$7�m7_�� ���x�}�>H�JHl��H�Qq/��nl0�J/NL��Ǒ��&ʃx���0���m�����_ܩq���x,���T�`B�27��kaq��J") ��/������b�ݳi[����Mxާ�/�P�8�Z9_.�Q��W����^��?�Ŏ���d'���F&�/�GDW�FSW�8�����̕����q�_�M��jya��LH���?2cN���2:�ƣ���.[��WIi��p���"�o� =�@����ҭD�غn�v���.p���D�l�z��Y�HG7֚�ē8-������۩��l21FC���m=Q_D��S����K��<��a���-���q_>��fMz5/��\�k<a�����$=�c�Ҁ��?DM��z�Ţ1�۸�3����D�&b� ����[�&��R!@��s�w�a��b��h�]>��%e�0T�NAeNG�Z�C::D5j=�����Q����z�Q0>?��AJ0�dY-݉�X4*e)�Te9j�L0���U��h��.l��u>t���vt�A�,u����d�=YW"�?H�[Q�m�����C�Ew��Ý�� 5Q|8U�UO˖P���p!�g���P�n��d��VB:u���a�q� �)��a�H��H���+&����+�B�p��y�ʶ*��� 4k|虩J��Va���\��"l��ni�P�mT��fb����9�X��'�7�J��YJC"!��#5o6��kӖ�)�����;_�{$~�a�_�aV=u���k��cj[�Y��A�-8����&ч~u�����j����o�QNI�����٨ �������/G�Z�R�6GTu���s@e����EH�]�QM�1��F��"�h5��CkFG39�����o�M�e,,)-�Fx���n.F�Nް�5 �W� I�~Ӥ�:����� ����!��@e�a��H����+��%�C�e�� l)�J�g6�6-��ͼ�@ɧZݠeP�QI�k[d�nO�,�6��7�px,jN0��t'?�>x!!1k�ֺȄ�nED>n�P��d:a�D��~���8��@�bī?h����,P=���~R�F��i�KR��W��0��˩������2J�����گ7H��Y4?����nT�w��/ G��_ΏY�k}��\a_]nY��o4G���+o� ��e��S�4����b��=_/j���R�p#��ќ�]��4蔣o�Ը�g�u�Ҡ\Q�� �k�㐳�IM8 WY7�?7��Ebf��4f�w.3��IB���H_w4�%���t�1D�C��EkA㟷נ�1��'dp� e����%����� ��2% :�H���Ŝ'��8��[���&O֒ �Eϳ�t�����c4�����jҖV��9#��8�%�}H)�^��ZV ���V-���߁H��#�U|��cz5�:����C��0��z}��YF�4n�)���b.�F�ۣ6����ㆁ�F�S��+û�K�k+/w�E|-dF�w.+V��H��N�{mHX7}(��sw�ڸ�����L��j�"�r�p�d�Q��}��V�O=�@;s�W4���,X�c�A&�Oρ�]�ے�S�����;C9X+���$ VI�*�L�d���|�"8�LQ��1�ă�E��L'�㤳���(��(O�� *,��G��o�ʍ���6��9������,��^��=�aq�P踣���RA��j,��w�_|����w����v�NL�hЍБ��c�I]�_�����T���(:��k�B�a�(ᑏ�8��K�0��R�O��ȗ0�ocv^�8���U6|��$K�8�J���������(�` ��>ٗF����;g��|�;K�srYW5���kK0P���)���E����;a/+/�G��Ƴ����GL5�Ի�%�!-m��Y6q�Y���o�����P �Nֈj�"8j;�,�O��3,���*�W���� $�����]�����)V�F�6�(��'ݑ��U!4�������54Ix���P����J�u��t�a!�kO����VtuS �j~#=������T�_aS��G��&�L��nD9̬ŕtc� 4;���_˜��d}��IDžZ�����9Y���r�2��-p��L��&L�l�5�T;"���0QC� #1*V �����h�D�r�dl�j��d�U�BGIK6#@g���<f��3��.A��#:�@�l��s ]�jߚ���C!x|f��_W.�Bh*n�p�Nsˎ���(�"ve@i�?���������T��Y�W�z}~�����_�~��z�ը��oH) �A��H^���a3K�5�~z�P-S�:ve�E�:�G�����ypD�HN�d�S�ЯJ{�[h�j@S����8��FX��l����_�PrX�C�<�UIn�zh��O0�d �M�$�l��k��!CL��}�A�5g��acK$�@o��'��{��~H$��� �G�䞨09+�"�K%m0��y *�{��Ȧ���_���ز�r�f{��)�qB�Z:6@<7xg4n�*�`,9���rZ�W�À�V֪�3�>������t�o�!M|d�^4^������ �H�i͡��QD����A/�������.�L*�j�*O��L�px)b�J��p-���i���.�a ��3��zvI��u���E��&H�~�Hxw�6صX���('n���$!�rP<2���eh��l�vӡՈ��l#���b���B=�_6��|�W�0�5��#�^� �5���#{=ph��i����`�N@��C3_<zZyw$�O���.��O��t�]��X<L�c��%��������2fG�ivC�#�<�<� ��J!��B<x��m�_�D��O]"���x�F5�(��F��� F jk[5�q�|�-�u��m�$��.D/7�kӭ~����[ :{2���bj���9T�ԯ�r5�O�]���t���o]�Iێ۲ {`���+�K�쏿��d���>b�z20H����^}n��l�(���������¶f�|z|i笈�����b�D�/�Q��!�\����:����o�YT����}��'�@����[8W�. �沤�����n��>;���������8��s����^�&��.K`ma��2��oߑ��J9X&X7��c6�`�#��B�]@S'�`G�,-���2�_Q_/���H�=@r*�P\P9���`4�e��Rj u��&��' �l�d�M �a}�Ξ�Quf�7�p��2Lx�X�����Jv8e�ƋQ��s���xk8�����������q��ɛ�#Bp�(�EG쉋��#�h��������U(�u�Ib
Static task
static1
Behavioral task
behavioral1
Sample
8d3b22e5f0811a8ea2fdeb59073e6d0ac0850960de7e21e3f8c57556b3da1526.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8d3b22e5f0811a8ea2fdeb59073e6d0ac0850960de7e21e3f8c57556b3da1526.exe
Resource
win10v2004-20220812-en
General
-
Target
8d3b22e5f0811a8ea2fdeb59073e6d0ac0850960de7e21e3f8c57556b3da1526
-
Size
4.4MB
-
MD5
25c032ea860d3b291311eb15dee44bcd
-
SHA1
9a3b02e1d993e1e636fc681fb92a38494739765f
-
SHA256
8d3b22e5f0811a8ea2fdeb59073e6d0ac0850960de7e21e3f8c57556b3da1526
-
SHA512
ed19cff082826c69918d5c39894ce762ff6a0e8458b8b681e4d3a7b6a4744ecdd61570e1b267843de5434691b3971df21cc5a8c87622010eea2a8469611691c3
-
SSDEEP
98304:JvAc7DzgC0vJO3pgZCQJ5hz0BHU5duDatUxAZ+ToIfJnr4:n7vgCtaUBHmduvbUIfh
Malware Config
Signatures
Files
-
8d3b22e5f0811a8ea2fdeb59073e6d0ac0850960de7e21e3f8c57556b3da1526.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
Size: 695KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 26KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 61KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 152KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc0 Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1.0MB - Virtual size: 6.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 434KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ