�����bŎ��4��J<��b�2�̈�����2fܸ\���a��rϙ`��8�IB�C��ŷ�@�}?5X�����ȽX�-�2�Oys��_�~�����I����`n�ifC��-p�������X���ľ�OIv7��Op�nI�����F.~r�A ����o������Gb�V1k]r��E%�R�z�uru���ߠ��0�������Y��.����7-�W?�+�������Ĥ#N2����`Jђ+���0���7<�9���Ҵ��/vV-N��6��체��]K�c�h#�J�_5���99 �#;ܦ�[+|�`����B��?��R4�C_��W<px ����x��3�Q����`S 9��Đ�v4����k��UZ2�������*"-��Q�+��͂�$U]����8���V�hV7ɨ�R��֛�*�Uގ���vԦ����Cc�������ipH_C�z�U6�C�p��f�G��{��}��T�Vn���{��K���L���@�1�+x(.��x�]�������Q8Ϲ}(�C������[�����_������Exֶͥ����2}���1��蓼 �~g_�xI����W�ew@D�8� �y��.�Q���Չ���Dn�����C*�F^��{�7f�'m� O� �2�_�b���s��;�\�G/.��t%'��U�5m��Jgq�hh�r+\���|�[`�$V�+�(�b��pe]�0o���^Z�)5��T��|F���0[��|�Z��L���F����� )�[��]~F�f���h��U:4.�*r`8-P��j����Y ;��c�����;����LDhU)^���/�¶��O�����Vp��X�w]��#q�ߺRH����e9�ێ�d��Uu�\����)]�C�������c7脴���&|���`Ș(VK<p���M�^R6�&:]��r�J�Y&����V~����LEv�u?�j���=�W��-��6.v*������ӦH�xm߹�_^\����>�Xi��KA��y�H3X�K��6:�f{,� �����F1f���Ȼ�D�P<ɽ�6���}����r��L�Դ�z�����J��3��"eX�K.Q�QIk�w{mKP�Q�> �t�MV��fp���$R�ڤt�W�����z�_ �]�OZ_~�W�m�s��[����^����R�+q�7��v�}�����[�^���V�T�~��`w�I:�'�� E���Τ�#�w�K�?VUO�8��h���}���`X��9`B(�N�1�9m�Z�g+Wg��gJ�o.1�B �g��I㒥�$]ҜS����(�$ Hz�����K�U�� OK�'ZÑL`�*M�?�*��x J: �2�|�B���� ��y�/�sk����a"�]�W����˓GPi�ؑXmre\�� �`�Sjr�q?`.��)�&`��e�N�A�<�.����.z#R:N �u�_��KLGJ&b�^9\uv�E0�QZ>�ٳ@��U���'�M��* �N��j�J���ݺp��]�-|�'���ZCg����7��k�'|"J�]��Ղ*J���]#wd�=����9����a_����<m���u?�n8f��y���Fuo�-�Ҿ�0\��o�WD"��%J�t�s^KM������a�|�(�b��I5@�i�� �d7���ͥ�5$��Z���?���ɭ�b ���/���SM��骐�����`ύ[�D��:Ea8�?@}�� x��m)��T� ]&j4���/0wY��j��N����TI�5��" �i��7�{����w���<��RobA�W��%>QȒ�8!�˕������b�rW�<g+[��_z�s����מ����/�*��GT��"�iU�`k�بG#v�0G��Q�֟��r�O�_��%���S6�l������@�Ӟ-E�4�8P��9b���_�a�J�k������A�\ L���+��?�� �����m��<����M����c�/XTI�L�;�+j��7��Ƃ q���1z�k��y��s"Ae�w��^JV3�z&D�o ��L$-�'[�&~'���|�C�C.��]��p�]�O�騮."I��;��)�l����K����"@8b ���P!�࿏�_���hx=�9�1�������e����^���8L������M��wP�f����YV���8���I~���6��ܓ�g����ʀ�l����rjJ+���O����� �zd�Śi�����=�d�br��U�<',LG�e�u^���ʫ'�\d�G{�Ux=vz��gI�:�}`t%TA&�j�r������\?�`I1:Dz�����r�Ot�W�rɿ�6Rpo������\�S����>U~ߝ����s������q���~�q���x,�/j��$��h�Ǖ� E�N:��{�{�h�~��rʐ�_�N���f�|��Ԣ^��<��@���} �M����^����4}�i,R�ͮfi�3W1̰M��@�; �J7��*wā��9����>e�H� �8���Lܧ�1��~�E*�5=nBΪfl��՟R������ZS]�"اw`���;=���.�}��,Y�� ��qC灛��f��$�eqќ�c���qM�����R����!˄N�̹ �t�Wt�O9���j��-~#7ڠ�sL�wc�P�թ�����FM��|ۆ�����p~.�^�+��)4I�'� �Vľrh����L���-�K7�TD���a�}��bzI�"n����8/e�7�|��9�Q0�Y4�IC&���g�,��h��ny wX �.�&�IY�^��+���?����("�3@��Ռس�FȜXQ��^չ��������g�\������-�>��K����������������L�IL�ܦ��}��w���rעњZ<��Y�BǨ|b�JX�uK_��m]��jZ��\�uaA����9�&c�%����%L%���H8���k37����TRr����q{���З��v�k�w��k@I!x ��nY�B��a05q��HI���%��*�uO�Yc"�k��;[�+�H?�����8�b��>�1D $����{�bn�Ȉ)�f8�<R���D���:���ؑ2�δ�Op�l�����\7�w����nE ^fV��-�^:�]�I�$$�����7��X�e;B��K內s��E}��k�m;���X'-��f�v��+M`�m�[+���A]X�Ev�#���%Z@�rBOT��L��o� ����JCv��KG#c%��.���+lp/F&��&� ����m2GU���`/��D� �Ɨ�q������C��W�tЪt��|�@�A����)!��A��*�" 0�]��ޝN�Ţ���H�� b��c�o� �P����"�R;�߱q��e�ò+�ݗ�GS�OC!��~V��H�*� U<�t/;i� J9ClhQ�%[���+C!�H.\V7"�����tkK����-�}�9��d���Ϋ7���QaQ���%di��E��7���võ���L�S���y5R|u����nsޠ��%*�F�!ʫ,��O1&gv?� f���o��jFy��H)������>�������� Fq3ÆO �l�df!�b+˫�gl����]��L4�<�)�Jܓ��5s��&n}�~��i"���m�C��W\���M�f��P"�Ț`i�c�3�ݚە~�!��8L�pTџiJ nM��_xd����
Static task
static1
Behavioral task
behavioral1
Sample
f807bc4ade601f643c8508b61243d637c8cb5e8517d17ad7677e8be632e4a297.exe
Resource
win10v2004-20220812-en
General
-
Target
f807bc4ade601f643c8508b61243d637c8cb5e8517d17ad7677e8be632e4a297
-
Size
3.4MB
-
MD5
d06f0eaf63bfe3b00f0f6bc12ed39244
-
SHA1
00513ff16b7a1cbdd21dd9190844c0550faad8c1
-
SHA256
f807bc4ade601f643c8508b61243d637c8cb5e8517d17ad7677e8be632e4a297
-
SHA512
3b2b21581d64842dae85d75c7c6c703ed067c8a47bf0fe08fa7dd97c562d7ef3ee3331ee6bd15e8e5e4d8fa02ad53154650f2ed0a4e187dcab10d8677f3bfed7
-
SSDEEP
98304:5W21Ht2F72rPA655aW94XtpPcdWecgAviwlT0dMlnt:pHtM72U650WevPc8Hzviwl+M
Malware Config
Signatures
Files
-
f807bc4ade601f643c8508b61243d637c8cb5e8517d17ad7677e8be632e4a297.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
Sections
Size: 271KB - Virtual size: 1012KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 59KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 272KB - Virtual size: 11.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE