��*;ʀ~�Ĥ7�t�_7� ��5/-)2�EOE)��x��������*,������C��p�K�?�?E C�T�]3YU�<��"��^$���� ��癇Zφ��� ����/Y�ԝ���a`���"߮�+���;2��k��KG�˖(]�p6�))��6�`p`��LS�=�������ԣ��ς�T�xF{<o�P��)Cm�z�c�m|T�9����uE?�ofڵ���-W=�l&��PH�t�,>����S���u�?k����N��2T�рt��+q� �8兊0T�W�aG�ŅW]��V$������(g�DK.f0WA�������8(���?pS���_S6�A|�(&��`�'��M�`�cY_�dzp��6�z��;�F����S_P��q�N����_ X�8Qުq��t�� s����|&�J^��\�#�-MLB� �ܰ������=��`�u����N��Ӽ���\�����8P��G�,�of����c[q�_�"K�'�(���(�ֿ��-��/U�����&�pɈ�+��m�$V]'��=��f��i����&}��`(�����bO�4zٲ��y,��3~���ME2 t ��3��L1V~���o�l��0]��Ŗ��k�N;��ϓ2�[ۖ��f�69:���v"����ф����wz���g_��^R�D+�� E�#�d���ƛ+Q٫Z��=�zX��}������ԇ]4@�b��}g���1-��6��,�I�#�c-9Ɓ@���)g�B�4"��T�+N��G�*T�cz���ܥ- �w�?y�`�?jR�3z�v�Z�{�=�'�8M���8([�<v�ԗ���=z�@aoAm}�}�q���Yv�Wa�E��n����(Y�M��_aQ>#�Z�U[(�'����>qW���N��p�Î���H�X�nw����wc��$h�z��l�ְ�մ����h���ُj������Ӥ�X�G���� �߷he2��.� %���Lo�䓧�xlcBO �����e��k�jަ{�>&���c�qǥ�3dk�F���AASo�b�J��ȭ����v��3�t�Ő�C{��������v��kG�"��]���[�ׯ�ve��,��.�5��=X�N���m\ʹ�^ ��x��?DC&�7��������#/ԑ�A(7���[��E�[ � 'ɐ1| ҕ���X�����V�O �����p$}��Q��G��[����"/��4g]J���f��Lw��幛`ʂ�e$?�C�[�!TD�,�Ʃ$�Ň���tfn,�� �59��$���د_Ժ2L��g bAu3�~��j=����t�}��]����FB������q�*���,,?�<��u�[D�10V�ﻶ?/p���@J�R�,����K>�8��plPǗ�zk����Ń �֖t����]+�Um�Я�vv ����2&���Z���s�u�~Z��pX�G�Ҋd�7�~� \��R~�L�.*��k}!څ��>+{ \avJ�O@�j�}�3r�]�JG>{���_5#<���4$�w�.v�X���9μ^��n�>;�T���E�Z�q�#d���)�a�� ��5Z<Y��6��Ȅ<=��ß���o��٘P��}N �0)�pCt��G�6�]���]���M�:��-Z�����}� �-]�?B+����#��:���jS�R��,����!�|���b���ꨢ�Z_���.�7�h��#�e[*�2�.w踖��M��vU����х���'��p� Gl���?0������ýbV�����a�z�������@��P(��7�Մ� ]7Ү�4���J�}(��f����pkT�0]� �!]�C��y���yQP'����*�˛���V���͝���q<�W���g�_/��x1G)�����ǂNr��M��#��0���o��vsJHE��������p��n|��ev�FR�{ R�J6�A`f�^��2�H��1O՚�m�@���� 2p�h��� S䩧�l��ë�6��?�ý+&Ē��י����z����AXW�k�� ���u-�E����Q�/Lk|��$�-?��p|�[.�k̓���������G��'�Y�<�U��g���f��R���F�����ml�� ���4]l� P ;+�*�sr}y<���|�?����g1�-���O��g��z�-"�� ��~�V��OmJ��:��㚺��[Q1����Xl��%c�K��-�Ĕ�[��ξ�s/�(!�����f�^�)���ɾ�]��u�B�!���#�yC�B������� �T��9�\��n�,�������\,�`��`&���*#�;r�/H��F���3� ]�$.�y�ng��0��yEW|dI�ٟ$�4�Z������6T�nd*tK �1C�$j�\����m�c���,6ˋ���M÷��m���+�Z�%�i����ݤgĿ�w����a���7��B�M���vf�PƂ�m�._�Y� D F�*�|1G���#T�qj�W��a�tn!�3���6k��_�fY��g��a4F$�I@�YN�;)/9�p���> _����IaA$�?���П��V���*Hu�@M��j�7N &3�|�F ½7!��\�"�.n��2sM��X������b�t��)�̿�?]��Wg�:���܇n�Ąŀ���]�T]�A�@04���D�Y߿M���h��[v[��xZ�%:�Wp���y��'�&����;B �.�Af�������Ehj�t@˭���8N/����7���$��I��}$�_:M����^{"j���~��\~h_c���eQ�؈�����+ut��u%�E[���^m��`i��D�q>E}���͊°g=�C��7Np:�L��Gx;�K��5Z�C�B��9��t��BE4zE،�8�V�w����sY���A<]��W+��0پ$o�|���ͱ���,4�ǝQ��nj��d6%}_�l��0�=���W/���v3��D4[�D���E�uq¼��b|)����?��mf5��+�@�O��(J����W^j����;J`�3��YWс��L�6��E[�0���3{���@3#�#1|x^ ���|/x��4l}b9y�d����`��{^m �燿�A�:+��Vd�ra]���A@�T�HS�)F�|������ҁ��y%��170��;��?eC��!��( Y�R�5���g=:��CK��>J�4!8Z�3�R�Qf�>��r��>�]���֍�4�|�QPm �R�7�Z��j/��ǻ����S.]������7)���~�* ��! �0�}ny�:>��S��D�g��p�,!1{� �$� ���]�L�D��.m��y~�x����P�΅�����# $�o
Static task
static1
Behavioral task
behavioral1
Sample
fabf32cf4454548c05b4ed739a57f344ce94f900db26fd48331eefcddbd931f0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fabf32cf4454548c05b4ed739a57f344ce94f900db26fd48331eefcddbd931f0.exe
Resource
win10v2004-20220812-en
General
-
Target
fabf32cf4454548c05b4ed739a57f344ce94f900db26fd48331eefcddbd931f0
-
Size
2.6MB
-
MD5
513671e926d4a57f21aae05d62a94ed3
-
SHA1
831e3d15f1042681d051dbb0f54a058d565bf19b
-
SHA256
fabf32cf4454548c05b4ed739a57f344ce94f900db26fd48331eefcddbd931f0
-
SHA512
a66244a4dcb3a2feac648174ffbc19724383491a27a65684e388404df2f22ec352e7bd8004c0f55dec033d7b80e9b0494d540694c13ef07a93ed85b88935deb6
-
SSDEEP
49152:4sBjtLZv7FG5/ZgPmpEh6zmCsI0BD4vsGXt2GCZ8BCVn0mi5uAftgGyV14Drv:l5tt7FG5/ePmzvslh4xXu8BOn9AmxV1o
Malware Config
Signatures
Files
-
fabf32cf4454548c05b4ed739a57f344ce94f900db26fd48331eefcddbd931f0.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
Sections
Size: 620KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 46KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 27KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 173KB - Virtual size: 6.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE