����+��k�*1>p4Z֗�����0�j%�X�[�p�A��?q��W�an$��R�;��V��,�B>��t'�S3p�+�$��%7���oZ$���88T8X��V��0�sE�3�N��Π l�9�6��� ���f��k)8l��Y����&I<�3 6Im��>�u��˭ɨ��)C��H��D��5b���T��+1+$��Q>�'��d�a��DF�o�����jɒ[�grV^!1ys��ȕ�-T�=e��������(�ܯk�8���Ķ?�ǘs(���v��i�0S�4��B$}��Eh6UL���l�d&Kw7���)M�#(� uF�����Pg_����ʷ-T�~�:U��\\�/j\�K_��Nm�>O:���?���?`K�T��NL7��J"���Y��R����R�E��TX�jd�nQe�:��BoG����$t������������8��O'�+*��VɌ�x�n�}�vg�}�f5v?!�Fv� ݎc���@G���9[&�Pז*W�f�r��fdC������HK�S^s�<H�R�n�Ar���XoN��*�юd��:�y����ܴ��yV�s��B;�fe�eK�-�&R� �=�#z�L� ��;%((��q����3�S�n�}�N>$��� oAҠ�C ���?��{�����12��I��lWk�O���q0�F�8�1�~�b ���Lε��ɝ@4�r���}U�������w���f �n`���'��%3خ+���d�:L]�:�Q�|-�����w�|hoh��Ƨ���(ӟ��p��I������C��uSU=_�N�� ��x���]J2��O�N����CvG�7�AGn�=s�� H\C�p^} *�x� �m�:�!l?�f�֭i0�����dT���R2-��6��v�������~۞�L��n���%�ĥ��%����F�Ӗl���[��@���|8ܠ�h�vHh�:����[������:j%�͙\%`�'��Wy�W����Fe)��@Hm�(��� ��9G����V�2�NQt�bÅ�~�pd��?�ƺln>%�$`��XhT����ިô�c���D��e�4�����1�0ͦ�s���>��z �^�r�_�o���)�XtB�rg'�+�����G ��1y�����&�#F��F�ݣ�k��n�]��s?��3r�$|�]����{��.�Ƞ+���FΔ�]0������Yg���������T�,�]���]83]�o�����o�[�_�3 ӯ�\��.���@��x�ݕ���ݸ�5��3"i���7A\'��|��Z��G���������9k�����Rm_��F�HM�&AX�y�p"R5|��,m�������7�"�8�q��e�!%��q��V�Hj����#�Z�;)�����+���H#Q�9�?=j0���+?m�����[a��5�S�k�M4�}-�i#�Xt�'�/���0��n�0�@��+���w�������e^^�����W_��KYA6�\Ɣ�s(r�7�p�c!�O*߁��N�8Uo�qN7v���E]�ց�_����/�4S>�����y|� ����Q��L��=1���x�B��@pp����y�U����y?8���w)������|O{��V- [�o@S�+[k"8����c�+#y$�67�V@���,������k�2pa�˞4�>�����Q�T��0���^�P����9���_�Ek9��J+�<���/�������3x��(�9��)�����2k�kv��I��x��jq����lam4b�H��dP;�����?4�#������2�E:�0٣arT~up��Y">X�|mM<���H�{7)�8"d�}-��c��U�d����˓�����������F¡��[���F�$� ��s�T�]\8�t4�&`s�Y&pXC�^Ő��'�E�s]��n��������Qc%�Ϛ8�����# "�fh�S�1o]��R�}��5�S�}����c��1)�X��W������vy�p�7�1��F!u&��(�erQ��ZY�8����X����y|QL_����ɞ�5�G����&�^a�b�I"��]��@�zB=��*ȸ8���,�N���M��!�m��Vl������L�B�M�qg�pN���Oq���"#-���ԝ������ �!\$���my"���yVNS�|�3�P��wX������V�m��*�2��O�rF�8-�Cd���l_�>(S���b7BL��� �@����(sU�['*èK[�+�+X�Ä��9G�O_���\Ҵ�O�n3�?[q>B.\�j}(��0�Lq��k0��2m1bǝH륡������*�Hq� /�|`SRd�)|*���'M�����U� h�������z�&�(A�I����t�P2۹;A{hg����tG��������8��u!��66m{͚ezc��~aI=#J���Y;N�}� ���od���M�tc�I��fś�ej�g�#ge� pJ?16���=x0���([�y�<�H������t��j+�7gD �w��}]3)h�j&�rل���_V]��X��q��{ks��jI=��L������pk+�3.Y�bY����,X��0���Q��Ff��^8LS�<�יKC�5���7 s�*y����Mf���X�+���=��o9���J����=�U0�������J��?��ZX ؈��̵ŇFʀت�P���S$C�d}^���r�����f8?={/Iz�YT��k����c��q�:�#Ϊ`����^�e��b��xV�s� 2�1����o=R*��/��`�6�\뜵��U��,j�&��Y:���ꗲ�����f}�Y���~�(���ix>���Q�~A�K�i�ɗ��v���i�,J2�z�x��>T����Ѩ�}C��搨nqC��qS�^T�z�ϓQ�[ S�Z�kpav2J�(_rGg���r�y�uÞ�<��*�Q!H�oO��lP�s�2��T�����;R>�qE����ሹ1Ɇ��tS\�H�8$z.�Q��j���`�yd%Zd%x�Z�c®lݯ&5
Static task
static1
Behavioral task
behavioral1
Sample
78387fc5006e3505c759cf31a49dc8a253be67865bd1a6ea641ed80d27d70690.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
78387fc5006e3505c759cf31a49dc8a253be67865bd1a6ea641ed80d27d70690.exe
Resource
win10v2004-20220901-en
General
-
Target
78387fc5006e3505c759cf31a49dc8a253be67865bd1a6ea641ed80d27d70690
-
Size
365KB
-
MD5
8443b6f1b7f6e73feae2d89aa0f71a00
-
SHA1
f1286dcddf1e1fdbcefc7089bbe2e8670409837d
-
SHA256
78387fc5006e3505c759cf31a49dc8a253be67865bd1a6ea641ed80d27d70690
-
SHA512
499e6bcb87dd95421c078b55f854b6d7a01a5a21c9367f3ca779448e760058b6f695a137ff9e3023e10047849e25f33e0eb0336983fdf50bdc2c35f1e7957830
-
SSDEEP
6144:YhxGoXtsnBS29ZoAc9TbzNVWXqCxVZ6SyLiSNVyP6MkavkZoPsekkkoAwH2Cpnzj:aNX2NoAc9TbzNODyLHNVfMkKkose/klu
Malware Config
Signatures
Files
-
78387fc5006e3505c759cf31a49dc8a253be67865bd1a6ea641ed80d27d70690.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.textbss Size: - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 352KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 385B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.TLS Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ