��{��4�1��ģ:P);W��g�@u{1v�%�����{-R{=�Po7��6���"�A�-�z�aS��؈^�g��-���{�)���������0q�z�C{��X�K0֥���aet�� �%�t�4������q��"٦�6ydO�/[�9��[R<^�f�VІKB�<����p*��D���1���x{��G�� �O��y�������V kt�Q/���B:ݚ?����^�0��� ��7$�#֟N���+���!�s;�ea���~6�����Ã->ӈ��x�%�F09ӶQ�Z�"]"�������Uqq�]aT���{��Tw���9��PBSy�� �'(@�4`��~H��E]���������-��Au|�*��¿�[�b.ї�+0륆�Y*"Lώjhxc��f.�w��:��R�3�~)Ѿl�n�J���C@�e�Υ�T��d��'�,��IK�f��z?ژgD����� �!�!>���� ~r�����7}���ᄽ�{�?>��4��$����G�Z1�U�[b�G9��>�Y�S��38�����^��Fp7X$�*`g-N�\,UQ5h��ɣ��N'� (�;���:�����g��8q���KE��i������E�B�=}jn����L����������V<� Pf��7���@$Ę�*�Ӯ�|�6�Ap�W��U`W�-`iO��#m9�r�X,�b��U�I��4P+�4�g�fO����҉�f.�H,�&}�1d�5e=dn�NSz4$0qb7/�*z%�K���Vl��\+k��4�̀<�}�ڋ�0��|���{Ӏ�������rh���L�hby�f���az3:5�W�5q�٫�b�.���� :�q���%ŚG���Z�@�K�� �l���"ZA�4��������͖p6٨Q<��Տq���0"��p�e�[6�sD�h��D1�Z����X���L"�ޗP�ͭ5?�-�����8!o��"�����^c��ܢ�)g�D�+[p���m;/NJ�x�rn��Ј��4W��oۏҏw����塂�v��ơ� ,�o?z%�2���;tȷ+�;h�V�� ;���\�{�r9����v\t��������� ~@/u�J��P}�ed��#�%���#4#��T�|v��4@����Es�ׁcE+�����e��0�����4�Ё�쩋L������E����ϓuG_u����5��FP��Ź~�����Y+��X)Х�����r��oG�K|��K�>k_��l��v�s�9N�&V����!�|�i���x&�Riz��%���K��<DX��dz�\P<s����nM�~Ty�Dc�, ����t���%��5f��7����|�+$��ӊI��x�Hyf ]��WR�>Y���Ife�X;����~Zd+E���9=��tb"���ŷ~�I E{����u�Ζ�0��m��r`қ!���]�C��!�7���WB4Ŭ�*\��Ί"g������Ϩ���K��t����2��R����F�^!0��2_������7��>���װ�v����a�/T�f9�Da5�����(�Fu��E��og;���Z t�D*�6�+��I61&�=M>��ו˄��@ڏ�lRF�����TMc����r�;����b�ޗw�[X��!<���/�K+��"0����LG�W��� �[T3�\}��Y-0�L��^+|xW�CX)�w��� �&�z�;��K�� 1��l�D�����������f���=�O�=1�Z7���9�l�_dR��ܣ��.r,l������O���^��;�)��۔a�G�'�'�N���qd�@{�2҂aN[Dqe�=XV[�R��>S!��ǰc�X˷d}��9���H*��%����%���Q� ��X� ��u��S���Z� �^�i��gh�v�$W�#3����9��fϞpWj��q+iVش��f����,�96oԏ�� ����_���w֯�s�ǧ��G {��ײq}����xa�ڃ^����:f\��B�����h�Zf�L�_F*���N�����?M+�yW������ Z<����xhR^�$�P;�e�8�V8�]�$�7�2'p��HAWF�2�=T��v'��콂 �T�@�o��sL�L���&����.Q����i�?~4J��Qm���ȗ��w4�q�/L e~:O��0ϸM>�ʀ���������\��!�[SDWOd��&�:�,鋇pF*��,=?��V"m�!j�R�CY �_ ��I�8v�e��]%Y,XV��T�ȶ�����rt;���e�ZҲC�H�����2ıgk�2�~3���l����h�F"�U 7vT0)���DA��ʕꡗ[wT�)�S��!�c'���=;�T��h��IԢ5���o��u$`���<���m�}��ii�|Ѫ�D�a`����3���w��vt���B}"�?'FŸ)��J�������G���;����'H���u�� �1T3G�S֏3b�6r�N��Ħ�t'')t-i|ud���Ź�\� ����'����Hφ�a?��1��7�������C��F���dm����W�k��yn8�gW-�8M��ֲ���'��#j Z[�n�����&38Zgf�=�����ST�uu���%�L02i�ݡ0�=g��� �<��3�z��08���� }6͵W��=��äȆn��@KƟ���&%Xڕ+����D���Bnα����g��w���E�N�3��K�*�N�#�h]�M��:�V�BJ��J�|�� ����P������GR)�$@�J�{?��z����+�B�TF�Kirh��x��D'R��ە��/g��$cN�-�Km����/�3�H������ytI���S\n��#��~H4m�My�����=j�3��tl?[5�C�Nsq8���O�0@��y'o /����yهY�[q�->�^ ��k5o�^���B�X��B�Ú�B�������d�E؊��JٞiRVDM����Ļ�L�\��z%F�iKk�m�����ri}ǀ ��{q�����T'��Z{�Y56�U�B.�`F|j �o���Q㭞�+6D+MW&��f�!=��A�(m}���5ڟ8߳�PzUfrla'���/�4�@�ԫ��P����}�:72�/"��l5̗_]��l���⍔���N���
Static task
static1
Behavioral task
behavioral1
Sample
fede88ae8606a5f969eec1f4380f744f144e0880707a15dc21710b9d3b364ac1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fede88ae8606a5f969eec1f4380f744f144e0880707a15dc21710b9d3b364ac1.exe
Resource
win10v2004-20220812-en
General
-
Target
fede88ae8606a5f969eec1f4380f744f144e0880707a15dc21710b9d3b364ac1
-
Size
1.1MB
-
MD5
f14d9a1baf2b410cc37b672f431da16e
-
SHA1
7e4826e54aaabbaabb4dcdab7fc53d53396d1d52
-
SHA256
fede88ae8606a5f969eec1f4380f744f144e0880707a15dc21710b9d3b364ac1
-
SHA512
24ccdd4bec8904244a695da0633dbd8ac681019047e539f66014e48079482213405bbb7d99ee31e0c67db85cb8a1d91e87275b2d353a1d4d43ea75d9ae666c4e
-
SSDEEP
24576:/fw/S7QISFVRSAa7w+wZI+3l4OSWWE7EcJeKMsDj1yuxiE:3w/nIS3R+8ZV3KhWP7lHjDj1uE
Malware Config
Signatures
Files
-
fede88ae8606a5f969eec1f4380f744f144e0880707a15dc21710b9d3b364ac1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 416KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 32KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 192KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE