%�B4:ܤyl�>���>yJO�V ̄�=N@� -��rږ��]M���c�t�\��J�?-�X7X���*Emb��TU�j&;�G ���R�%`G�݃(�m3S����|��t��V�Y�D��L*^�V�G.��]�ww���i��D��'V� �t��smxJ旀*-�]�iw��/k&"�^�\ j �����Ҁ�s���N��^ �l y�%�Fe����):��T��؏߰Km�3��Cc����nmX�^_*'~���h�u�^t.U��d��G���� |���se\��E]C��a�P"����E���D�Q����[h�K�5��,��0��_���W��Tv�����O�3�(��coV��:Uk��ES�膝����X��~�je�HK�p8�1�X���dp5�^��Țk[�5xR~���%�k���߲QO̤����H���}��'�P��[��SWuYH8[j�� ���#�ԍ�L!f���}Y�=� ŊIy[HG�:�Ę���? Z�Q"c&��X�C��t��Zoé ߖ �g�+�������D�����ۑ?A�ͪ!/Wп�'a�E��?x�!�Uf�#$�F|�6�G�v��<GjZ~�n@��,��*?*ʕF>"jmr��=���U(}�(QbB��A��� ���IJg�+�o 7�)�<�(̏� �����1"� ��W{X�`� -RȺX�k��'�P=U/��y ��r?u �����ɺ��^�)&D�[��X�ڰ�o�t��-��a�qd���`X�@����Zo�r'����sM�y�XTۣo-[�J��,�'�Ņ}����[�������uNY!�ţ�f��x�Àfޱ`�z��9�� �N�V�Xq�w�%�k�t���� k�ߔh�1�$#�!���Eɒ+Uqշ�(�U"~�?`�RpHL�?F�[O���gr�>�1� ���~��:���#!�����<�/� �5M��zB{~˂7a7������3�n�X�5�Vr0Q�����x�j��"Fʸ.��c�|r�c�;���3B: I�"�����y��e@i�+��e&�W�E����2���@�-��9zrw��K��������:<m�][ U\8$��jJ!��zٓk�����%�/���(��q.K��Dp ]�g��,��� �0|�]B; �r�]�����X.��-�8d�� *�R5�3��1�IK ��A�Ѣ���y �Ea٣�6�?�0�zB}x�e�3k#�|$F�:>cP�VA�x薣Y,坕nTy�Vf'avF�b�)��r5�����j�+g �Dz>�d��h����J��%d����&\��ɨg�]��l����CVe ܩ1a�t+ �������XU�6S��zH6����R�X*�����A��0�<�������6I���s������'�<I|�>{�v�5�=������-n|V�8�f����X����*�����+�a��q#ķi��� &�u���%��I�J'�F$�8s'Bͮb�*PSZ�W㛺]5O��NZ��d�Ƌ�I�i�n����r��o�3��R "|^F >ryĶ�,�3�LکQ���+���`���G��y����&�tsδ�KL�̻���E���G�C]��xȂ~�z���d�����߃�o�h����Mc3�"�;K�f����A�)���ҐĠ�O�ݷ�{��ړ�ڙJ��;N�~vp*�PY���ylg��k�:uT��ўG���Ra���Lc�wi8���5�Ig�m��9(�]�߫[���qi������7cj�;��-�zʂ�,��X�@��cU'�h3����LJXm`��E��%�0Aũ܉��ZY_���"'�p�zq�4�<a�#qC���v��^]c�����L��Ⱥ������.��B7ٓ�Kjޜ�!�tZ�F�_1�a&�������X�A��) ?�$'�Oe�����L�p����;Ԯ߳|d�W\�w�Q)�LfG~����<|������v�@&�Xƾ�hcnP�6���*+�Jo�����d㿦�.��|V�G ������U���(�ǣ�їP_�p����"��H����f�a2q��{�����x��ڙ�^v|��j��#!���p �� �TLU"�u���<���O��[��|Z�@ i��QW!����bFc!��� ���&���\jYJyw�9v�Y��{�d���c.��/8,�}~|�.Sf ɡ��A�nx6VР�/�,�����=tb���B���S��C�! �L�"�ٶ�i'��@��8��w����Ѣ�_�!=>�p'K2h��jX9º�@��~����������ʺ��)����=jEI!9�������ܚ�j�ι���b��|�!�gs���"�����t����y�W9N����ҹOB�!�7Uz�1��|��I�j~�i���T�v���L�������;6�7�6�W4�I]�\w��_��ͩ���s[m�K˗zQ5��WZ\#mq ��r����@LT��k3a��{��|����[o��C 7�����W����~u���))[Y��9?�R��xCZ�輗c ,w���������GuxѡҰn�+��٠��%��PJ�-UE2�������=N�3�EH- �PK�o1VߝK��� zá��Pv�4���L���}�S�SkE��gn��� lUiW��)����O�+�_b@5�L�[�KTXnF��X���V6���َ���zJM(�P�_fxß�dpQ�����+��L߇W���"Q ���<O"��@��D5�Č�G�c�A���4��ӝr��G"�Zz]����9]�m���HNzC��3�Ǡ�&��\���z��Hl%"�4H ��j�$̷�FC���U��n�������O�D�ǖ�����UI��S:��p���3�����%Q����ȇ=�F��.Q�ڇ�B�crW� R��4J,���1b�^��aַ�w���2�lH��"��.{S��R �G��c�u���6�q�eM���� �}{��=����mc���'J�� 4^t��W��c@&��k��"w�lOK�=+T�W�Vl�Ǡ�Eg�EMҢ���M�K˺<U;yh��{� ��;8�ɚ���*������p���3���٩��!�Ɵ 1\�����n�w��Z^\O3���O\�������-24@{\�X$Q��^q8������,�KFh,���=$��`��`\ߡ��y���-E��� ���_��J$���_��k�K*Be�\d��9W3(��|�yΐ�m�.��w ����3������^��"�0��TB:�&��6�_o���U��p�"J;��"��Ui&���F�btP�c]�t�����P�P0��[��#o�a1:bZ6ã�~�f����^���;|?�곕�s����;i���*{���z�@�Va�9d�=a9z��$����մ�6cGGyHm9pWB�ɼ��m�H����M�Ix�����s�6Uu�8�d�O��P�4G�{ b>�[�D��r�Z6ZڢQ7n��) }/Z]�gn�V"�3���6?��yO�Y9�-Ġ����8��ӄ��
Static task
static1
Behavioral task
behavioral1
Sample
2036677b8480be2975d1151c637598f9b39c52ff91786ccc883281a0e95ac430.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2036677b8480be2975d1151c637598f9b39c52ff91786ccc883281a0e95ac430.exe
Resource
win10v2004-20221111-en
General
-
Target
2036677b8480be2975d1151c637598f9b39c52ff91786ccc883281a0e95ac430
-
Size
2.8MB
-
MD5
fc62992471004d800d432764b399fcaa
-
SHA1
0e8d4217f15ff4e3356f691cbc51024f353950e5
-
SHA256
2036677b8480be2975d1151c637598f9b39c52ff91786ccc883281a0e95ac430
-
SHA512
fe47e1970add4705900d1f48b642a5d373374dd29ff831dcbfdb6766572b114fed85544735c67c2cb9d93551f7873b8b1f0796785954d2b99f76234872ec8421
-
SSDEEP
49152:6wTiFw5WKeCr3Z0nco6yFoTvYvB/bmUJAZbM9WVhdLn8anTsN12yWnlTXXzkP6P:6wTq4WKeCr3aN6CoTvYqUmZ5tjTXBnRQ
Malware Config
Signatures
Files
-
2036677b8480be2975d1151c637598f9b39c52ff91786ccc883281a0e95ac430.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 55KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 10KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 495KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE