k(`R�a[D��ʚ�_�<�\38��l���`X����3S���.����e�Co��_��$d[��S2�*��k�EtkcƎ�����_�{�zB�C,}�=����+&3��)&��R��I�!��ў��z�ei�0��+2��e1t��im���t�SP"Q���?��K�^����M�ܨ�i��/a,�҄K?x�*ʸ�u���m���+`p˸�ER&�SB�XX���0a8 &��ad9�Tx� ����i6� �*�<���{ �5��8�&}0/�]�����gK��D]�n�&S��8���`�-gC�&-��~�^7z��:jQp��-X�@����uA�N��F�����,S8Ũ��T����|Ѿt� ����B��͠D��*�\ߔs�~�'��tz�s#���X�����Հ+��C6 �W�� 7�-R���4�)d},��-�>e�+�jb�]8Ķ1���>�T���@E��s����#1F�;$f@�n��) M+@o-q3��O��]{[��� )]�X�ƶ���k�?��q�l_�mՙ�g�sb {?����^�� �t�5l���e����0l&b��8L�JvbfG�v�&]����@L������V��4��Y�9ʷv��p����>�Z瓓R���Q�tʓ���L�HQ��=$�c (����4���I��] q��NXG8�B���էG(ض =e�Q$���2�ϥ��:��<��%{�79�S0_��G�;��v\��~=��QG�ɚޝqᣦ��\�O�����1�<:�+�C�ۤ�y.j:�7h��/���D��yʲ��Cg�(��i� � 5�{�5<=Ţ�L�},<<��Z�@\��)-w�lH�������=n��L�'w峯���y崵_+L���������]&a�_/��E����dٞ��Gx�����6a쾒�2�v`O=�%��������kC���l�6'ê�^F�0�U���6�C"��;E[#��ik���r��2b"��~�-.���,������=D��6)�'��h���i����Y����]p���E����(A1أI*������K�����Qv���b���>&�������:�����wB����[|�)�+�c��o=�{N����O�yE�Z�����e��δn�Z��D���K�����t��)���s*�R�*��F�R�2�-��CU��ዕ��㏎�oy��V�I[s�4����c�,kS�g�p��ðj#�����ώ�Af�d�����GйL̴)T��:,f�V��驯A5��| )m��" J���b�2:T����IS�c���vH� �=�ɗ/�K}R��NS � �NQe�}���Wl�d�h|g9�"��A� ^y6�n��M�m<�:�I��`��L�q�Y<�!�w���M�E�"/n����!����^��-I/�G�S�(D�lٿ�Q�cdS�E$q��5&�W�C��\��SvG�(}DKt�@/xWD2)��H�d�dh�3�;�rAK7��j��*56�5��&�5VK�խ�b4�� � n]xhΛ��pH��L:�t�@�V��Fe�4+�����S "����N�x���ᅢ��p33N٩69���/�WeSv��にR��"�H��>��O�v��^���i��A_�l<{�+%���绾7�'W�V�M��Y�a�//��<zje����I�����^��������k`��#�͐k v�?%W��W�S�����c��.&d��/!���^Dm�fP�ad9�*�L&CЎ��8v��|Kn�a�I�XȄko����I鼈o�s����s�K4H/R>6���a�NkI=��'��1�B�P�����i�"�$��#����x.`Db��/�'��">�ˬ�k��į���N�)��ޗ��yBey����X�ѝ7"�,��=��P�v�����$χ=S`��x �S����5H|"FH��I��ٽ�6�q����`�j��}P�DW�t����U��͏$�uf�j���R�_v�Z`��Ke2Q�� �E���2^�{&��|��T4��HL�{WDt&E��#�������qR,�Q��-;�Gӹ)#y`���@�c��(d�p�(7"�&���E�B�B'�7��A������#�%��B����V[�<��3cQ\SÊV�k�Z�ck�כ��=���Y�.�����o�|�����ڄ�>�%�c�J,�{�u�c��R��t'` �u�}��P��Kw ���s��y�B�gcTb5 S�5���;S��m*������Z�����]%Q���{˨���.,���/��WL��1�N@���E����B�AM˝�F��y^FrQ���S��d���A �p��n��Q�Y@��~wX�-���?6Z/�n�����_KΌ��ݦ}h�c�Dw?�Ҋ��>�{;� �_�F8 ����KX1��3F@<�N��y ��y�l2�*��M�E��[o�$�|�f�ǧ9~�=��T��M&��ؐ��'E��?�ă(p��xȩ��^�͔#��>'Ċ����U4v*�<zr�a�� 3����]q�3^_���8(h����5Y���bs�8����� �j�l-�6��$����̹���)���?�p)��I��7e`91�A��:��� E��.������+8X������Q� ,��4��ؑ�>o�p[������D�����M��.��)���4H��?>��)O)9�N@!�$�'e[�����%��er���]PG�7�����ĉ���[T��g#���4��4�j����!�.�F�}4�ON���t���ʮ)����E���"@�Z�4�� V��W{�E���A��B�B�SІ�v̥�6U�&��{�0��52�dw��I�{K�^Y��h�rl>���j:�b�Nv�5R�0����������ے�N�'�h*�f�9�hD�R�o�a��۞swH�9*��=)��N�I�������d�!� �h3�X��������&~G ��BI�j,���e�9���ˌ�5���<���X�m��_�(n�)óRg��� �Vp��!������h~��|� 6���^"��ٰM���/�d���]��蘿R�뇧=��� ���x,�paS�P�4��P[2��]� ;||?��TrY�U.�2�\ ��q���� ��E<�;/M37/���g:/!*{� [LW��@q����ƴ��]7(�m.��ؤq:�<�:EE�~�{�5R�T�? �Xа4&g��q�`���E�!:�$eH����':�<1���D���]� ��}�&w;Y��.(���w�bu�yk�d�iԁ��[�@���̸J�o5�k�v�QmO��o<�BEoP�\��50��ݛ�L�jo���܌��Z38'Ӂ1\;��si%X�?��4�QߣՂx��p��h��X)z)g���1V�#&f��)��������~~�K@�!'C�L����/��"8�-Q!���63v��"�GF��k�a�$2
Static task
static1
General
-
Target
ba6009b532cea481034851e086b4acdc2677f55a7b56b9eef95dbdd85e16bbf4
-
Size
3.4MB
-
MD5
89e21a2ce9bf0fbdd9565b09149b29ea
-
SHA1
a58f18257453d855456244c8e38e892501e503a6
-
SHA256
ba6009b532cea481034851e086b4acdc2677f55a7b56b9eef95dbdd85e16bbf4
-
SHA512
5d11f12e69f93836453ce9b191528d3c0c076976815b4fed602e78334e304ac974dbbf29c5b4d5f82b2ea23926066a4c7a867a9329c1361c00f8e98858a68749
-
SSDEEP
98304:eXtpXmi4S6z3BKI2xSUyhfXSFqLFb47BUgtDl6n:eXCi4Tzb2xSXhqFqx4dUgll6
Malware Config
Signatures
Files
-
ba6009b532cea481034851e086b4acdc2677f55a7b56b9eef95dbdd85e16bbf4.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
Sections
Size: 271KB - Virtual size: 1012KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 59KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 272KB - Virtual size: 11.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE