��ؤ��t��HrWG�Alg3�Ma�e�f�)�� ��]ӄ��yw�.Z:��d�.��0�/�C�>S�1�͛�{؎���4A�",ˉPy�z���^8ЮA��^b*^�[�ux,�sL^����=1���Nr�'9m�T��?�#�n�Z}$�!�*�4�E��"<��ڜ��A{P��R�8Յ!`�V�'�����\B9�16��0�4A��x�.G9}���r���j��]��qZ�Y:�xLƎ���z�����+��G�����:j>? �4 ;ۢ�^գ�y��I!m��(�zݏlF�����w��Li�|$f�Ǜ����*Ѹ��d�U �?�b�[���Ho���e�C�o$l�@=%����Lʭ�ljԃ檪&S��t���J�c�0sU�n�٧���`�*��v��lpY��a��푵�ޒ�n)�|���_J+�$'���4��|�DS�l`���Z�L �!�>E� X�)��P������p�3Rp���K�� Fe�X K��w�LD�q4V�kL� 9����"�?�ƽ���j1�Br²B{��H jc�A���]����t�/��Îz��7��)G�Z�wP���l5P�������ѿ��� E?%���3hGa-6a�1���h�z�y��N`�(I� ��s"�@�2�k� ��;�?�}��t���*�?�f���u�}0ľ������ ]�f��e�� Ev���]����8)lS��cC�dFĹ�J�,�p��HB�bB�@�(��k(ׅ'�YS���M��sF��������D0j���K����������N\�߇�|�L�I2B�5v*�� Pq � �z�����4��>$�{�EzTn��-d��}�p ���qOo7y�B P��c�de�c�r��#���5�g 5�#���1V<�↧t���-&aY� "!������s��n(��a1_ޱ]*V�N�fd�!�l��-P�y�~a<9mbd'�E���}{���Q�:����Y���)Sձ�E����Y���Ww����,h�� }�"l69���������O�=*�{����-G����v���ӔU�*�<�߷8�p�ScFZj���c�|��A=��ݷy���]�R9O�T{&��0~�G&�f���R��b�8����أ�O��i?c%WV�7�w�S�<��o��Z�m��~�>iJ�a���r��1t��lP'�:���D�b�I�7�K����]��('{�l�i6��A�O %�M����;������j28���l�S��Z��S��]�,$�PA$Ei&̖x}hv�P�c7!��s�u�,p��LS��X��Nfu[|�Fm<�%.F ��Po*��fx�Rg�}��/t�<���.=}��v��ASøX�Ѿ!�|:��m`�U���xe5�[�W����<v׆5�?}���6Dv�»� ~���s�pϵ�|Ȇ��sM����q��B<�z��N�E-n9�WE�����C�JKȐ1���{b�����Vߗ�/��B�UF�Յ-�uA��N���LJ�_ :d� �c�=A'Q��&�A~��˗�d))���@�A��19��-����䟼z2��O��`E�����4���q��j��һ54���w�H�Y�;��[l}P<�d��C��,M�9��`h����� W����-1m��V�������B�AZ�H�N����&|��u+9��2כCX��Z����#}�'�;����K��L*[�?�9��r��� �����B&�$6���E���]7�ds�g���J��u(�϶M����V���*o�� 5ew�N����ԌDɧ`ϝ��O �kb��r]�����S&��� "�T��)��O�;zcFB�K��K���7���R:�Ԡ���J]��Y�sX�~�XS��`�/ghs� =��M�P����cbc�j�<�=]EK�㜒�i�3�%G0f7�,��\�� _p~��V���a�6��C %���=�K����zb]�B ���F��ωu����SPڽ�{~{ O�N��� ���̑4͗7�Ѐ��� �c�]��A�øY�;�14j:���+R�7Q�V��ˢWr_���M2�j;�� ��V�I�R�Y��Sum{7L�S��:�Ń���+ef�x�P�Lv���(����Õ@*�ՉJ�*��֢պȞg4S>Le �Z��K���5>HA��`q~��+��hTB���*x��$��T?+0 N���̹8kq�Ɋ�*K��e��#J�g��crQ�J��� ��ll���K� h�V�jiu�V�����6�)/��dF�C���M�4�����R_ì������^�zC���fd4KY�k-�]Oc�)0 �S���h�ߋ����K��e{��&�*�:�vm(��vg5��R:���f����e�-�T A����M��)'��5'E\ T�X%��NJL=}���k�����)[������_�tEcG��RB ���0Ϲ��y*i�N�ш�h�!_����v��cq�ut���D�X�0�3���s,ZL�I����� ��k~~jK�w�����Zzv���l虗�0�����V�=`�6�~����_�)XC���"���1s�+f��v�7�E��Y1أ���URߞ�Ib���J���`��gj ��W�e�P���̜��LJ��x�S~�X[5��'x�8�(�ۿOA�����#3в�%�:���L#���6����M�?�zo'-�����)������E��� #l�ŐE�R(�Vd�5�H��z-�6�u��(,k��s�+�M���t��4B��0���GsW�W���������!��`Vo �E*t� ������&��?;JO9N�ى��j@Y)�T�{������=g�����;�� �DL�14�W��Έ�E����Q�s��w/���( L]�a&��a z�)�%˗.ɘ߾������|�>�v�H⑾噽�\�qw$���S誱L�HxMZ���k�Y)�\��O"�Z�<�.��'��\A�W�����Uno��ҁII�M���R��Oj��r/E�-����V��Bl~r�4r�����nq0�⛄`j���(�?�w@m�w� z����X"ch����pĵ��,����W��O���$����&�ȁ��6�mz�w��r'T5��{��sxQ�.�n��GFB۠$i.?Jf����)Z�4�a����2w�������=�ဧ��tĢ[�'o���"����.���0���;��q�(�rK��1�V@9����Զ_�BNWYS��)�M@�dMH�#De# P�Ŝ��� bd���Х���5 >��z��/Qoy�� j{���Y�])�iL�y�]+B���N���!$Z����d rٛ���|��"]����-m��_���?I�[�#�����8u���Y�?�5Go;�B��֞)���V�������)� w0��������|�Hs��56���ق_E���x�d.=0����i�n�7Ru0��T�y�l�����At{挆C�gW��D����I��.�y��7�@gP@,Ό�z؈�O���M��S�̮��4l?` �4��i�1c~m�d��H�mcs���3g@��8V�����:v���я�7lkl�ӏ���}G�3N���f��tD.���v͐�rA9
Static task
static1
Behavioral task
behavioral1
Sample
247f844391e0d6917f94c37857928576d32552d62d8ef6af7349e39af61f3257.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
247f844391e0d6917f94c37857928576d32552d62d8ef6af7349e39af61f3257.exe
Resource
win10v2004-20221111-en
General
-
Target
247f844391e0d6917f94c37857928576d32552d62d8ef6af7349e39af61f3257
-
Size
2.2MB
-
MD5
b39c50b859fb841cf339ab50caf7f9b3
-
SHA1
c62dd24e50d9fa6ed786fe65fd890ed07abceb3b
-
SHA256
247f844391e0d6917f94c37857928576d32552d62d8ef6af7349e39af61f3257
-
SHA512
6a01383bdd4689135856555e0d613f675ce9e324e9188d2cd5fce3e59512195684d11ad74720aedc0aa5b813d7240ba7d1ef9e8b8eb0b9bb6d99ee7b9f492714
-
SSDEEP
49152:aFMArsQB4rWvt1WTi2LIYod61K8tQeBMlcI21rOW8DOf4d:atT4aNYZxSlTiOxyQ
Malware Config
Signatures
Files
-
247f844391e0d6917f94c37857928576d32552d62d8ef6af7349e39af61f3257.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 7.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE