�;���C�!��Ԑ�5�YQ9�8$~�Rdi�?���T �Kz���WdmT���ׄ*q�P�����4!��+���!�3'��Z�2�w����=�Gd��!�=��!xjX���lHm�����[�AK�XAD���X$KI��5�����g����?B����Y�h����6�h�3��K��Z:AJxA/�$������Zۗ���:X�h��6����C���d���뛒����q���VϷtVܴ��P��ǰ�\�U� &9��Į�U˾ྥ�4u��wo��-R}�S��k�i�")�1Q9t&�4Á��}�;�*�B�Z���[�F@��9�Qq&���� �����E���mˣ�"��;����l���䯖��-K�`�]��(����nG��i# P�,�o�vJ�8��12v8���&���IМ`aY�C%�>ɽЇjT-):��1uZl��?��k��hwЦ45�'�i@ �9�\���@��nQQ��#��̳�Bb��7���(��d]���FH��_�b�ht�u�۽�تg�r���& ��]>Sx?`�REh��K����د��,��qCN�I�`ͧG��z��'���ۊ�0���L�B3��W��~[��8�=aS7��`1A��lg�|��]��7Թto9-$�<�[bpnA�"fo��uH���[�l(��Ҿ�����Cg�����%�@)AF�<��v��G���$@(�����sI�|v�9A,��ޝ.HP�d���tg�xˠ���-������g������'�bs��~� ��*��_���9�a��Z������hJX����)w�]�.)6/˲�/c�*�F�H!f�Т�}�+>���O�bmN��=�A�"����s�\z�GAPy����纸N�!�\c��g�Q�_8��تi:��� �`���n����'�_�뻙ˁ'l�1��?)�Oݼ&�h��1��\�ss�~��)����4�-�R;%k>��0� 鄤d�>�ѿ�Z��������:6�MH�:7��E�������q�y����bH��� ��A�B�g(�2��j|r�:e�*W�t;�+�*�^�Lr�he(�����,"�Ξ��P��[h4�I�j�����b��>��i;�h=���Ɠ�q�� �pé ���[���7t �1po�卹���il�]{�O�"�~!Hxb�^�{�v_�d����?]������iisd�p�x;����8�����ᗽH�r�)���ڤ��ښ�a[ �a�ck����gU������4qCw��B�mr綋����.���g��U6��,~W���a6��F����0�MM��"�]�/]QL]Ɠ�+��*�������έ�iG(���B �r�(�@���?b��� �Ytd�*�M.����f��8X�Z|��o �����]W����l�$�ZiR��"7�ub1��Lۊ��X\�M�f���������" �F6I��&Kt���Q=\ގ��0�?P���.�ӥjh{T�.dN�]ޣ�U�x����o�Sa1+)����S��Ԍ��u���%�"�;��TL����B��w容��H[PN��S��JU�%�E��O����Ü&�k�˘NPEB�zT_�P�1@�Q��W�r�q���=�|!�{3�ːP�_�8 ���b�-��h+c%�e~����kU����(������S8����1�a�������ӌ��/���)�Vp �$�:��3`�M~ �m�[�fϩ)e{V=�̌z@2iF�t�����9I��L��@�G��D�#������<�)�_���Y�h�՜ȭ�G��8��|�Ok{��0q�qC���8��֣�ܼ�����w�.9v\|�F�(H�XP�Y��8/��d�s���43ѹ0,�?�(.�����p�pZJ�Up���B���o!����D35F�]��5p-[ }�"nn'�.�q�&��ytV��!�n%��no��udE�#�W������s�M�)�]n@����Tq����� 1+�fɫ�}O)����/bׯ���t��g���ٿR�=zw�S�v�+?� ��e�?� c�x�w!�<������ �1���nLQ��i�V[�\`[��Ψq���L�� ꘗ]u�'���Kg�D���*j��n�Z�`�%?�Rt$�����wH_�ZיU��q�,|/>U�tP&bT�e���ۣ���;$ߖK;��;n3ᑘ�.�S1���ҋ:��'����2Bbw�дT���J�qK�|߮Hϰ�!�~Ly���R'��A)��wzh--��3�Bϱ:�"��3�� #w�U��2����*mL�g�ZAS�������۾���qH"@�CO�c�4�����>�G���t�D�-�d��pB��s(�K�NL6�KR�}����+�]��?tT#�v�HC���[p���Z���dcZc+�ORk{�ԅ��N|�-D�~�������#�M�}v�G���'�P��(N��B���E�F�r��|n��ՎE���=xb1m!�߇{T�+<��!�us85f�ۻq2�4/N^+�3C��)��k�՟��zZ7蕹?�>�4���·�za:qg����(+�v��Z���階�L��y#�#��驲���4l_��`�<�Q�T�~�v�������I1�6�^�гU[0X<E�O2�>��H_�z�{ �3�4�K�8���g-w �1ĸ�#�������߁"��r&K��%�79���s"]q�t��Ja��ɠ�p��B������qt����m��ֈ��S���B�8>3�c��/S��@��:�d@�%!��H~֬��7���8��<�:��0>��#;�=����y��;5�ˮ)^��N���K�ſ��F���[����t���{כ��yi \��)Q�tY�s��p���lN!�4���~V���ͨOE[g�`�"�����.�xV]Sa�YL�m���%&AԻ��Ph�;��W��D ��ȑ����$g ����y��V��}���X��J�f���5fXD���.��Q�6Y*�W��D=Ó��)z���Ϳ��v��P$���[���({����v���ɤ���y�^����M����}�D�Y�ӆ��%���1O麧^d�e>���P����F�'1#���i~��F��șHf'a�}��,��j~�Ot�Zr�5Em��`�R�"����+�� ��ka����pz��n`������� C�����D����U� =�G�fa�8(o��ͻLU�f�t�p�~��;uD!Jz�d`� �2�p�*8�d���l�n��%��T�IL
Static task
static1
Behavioral task
behavioral1
Sample
b7a9265a8b419f32a9f43e114478ad5a34fd9b00fbc72e0860183b34b8a1d817.exe
Resource
win10-20230220-en
General
-
Target
b7a9265a8b419f32a9f43e114478ad5a34fd9b00fbc72e0860183b34b8a1d817
-
Size
3.4MB
-
MD5
9cc4e0e434a979417000bf8d7099890a
-
SHA1
23d8d2e657ded7b6c8bdb87abb2b561ec7c85180
-
SHA256
b7a9265a8b419f32a9f43e114478ad5a34fd9b00fbc72e0860183b34b8a1d817
-
SHA512
b5503df3c913cccab4bc838c9f4449acaf92ad293f0cf106bda2b98fe89c73e61ec4ad74183c4535e1646678428d4f0f97fe8b1b739390bb62eae9a335ab6591
-
SSDEEP
49152:18wwqmLQkM6Bqy0XqBxTh8T8HtY7sv2AFPpNNrjrsxsF0eeoPXccXopz1HEwmZb7:qwwRQk5B/LLU7s+InlN/XXAz1cqm
Malware Config
Signatures
Files
-
b7a9265a8b419f32a9f43e114478ad5a34fd9b00fbc72e0860183b34b8a1d817.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 49KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 19KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 294KB - Virtual size: 12.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE