UM2��Y�'� �&�>� <����餿 ,����\w�#���|?��R��w/!>��(��նZؾ퀦]��j�3�`5�xeڂ(T��NQ�=��$��Cr)z��d��{���풭���o���-�>�8I ����V���*��>m���-�����?���h��^Ğ��)m������D���j��.a9]4톒���0ﭾ)$;NaN��x�X��Éo��E ��cȧ �|&��j);��*'k��dhn�g6wE(��z$�0Ay䁨�E�rڏ~=G�[�� ����ۚR~�0�8���n�S�ƀ�(���BrO��,��랈ݮb���@�F�Ky���B�_1�Q��>�̝�p�����4�EHb�)w���d�5��a�����ȉ�9��{s7� �<��J�D>p_���70�=~�j�+���F �ibf���G��~Sy��ce �qй7�C�}��E����sTϯ���݉��5�Ò+�����/�:j��� E���6�F�wc����4rK��c�1���� Q�Ǣ㤞�\�Y��.��ք&�ZBQ �[c�����)�0&�����T5�����X����k���4�߭���Yp=�#m�i��{h=�߸Y�L <rR�������+�ch1r�yG�����o>�Α�\�>�#c��y�+X�ͯ=ܩOLX��6dv1�w��b�{]g&�F��J���;���>wh�p7�ثP�(�3dGq��i����h��ӭ������ē"�&�:��ڧ�ޝYosp����#YA�8����`p9/hOH�SnE*�a�DW�4�٩)�.F�;z��I��ؑY���� ��Y�k6�c>��N�>^�Lk��!�1�K��c������� �f�<[���ba�͘�'#e�ėVo/���U� �XLH�"�����C ����3�E�COa��<�2�k'���m�<�Q\�q�s��l.�����|�ɵ�l�6,��7�m��:Yß����ÁT�r� �72� RI��ผ���c��5�}�1Z�h�$g���]���aڧʅK͗�{�^Z�GsKSU�l�M{Q�Ak�J���3�Bݳ>�!#�k�=�op�ޯ"�N`��ާ�`{h�tϬ��[u��>ŋ�M�8�~�ཇQh ;��ZcL�f��^c.��&���0�r�s�$!{�&�Y`�����<�0Xw����kq�5��y����9��K�E%9h��U��*5�����'/�]&��2���Z%,��[�L�8363L�S3p���;oU#��%@�99^�m��Vs��D��},���$���iVk7��g^��\���A��1��w3���C~��д�}���6�2�.x��֠llZ�`Z"�7���-�W5���zx3�Y��f�8��8�@�n�C�j��]S��=���[na���g���WE�c�qݦ��w����{�Ar�5��FY3���l�����_2{��B�Y,|"NH�ܥ�c]���#)8�d2�-�D^;��CH �L;4D"��͑�#��R&N�;9�//(�6) �Y���Rt��K����4(�T�F�H�,<��AEk���h$��'�}�;�����4�� ��BC��m晪�㾕 ���i�+/e��j{���x0&-KR��UsJ��l�@����G�㼖X�xB��gs��vH�����.}Y��v�]��,qӼh�[��K���M��x��2���'��L`QL�kT���N���{P\3cG[�T���Y&���A��Ө�((����ع9P�O�ļQL}�(�8<�M�(� ľ�������n*u����k�Z�3�E�sr7�9� #e���0� � E�,U��������9W�'�L~(�Ɋ�݉�ac��o�AIO4�k�oc��LW�a��j���;�.�y��_]ӑ�t��Y[�����i�Ifm�J��b<� ��������䝞�=�7�|�3�Z��o���垧 | �����������q��r����1e�X���5��oHV02�E�#�����7 �U� �B�04�D�m�b��� �K��FQk�oI�A�֮��g�V&�$iH��dC�,�����ڔ��w�@5�ӞOP�3��5`�n ���6������]o�D���3ϵ?]wk"���`�>U�Y&[�T�6#�0����3�u!�/Ua1P�Q���N_�ٿ�0����à�O@�ph��r��#�^<G`z*���/{{�xӌZ��CQŠ�iI�u��NC�q�s��Du ܫ�ob���̳�QR�0]��I՞9���v?�5�7����Tey�lAQ�/O��se(D��z{�����6����e���Nϛd�H���$���r4����V�ț�l�l@���(�9(��h��fM�M\��k+�D��2�ĺ�h����V�p��Sf��w�9:��N���_R �#;տ%.�V(����e�a�{keB!�y-��������<���6�ן/=��SX�%�8٣����'��7G�i�O�^py� ��^7����� �sXx�^Ŗ^������5�&Ʌ�y�&�ķ�Pa���~6�+{W�M͏v �fg]��G� �+!7~X/#=;���}������>��zI�,9s��{`����.� 4�OM}�O��ӚyJ�{y��==�r6�d���-����ѢPfK�_��W���ɽ�Oii��ʑ!�{��uR������Y����) ����є�A& �c<���̀L�2��`Y��*��} ��������pF�=�R�Ԁ�S����� ����XV�so��|(A�닩�1��A]?�����NiùoETa��k��::ce�����4I ���&�\x_�e�7��Y���O��":K��Jyy4���77�l�i��$G��ü���O }��4�����N�q �r����3挾!�hr�Sb��H;����ۚ��"@ñL�'�/�1�>o�d�BN��Ӻ7��xȦ���X���`��K�\�&����=N��:c�r:+�����>�)D�y�2Y��V.?��0B��#����8띈a&)�.8!"Vn���v���0�$xPS�wwD ���j�0D3���e�ª���-�t��_`O����/c��$o��v�]�d�ۅ����9 ��V����3���p�����|���)vM�^�v7��s*B}���L4��W{P��/�1W�:�-��T�:��,���0c6��"�����Γ���>�;oM.�}�q�`���=�H� cG ��6��!����wW_3*����Snr��dK��IL[f��L�̒F�Z��x��R��z�Z���gf��d5"����� L�Ik�ڒ`P����ZJX4q ��d���;��g���F@$}�i�m�e��Ɏo�d~�
Static task
static1
Behavioral task
behavioral1
Sample
f3b24df16ca11a2ac9333a61d5f1e739671f17f1853c7e947d893115f348f519.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f3b24df16ca11a2ac9333a61d5f1e739671f17f1853c7e947d893115f348f519.exe
Resource
win10v2004-20221111-en
General
-
Target
f3b24df16ca11a2ac9333a61d5f1e739671f17f1853c7e947d893115f348f519
-
Size
2.3MB
-
MD5
1cc5dd78eaa45de0c6fe7c2dadb5817e
-
SHA1
af99b600475c5d46bbb753f0eaebdd41aa189c33
-
SHA256
f3b24df16ca11a2ac9333a61d5f1e739671f17f1853c7e947d893115f348f519
-
SHA512
53dc9ae1e9a2f4097f9e2783901240c1e1a9a8224ff0e2b540c5c1c55f3f0b121ce2dff575605179a9d94dea281ae0b76eb73216c048c3dc7dc1694185b71df2
-
SSDEEP
49152:R/iOT2UmWPJeZywEq89HAV0a5E6TZCEi0rA+10db6W62WG:AK2UmDZ/EF9H+0aiEZliIAXdeW
Malware Config
Signatures
Files
-
f3b24df16ca11a2ac9333a61d5f1e739671f17f1853c7e947d893115f348f519.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE