��H@"���M1W��ܱ�f�KV�쯳L?$�Aa�K�Q-��j��z��X` ��p�J�2�����DG|��!ZR��%S9d�5�Dt&��.�s������h(�i� � �o���I�:Y�ب������CZȝ�<*0��N?��������O�cb�P�̤�#�VI��i!�Ѧ}Q��rQ=���Q�0ԉF��i;���0�LS���w�>I��:N�(+��-�e�r?��s!Vҵu?<��_��X�QKؠ��X���� �;џ��/�Ԇ|s-xU����s���k%qXr@Dr�GW`O�<��-��j�ġͳ� ���?��%��� j����>*�BxD��R�,h�>^� �p���8YW@|!��xl��\� O� �.��GؐJe���Jl�U���y�K�>��jQ4���/��e����]$��f�T� ��L��@�va�*Os4�8��|�����0��W�]"����Xܬ��t�1��H7��9<sM(����68z$�K/�P,�PX��ʮ�9��dgJ�[M/o=�j$��C�o:'K���B)���3�xG�M��MC�V-=�G��@�pṔԍ0��8*q�a�3RS�S�+Zw�o���ӎ*�L�Ҵ�>³P�������S�H2y4�G�Q��9-�T�ȁ8����QEI`���0D�m�C������sf �&�(Y�iU���`"@���?�8 <#��3�J��e����Ľig�H�)���:��V��Y/�J�у�@�0�dR,�6^ʖ��״����\`���՞@GU�߇+A����!����]� �⩎N3���U&�Zr���Yu�odI��r����O�=�$�a9b�?�Ӵm:�Vm�� �U�cIF3�Onpl����V���ҍ�)zò Š�D+�dm:W�~�!� tg���9 h�����e�j���6�Gd�����3&f�Ɨ���>.���ȏ���b��\h��u��(��܋���l��@)�6cl�s��f�f�(��[��+���i���/�Yf��`en�2��Y`t$̈~�2���t�ER2�.���f�����-j{yxGs��:^���P�z��Jjzk��Z�C=I�y��5{B���*����I��w�J��#]�W��H$�F���e�����A\ '�aLq��@Jף�O5��i~k��'70iL8�\(��-\��`��/ �Wh`'Pfh��Z���{X���Y�~Ll�~V�ƅ1yCb��_u�w,;�H�Ȋ|�R^tH˱�}S^5�c��Xn_�8XO���1�S5�p�Pd6˶eo�����I�1��Z!��h�L��6�B6#O O�Bͨ11G��)�/�ڣ%o���� )��%����E�j�۽'V����^ԙD�d� /���М��iYs��g�$JC9AVזb���@H�G��Óa �q;Qv��w�SbC����b��g�l�n�P��������5f��&����-O�w��QCa�����N���x�06���ӚD�l1�"����z�r�����*c<(~Kڷ��L�,Q�mJ6�a�\ -u_W(���Ï)&�n�m���"*UE��Fu���P<T&���ѫ� ��ž��8Z��v�9�6ær���1Sa�H�;pi�l� 4M��B`,� d8wU>v��;H��z��җx�3Ek�n�2A�-Y���24n� �N�c�(��:y=��u����[���!`���5~3m�� �NB0N��a'�$ ��� �?���K$aW��w����M���b�X�\�[%v$�T��m�d'F������,��M荼,^`�VMug��#j~x�M�a�5��jc�(��*���,k�m�Q�Sbu �� �@��Xa�|��X�� xa���)������7�V��!�5� ��"��dA �� ��A{�[�a;������5�72�kz0��9g�W���\����(�7��@?3�>�uc���dV�O꼳���ƴVȻd�w�������� ���'9}����B�C��k�E챻�*���n 7W��2��뎉��9�C/�j���"c�ٝ�9�5>�Q���lc�]�#��Ӟ��:ё���=ezq �������g�+ '�X�g�E(�_;2��N�R�'֍Ѥw{�e�^gM�$F�w��o�1�?)�bs�A9� ���}8KL��B����/�2��44#f���&!��w�u�����G�u���J����ű�M}�(�}�9��#�U�"ͯ�Uy#h2V�㈇AS�f}gX���($��D+�KfQ9U�&s���M��#���ev�VҺ�m�y�����ގ(�d ⷆ���ɀu?ش�,��-㠠J��妫N�_d38/���j� w��V�a��y�F��M HR>?��я��#vʿJ;� �����\�!���!|`D��������N+{�n�o��c���;��Jj�^KΉ�g� ��y�=�2�G"S[mQl��vfU7��p��v�Y_�SI���p��t<�V}�%�8�\Y�om�ռwN���C���������翸EV�,��K{~����Rqs�C�N�O�iEm�GY�ŗ'�NPe��-�*G��5. �Z��[�D�H��c`c<j՜�$|=�67�PFs����J��w;p] wb�+_�hW�j�J��֎f�]�nۇO�U���� J��[b�J��+ �x��w!�ŷ]φ���k�:w��|5Hb|�Z�#�|���s���sQ����`�]Z�E���7s� ���EZ��������2�_�=S�9��6�����D'ːԋ.p\#�v��'��fU&��LqbFk����76=F� ���O!��۲֎���-N�=z���Dg�t��^����ON�ƣ�F;;�(�\�..Y��W�'H�Cw�)��r�#�<��F������7SP�9"B�+?5%�S�G[$eP��� x�\������&8�.��8㭉i֒��������E���-)�����T$����w�罊�?�m㵜�%�{ �j���\s����]���v!;d��N����Tk����8d���F�3��( <*�L�>�c%�/����������*���D������sv|Dޅ���*е������NY!�5��!��Zo0�TOk�8�_()�ыն�"�J�7���[�.Ur�ٴ?������ihs���y�`�����! ��F�hs�W�C���#ͱ9b#(��~�J����\� ��O~�$������Й���*�EgNG �%c� :�ò
Static task
static1
Behavioral task
behavioral1
Sample
171383c0641ec6b602c0218bc967bc8740a4bd29ccc4e4c008f55a9b50edcd90.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
171383c0641ec6b602c0218bc967bc8740a4bd29ccc4e4c008f55a9b50edcd90.exe
Resource
win10v2004-20230220-en
General
-
Target
171383c0641ec6b602c0218bc967bc8740a4bd29ccc4e4c008f55a9b50edcd90
-
Size
5.4MB
-
MD5
711864656107c9648cb6a7238b6770ac
-
SHA1
909d979eb03190dd1a23c68acd659fc3e24b7e1b
-
SHA256
171383c0641ec6b602c0218bc967bc8740a4bd29ccc4e4c008f55a9b50edcd90
-
SHA512
9e58c14bb495eb8ff4f330c0cba2adc36f13f673dd549a4b4d33d20ae53bedb7c5762fb12ddfc89091cf5c3abca774fee66557da9f42cdae88529cd2a8f8d5c8
-
SSDEEP
98304:RMmkRSBCtJy3E+zZTDtfvMVh0Er73Qerfr1PrBlM6SVZ6wBRPH63X5wtbF4pv7M9:Kf4YtcU49MVhYgfrhrBy3Z6r5wtbyA
Malware Config
Signatures
Files
-
171383c0641ec6b602c0218bc967bc8740a4bd29ccc4e4c008f55a9b50edcd90.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 85KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 19.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.360 Size: 5.1MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE