(�ݘ+0�}$�VG��|�J��r��9��hB#���۔�����B��P��F(3�P՝�%C�r��!�i숃 Q1�3;���ںT�h�.J���X�Ϥ; ���ՅG]��-�%�m�:���E|��Չ���L1`n�4�M��:!���ݢ��+�)q�aمs[{��n��>�)���� �3�-L�H��B{��s�dc�������|a8��/�;t��o5��p �B�'���A���R\8��a��!ˏ�I� x��P�� ٨��[5�)� (��M�]J��5����T��Ň��e<Rd� �a�:�� Ջ.&��IN��v��Ǫ�������9J�r��4�\q,�Q[��K̾ �o,l�Cܑ���w�%G�G7��ϖ;ke�`|~b���~IV�h�p������JꦾX��&�>2��J�;Y���Q�{�X;<Y�?љ��۱^�E����ک��� ��5�k:�v��:��vbNEY��#���y��Ғ��?B�r*)Fg� j��lE�\��QP�/�T�b�r�ၓˁ9���Vj������E��;��'TS����� գñJ����h4��.�7�5��$�}����8���iV ȥtwZm5�S� �-F<��)V����Δ�%���#V�e�s+́}x�Fs�ě1���V�|v#M��S�������T8d��z����"��u��%w��G W�߉G����5��!�3����\(�T'}"��vM��O4#&��T��b��ƞl�=�����*�:���_�����S��|Fo�{d�u��z���ρޙ���+���}� �-#oR�6�~�2Ln�ί������R�� �L��=�r�qr�ʝ�h�Uw�P��Ǿ��eB��mB}�1��6:�e�R�_�k�4��^IDA���y(b��q!@���h�EyDyi&o�<��$\�Ox���J�=�����}ۡ����n4�(_�4�HwnV�����c+ q��Z������)��U�j�K�L�dk�j"�#�rn���Fu�b��~�!:�,FI�_�I.!0�v:��LtU��~B���_��w:<3^�_#��lF㘑��7� �)�R]��Î�.���!���i�~�W�z���GO�-�� :�om�t{ٷ��9&���{S��X�U"���������g��6�-m����nͮ�~�jy'0�:5���8�{��p\�>�Ka�Nl��6�m��i�m��#�b�}?�|/,]�M�qG%�\�xm�w;�����3��?��$X��zM!�.��Q��m�f2�./�&*������Q�4��nX���_�m�M��Z�t����߬8 'U�V�ZiOP����坕zOF�E����8��@{ �y�Z�Pv�9T��F�/������d���#淋�%�5��6��+4�=�Jr6����߾(X}2b%kY}�duB!��`C:��4��0 �+�_�.ʍ><3�q��߂���&�NY�\�2xM�ΐGu�M�Ą��T=���_.����ЬI�ˬ_>#� �����z�������Ds�j��D'���T���ܭ�i��/hr�c��`p��S�Kҭ��s7��L2h�,��SТ:�-߁�*F3�c}=a_Z��&h���͞�m�S�P��^Ո��!H78�cof����������B�6����g����ཷMy]��:�;�K,��LK�/��c\~����E�Bh#�A(&��`{�I��J��'���ׄ��E�������d���+ND��G��[6b�I�2N�8JY��kW:��47.Lx�]{z�D P��W�JӉ�$�6�I��1����/{$}l> j���1�$a�K�f@^�F'��?����b/�VD��5��B'M/������a�{�-��'�+�b�#��2Y�����>'.%!�nx���o��-�V��zyΦ�H�d�[�� �ۨ��S�H��T�=m��ڪ?o�ϖ�}T<X��P1�x�J�B�&���!�9]��M�ѵ]��6��������K�_��>и�m�_{R�8��!2Y4��$�~��ࠎбX\�/Š�����)�����S���s�e;���rN�"{'&|�������G6�`�ct�wA���}�D�F�r�o���Fp��`�6Ɨ>��+Y��%f5$� �7��_+����q�'gg\�\���#��Y�[���-��@Tj��Q��T����C�N�J2b�dT7 ��9��n���DLj��=�w,�J?:v .| �%�O9qB�s�X��kc1 �NL��������v���Q�༹h�@�y!�h���=:u�J1���)�H���9���J�E ���G�!�$Wrs���z�\�y�d�g���_��>���w]�����B>N-d� ����;������'���v�e��J�b����{4+��P���4�߭�6����� �H��_�Ȅ!_��?}�%&#X<J%ؼX�q����Ls����:�� �d�\f%|��}�Wz̧�u��GZ9�:Kj��U���&����T����Z�(&�4Q���]�3V�o�=�}L�Q�B]�`S���-�>�KAr��s��[ӊ:���pO�yׅ&D�-J�{2H�~Ɇv� �,Z��Cm��g(�N"�d�V5�ꅇ��=|���_���F`ڤG��>����Í�kʹqd��U�,d=p}g}�F���<W��=���H�u\$l����x��n�Ⱦ?p q�X^�,NF�/��w\3��mg�pր�M�|AOӃ;���ˇ�m���}����M/�BiDy�֢�����¡�. }B Kk\��ׯv���X�ؔ.��@�3śm�9�i��jt�bk|h���l��0��4�Ӈ3�@V��흮�"��p��홻��E�Ǒ���3�/Y/�Q���L�m���N�V�P�t)���� s�SZ2l�7���^=e��%�h<<���ב-�� "��.�E����?T�-�д�� ����$2�[�2�0">�k嬲��e}�\-L]��:��;��-_M犆=�7 �=��� #�"OL�S�E��ؒ\��� �7�چ�"��vX��Ǭ��og�\(Of2}��I$f5�{Wx]�5�*��H�lZj�!�Tl�õ�s:����Q���F���N}�'������_8�����&o�O��J@��T�Y�a,�I2���!,t/��Kg���@�>�p�J]ђ�R��UI���U���\P�)p>�}��?L�.��TBdX0����z��#���^�d����N^YUxi�P��R��{r��ᧉ$˷m��*���_HDAH�>LZ�ѝ�OS��M�К�24�Y��-w)Mlv=�,G��~�On �*��:�('����D�BRX �����lə�:
Static task
static1
Behavioral task
behavioral1
Sample
66b678f98f94251a3739620562df6a4026c61c3826236d76ca7178a167458816.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
66b678f98f94251a3739620562df6a4026c61c3826236d76ca7178a167458816.exe
Resource
win10v2004-20220901-en
General
-
Target
66b678f98f94251a3739620562df6a4026c61c3826236d76ca7178a167458816
-
Size
6.2MB
-
MD5
e70532793f8dbb442e0ef0fe4135fc23
-
SHA1
557485b5c557225add203ae470f93e455dd2da2f
-
SHA256
66b678f98f94251a3739620562df6a4026c61c3826236d76ca7178a167458816
-
SHA512
dd42e3b56191e3077055d99d224f5b664039ee78abf9f7b9b238d4e04c31e02de0edfd1f1433aafd216e7c8704926b32fdbf1465bce9a92852b718d81ff49937
-
SSDEEP
98304:GSMmjv+OIaFIHJq/d5Ka+YjdkkVkpfBVaKDaWuZf1gjmKiJOtYxVerzDbe8jHHuo:LFIHJCabYjmN2NJlgYWe8jHHJcvNPVc
Malware Config
Signatures
Files
-
66b678f98f94251a3739620562df6a4026c61c3826236d76ca7178a167458816.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
Size: 544KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 24KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4.6MB - Virtual size: 5.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 173KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 919KB - Virtual size: 920KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE