!��*X�STz������L���U��{��+��Gz���R�u��b���psE�k�=q����F "L�A��x���-�{]JW��鸴���&�����3���]�5�J�������K�#�ܒ�]�*�t4#�ȱ@��;o��Cz�s);�$RZ'�5mZ��lJ�˺� ,r'� �C6 I�(�ǽ�{t��]��$����]���^!0%᠀<�x�5�Qs2���?��<N헌�~�OD��[@*�~�Tx�o��:��Nl7��Yg\�pP���Vi�{���Dj�H�Ժ,�ξ�i��k��2�j��\eHxP�r��<:�T��gw�́o��,C�ꮕ�����]�bQcɅ�ϫ�����I��vh|���v���#��k�_8�~vH�`��m)��b��c���擖i]��&i�AIcDlA�})v*k���t��t�)&�K���!���( ¹Z�$��hp��-�D����Yy�|�^$�����l���y�5��ay��V�)�����5V\ ZnY����JT�\�m�I�$T6NW�C�vnQ���x��\'�Ml����%�^c��~?7�m��mՂ0Q>Xߦ� ���Q@��g�}R��M���1u��0��4��������?f��/Z���g"���J����k^����X�JE:�ZOէh<-q�����ѻC�������@�i�@�\\�t�!�ZL|��um�y���o�%'��(�:�;�+E�ۻ���-��E����;�3��#��<E�Uco��1BI�GR�Y�Cd9;-�S�:��S���t��n� ���P[]ho@'�t���*���u��#ļ�B�x+��Ǵ�u=-�ӷ��t��qN��?KP@~Eb}��r���8��N�fV���듈~W��3������$3�7n���PTrW����!'�I]��/r������o�w���ӟ:���EѦ��L�~�Q>I����"S�r&ڏ���^r��Ϊ�;����>��VW��P�� �������ދ��Vђ�S�֨B�#�@��ϡ��m%=B{��7�����9E8B��ǖ������s[�$H�*��cگ@۬b߁9 D������4�v{M)��PO�Ϛ���J�p��ٴx�մ����Qnx`.�i�i���2�� �_f�t� �oU�'��/#�=�qzD�j�'����A��;9�W����<�i˙P3}������Q��G����4|AX�;��}9��a�&����V���"[w�+Z�EzH-��փ��<ўm�U@�y�Dj����U�*ߤa�U�i�(�N��K��k����z�wϫQhb��n�������JH0m�[���˕K�pp`7'hݍ)� �ŷcL1KJv�� �����������A��` +JS b\3��B�%���m ]��b[&τg>y6���ıq�Q�C���m.�֤"��R�1D�XWd]e]Zw���5�,�=%���? R�F��X�d�ϵ�'�řo���qV��`a/~;������#��ۄ��m���#~f��^�#��?y�`��q���b�Ƅ�N!� N�{���������������^Y���Oº?��/g�c�BߐP�䞉�j����<`/f�HX���cGnD�G�͉��K;�B��Y�2��Y0�7Y̿�Z�!2�� >[���j���`�?���TІH�z�?�$;�\�+��>�g������o�t��m�ɇ�w�߮{�P��N�b$�,���j������Q�챶V�����!�뻊9���FBy��5�`N�gɯ�x�c�j�)ͩ�+*g�����b���I@��n�'�s-�4AL�@g��ɑ7�kA�KO����a\���Ю�_3_'��R���3��R�M��E�������>��:SV!��r�]��f[�b�y������� p�4O��_("�]/+w�"a���B���7�%7�Yy�5�v����v�#��'����5�L�ĵ�ƽc�!tu���G� eO�� ���K��\m�����,G-��̓����DJ�=�GB2�/�U���)�s �Ç��;�[��:�֫��!���K)g��t��^��Af���ǹKU)c����������M���ց���R�i���q���xwT�H�/P ʪ@FK�?���t�nM���Y�4��f�� ?\���3���&��P�N\L���i�۶̍:�IN}W�%oyߢ�v,�1��PH�Th�X�A�b�<�l� ��2�v����ه�G)�wqu~��j2��]���Z��NF����8�<�8���ʁK$�ii�67x'�3�e7I��+���֟���Ehx�N�e�CD�n�}����k���sނ��$c������'nR��W��7�����CO�u��R� j�IX��C)��9��}�̑�I��\��T���9�;om»8 ������s�Ț��~]�2��u�����ׅ�T���-Q4�\�/V��[�5�����X�c��� -��]9��%wO t/p�i�X4#S��P_�m wO�+2D�.��@k��ӄB2�[��:���� Xi�uzR���VM��#�/�rj�LَM7K�^? ����L #���&3&�%w��?�-=�y�ɦ��D��ڋ{솗X��(�u� �6dR]�O� q/b�����ோ)bBf��xQ�|Z�K~��=��˂u5U�a�/���-�a� �^��E�/���dԆ��Հ(�M|b�'V�c�z o.���t�w~S�N ��8��ӐfF���:UrgK�D�š�$�S��͗��-��Gh�sq���o���Gު[�gYC��E�^���Z�i*�1Ѻ|î&^��uV��狫�CV���!Y��ܷe�4*tgc��3��ܞ�]9�X�c�s��<�"�P�]D�P��EQS�����c��\�{�R��*3�f��ո}�heA�������O�u��ߗ��ľ��j�L���J+�� kyͥ��{�c�� HF���j���K����V&��,���㊱�Dk}Oǣ��ϙFι�a� �����_'h����`T)���pԭ�=jMBf��@���d�7v~=�t��z
Static task
static1
Behavioral task
behavioral1
Sample
e81f7ca12058f40c512836be88dd8eb1de9faaa76d83f165199c77faeed89e85.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e81f7ca12058f40c512836be88dd8eb1de9faaa76d83f165199c77faeed89e85.exe
Resource
win10v2004-20221111-en
General
-
Target
e81f7ca12058f40c512836be88dd8eb1de9faaa76d83f165199c77faeed89e85
-
Size
221KB
-
MD5
b84a73ff05b68e02aee72150b5a27628
-
SHA1
661db4a92dbb71677dd0c9d50c750b25e4cb34a1
-
SHA256
e81f7ca12058f40c512836be88dd8eb1de9faaa76d83f165199c77faeed89e85
-
SHA512
546ac52130e5abd15ccc8532ba5c74231f2082bbc38acd41ce4ab45eb391912fe954b09aa3bd700665423b6bb4fbb40b883cd801976215fd773849e6b05d062c
-
SSDEEP
6144:NiHWIs3Bdq4/8wfikESPgTlsCocbvbTs62Z:IwxdqWjgTyxOzTBC
Malware Config
Signatures
Files
-
e81f7ca12058f40c512836be88dd8eb1de9faaa76d83f165199c77faeed89e85.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.textbss Size: - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 200KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 385B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.TLS Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ