C��T�G#��0�������9�����$��ш|�5����➵�#:��fT}Q|tX�Ri��X}�����Ss@ �x�=�W@�Zt. �G!�*D�uf��(���]��NA�w�D�9���z�^UY��<����9����[Gж7?���2���$;<lW���IEBt�q���(k%�i!�J\2p(T�\O�g�5H�e�r�מr1�?���B�s?����+^�Аg�A�u�h�u T7 �g����X�# � ȖBSW���p������� S�V穀�?�fKs�9����\������d�#j����"��c��o#��v��p������V�i�T�r�~�����V���!�ˋF 3����z �;h"��7Z�=��]֬�=1V]M�x�Uq�����2J�ԙ=<lF'<u)�b[&��K��,��Ws�l�Х:^S�~lI�;�n�5 y��g�*����[����X'&u�]D���|�V�6�,S����W)���5,�aף��'�%j]��!��{�j~5��9hf;�����}���6�cj��_s�?�^#�Ԓ�W�n)��:>�*n(F���:�ڈE���Y��n�*���f�(��F���-�����2D�\�3Y����=LqDۥ��oH]�'�����B��Gv_�xV��\�h� ���<xڼ$�K��Z,.�L}-ɿX.E�$~�\�k�%8W�+8O>�7�]���Z�UB�7��dAx�o˾HH �� ��9�X���J��j51°=k�81�D����/�^����`7v\O��LV�Tq�llǷQP���_�����n� y9�~='rU�"�>��9�-<(ö�XFaJ-ؠ���"���ܜ��:��3s �������)9%R-O%�^�����0�7Y��?�8;F+�������f)�2�6�}�g WWU����U!�����[^�5�YF8�B,�g�[0sͽ42�WHӖ�������:�ޮ34�����Ȩ��wǜA:���U�"�!�R��<�*+ '��:e�lk� @Hg� �Қ�/���O��{��kS�z3s�-Y��r�:� �����ura����!ޔ�)�eF� ٚ_�o�*�����%A��Q�QH�,8BO���J����P�귉���w���n.�;j��zx�/��wn�o�b�UM��ľC~>z��=�^�dC@|��D{��ܵ�H4���%���M��$2��̳(���G!�����Aw�'���*�C�{�'�1�3��-e-�۱[�@�l5k:�)�$���f�y�F<��4��e���.����Zzfd�2��Y��M�� >nJ(����_��!�۠��7��%?�����EwI��9)��7���,�}�F��;���R+P-l���?��#���!%l�QV/�����&Y`��ךwH���!/�<��R�#��y��f5NIl��v�ڼn.+g�M�m�BU�������/��M�����B@�����o���� �w����(�.�j� �&�@��j~ؙ_�X�G�r��|���w�f��`@D��ΖRA.UEI^��\�� ���DN%Y�.!���Ug�F�^˕]#�a��3"�Q�I�-ҵ'��o�^������V�> ��v[��J��{c��83s������!4ɢ 4����/�g����W�-KhgG�/���X���+���(�P�KFb��9V)`�g��� 6� �u�D�if7E˞������[�^�Ф3Jc�DǑ��(�Dw����'�Ȥ�[u��o�6C�%��|�V\m��&�D�,ij��"Qd�5��4.�]�>�/$����6�fM�A쒲h)ٖl�[�i�5U�9-��������y�����`Ō�Duf�ޗ;�g��=XϮ$Zvj��;/�N�H�D0"/�qG� �FV�i���qڛ����U��z��oe|�į����{�u��B���͝Swڹ�Qy�9��`���j���~V�\�~{f����*J�V�m�4 �(N|8\�� -�g*�vS^/�B���.��m�1]�����9��%�(��L$�Q��E���Ö~��vF9�zr�~҃����`�*eʔ,G�\KQf����w��C��~eo��W�#U>fWCJ�����s�C���E�F�0ׯ�W���>��]���s����F���w��ZI-�I�f�ф�huw�<Њ���G����R�'"�*)b��c�&�0���6�n�v֍+�R��A=���/���Zu�K�H�h�{�#݀��.gd���`���� ��驵,h3����2��^���4�5� ���d"=�wXm���R���v���� H��I��%UV)�N�U߈�������py�WxY�DT�ڠ�D}@��8��s9s;��k�J�1�L��UI�c«>�#)S�0���$�sQz�$�E�P#,�k�]�-�}ki8ɿ������J7^-Z��4Ʈ�p�|�2Щ���Z�t���3Q�Kd��~yq��c�4Tr<b+����F1D-ĂC#���|��N���j� ߭��l����]�[Տ� #E�2P��j�3�%ַ�*�k#H�Cv�l��I�q(�Ij%��!������WOg�Z ��w-��S+�j"�;\�f7�@��r�*�h�&��)��^�!�U?V��1B�������X���o���$�C�.q�Vߊ~�� 1+V�z��CNn����*���l�� oC�rR��h����I���e�������?*���4lcO~�k���y��4��D�0���ǃO�5�9lI����-��*j�.��Ӣ܍���]UĝWp����� ����)�U3e��H�x�s ����8��b����f�[,Q4~����m;�'��VjZ{x��>w�U���3����f�:��Z)��q%%�}�\� �!�KiB=���)���\�O���j�:��b�6s��7s������o~��I�[�*E8^�d6� ��˜y�*M�%�k�� �)^Թ!*9�z�E*SB-l�*:%�������arbe� Io��lj7[�葶`�bT����Ȭ��4�a���������Vz�mHߌ1�`���ke'��r�3PL:�R���W���j ���.)�W��N��<1[I�|�-6�
Static task
static1
Behavioral task
behavioral1
Sample
da019259b81f1196c4d6a7cdbbee724e782146183bbbccaf4fd46d40f3b33427.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
da019259b81f1196c4d6a7cdbbee724e782146183bbbccaf4fd46d40f3b33427.exe
Resource
win10v2004-20230220-en
General
-
Target
da019259b81f1196c4d6a7cdbbee724e782146183bbbccaf4fd46d40f3b33427
-
Size
3.0MB
-
MD5
80813d04b04adae63dff51a7efa8f61c
-
SHA1
6e6a23de66ee5fb24fac37f2ff9d586e29f8d9c1
-
SHA256
da019259b81f1196c4d6a7cdbbee724e782146183bbbccaf4fd46d40f3b33427
-
SHA512
95ecfed5f2ff0f4a4a49c3ce86bd8c8cbb2a6c35ffa415dfb76fd3121b7d7ac2ac4d92db801919eebfa990df84c85b3a2c6ec89e3af92e696186e9d9e9c0c599
-
SSDEEP
49152:KsszNFaiJ/ST8UdvdyWZrq8WTCXmN0RX6Mmw2UPVAMFJflziIma8iDIBMznL+Ur+:+PVST8YVy2rq8W0+0tdAGiwFzL+8j
Malware Config
Signatures
Files
-
da019259b81f1196c4d6a7cdbbee724e782146183bbbccaf4fd46d40f3b33427.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 85KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 9.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE