3]Z��0~�WF���#4�Ϋ�AF� �'s�BDP:�l;��V r��D- �uP����d�eA����������Ou諣���B��Eԍ��M$r�Q���Ų�Z�X���t$�fw�$B�e1h蔾w+��B{��4�3�8ߣ�R=c,�"H�K��k��e�я�b�\U #�8k�)^�RSH��V���Ĥ������e��@��)n�N禮�c�lڝ*?�S;�ץ;� N kw���v�|L��tL�Db����Q�<!���+p���s���BV$�隦��79����B�W��'i��f���?4�u6�hj��H�m �������w��TD��'����p�k��K��-)�X Pk�o�{I�<����8�X;��`{���m�4��y��� H�<�]n��ɡ��|��.p䗦�Y�;n��R�p��K�����rd�8q����z����h_���[�">�~)��H�ߒ�8��A�!0��r~yС��kq_i�h���%x��u��;��H�,��D�1�FA��Ω�� �� I���#2�A��N�Ͻ�&���#�a�7���������)q4�VUAM��p����� �PC���>fݔж������J��Em/o��1���8jg�a��[�_L��`U�µ,�;Iwb��q$�T�O�ms_������������F!Lx����Jv�������Hټ��8�@4�Wᙻi�ڌl�v�m�[��!Z�����u��Xt$�S��N�?N*�� �ʘH"�T:V�"c4���K^�4U� �˧}��hu�ƕ��&��K~R���*P�Wl�� ����:�m���L�D�x٨6�̂�#ϕ�<_{X�Zg�O���3�L�My�e$ ���f9V��W�KeU�<`bPθ��o�`��VW�(m��km jJ��l˧�R4[��LHMN�Y �9��f���;�1�%��%�b�{��+-"�Z�L��>�pI@��M��hC��;58P���p$'!���K����=�֎¤W������P�nNNE� cHMj�����J$�/3��д}V?���n��M���ɢ���~���a�!/I��+����϶��u� |)������N�OV"�X);2ٯ�j#G���E�� \cʪ^�P|����e�+��Y�Ӹv�2�9��/d��8��0y��o����k?��������u��cm>������'��ş~���B`d�9 �`���B�7�wW�ړ\�]q�Fʼn�8|���p7�tv�Ȋ��h`�T�?�5����O ]`4B�!:�ڵhXc'��������{6� yقr��A���KƋx�n�oe��!�����ݫP@\�����������vT���F�Ü|L� �ŻӘ�-�#���V�GI��HT�� ����p)|�. ��B~O�P���ZIq�E��''r�a����DA���O\"�DP�1ɾd� ^�./]����B�/�є���)�v��Ks��t�>��Q��_�M��ᅾ���x�V��1[����\z���t�s&O}�-8������ Ǥ�WJ������yAƊYc���s��֨af3;��rJ?r _������wu�E�%:�s��M�:&"��j�W���QO��6W��7kˎ��a���̓��lb�ؐ-��D��ԉje�\L]L�8]���_��ts�UxX�,�����bEs,�Nv����)T��@3� �{$:Z���6ǻ��}4�����Hwb��=a�����3�{��(��`�kEUV@ �J�W�y^���ʐ& f��P��A�*�O���"H��H��u��72�1�F�m�{v:�RY|���,_��xnI�\�}�B�|�;��$���a_2�A�ㅓy��\�G�������ĵsug���i����&���>��v�.�m:H&�����e�}H���芟��4H���ԥ�i�2��J��6p����$����Y�R8���I�p����ЪC'm46&�@�u��e�?K���u����:����� K��Q�U��������z���� �!���Y�Rz��3u����*��Ó\�e��5|N�p��KM���"� �3K=�w���?�YF��-t�i�sʣ��I1��J�L<�p���6�H���š�z��ͰN�u��^4g8�svn������y>���&���g�H ptO �����T�'^f̬���>6�S��3�F;xAg���A ��� L�J��]�wb��,c�~:tN�5V��Á �^��e���c9� gf���sԠ���ҧb<K\���~M{�(�eϊ�k�#y�0jn Kۦ��9��h����Ф��p���3_�Gh hm��\,�Qz̶��qYi^����B�l��zV�-���=Jc�/&�>:z�V����VJi�g���������L5��6�63�϶��(-K�`UGN�z�N�'d�*A�F����"1��A�����&��#ƣ����$��?��(���-��k�� �b/�\ь�������&/��Օ�[E�[:�v)X��?� #y��ٹNza��ծS�#Lg���ʈeo���#�1����;^�QQ�b��-hD}��Z��o�$E}s�T��� �X��,@(b��7#�>��������G���n�S�B�:��Aڲz�h��BP��L�&�B p�|`���>T������_�55��(S�+��j��;|��sA��g�4�U;�}���R�/��V|�����_L�� ��G��I��`@���+���������a��LYc��Z���d�1�>G��6��ꑳ�j��p!v&��~5����0��(�=� 5�ɴ��;7>(^+H��8�L�]�Z�KH�w�y�����v�q< n{�ҁ�X^>��ѬX����ư��l0��Sj|)C��I���L}d�"�a&��;��i��?�U5����e�5��^$rK��r(�� U�ɭM��碚�f:�YP�S����d̩��`M�8�fa�g���)%�ջ&��AP�.��֊ ����q�e���uH ��a!��x���\�`TT� �(f��В��t�3f�ޭ��\�
Static task
static1
Behavioral task
behavioral1
Sample
fea3c3d977df1581fbececad222ba051946b4380ca29294bd130f3352da32daf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fea3c3d977df1581fbececad222ba051946b4380ca29294bd130f3352da32daf.exe
Resource
win10v2004-20221111-en
General
-
Target
fea3c3d977df1581fbececad222ba051946b4380ca29294bd130f3352da32daf
-
Size
1.5MB
-
MD5
060449ae9cf3eab6dce1fa2b95310350
-
SHA1
af55d43566af2bee77a38240069ec2ec75d7f05c
-
SHA256
fea3c3d977df1581fbececad222ba051946b4380ca29294bd130f3352da32daf
-
SHA512
ff1ab714f7ae739ed3ece153fe12510e463be55c9dd6f580838f297e6bca723b2b3e37275e64f16a1754fcc1188381ec28e1e60e1452bba56f946f8a754bfeb5
-
SSDEEP
49152:J4+vMfJyFbx/nhbCNAAS2EAqyAH2cF3dtaSCrL:jvIJyFbx/nhbCNAAS2EAqyAHX3dYr
Malware Config
Signatures
Files
-
fea3c3d977df1581fbececad222ba051946b4380ca29294bd130f3352da32daf.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 225KB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 908KB - Virtual size: 916KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 16KB - Virtual size: 16KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE