƅ��'uӗ����PV�u?w����[�3���T�$Ϳ�w�ڨ"M��5d%& fD��D �}�g�fb��pzW���kT����=�������Z\�`��u���j�S'`�1~<aiwT@��W�- ���E��mp�շ삆=�LL ��{������?�m�v�� ���f;{��s籹T��=�+H61頻`�ˎ�h��;��(�ł۾G��0 �������� �����di����/^o�T��4��1�Op?�$7U��._���'���y�_��B���C֠���?-I�8i@�% %���A��))@��������/�������g�2������߈�'V�2 ���`��AB�T6g-�Hrd��D}�H<������9~�����,�}V�~�vF��F'E�/� ݿ���@\|���N��x��\Ϭ ����)�Sio�s�ɵ�Yw�;�:0���ex&||1!��%�B���F&��+S�/�(�N��[�r�{{LT�|G���m-0�?�� ��FJ�6�u�7h�#q+��ڂ��PaS�Gv���M�����*�۞��������Ź�8���5M�;j�teZ���k��_��� ��[˷g窱>G�;��c����5���GQH�0��"��s��fi�Y��9��v6���-a�'>b6����2�+�Ӛ|�ŏ�$v~M$Z,y�܆�tE�������}�S�F@����uw�@�،Ю�ֶm�u[ň�s��q*p�U$Dl�_4��vx�q�pk�[��;�����;rZh>��z{�䆘�5mD�uby ����f��m)\�mZKv�;1�A|��.�OkY���lS5�����&��Q�B �ٮ[�y��K0g� {�Yn�]��?NR��x����m�}Ձ���#��A!۞.ӕ0���,��9 ��q��7�1����xk�����Y=�H���aagE*��җ�\���������B�br���M��l�\��6� 3��g�Jj?�k<�Aj�M�!���hk����QI� o!��k���*]S¬E���+.*�� ;���U��]R Ε�G"AǙ���
Static task
static1
Behavioral task
behavioral1
Sample
9a1cb8564edcf7e64acd597acfa3bcb3911a32db30d917585c97b2afd9d74e09.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9a1cb8564edcf7e64acd597acfa3bcb3911a32db30d917585c97b2afd9d74e09.exe
Resource
win10-20220812-en
General
-
Target
9a1cb8564edcf7e64acd597acfa3bcb3911a32db30d917585c97b2afd9d74e09
-
Size
2.1MB
-
MD5
ef0f7d074e6d7083640de7341a128ca7
-
SHA1
19496739f94fa9c5d4f384651c85a6db5069312b
-
SHA256
9a1cb8564edcf7e64acd597acfa3bcb3911a32db30d917585c97b2afd9d74e09
-
SHA512
b5bec718178f26dfe9d6d8ef6034c29880bdb80d1a5e3f6614873d1a9c3867914053497d7915dcfbe5a86cd8b1f010c2250588acb0bfcb32d27cecc442673cdf
-
SSDEEP
49152:zAVlx6oblrIdUFAF/mxEzK/oy/es6YcT4fHCf0o1Zxr295MU:sJHeZuxd/mrQHCsy6V
Malware Config
Signatures
Files
-
9a1cb8564edcf7e64acd597acfa3bcb3911a32db30d917585c97b2afd9d74e09.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 33KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 6.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE