_��o�ۜ����쯪5���O6E =��F~�WFOlR�E˥�}*�C�H1e�HM��616+�!��n���N3œ�n;�n��䂋�*�_̝�4|�.���n |͒�O�&F�? ��Б����|t���d�Y:ڍ(�r���X�ڣ=�s�����8�U�����AJ�Dm�������V<��N+5BĦ�pA�ΐ �">���拂k�%Nj-�݆�b�3\(�ͻe&U�\:��N�4k}<�U>z�`��'^�7NH�� �&E*߉4���=[Q�6��h�Ѽ QKo��`v�v� �5`[pe��,q $v6����{�?��Q"�"P�C���Iu�!�f�/$"�8���lz����Y��a(b��:�����&#�lVҞJ=����E��צ��uߦ��Lym` [ WHt����������U��~fX��a����+B�wW�5����yC��lVv����W��%�߉RiР��_�,��i��v��u�(������F���2�¦O<�*�e\Q��㗃?V$����V?ﻜ��u�4����[̢�&��<�l|���#(��, 36`�;X��l챪�Btb4�Z��!h�1&ѨqO���q�!6~�Ea�J�8?֠��D�/��RP'�R�;>j��&R������AzRx鋊�"�D;Nl4�$���HӤ~�xR�-�4�f_���f�Mb=Fh���F��,�c�ԫa3זK��˹��'1�Pݠ�;�A��N�:��p6.�<}^�s$��eh ��w_�Q6�Gf(;}b�k�����7�}:bQ��*�jhb�d`|fg��T��$B�,�< ������e�긊87_�*ϸ�8�z�z��j�k�bj�] ]L����꭫���9'œ#[�"�?����'�j�n�V�W�C���e9%����}a�_qcgO�;>�|�˽ �S�s�^d��x*hrw�bbƜF�������;�(̽��ą\�#}���-�x�2v��������1t��_�jY�xb8� A�J��}<�p^J�B�s��d����� I� �Wj��[���8|I r&��9 n��N���(�p���<��[*�#�����3@���྇�@�>�%�7�/}*�T}��#(C����;c:��%&At8A�8c����>xe&�yu��Y�/�w��Zɖ�kz�� ���������e�!��QnZ�����i���3#]�%�����r�2�]���m������̕���M��<[��G%���YZ�9���e`JY�4uѪ�D�8'�o�& +�Ll�M�h��X�Oq�����_K(u�\ZAb�}R�H���{��Z=�� J-M|��J�ݯ� OZ��*�[9W:IJ�+h� ���Nj���@�Ze=��"V��� �0u��������WK4̹�m��\+�}�����Jh���O����n���I;g�䲖*��ѕp|�՝��T)[�0�ڀ�&swƷ��rs��q�'m��h�AYf�_k����5�.���5�k%�-f�����"SW��̡��O�k��K���/�t= �zeJ� �rf>`�� �@�:;��"���b��ri[eH��j"�)l������۞��ϳ�i�e���2e?=gd���U�JThZ�|��p�ӊ�WXY��m��G!�m/s��!^Lˏ:4�==R[c�(+4v� !aw۪4D4������x^}�mb����.��NZ��8��ˑ=ɲ2;���_5��Z����^@�״�olw-�4�'}ru���x8�0�BP�4��_@���o�Y�ޚ��H�6�J�^1���WL�cܪ�־��b�o�mb<��D���D�n��5^)��7��s�H�IMbl]���_�q���y0O̲��h@�����D�"d��<*/rq5�swR���rS���H9c�Cv���6�L�I��*�u~ �gP2��k9`v�ӵ� ������o�ߍ���s�-Hʤ�{մ/O9����Fʜ�aշO��6I}�=��� (���X����^ ���e��D����T��Wb\��,HDt3����."p���̶1��R�+������C�l-��T�}\��_>&M=�66,A�8�snd�,I� ��-��/��1�����ZRpV| -A�i6D�����i����$�N�-~�W�Ҫ���#1�d����ݾ�Ld2�Є�Q��PcK'�/��~J�<�jѪ��(�`�ډ�2HwY�)�`�����/�W&���s��3_1��?�"�@�����Osf����Z֦՚O{c�K�(T�yO���j%,�����0 ��n�����*�����wC��-��<�)��^YK��#.���5R9 q��j�aij��M.i[Eɯ���J������*�f�,Lt���"�[�*1��h�A�h�Ie +f_���zJë�w+�O��K`���~�=R�ajv�3*7��j]����rf&��k���V�#���p��������?Dq[��n"�^?�$��~HZ�z�=!3����'~N�;a�AL,!�� +@��Z�|�Ԡ�:����/zѓ2�8���G��Ԧ��l�����LzW��5#_8߶gg��c��WQ�T���x`�p@(8�wH�|`w,Ұ���5�]�0,�I̝9|_9�`Oѓ`��+�.�����:� ���Bzr�d�������&�����=3���-Up��J��H�$gS�V�����n��Hm�&�ɲ*�F�c���,���Ï��~�+Ҷ2�lv 'ݤݧ�65^���Z�gV����N���*^���(~ȏ��Q����'��(o'�_B�&�7D>���( �vl�$�Xi�ΧC�S��@.cq��x���К2��AZ5�̆��]RL���CB��{��%A�p�r����+���ɏ�y�?N<�kO;R�8o�����-3�+&�%��ݵ��±�{ܗ�Ьa^�s�\,1h�p;�px��_%���L3\A��u��k�S�T�=HE��5�z�9<l��ms�+���+��*�2L��/,��D�]�q�P����M�<�`iפ�L�݊���k; �1r ��@�ir�>J������v='���1$����w=W]D�����!Q�e�!o�����#�Ŭ�Y�u�ǖMj[U�/�8B!O:kpqSU�9���C �i��\�*e^�����tH�* �> UK���F5���:y$��^���������*�H3E3��Pv�w���#Ӭ����Z�H�;ZKU������+��������WB��q\�ª�}��+R�M]k�gF��_�j�%!^������r��2��CM�Y���ȷ�?C6�s>(�D�5p���Q\������`���gb�h3�Ia��;�&��1&�}Gt��w��ҋ�R�G%�����(��e�cI�Yq������-yk�*����z ����R�S�%,˺�����<�k1ē����䨬�������q�juo.�M���ϣe�è5��볪1�^�oؽS:�h"@;��B����0K�Q(�j̪�{����5���*������4����u�L��61�����7D���<[P���L{N����صM��@đg 3�t5x[u��h�;�H��f�6�3�l_�S����z�b����_�����+P����o�|Hz�-D-!�&�m���`X']�.�������; �%ݚS� ���>����Jf��a�}��Oc�C�ga褎��ذg�p6$�r\�!)��)�
Static task
static1
Behavioral task
behavioral1
Sample
9991792dea285574e463982b29edb2a54b18f709cd4dd07efe6fff6b99e800b0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9991792dea285574e463982b29edb2a54b18f709cd4dd07efe6fff6b99e800b0.exe
Resource
win10v2004-20220812-en
General
-
Target
9991792dea285574e463982b29edb2a54b18f709cd4dd07efe6fff6b99e800b0
-
Size
4.8MB
-
MD5
26ad252d2fda21b69b3f05ebca37e552
-
SHA1
d719c8ddeaf4f0712cafa0a474ece29575fb3f99
-
SHA256
9991792dea285574e463982b29edb2a54b18f709cd4dd07efe6fff6b99e800b0
-
SHA512
bd3465142a83b581350776240955528733bd123a027235104308d240139c2e77e8e2003216d3a2d76d8403f86458ec0e306571a9fe25d1a35ea63ab90fb5cfbd
-
SSDEEP
98304:BUeHXJtB44DFERvi3QH4sE65OYtjPWjgRKch8+vIquJ7:BNHXfB4eIi344sE6jjPegRbe+Q
Malware Config
Signatures
Files
-
9991792dea285574e463982b29edb2a54b18f709cd4dd07efe6fff6b99e800b0.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 98KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 14KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.6MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 186KB - Virtual size: 6.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE