K+߄��S��\ݫdA��P�d��Э{�8�ѯ��ĩ�S����H��R54 d������ kȇ��-:ݛm=��؉w�!l�;|Z�����F���`Dˣ]d csS*���*z?P�-����^�bbS����ٰ�����s4R%�D�;Z��mCV��"�~�i�`/CZ;W@��q����p��X�P���Ǚ���a�X}>G��A$n��y��2�6"��f��#o e�7"�D�\�CS��J�R��`�ܜ�rK1=�G����C��)e����{����'�ya��|�B6�;s��E���Z�A�t�y�"��ȶOU9h�2������Uv�P�k?�P�+b�{��s���$��,�D�ܐ|���ć%D����د����+�W��8���度0e /�Ҙ1��7���X7t�OCA�Z2��R���^���� ��;~�n�����!�Q���Ƥ�_�'��:8\h���N�/S1��K��,֑J�4G@d�Sp�u�����Jh��j�������$l��P�G��/bSPy������f��s�u��<�4�l�n�2�@S���4�"4vz>�H ��dd���gD#S��M��<8�Q��(V��i`6� ��fA!�x�,HR����Ѱ.��r��rW��\�^O�5`�S �bo/�7�Z9����gDpJ7���,���CI>�G>�u���YW���V�H�l�����u�24�e�cz��.��}#t�ɛ���Gh�H�m���2kR��m��y d)�� ��0��ϭ� ��|ͩ�I=ͪ�n�����2ty���;c�+'���`���~A�G~��A�R+BZ[��mu�g~�<0¶�w=�E��@�,��܇2'@U�B}4��2O�l�r��8�Y]�ܮ������:h��Y�����ƀRX5��A_����'�p�ϴ`s����ݙ�x*��M4����aN˼�",L��V��o��������Rf����Y !bp�G(P�9�3�?�IDni#��_}t{�H�w�|{�`�I�@E���TJ�'�R��֡S��>���d�j�>����e����t`aX�sٞ=�Y�U��[*�c�>�~���"hm��]'R�:����Z �!4��MAy`u���}�����6��>hS�AM���bPb�q�6a'�}P�v��<��;j+��u�;!6��5b9�a������F����X��e5X�`�l�P���Nr�n���u�+iJޓ� ���d�"l�=��ȧ�J�)6a-�zh�.���o�q�UF����~�yQSƜh����@B��OcMم[ӕu�*:����G�LI�$�k ���ʒ1���e�͑��Rl2>3���\v���% �J��Gܭ�&Y3�.�ل�l�g��U�@�Gى�i�$�o��N[d�{�B*[�cc�x���p���NK�4�v�M�5�/�L� %��}k7*��H ������Ҟ#�j�]�ɶyA�:��)��^��~�L�I�K�,�豒U�">�u��^"��&\Z����Q0]���T1��f�*=b����}SV�5��ǐ�3ImƖ6�!pZuS������g�8�_�(غ��#g;�٨bKR�!����q!��3�ZJ�? +Э�t )���k��F�����s�>����� ZGɈJ֬'j�t'��U�:3~!�đ����4K���Έ��: Ni�t��c.��Sӟ�LΞ�K��M�4 ��10����M�{���� )<��`:p��A�"1A�� =��mg?Nb��ȌӝU�E�v�Fm��<��Zf�o):� �NU��"o��2m����)jkԋ5� ��(�L|��OP`)(?P������������]]8�-��% -�U汸��36�ni��H,>�y3e��U�S��6���s99���5��S�lfJ{N��M���p��R��4��s�Pck������達�����D"��@��Wr��.�����C��c��A�_��a=���.a!�/SF���t�a#���rE5����FI"j�����F��%Y���چ��$Ú�z�ft7�̛��2��, ��~���SMSr�E�RO&z�'Qi��n��Ƣ���`����������x�%����/���������nT��]*�S�y����rO�G��Y��g���{������������^�#�iI�0��v���"���Tӷ��ܰ�}�JL����8y�Be�Q4r����� d��Vel��x�0��h� �n|л�җ�a�yM�+���C��/�}��[&�u�j l诼b,��MTn��eB6-PF��g��G��_�v��~����R�p8"�0�K���&��������!��$"�xaz�;�d�s��(Oj|�ȿ��ɓ)�fo�:}vH��U]3���]b������:�Qq��J�� =����9������k�V+綺,��!��G�Z��"�lo�vs�P}�Iߟ�=&Y吤V�Z�F�]�^��s,����Jv(y��I��z ���>��x�,Rڝ��$��1������n�� ���>m0��y�)�1��W |�t��)F�5���D�څ�Ԝ$O�%M�����T0��?KQ����� ���m��Q�x�l��.!�����c����z��'6��p�]̃9�.j�ъ��/���]�g�����Y]9;4����c�j���jK��uK��>�ZT-���J�����ӥ��A~m��͔^-����5������n��}��)��H�5,�cS KvΙ����@��Ib�)�J<�ז��a:����z�G!��Ch�45I�N|��o"0z揳� ��d��p�z�������mY�������Oe0��B�����%:�I���%����N����P��0ǏT����s��.4�»��sT'��q��lTw"^j���}p���� W+��8� p��:���AzK��q��7lIK��[cPq��T/�uʝ�)��cJw��EJAw����9��@�BU(�A���g����0W�)����\�Ȅ�e�zdbkPV����2�'����g���r�?<*�
Static task
static1
Behavioral task
behavioral1
Sample
2b91bd17c9c0377adeca7d60aa8ede2b47f9a3fecc7b2e6ca4a3bafbfa2cdf89.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2b91bd17c9c0377adeca7d60aa8ede2b47f9a3fecc7b2e6ca4a3bafbfa2cdf89.exe
Resource
win10v2004-20221111-en
General
-
Target
2b91bd17c9c0377adeca7d60aa8ede2b47f9a3fecc7b2e6ca4a3bafbfa2cdf89
-
Size
8.3MB
-
MD5
74f00a7b3baf2da3ead5be4c155eddab
-
SHA1
81f8cdc342d8d29be363f3d8bebcc34f2ad38d09
-
SHA256
2b91bd17c9c0377adeca7d60aa8ede2b47f9a3fecc7b2e6ca4a3bafbfa2cdf89
-
SHA512
a4bf564c112497ee8f26f13967b86b5152df0cebd3858bfb98eeb52acfbdeec38303b14eeabe2a819a84b09dbd1c874bab4912ab3eab959a1a3dfa52ee0001d8
-
SSDEEP
196608:qvLoQiXeODKBTtLuIwzij4En3RKP/d28ko4Z/ZTkPH:qDditKhwzijnuWo4VZTI
Malware Config
Signatures
Files
-
2b91bd17c9c0377adeca7d60aa8ede2b47f9a3fecc7b2e6ca4a3bafbfa2cdf89.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
Size: 739KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 22KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 24KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6.3MB - Virtual size: 6.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 173KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 945KB - Virtual size: 948KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE