D�O=�<j���NQ�}X_����D�$��f���P���������kf��1����՚��f�~�� ͩL��s���`p������j ��� �Ԇ��La�n݃�^��BP�q8��0bg��VG���6�w�R�/�f ���Cs ���"A���l��/�� �K]��wI���Y���x��G;q��94���O����kk8|�0�F�7e��bU�HȞ���X�[���<=k{s|S��WO�0�v�=�g�F2FϢص�� ]����z&��H�N����02�������4�&7��@E.&4_��G2|�����C�pNj̡"�C��Y"s]�T�������C� B˛��?2;C��yV`��8h�u�r�t�v�>��``1�2$nL;��I�N���sy�x��M������b^��*����D��"�^ǰ��ӈx�89����@�RXWZ��TU]���䴓���[ ��|8�R�!ksp ��"!�^����r�x�8�F]G[$��6�Zg��y��{���i20" ��q��8���Q����>���\���͚��k .��KǫX4��w��2��i��=�Lق��P�����f�n�548/�T�Vm�����〾������oԍ���b�u�Y.9�Fv���� c *�;t�G[͜q,�g����!��y�v��� �`�~Y �ŵ�輷��e#f?�R��MD��b�D�_4}�nl���h�� __w��f�Z �\,W��s��=[ʜ��<ӏ�����u��s�XU�j���hW�ȕ<R���� Ff٧6P�%��� m����6�s̘=������A�#g��ȍ�)%e]O,�������J����4�Dt��s--�B�V��O��J"m��Y�Ǒt��B!�7wG���3� h��D6u�;��0T �Q��G`Ɓ��DGpA�����;e�)�¢�����[_5&��7}\B�l˪1;�K�V���l�{��[e�E����Y���֡%�&�.��/�|K)1)����*~�R;>S�Ha5���A� � m�Y��n.XB=dk���Q��7�K �BG{³��w�I�,��ӃA��(�[�rs�'�+'+�.�O��7�m��Ң{���d��9}��4 �i(>��o�$����A��mO�k�E����ursh�!.y9���+c3��%�#iv���r�WK����W�$���ݮ�� C���[E dx�iV���:B�>�sK,��� F������&Ck"�:�z�FYH!���f����<9�Q�F +������9[�� K#�h��g9K�V���]�3��9���Å�����'��ʶ^�d�X'O\u��hz�H9�6���)⛵�%��Z��deaΈK-I�/����YM��M�w�;���p�/�����Y��Օ����o��X�_q�\�������\8�#+�$fw���l�ӚD�.�k����g�x����\���i�:�+�|�ɮ��ea�Fhz��o��:�w8U��o��� .���;���� q:n5����;��m%Fr4��:�]�]}��T9V0F!i�����%+'^T�Џ.�2���R��~�U"&��cc��Ի\[r��)!9G߰�V��cQQ#qMI%��x�.^�b�`#크��_�ۨ\F&&��'bO�S�~R�M_f�*� ��Q���.�Y�!k�����Rޔ}��s��k��;+�rp�ín6��u�Sw�:�ˊB[�u?�U$�"�x��}|�-u�K�UE3N��Z��w<�=�[�rp��m��hܿ5�� V%Ҩ�����;�{�"��H�tv"�a���o��ST�6��)��iEj,9�Y6CF��ag�k'ܲk��ar?��a}�:Z��\��N����-*�<^���unӳi�,�'��.um$��%8�MBN�!�K�oz#��Ӗ|Z{�&/N�r��^T�ox��$-�L�C���:m��[�F�+���,�/�� Kܬw�FY��#��Ug���j*���]��!h��i�Qs>�}�B����=��OB�Ռ���G,z�U��]�cIy�;�h���c�v-���Jي���6ɕm�����l��)6 ��@���%� �>/��XS���]��jm�����:+>�O���(���cewP�N� <�Q�(:��S����8R8}O������۠Y��sqϦ�Ϟ �7yz�$7J�g@��͈�[� x�[pÈ�N�Z��#�&��V����ێ"�|���{�2�@�u�j����9|��7,�3�յ�,�&��(x��-xW k�����d�����_�1�����D1DPVdԾ4#��\�Ycm�Z�%��,]��D�E�*#(H��+ue����D�����ъ,?������آ<�v�8��㫍�u=����nCsE�:|�L�B`J+�?;|��3p�{�0�}z�d���R,9X����{���ha.���a_�c�˝�l>�u��NɅ���x.�Ul� nh��/�s��Q��T�Yu|�����2Q�[��O�=��H@��@V�"�v0��=8A�>0RՏ�@g�W@<e��`�^Gܪz��P^L���n��������s��̵҈����,)��Ku)$�+�'%^��[�y�ȍ��IT��G!�@jlDǎs#�}�g";�t�p���%��}ֆ��fXLa7��r~ ە�c=oc_���B��Jn@��TndJ���?[Z�鄳%�Ea��r�R.�Q�����H�����X��ð4݉s�y��=O:����5-�uw6�B��W���=�X,���A�|���lf��h��0vH���:q�/{�G��"�6bq�]�=T��edk�)ܸBhq��"lh�g䉾?�H�ԕ�aT��H0|��0����9Uݝ�����q�ʚ��O)�0��ٻ�+���4f����<t���+FHZ�lF mC�v�"����4��0� n:�;�K�9��\-�S&k_�����PS���_��:J7���X$_4�=�q�+�Q��O������c�x8��l9�h���v�^8dx���1�z�i�0FG���QN�+��(0OR�\ȡ(�q]�8obm���*���Ɍ?�@6��Z�oe���n�n(ߛ#�|jDRM.���_�:]nc,q�]�}@�F�xR����>�ݙPq�B<Zs�A��jym*5�Ş\�\�����:���o3ы�U�t��uE���;[q��YS����{5�������' �7s,���xh��}��%x'N��˶z!QZ�a2��*BHydX�Oӌ�OS�-�����6:8��Ν��3��(����,�p&����X�n�(�'��*&����#������Yt��E��0 a�#���ķ�f�z/�f�*7X.���C�Og3ug���)����bc(iJ��wS����>����>5x` =&x�D��r@�l�)|a�U'�j�li�eՏ:��ai�W�q ��m�QW����u�퇚��S�.�{ֹGl�j6�< iǭ��]�ҧ��Mr�=K��?O9��.=�P�F���`Fp!��i�c��� �:�j�4]���������x� ^3��63�(�{!h��Y@�6���~[��0�2i�kG�gK���
Static task
static1
Behavioral task
behavioral1
Sample
2C2CA063FCB3E7B379000F48C48A95AB2CEA2724B2E85.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2C2CA063FCB3E7B379000F48C48A95AB2CEA2724B2E85.exe
Resource
win10v2004-20220812-en
General
-
Target
2C2CA063FCB3E7B379000F48C48A95AB2CEA2724B2E85.exe
-
Size
2.3MB
-
MD5
df9cc500ec97057ac9d9d1658d137ef2
-
SHA1
e618bc693c12ba9ed8f75ea2510386a60fb226fa
-
SHA256
2c2ca063fcb3e7b379000f48c48a95ab2cea2724b2e858e2d5ae7128e163f384
-
SHA512
6d4af86ec402b5dabe4af695a4803d87f1f41096e34a28bd97f8d22eadd0dc6de33db18ee798ddab898dd881385446d5ba7e227950e0965431f60d3b9482a9e2
-
SSDEEP
49152:mDVV8RVVR+J2Rz9WVPrMY/PnamfaOyN8vBQC6x5w8+KboqfDy:sI42Rz98PgGaG0pC6zF
Malware Config
Signatures
Files
-
2C2CA063FCB3E7B379000F48C48A95AB2CEA2724B2E85.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 18KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 194KB - Virtual size: 7.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE