f��}�!�f��u�z !��2�� ��m��$�y��k$;�)�)vt��x�m ��w��z�$}A���γW�I�4��o6-��/7�٫��mJ���e��4S}�V�i�|�B��d&؆P�O�re����q��X���΅��2�u��$��з<@�ؑ�M0Zd�1Ӹ�P���MV��$�������mF9�m�3[�a�����ƒ������SQ_��|$��G2~->�N���H�u�OO��B�F�c6��'v�h������)e?c!����v��7��{4ʰ�e?d��N��#+�eݥק�;��D�V7�&��&,�Ў��:�_��Ťt��֘s���!8������'�,n���5���y�<l ���9�/Y���)y���KE[;B�KA*U⾡�B\`���?��G{����&�/�@7D�眜w�җ�x���[�&FLM�6�B���Q��yeT��]�����zq�\Yq�UQQ�f���+�/�ݖ?���{�Xbv�����\2�Q�j�z�P���)���1��a���S_��A�\�b�ԑ�c�^,O-�(yo[T�]�d�k�@E${:㥂'`�D��tnO:nǿm/�S"V6���U�j�^�jý��DZ�M��G�� �\����P(Ÿ-�9"5�k�������&Щ���-�r�[�]��%�L�ڟI�Ǝ�5���\塂v�H����>c;�TW��X�vw|$�k�F�/���tu��hjW��+y��G��Z��e�}(z����j�{�ˋ��ͦ����Qr�iaY~�P�����.��LJ��C�R��JL�<��h�3`�of�_� �i :6+I~� Ob�_:��E�Լ���"�1!�b�ˡ<>���0�SI�j�5-*sǓ,t5d],Ӟ��[u]��D�u���臛|�%�8�i?�pX,�1��_�q�Z�,k�f������s���V'��s�$X��Iw6����p�l�M�����2o=�=2�<lZ�=G��2��B0JL][ﯗ� u5�^{��mw���9��d�t��{��h���"03S����]|N���/a�'t�ep����%��|�[I�z�9)x���U&Ŗ�\&1������Ӭ�� �A�I��)`w���۴�LZ��MN*�C�H|��MS�-��0���������eK֢h�Hw� ��?��;~˿8U�E'x=`�v\�mH�Ma�P�4��9fn�t5�7�Be���A0ĵ��y�R`��%���d1 ���FR��CQ�+&>�!��1�����h~>��ڔ�C�8�د~��G|�,��WPCa��7���2I��/̌�ZcS[g�<:��:��+�l��w�ֈ��ȇ*���d���)�����m1�����/[�;7�e����/Hu�U:/����j�M�Ѷ�b������Z�QĄ�p,���(����?ot�ܙJ������8�i�;�*gE���@����RWY%ޢ�Гϥ�3ȡ��L���j����A�c����Z���P� ��̝�Si:�h���z�:m�����?wƏo �H�r]�'a����kG'��T�����2J��(��a�d��3��h29�k',����6 ]��pbK�8Ys�А�jph$Y�;��=*������m���3�2����Hi���������i'����E��������,���� ��䖣Ų�_p������mb��`�;�θaX��+��RQ�އc&���zӀh����O+��t�<�M+��R�ט��XL���V&N`�� �L�����ز,��8�lv����R��6���H�Db����i(U�ؽVM�bT�i��q�[���6�x�7l��A�����q����U� ���0�9��gQ������~��:��41P��0�_�u#���w�w"�^ u�X���� E !�l�#&��jP��(��B���������9��d8�g:�U߃� W�W�oGى�X�u��g�����H�Zd΅�J �fp���b���_dH����5�f BQ4 ��t�<Kpo- E��N�z_8�R��]�`N���NC�m䚆l�%������T�z:HR��Y���zg��։C�B�����q)��7�^x��z��$��ua����i����i�%i��YZ�� ��`������W��|����H�<�0汘?���l�(��J�l����[9�.+�@|{���tI�]�)�q�����˭$� <���1Pw\V�4�@�|�q��_�7���X����l>��e���0e��m7!��r9�P+L�`u�����x�!Z���j�@�0څNI��!�<�Τ�G�I;��O���ot�Lg�3>;�3ׂ �vx1��g��DMhp�1h���vE���/���f&$> s;@�2�"93i\��P#.���2f�X��i���.xq�`���m�O�,6�9��Xs���W����sv^�XN3i9��Ԋ�\�(3�6GD�����5�P��+H��R` ���x0��$KjOf� X< �A��TͲ2_L�4�Z��)�9��\K>B�$�;C�2җ���p[���m���߱��@Ak��0瘷M�X8�")8�:E�v.F*�����%�@ ��G�dL.����Å@Z�{i��a�Ļg�G��n�PR�?�ԥܖ���T� ��0�M˒RcV|N#W�k�Wc̮4b|�ڶ����\���tE!C �)��U�(��II� ~sM�v�-��X�CT?h�v{gt������A�V�S)�K�3�܁���p��0��� /P:w��M�^���J��^�a(�Y��g�:Sv�~TU��$��H�Mt/A� �4؇V���*b��j�}��n�i��w�P�)UH�8������A�2ăY|Ϣt�b����KKg,�B`n@����D��t��v/#���ҁ�Q���82�����Hu��8�����s��♸k<Pi�ml$Dv�{ő��Vvwܚ��;I��윜ň��&gvn��%�~������A9�تG(-���r���ؤ�1�HkOgX�g`g���˸#pw��٤\`�o��x��W���97ݙ�i�k���t�`�Wdlzp�52��_��� �9�8��jA8�ߌ�p�Ns�q5&� ����E�?�o�@=�<bx��G�+���s;�6Յ]go�����P��EK�4�vEz����"N@��`�ړTO�{�'P�IL�q��:�a�8g𥁱}5뎷�3�π�G��>6�nҢ�>���,��W:?H����s礦����0\} Mq'��fY`OP1�v+�V*b�-���`��-�3��ԉJp!�YcY��9� ss�*X��7j�8
Static task
static1
Behavioral task
behavioral1
Sample
75e007af00fae2c1f8f65d5d5ef4e231051e4de6ba450cc5d203e2b647de9b20.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
75e007af00fae2c1f8f65d5d5ef4e231051e4de6ba450cc5d203e2b647de9b20.exe
Resource
win10v2004-20220901-en
General
-
Target
75e007af00fae2c1f8f65d5d5ef4e231051e4de6ba450cc5d203e2b647de9b20
-
Size
2.0MB
-
MD5
57465632e55fa730a4384a97e08977bf
-
SHA1
b71e2cde31bed9d380ee037f38f12dc9b075afa1
-
SHA256
75e007af00fae2c1f8f65d5d5ef4e231051e4de6ba450cc5d203e2b647de9b20
-
SHA512
d5a6d9f7369caa1a9c0865d677ba2157b27627f608ceb7ac44da2c2bfaf5a81f7805fbc966e3535c2e5648f63a08b7d0d4f8005f904e80debe8a7bf6f3a51ca6
-
SSDEEP
49152:WwqSeho9JIXLw/u87YzCwjm0fpUDZXPA7ta5g:Thehov/uCq60hUqta
Malware Config
Signatures
Files
-
75e007af00fae2c1f8f65d5d5ef4e231051e4de6ba450cc5d203e2b647de9b20.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 50KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 175KB - Virtual size: 7.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE