S�"Q\։(��_���Ѭ�ra?J����e�(��gp;9Qi�ǔ�� ����1���r�XS�n�X����L�������a@��qe2�-�v�ϑ�鈖�e�Sc���,��D����V/۸i!�~x�G����ۧ^�E�����B$�L�{��X�)��,��7��-�SBffCk[�7;�R(1�Y��I�%&-��ڞ.�(Yx�͏�aUJŮ�(Ցw� sۭ�-�A����ͱ�H�.L���7�[YNF��7k�t�A"�4��"2y]���s��WQ�f=.]��mv�I�G�^ΕH�,<�ID8JOM��{�jcBI���C%~ ,��������s���-��#�?H� 3�&�杆11���Tq���Q�lv4���fnh m���^CH�Ty��b���8�^9ʞ��S�B�0У`,�ï���,�{r�lπ�������̸���� ?} � �U��L�mr�a�3(X>[�V�6+�O�ж�{������+er\C�ط3@�*_A�0�F��P!ˠbf���&�� ���o��^A��v���e���/����*�19�k:�"�>�dX���L`��e7f�_"KYoW9����g��;;Y��5'�9�b����,yAU��D�͑�}�bf���u[uk����*��x!)��K�Ks�3�z�:�Y4&�1;����������M��_+Cq��ؕ�:(�n�='b�˿&�m�57o�Ŧ@N\X�4I��62�H�ʂ����!j5�v!���d�i���&���det]���@�C����@���#K��_�Lb��]���0� ,s��ʦ���K �$��4[ڪ�"�����|�-�r7x>�%�q��3��X�N��8��:�(j%���r����#4�\��k\�N�ΆӍ���s�iX���_���]��5ޙL�}�':���64��Z��H'j��T�AZ�����U���^�\I��H�}{z�\� ���-{���n�T.����花���waY%��2;��6��.�����5λ ��s@��:�DF�;H����������5�_)s��`@����UR>0v a8��ҟI��6:�+��Gh�bÍ|LM41���B>��:���+��%d�}rp���k�i��������[�p�L��l���I��'���\T�e�)�pRŬ�lB��]��^�����K=���\(�?}&�)���)�Y�,��#���g��SOZd�p��x#�m�'%���f�<��lu�A�\��M'�L���-ڃ�5��q�$�v�C[��T�����ϧD�[d�2����ʞK�m;�RY�[�hÚ;>������,2Q �&�)��mg�M_2�)QN�̱�[����e@�ǀ����w&`���Fl��$ҝ���YEi�zXLjx'�d}hc����ݮZu��ꨘ� 4��_z�d���ن��� ����p���,a-�^����YB��l����k;��'λ��������h2���x�?f��mH��\���: ~+�<B�b��rTFű�z e�/����`KHoP����{�Ce�����_�Tā����<Ff����t�>���vX��"�{�-c.�[��0��?�"2,� YdX���-J����ɯ��YHp�6˨�r]�v�#�?��LGs�|S���y�-uu�t�¨<=�h�0�[$5V��-����:=����|bZُ�\r!���c����BM����ә���S��@��� ��R�F����RbVk���[Z�L���'7V��{��v��~րv���'��B��XW&��D�n�b�)�4Qh�@.��0ﵩsa�D���BC��ږO�85��~��������&ȝ-��VȘR䣅�jḓ=Kaɣ�?5�X�/v|x������L :�m2���px�X�m��}v�i ��������>��*"ƕ��?0&r�3xె<Č��'W�l�z8�����B��t���tǣ�^��V�\��ͪ��]JB��7��G�ܖ��T79�oÒ�{���;������H���ߜ� [K;�8�>�m�K����ڗ�e�Y7�=�DSd�զj��V;��NKh�Y��ϼ\H5N��H����dH ��tNTEe����l����(��������5#��!;+�A~��k�3��oh�u����� �U�@Wi�KO���*$mq�IZ�8�A�6 �p>»���1�kƶ̬����ӷ��J���Y!t� �r��6��aׇ�aSqR�J�c�9�����O[�I��;t"R���'��$+ޮ���䳼��P��_�b�����m}��Ta�Ag�`�!U�x������B�ȹW�dNC��Ċ���M!���x����_�[�p���%�Q�L��RQil�t��i�k����H ��Oݲk�u,�j=�ΩU����3:��� �tw���^�;K߱�+��Ix���u�w���O<�C�L�6�zn���-���b��,�Ӧ,߱]G��Y�4��{w�a��0oOdY �����;[j1�.����+I�uWx���y ".���(��`�v>>�|���jTJ�{�?v#��#�z�~i������P8�p�0�U<�,����H�1d(����We�*�J����|������>p������g���~�@�z�4:�p4a"1u�(�������d��;͎(7���K�WJ�@g7E`��*h%�ǵ��|�p%�>*Zm\��C0��A]�tEP�c۰"�ӆ\?����_G䥭O�DL���V\�k������N5N��f�m_�IeWe[kY|�O�GTą��0Q��v�I���am�q�;��{±�%����Vo��.KB����])�7�(����ƥM(T��c?7�N���lʢ��!���U�t�&Q���<�ʾ�� �k����I�`;|bN�G\��G����vddl�l�b�V�dz���k���s��Ӟ���Bc)�|]��pZД�^����P;'�2mw�Թ��pyy�Gx��"<+�;�[��l��F+Xnj��=���b�C�Q3���쭨U�u9����<� �+L6v�~a��ͨIaÀK���0�k§TK�붯j���o(7w��[��;�fä��3$mR�mS�`����l_"�s|��$�R��Id��T�1����3ȼm��5� �S@���T�?�m���cp�Q?JŨ?T��t�)���)�l`Tʽy�Q��-������9>2�K�I�iA��G�g�=�%�����]nvk_SrK�"h,�/��tMV� 9�����A�,��xq�#���4�2D�T��W������զr�Oh����|m���L�SB Iō�aG�s��g��s��x��>�1sr�QnW�� ���U�O+�y�[�>e����$j"��4*��2˅NR�A���L|�}|����o�A�]�|ҹ_�����t��de��Kx�� �w�f���k��:���bp�Q������K��0s{�@ʇ�S�b2���^
Static task
static1
Behavioral task
behavioral1
Sample
7b9d60cdd6942a55a97ea8f8d09c5b220cdd9dc000c4999564a1b0bd59117699.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7b9d60cdd6942a55a97ea8f8d09c5b220cdd9dc000c4999564a1b0bd59117699.exe
Resource
win10v2004-20220812-en
General
-
Target
7b9d60cdd6942a55a97ea8f8d09c5b220cdd9dc000c4999564a1b0bd59117699
-
Size
5.2MB
-
MD5
57e7ce91775c49ad79fff98325ac7954
-
SHA1
70b5a60deb1ae681f00346f3c1fc26690d324b8f
-
SHA256
7b9d60cdd6942a55a97ea8f8d09c5b220cdd9dc000c4999564a1b0bd59117699
-
SHA512
cc475e89dc546d3478ea3fd11a60f75f55f6c6afec9f2334ad98caa1f30e0b8b55fd57a906a6025d5f80cf6ac9f56bd97da1efc562e0e17985e5dcb11bcc138a
-
SSDEEP
98304:7x5GYy98399mUGxobEDlTwcpS2xaGpL+Dg6561UQf6jkGh/oYFzgOWzJYXza:/0+9qKADlTwbuaGpLW5Q6j7hw0gp9qza
Malware Config
Signatures
Files
-
7b9d60cdd6942a55a97ea8f8d09c5b220cdd9dc000c4999564a1b0bd59117699.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 2.7MB - Virtual size: 11.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 234KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 804KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE