|^�* o��,��R��.i}����r,(��zTd�P�_�-�!�-L�/��O�t]���<B�X"ÿ�.��� #��t}� ���;��Ntʶ�GX|''��ˬ���n@%��J���q1�)��5�YS���n�ռX�b�J�Ȝ��������X*���H�Vy�1��6�v��ȩ�K��Դ��*�5��R�ż�,#?�S��fab�� &u*�D�͆�� xP�)P��8���y1D�:I���w��h����B�C�xe�A��ퟲ�>hF�N (�-0�<8�P��6^�-<�M)�I !kT<'l�EGI��(C]�J�γ�˫�.lN�E����������l����_T�=i�G�u��X�����v'��q��v�漚ЇAC�)[��_��y����A.0� �I�ţ����o��ӝn��;�.�/\N�|��Rlf����p�\��#���3-�ڵ�����3#����[����q�gT�癳�uGYc��@�aʾ��9{J�1"��Ĭ��[�t3�ˌ�{�"��PN�d�d���B�h�����N�;���ͣykH�$�Ը�]�V�J���TB���w�E&9I ��5�&�^���᧗��A����<$����9��%U���p#J����P=a���Ud�b\�s���x��P^�St��U�CI�{A��B���xX*.��gIK,��ٛ��=��ޔXJ۔-��x����s�L �FK�Fꄩr�E��ܺUm�Ѕ��Cj��p�/?���y?��D�����N ��e G~��^V�x���{��\�ۤFI���N4�/�V��T7x�������]��Q�k����;����E�v��th�ؚ�܀W�V^�����˔P��]3��D��>�[I�Gi��z��n�g�k���:%�, ����%Y���y5�0*ԃ��ic |6��Ѓ����Œ��)i��㩌���.���I{*AN��v�2ʼ_�X�`����)�"���Q�O��X�-���U��Z���-����e�#��:N.��w����@��d�J�mF*)�yI������ƍ�B�=�cZ->8'�s���x�A���Ɏ$�sP�-�u��ݱ �.�*��ab���8w 4c���l���/p$ݧ�?\�c��x�R��q��"�rX.��ke�Wd@�����X� ��+�'�"�\�-�Z̉u�H�����q���y�4���c�Z5ڊ&4�߲i�+�[N�?l��k�x9$�bFI0U�g� W��F�k_���H�������e�L�ͮ�M�X�:�i��HȽ���t� m���n�o]�T�/�3H�z�c�L!5(L��N$#���FjR3��z��|���@�Q��5h�v�ɳ�e��na��R��<oc�(�A ��Hsʙ��~�y �<g��i�'��Nq���^�ե/���R�<0)�L�x��X�⮋E���&o�>���,e��vW�L�n��bKcZq��l��,�X��S�յ��V����3mQX,2mם�-�d��9�K��*^���NG�$=�K5��r�[yujz]V^q����]�=��a���k�<�����p>p����l!Gx���C��8[J�Ĝi�a�Ía���A�P��d,o7���F�}�s�ط���[��(Qߓk�+��r�8t7�@�m�l�8������,i�YHOR*� L�/l@��d�BĹ.8����4�� ���V���7�@��RykRQ����%g��=D����x�~g�͘j���T����b�"ӐON�X����V'���ƇGa�s��Jb����P����2�S#�6!���4lWD!K���;w�g� (�:�5�tճY���_�֬�{b�����ԯ���n�����V��� G-��Gcd�ѧí� �!�s�� �(Xr#x.�cX)Vp5d��� ���۬�}����7ZNg��U'b���v!� �j��`��� =ňI�#V_k�IY��S��S��N�=P��C�*� ������H1˾)b����4�hz���J�:S���b�.$m�5�_*�x�F>~���'�"���ķ�TY�Wy �� 5N8��,%�D�q]5��Q��m�m�����Q�#�P��_2i���to�/还�\@Jz���wSq��!���3�d��X�b����9:]h��o��JmU7'� "����脱��t_��OQL1X ~ȹʽ�� �Xv99�I��uw������ �������c�?���7��w"Wھ��a�g�=��M�����=�ȳM0��>����97�L0�OI`w"������&���G�6ۓ迭S�4z�*I��=�.k��� ����C-��e��TZ�4�-= �i�Cu�bY��[�g��"�o�)�#g�-�1'%o�AԈw�I�0f�_���S�rf�3j��c_�]9��t�7����;-�۱$�"_ɏuzw&ϩY�WC&��9Y��Ή���:�m ����b��3R[�S?H�|�_]E[բfw|U]9����'�� ��j� �?f�NW��K�>��RY������Έ���6f���D���t}cQA1|k�����$�M�D�dut� �[���(�Tˑ~a��h>�X�o=�<`�꽚�C��e�G�������f���J�:��:�V�N�;�Ț��o�>o�u%q!��kɝ��G�ځ^F�)����fq2��Q=��Fc�S��M�绞�*Y��E�:�(��'0�>U!M��Nas�q9������HE)�Is�?"�"I�B8�.�t��kb���{�π�J�;N$k�E���;w�ݚ��ꢵ"*����gK����u�r44�?2�/ۘ)�&�#I3���L��:n����`!v�1�e�l��)e����x$|A����X��iT�����,� &H���t���n��o-������z�K������ �������L���G��_��;�U�zP����e{��w��_�].��%HO�ʸIIr��<�,#���^A?R))�����<Y�U����}��� C���}��6��.n�E(cjg=�Y����t�i״� s����2��7��oCX�<���U�\�����w+F5I?@t�ԫ;�U3vSA�L_:�G!�VZ��-,��#�Ɗu!~�wTQ����H��ot�% U�i���iޏ�tA#,�d�����/w귚�^e��2�?D��@��=�)p��Q*��v��J��r�ʊQ���ޞ{�� �T=��PV<�� ru��Ee���'�����GR�M����E�ET�c^�uP�|{z3�Ii�Ӽ,F�sQ{x9���Né]�-�2}��>C-As��9<b��DO����с���RI�ΏPR����d����y�X�i��Bkb�y��y�ّl*9lܸ����(�R �^(��1�;$�:��O�`!cw}se����y3�;�t�����/�5��*��h-�)F|)���Л�dt ro��n�7�Wfce�`T�s���Z���JƜ����p]�J�B��cF<�ם��o�����X�"w\H�h�����?&�Aλ�q0��>ɟ�D�a�
Static task
static1
Behavioral task
behavioral1
Sample
f5ca5a059a9a39e022c473b397235258e7b08a20228bcbbd7d6d8d5813104164.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f5ca5a059a9a39e022c473b397235258e7b08a20228bcbbd7d6d8d5813104164.exe
Resource
win10v2004-20221111-en
General
-
Target
f5ca5a059a9a39e022c473b397235258e7b08a20228bcbbd7d6d8d5813104164
-
Size
1.6MB
-
MD5
e316dbb5f3cdabcd24d6e671006ec22a
-
SHA1
295573443458dbdf81afeabd47f8e8b65a5bd334
-
SHA256
f5ca5a059a9a39e022c473b397235258e7b08a20228bcbbd7d6d8d5813104164
-
SHA512
ccbc5f1f10e6562ca0d4656b96dc741176f1be004f54f0390f504564f29ea07c1b9bb8ab72ffddc4e2fba1dd3fad30f5a3b72c44e9feb3dd5d52967f21b0e503
-
SSDEEP
49152:DouXVv6D29nNsCL6upi8jZIQVyd+Sld5e:1X9y29nJLXxPMq
Malware Config
Signatures
Files
-
f5ca5a059a9a39e022c473b397235258e7b08a20228bcbbd7d6d8d5813104164.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 496KB - Virtual size: 976KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 148KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 166KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 848KB - Virtual size: 848KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE