^���^�j��6���KxFJ������J�@� ��Q3���&����}���e�D��c��N���;��ɺ#ȥ4���v�X�^7"B�''oq�K�j��p v�'Ԍ��缾��7n�H�~�Ki��ט���j:]덳r��Ԝ�H���p=��6�q&D0!��Ȍ���� ���U�B)Z���"�?��KH�bBP��u=���Q��/f%*�IE�M�{�Ԑ���A�goa#�7��7���Ia�U�#�,�=&ot�觀�,�)�_y�bv.L���Z/hY�f�=�?�����F-�����ċ���nB�X�ۚq�q��� �+KO��?������@�(>7o?��fQf�+'v����8�w����_$f����@,��Yڌ3�$@�#����O��'�7`6��!*����tի�or�S���� �&�%����u(V���j���q�};ٞ^���� �f:���c� �eR���$AV����a+d�A�U����~4�u���b�����%,�gaų�d�5t)ru��j��<��I����������Kk��g^Lqp�|�T(Jk5��5�`�B�yْ7e��5ug�����ڈW���ԏ��-+\ 3U�ϡ�nk���U��p�ش��I?�� ���{DF��,X����W�7�;l�=x6��o��A���®���4�~j��æ^�$~��7Pǂ�]���6����*�P(,��k}d��\����u��Ev�D��eR� X���OM���yz���B��&2���%���s~��z-F�/������?Jp?6��2R�72*:������&���^�[s�\�r=L���'Ն�i1.4�t|B>�#��_��I�^ɚi�����p3�3�/܋�C����#���֙�)OO r| �ٽA��m�«y� PQw�|XS�ڋCIv��q]�[��f;��O?�` ��Lz�2����ڲ�eT��.�S*)�%����Oi]�X�|�����.�D�cp �6<�]�����*��&<)3b��#�����ĸ�}y�����*Z���p���j����-���Й�tx}�&~��+l�h�~ ��Ģ%f�<16���uK��_��1�g���w.�R�5y��[N���?߰rq��E'K�6���G�L\�,�;�,,\�����A��@�!�\L=8P7�_B!s�1���_o.�t�zUy�m!���*��a�R�� ������F����8];*]���}*'2�v�a�⼌�[�՞�v�q��2�K`����i�ceV�g�m�M,����x^�7��(]8�E�2�B�qrRQm�m #7�.�����2�T��_7�:������������ ���8e������1>'I��Q���������O��� (��ғ�)cs�����&��x�63{���E"&��l�I��#�2)o�����롫�����#��}��5�B�H��@i�)Tm�6}М��ܩ�ŧ�hx�06�D�A`�Z���n�<���.�G�1ߣ,�w| 9";3����BC_HT��h]T�W��'c�<���f���C���=o Z�UG�"U�����w���.�����XB��%���{wg%m���=�D�q�!��3E��;�q�2Z�=M�9Ao���rS�a�aX�@�J]���b�� l%�j�/�5�r�|���B����˘�z�y��Q�;B�aw�X��<!����m�ò��|b�\Tw 3ʲ��T�� �^�T���}Suf���M$x:n�ī�Q:�}���>�}8 o ۸�Jy���� �.@��atI/�o��;.��"�US�F(��@x�@ɯؕL��Tv�^z���/�g+Z��"2q�8\��ʍ�˙��%Kİ���>�e������et�X�Q�@�HOt"����C�T����e���Q].G`�ڣ%�����+�)�'�&,F�;UV�nX荧������� &2��`{��Nz��BW+� !�~._{�9�n��hˊl�e7sx�?c�o��Y�+����ZHS���i�����$���q���@ pC�_��������ѱ� )� �S��i�*�Q%g�4l��mG�E��L��{V��/��4��k�9�Z��б>�o�5���F��M������(�iI����p�%�2��0�� g|-O�Ǐ�0*��v��,[�9��N2��YpTOO���)���,<c������d��@�L*qOK )D�&+#�T�U1�^Cg�8�����ȋ������H����ZI�5�0��k�C�����4���q��[����:�T@ߗ�6�X=���W��5݉�B�����䆐��B�Q�r�f�R����b�q�j�8w{͇kٕik��=}vi'����\|qp����ō ��wA�= �����lv�*�_w�|8w�v�ؓZ��YP��9�*"0���Ɋ�y��,���~2�~T������uG~��]��6��:�J�7�5ԓ�Q��u���]���SI��S�������Y��P��:}�{�n����v�O�X7�iM���mH�nJp�*s�^?��X�q�@�Y�G��.ZP�Q|��w�=�u��0�z��#��p��M�͠����vP:�«�&g*7,[ܧ��E`����#-f�2��� �";-p���H���y߇�ב��Ɣ���eݭ��n�)Y��/����.Wig�d�.�<X�#�R�m�����C*g�91l�p.p�I�[��9g�yѱ p�(;%���[ ���ؘq�E����C��1vө�v�����(��z_`��@�?�,��ͯ���˰��q�7u5G�C���k�0v~����3����,�g�^O��}���љ��UF,n�ϒ�7F�D�13��{��NRy��u�D"[��Y��T� ������ �R�Ӥ�2�g�,�(�rF��Y�O���K��/�!�(���ϵ8[����fe5.���(ξ>�Ϟ\cu���*s�d�cd�=@�?܂ñ�#����������H5���,�υ�@�++���,����wW��v�K�d.�KN�V�vRF�������h2T/Ej�� ғ��Ȗq����j�TT|����څt�먰~��ŷS$��=~Mў�Q�-ۏ����S� ��\F.uNm �8٨��;%ZJ����}2┺�.E Z�f������j��L����Ԩ�����Q� ƜtW�6�]���u�OW^��@ED>سkΙ�K{�-�ƇPZO@�8� -҇�?��`����W�_�b�q~³T6��7 ����UR��q�ۈ��x���Eq�WX+ R��n/jjh��Cu�0�e؛E�}k1��t��,a�����Y����J�ɠ� J� �r��f,�T��w���ت'\�8�������4�N�S0�6I������>�tP� ԣ�0�Vy����N��<��gqRy(�Y`��y��&���z������jľ�B�j���a IZ$����o���'��Ω"���e���!���yO�J2@Ri|7��7��r=�˷�cZA���1�(�y��^x�HF.���L���*����
Static task
static1
Behavioral task
behavioral1
Sample
5675a72d29b37014d873caef6d03ecf90c4dd885dbc92ddd85f23a6771cda627.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5675a72d29b37014d873caef6d03ecf90c4dd885dbc92ddd85f23a6771cda627.exe
Resource
win10v2004-20220812-en
General
-
Target
5675a72d29b37014d873caef6d03ecf90c4dd885dbc92ddd85f23a6771cda627
-
Size
5.4MB
-
MD5
d94f506b2643bb8d566167a72f36631e
-
SHA1
b2ade83b442a3db8aa79bd1733c3882cf75707a7
-
SHA256
5675a72d29b37014d873caef6d03ecf90c4dd885dbc92ddd85f23a6771cda627
-
SHA512
6cd5366fee8ae229434f75f8d77bbae0930912f44d195de7bb54b3ba1727c60d077cb01e6c711a0e25845091bc9349c9438cf9a0ccaa1ee3362127020701962f
-
SSDEEP
98304:QKGyYHGmdj23c1wsoki1ArylOrkf32yrkGJ65Pmpji+evmA6XVWKz66s+P6kOnLd:QKtOG2yVso0yEreqOQzyTns+PTODN
Malware Config
Signatures
Files
-
5675a72d29b37014d873caef6d03ecf90c4dd885dbc92ddd85f23a6771cda627.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 184KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 45KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 21KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 20.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5.1MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE