-����G}&���d�wFGا��\������ )՞������|���=�[���c�v߶��/E�+C��k�� ���ڿ�<���V,��Y\8�J�'��踃hh��NM'<L�` r/�Z�Ŋ��՝#o6��B���k���l����e1غ[�P�y{�CZ�:3N�s~��M���7�O���Q$��-㌣�8r�[�f��J���;���G����Moc͔~'��)\�����w�a:gM��� 4'��9'�WO�O��ME�Ts���&1�{y�V�TYi�Q��횖j�}�pq�B�LU���q�����E8��-f��Z��L'��ğC�V�{�����_�SE�V�������Ć L�Ȝ9�m��)К���#amԵ���Cգl�|��������I���j����M�[��� .ف���\J��N$��!1����|�Ρ���j�� � �0u��ݐp@��Y��V�a�� �!����+�a�����q��MƜ���S�z#��+v�;}����A&[X̰��Kp���nU.DE��/blp���}ݾ)�F��� (H��\z�� ��~B )���`Vr���!%�&P�7V���P#{��D�١�֕;�c���(]|��˸F��:����E ��@Bq^H��A�]��z��.݃M��+�����d�v���`�/c�A�]x��m��~�ʎu)bx�%*3ܡol����˺t,��~��/�7�}ꎿ�,�X�. �ܟ��(��c ���{j�>V� m�x���k��$������r��k�\�����^]��͕�ۦ��3�2x�<y���Յ�%�nr�Ji_� X��",J��u�6;����`��,��M�s��6|��_��#)�W]~���;�c?�&'~�cЬldFp��ä�(V�L��C�%^2ܜ������*�pY�Ec��Dj^T(�o� ��IW��� ݔ���Wz��_�j�O{"��� b˯a,9���YD���)@��n.b0�ie�R�g�#)���x��[a����-��0�p���ǺF�{5���uzS�~���@ �}R���2J5n��Z�c�mv+G�=<����i�32���Z�߶�L6�ogWe��B�l�|$3��ؕ�Ss��y3E��<5:X�M��UC��ɏ�%B��3� M����"�8YL��zr�u�tg'��b�u澰Z����S��ҷ3��X�a��X��1o�d4�/<�����cM�4��L]d:\(��K�����XU�Ԝ���=����[��q�R쒒��R�3RO�A���@l��xG���E���T��O1�c�wӑ�G���56�gGbL:�� �7c?�%��� �KK���W��Bθ�+^�@р�D�S��n{�GOsŬ��;Dy� �G�s���-��k��Bat� ?Kwi����d"������K~��̞�RK9�ʼ0<��Q5�>��r��0:����%��Z4k�/ڋ�TV�=�����*�bFz����gK������ɹEu���OE�v���УS��[!��!in�^#�Z�b�EZVA~��`:kw�*s1�v�e����/��y$�3�G7�� Z�z���eݎ �sn��,�]�"�,ЌL�-��-Kalw�-]��{�~���$<ts�xp�"ȥ;0ax�{�-cd����M5��r8�-Ja��9���Ա�Y�Cw�(�Η�c�r9c�*�5��jg�fH��E*R������ǧ� ��/�q9�M)���s���CI-!�7�Yęi���q�W�]V���:VW��[q��o^�m_��5f�;0ۑ�[K+!z�+�:ܬ��Ϡ�[�F�䌌�'ƺO�P�ʷS����{���s�����4}�0@k�df�Q$f7K�� ���`D����@� ��ө�D֎��<S��8sq`��ȉ��g�F0Z��7��%�����^��Ĩ�xU��F@��Bn���b��JR�.��.Rڡ��n]W͟B��[��%�z�\�L]>��6� mWb�!ˡ �?�pP� ʸ�qԮkI��EZ%ֶ���Qu��*X���9�߿0�2yйn��i���)1B��4�N���{��f�=����ԵyTe}��J���A��NH����a�e��L?&u���i-~"�2��^��=VF��+{�mz�+��������yt"�B���mQ��x���W�z�O���s��<Ս�e2�o���h)i9��n����b��_�D�?'P^ݴ2�B�Hw9��b�p�D6ǜ��c�W�#����|U���]=}�J_ `�� �TeU�s�8�D{Mz+�2r�f����-�>YeI��5vVk�GM�U��@�z{8��&���˾ K>�f^cI������<���s����h��a2ӂ �@nd�UG����Xv~N���z�u[�� ����ЀH�Э>���b��ёU_�wk�����Rk�[���d� 72�F��Gˈ�F<�x����>(Ww����y����*:��rFSQ�Ŕ����������� G�)֛sU��E���b��?�c� �� �X���66��z-H�+_����Q��"ΏR��c�������z���L�<4(ӕ�%�b�)= ���uP_;��NI7s�.<a��85����E+�� �,���6`K��(xox�7) �+m�x�r. �q�*�i�n�$���l�B7�������|��4n�ҙd���"�ܝ��t�d��-Bu|b��-��`��<J���[~7�RçZoҥO�ͩ"�YZk d���C��q��-����(��� |��K�"rƕ�{=��]��βd�8�R�`�|����4��Ԯ�Z]P�R��Γ�~�@��XH�a�oboS'l�s���[�o�m�*:/�o�m��̑P���x��2�{���²�C�1�ڥ�>{�Cy���;.�j�5�"b�6p��2rD�bTl5�Ā �ՒH����^�����`>�˳�˘t ��9��͐�âp_��Rᴊ����|Dhl��9w�J���%^|�/Ƅm�� �pb��h�^X���Q� AR�b:^��n�džcySx���}'W�Y�V'��@p~y�3��p4)��i:�D��+����`6r��b�8���Ԝ�Ji V�~Py%��`�qA����8��u ��\/�Bp*��!�+�[��)5=�P(f�#�AZ��P�Fe������9f����4�̴�E;;�S�>��:�6��&{�|y���$W��7�Q�a���"OE� ����5:F��c`�p����f2��͊�ᾋ�h�U�`q����χ:+�o8���|�ߞ=g�r|N,u^1��� �{�f�U�Ճ*D�-�{0\䩍�g�O��H4J��b��x��0��'�5���.�+d���տ��l���6���R���Y�Sii��'9�,0�5>L��X>� ��_r����PL�T �8�+S�+�R�J� ��?/����!���PN��,���Mҧ�dϪ-aWF�ժ�6���>��������u�\��(t�,�{����sWI0u��#���n�=x�"����'7���)C�*���9����K���/D_� ���o��v2ò$�ᡔ��( ���X�
Static task
static1
Behavioral task
behavioral1
Sample
61db6c720ae2ed72a0a0809fb20e1d4560fbdda38782255f5b6f445367c9f7e9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
61db6c720ae2ed72a0a0809fb20e1d4560fbdda38782255f5b6f445367c9f7e9.exe
Resource
win10v2004-20220812-en
General
-
Target
61db6c720ae2ed72a0a0809fb20e1d4560fbdda38782255f5b6f445367c9f7e9
-
Size
1.1MB
-
MD5
0b1306af447be7159f0acbc4a87b0f3e
-
SHA1
decc7e7fdeba43019582bca4396574f65a48cecb
-
SHA256
61db6c720ae2ed72a0a0809fb20e1d4560fbdda38782255f5b6f445367c9f7e9
-
SHA512
7303ab46970de8860e3c874ae2cf3f67519fde8db308c4aa84189395080a5fe0e5a210ad86b9ca14a4ab5d59af51ec12fd9b375cea7e1c5630660ae247fca365
-
SSDEEP
24576:39J08Jgo3RG6ovzAp7vxmU+cBXHOFT3ZK1AsjOas6S8HZQoxb2oRltHr8:39W8qcR3p7vYU+aHOJk/2doV22rI
Malware Config
Signatures
Files
-
61db6c720ae2ed72a0a0809fb20e1d4560fbdda38782255f5b6f445367c9f7e9.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 39KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 171KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 816KB - Virtual size: 824KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE