�`�7�줒�(M§v�b�d�����FR��B��]�<��D�&��*Ou8�L�y:4��X�g6|��b7HX\Q�V��U���0%���%j����I<��p��XP��5JG�rv鮋H9�������������!ʤx�4����o�MXO�H%1���#�n�EHP}�ѵ��_��b8a��N@��4|���pwj�������f �� -(M"�>Z��yB�G���f��Tl3h���@�$S�*T_��N&Z���U�V�cȏʫí���<B�&���E���o���Wm�Ȉ��_���-�rf<���#�d���]-с�����}��d�����X��Gb��;�����~�w�M��Ǎ̐�D㿀������ދ��� q�m5�U��l����>r��� ��h��O�f����5N�ϩⲝUC����g���J�.@5��_� �&X�,�YĢwD$���r�,�"�"ɻk�Dw��^�?7l�����!�)����s�,-�!E�����~͇i�c������Fޜ�ن�ۯ8�x�>�X�D.�/5� ���r7�Vi�ʨ�M(��Z֠0����1eK:�v�Щ���up$ԅ ���;q��磧�]m�����Ч�zK��7�sR�����-��tX�,����h��!��.�Y>���3S���kr�O�zD����J<8��ɛv+|�ur���o<�.��h� >+QL���pi^Y���⏅W�7q�Ȇ���=β����y�Í\C���1�Q�fX�w��qI�kX���������AT@*�zX&MG��qY*aA\+@R��������s:�|<d�=�V���� !Hue�d�.��pv���Z%�?�P@s������?��L����]Z1'd��(�ًce��P��P�<0P5���_Y1ܺ���� *߱�$��&�Q���Lt��=F��D��oa�7�\�m�˜ŚQ��Q�ٶ^Z����Ɠ�l�`����Y}�qD�bW�M �j|j�����K�Q��������3�cg�5d#i����Q�$�n|���9͞�|��~�b�r=QkL�d��N��퍵�� ���O�w5�2�����Ei�m�P����u��tX��� �=����]��y(�$���=t?�Х}�^��yʳ}�����ջ���5��;�5�Z����R g�0"W�^�������/1<��e�m�4�!��Q�nO��O��z��uIZ��kض�J�eh�X-�{A#t%+�'�-���]}GV�mު�AN:>E��vMJYO�6���k�U��>��U��*;}�E�Q��X[�,��D7 љ�V��D��ݑ��Y}����5�,>s���o��9iՅ�+p_��_nR��4�8��q_���e�*^��ȭ!$���k������_'�[�3�W��R��"�<�W S�p�����<T����A4���jOd�t��_�R_4��$��x���W���$��g�eQʧMX��aٿ3i���W�sYV��`�����:t�>7�ّ�S�ڏ�p8H>�� ��M(�v��ך�"�q��� ���ZoW\����͗�tEJ�����SM.�D�ҕ���۰���ud�����}}�� ��"+4���0Xa�t�.�X�.u����\�P��h�е��[hu����]�d���z�!�sN0L3�te%z�k2�3*/?5�9�R���%�ԇ/���n�}��H����O�rUl���tG�k��i�9(�����n]������Sř}`+�NC4f�=�> Ex�~���\��b� �P����X{���_gI�N�x�7�L�Ãb2y.�A��gb��^�z4�����O��p+�%[ �� pnrH7���SC�u�g�T��9}E�c����XR�[l���{�)tu���y2�����Wu���7�=l���S~"��풗�*蛴�!��1�>���q�t<$ӍT&+�Xa�w�A�ï��+E��3hp��Uz]W Z=��YS�����n�~�~ڃN�M>˹�gI�W�:D�w ]��M� z ұ�t+���@����Ն�cZ����D<� _����yG���0�V�^8���!ػ�e�s�1���\,r��G�Y�I�ۍ}(���$r��Q,�w.��&�T�C��#�7~������'�*��m!�u�j"�s�G� ��2A� P�CO����_DQV�#�ߐ��z�QV��mC���b�O�E�A��1�V�{DK�(,��<Λ\�F$��I$IєEg L+�Y��A("�q#�O���T%�3;R�;h'�F�,�>�L��Ǯ��t�ߴ�y��/II�f��Ś�'��ȶ��<@�{��E�����Ĥ^����`^! ����zS���_�S�\�1���)�4�����������j�NG���Ϣ�a�j�I@�ٞ�1ڏsP� UE�J7 �*6�s M'D����L1s�`�m�0��������r�Ѝ�x�2�8��6��ݚ��Ҧba�]�p��h�@�j��1�`���2��B�]x����#���p��{��<Z7}��>��J�}����V�[�;�2�G��ã�v&���/���(�ZYK��QM��D����͖)��@8 �is?���o] ��_, ���̩L7�R�[T�!Yf?����I�!F�x)���/�H}']P�������Rd��凒��1&��lK�MB� $����"�>�B�,>W}G�AWl�����4�鏮��a�)F�g|� �C&���s�)���Q��J�v��@����W� Yα��Z����?�����AJ.D�N�le���0H�j� j����߯ �/����͎߾W����K��e�A������P�SH�E���]r�=_���ƙ�v�a7���X��7��$������c��rnN��F�tSq�b�KO��[6�-��3�j�ʽ]�ʌ1�e�7c�=B4ly��x���l0.*�4rP��.�����\� �H�|��(!��샦��`��L���#ق�s?��_>���}g8��[�&��LCn��/����'��?�e3�����b�Ȟ���}`K����z%9�<�] ���O��x1��O�$���G��ӡ�F6I�b$�������0+ �\h� �����c�a�Lr>��+�6�`C���N7c����Ԃ�������H��
Static task
static1
Behavioral task
behavioral1
Sample
1391bd6a687fd34f25cf2af834af94bae1ce6a0f83580a59276ee9dfcfe50c8d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1391bd6a687fd34f25cf2af834af94bae1ce6a0f83580a59276ee9dfcfe50c8d.exe
Resource
win10v2004-20220812-en
General
-
Target
1391bd6a687fd34f25cf2af834af94bae1ce6a0f83580a59276ee9dfcfe50c8d
-
Size
2.0MB
-
MD5
61cffbcee45d17cbb28fc2117f054587
-
SHA1
59508e5c0d54f9288fc72e00074d47d90a5d3687
-
SHA256
1391bd6a687fd34f25cf2af834af94bae1ce6a0f83580a59276ee9dfcfe50c8d
-
SHA512
d26f5402ed03712588e0b33a60ce08487d3370cd9a4aacde6d82427d0b450920e6383a1162555f2d1d520e78f1b6211c4e4ba13dca8f401bf8035b38219eaf88
-
SSDEEP
49152:E/Wd8qa8OqUkm0DARPhi33p73fb4Z2qKBw4tkqFuzmHObB:MWu/Vkm0MRs35TdBw4t/nHOb
Malware Config
Signatures
Files
-
1391bd6a687fd34f25cf2af834af94bae1ce6a0f83580a59276ee9dfcfe50c8d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 388KB - Virtual size: 896KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 328KB - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 32KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 168KB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE