�M��Ј�B�z�M�%��Zd����y�z��7�py��vU&Քǡ/s�!%���{c������4;�L'ۤw�<��A2 5v�*��c�4N��3M�o�F�VN1H��h�T�����0�D�>�UJ]�~RSHD>}�\3��s�,��x��h�Y�ؾ�0l�zZ�,z��eI\�*��w���ZK8'��l7�0�o��)`n=N����1�$�<�/a ����q���2�ۮ�e�>2��� qu�滲|�)�-��/猅� a?�Q�a���-�d�^�G ��b=~S�'a����<�c_G�q�� u����ݟ�_���_�j X┓0�����U���}�m8�?�}��aa��9�!�2sb�б �!�_�x�Ob����$�yd���� �����6x��c�~�_#�Ǫ���O�*W��W�ɤמb�{�7�8��n��8M���8�[�j���DuꟉ~�����b���%����!uP1FHg�=��̬�#>��ςkK����8ۯ*|T���S�� jI�dV��k,������f6-�GQ�����?�X��E��Kix)�KT<SQ������\G�����5 ��2�NA��e��:Ŗ?>Չ���Q�=��Ɉ��s2~o�'n����!*n ��y�����s6l�>T3�'��>�'l�Q*�"� a/�Y�H��R>����w�&�����n�ڬ%���^��Xe�="<m������r"�����v���r�+�Ά��!�73y}K�E�H��B�^YG�X�aH F�*���|�Q���D~{j��|b�m�-}1o۵��-�`���t�JQ��A[X�9@�30��k�� R��p\���^C��)%�+�4�V�H�����j&�#~��=�+�r)S�˩�����\c�L����5���t}� ����L�(�� ��mn^]dhe�#���S�,Ď���I��Q�$���?��|j���x����oc��S�c|�n���z���>>M�)�mR�gA�n�2A�y?b(#hXlF�'@7�+�tf�/�����"��A}o���x�4U�v�[��Ga��$lU��af��h A��II8�a�uT�O*Dt���܌4#�M�?��f��ba�^NK�A��t}�$�I��H�Tw�Џ�M��l-���/�@� �^� ˻�ďk Jh l��a'8�F���&d�ATz�R�;��f�b��i���0]Ʒ�m�e�'�[\!��Fl������!g��1���~F�h��!\��J�ds~�^D4x�jk�+�8P�#�(p�}Zu����V�U����;����i�i��"�x����m�L��G�� ����q,�����k`\��ϔ�5v��<�C�X�V���gM����wY綄9p�+�7P��S'x���o z4x�wvA��S.��.]"�m&:�� �M�7��1�@\&�}��)�t��rU+w����q*�q�\�%��%�G&ب�3�Ae=���a�Vʯ^��*��_e�.Ӓm�V�j�`~�R&(��%��be~b��HmMi�G�M,�����h��=���쟛��@ـpC\��6M�))��� ����qdf~p�2 �n����������Z4G�a5����"�� Tb�8����f�4Mg(�>����l�[y`����W�����@�ٔ���ExU��m������p�Q�m*�gA�#�thk���b*�3t�%'�����e�|K����_C���\d��<�)�Y%��8i��L#)y� a Ds�6�����|�W��|�1f�l���n.+����`��Kæ1���J��3'�.��@*����uj�|K�u�#g����ߕf� b#>陷<g����9B���a�'e^���.�x��Q��9��^z�L�v!�����i��P�f��$�)חI����X���*�)r���=D�vP9���c���a�T�gV�D�¯���0���Ä(���NZ���xP��"]"���� Ɩ� ��9`� "���2�K�/�P�ٯs��B�6��aUxW�)}$ }�8b�1|JQ{3{",�GK�Z6��e��b�o��#��!]>��x�Y�Jȟ���ԑ�%M�"�BM�i�Ͷ_z�{wP,���:�8O�gZ;�I1�$�`��W!��;;�Iz����/�$�qY��N\�]=H���X���wq$��Z[������R?w@�X����VEw~�vW� �����n���kB�(Ȱ|�����^J�\ 9s��������U|_���� �W� ����W��X��d�=ì�6v)J�9j�Զ�XV��dH3��N����k�;:��sL� �!�0�@Zg����Q!�)B�g x��~���S��ЕQh�M�IT��)/:v{�5�@�C���%z�A2a��Dڕ�A���٘��1�������3�?ź�����1zur{&�t���cы�|;�X��1��TRwyDg�8J''���2n[�,p����ۖ.`x",���u ���4��<��$��/�/��y�a�mr8��,��N��S6����g�uH�̬��sW��Z���*A��#s����E��?�:.�b������{<�}eds� [���7���̓돞�0U�:��s����G��W|Ň��&�WC4�o� l|�l,���u�##a�o+u%K���:kh����b�Ԃ�O��R�?{)t �J�b�g�������]���1�2߾�v7��̚Fϱ�_�G)�VZ:G�v���z�����r����"�|:{���=X���X��y��ޥ�\�b̘�AuZ|�)y�~w���k��e�<�^�_3��(�J$��E�bH9u���GIlNv#��qQ0�;��u�|�e�E��H�4I����Aj�(���M�;�� �7?<��Q �^:,�в ���)�]}��I�{1�Z��/�j>{�-7xw�p��5��G"��+��}��-J�=�q��\w�Q��H�����,�bKAI]�d+U����t:��kn��A�����m��s*t,��%vi���̛DK�{庡�� 9Xݺ��#���>��� $���J�G��Ǐ��yb��/<@�c����K���neU��g[ǹal�R �4�0W�������?�82B0W�OL$E܃�@v�
Static task
static1
Behavioral task
behavioral1
Sample
17DF19456E6929FBD4991E68DB384CA1.exe
Resource
win7-20230220-en
General
-
Target
17DF19456E6929FBD4991E68DB384CA1.exe
-
Size
9.6MB
-
MD5
17df19456e6929fbd4991e68db384ca1
-
SHA1
1213dba2e25bcc295b417f1392a19f6e5fce6890
-
SHA256
97486f6462262b33c0c3dc3a9ecca35eba899985d8642a4f912b8d4fa328d660
-
SHA512
a795885758db7da81fdfefa6ffe7a45110a4e9cc0710873d2a3e2f47abddd40b663f81d90bb51a62e69477cfabbb88c57d314419df37736611a2f72a00c3a4b3
-
SSDEEP
196608:ABe1f3wP1EXHbrVTJ9muvURgsWEiX95s3pOkojTVbfmTD1wO0dL3:oe61kFl9jYQs31ojTVbfmTqp3
Malware Config
Signatures
Files
-
17DF19456E6929FBD4991E68DB384CA1.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 1.3MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 884KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 18KB - Virtual size: 876KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 817KB - Virtual size: 820KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 194KB - Virtual size: 21.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6.4MB - Virtual size: 6.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE