�rw���m�BhP�F�'`�p_[�WC�y�[��*`sa�fQ'c3�i섓绬����e� ���R��o><;����aH�'�<@+7?a��BNy�%\�cIm�L���H��h��F�����|A����&e��Ic�WX�uf*��gY����"�ni�Tr��3�����;OP�t�P�"m�\�:�:�X�&��a�� `Qճ���p��U|�×lwfLy�?�N�h|W��Ax�y�k��N�{��p���"�M�Jv���/��}�P�9����a:�>���Dt��=��M�PSg�l�R�ri{HD���YAB����s�/���+��'�e;)��!�ݜ)i���>��Y�ڂf�#0^�p1}�P��)3s4��ed��MO~�唤���4 ����{�؝[*�*+�^�O�:F��خe���w�m�K�u�}�/ ���i������m��r%�����}T��T}p"q-z��v��?��� �.E�+��J�O$@6�dH��lH� |ds�|��l��iX���z�k-K\E�~���+���������d������$w�Ƀ XX�a��_�d�Ã��qS?2�6�;1��:�L�����8��!7�ʺ�A?�&���Jt���~a�����ϟ�ax#�L+0�C{��������Z��GqW}���7�s̹��y��h:a�w`�f��z7;V��V!�}bU �m6}֣�YI�n���<jas3��NSD��&@,"��^;hRw��c�GI�ە��ȕ�싲˾���2 �l�\sz_�G�|+�ZXe��ۄ��F ^Ku��� [*iB�+�B�$��#���jC����$�����L�h���l�т�*�9�v8����ȷ�Gꊫ�5�%�g���u�Z`l��\W�6��D�ϫQ^�PGkDD J���X�QH�*��<��jO���-j�Jd&V!�K�Bq���M�K�x��ކ��,��a���%M|�I�7$��N����|f3��ρqɉn�7qhFV�}��{�v22����X�$��=�9�z��Q��4�����=lOe���E[�$�8�;ާ�Z���!��fn��H�$m�}�1��.Ǖh��p��O� �|C(�AU!�Q�B�~,��Ȣ�&�� Z=I$$]|(f��L�$�0 $��7.4ȡ���Qf�v��� Eؖ�|���o�-��玮F�~�u��C�r��O�fa�h稬�i���4Q��������l���Fh���Z0M�;�V�h����c�0��om[l�Pb3��>v�+�`B�����Ln�~�/��uc��U�;(1�c���%���_���O�3C��N[�����2��G��m_"~�nӈG�`8��՛K^�w:X��W�����y�S�\F_䠞D�`[�+���� ܾ.]�����hLj��� �'���� ��W50��E�n4 I���!� zzۢ G������e�����H���uT*��c�Z�Fd���"D���w���_W|���� DXxהE�lz��cy�21 �̦�-�g J�o9���8�~>�ʒ��7_�ʶ+���\��{�k�В�}g�$�%[�J6�i'��X��Z��>��?5oeJY_dtw>�l�<�,���H*� 7�K+[�xX*<ԩ��`�;:�I�,�Ǘ���~8��~D�\,͢��Xڴa�AU;��p�f/�l��D7���-��D�3���MѪZ� ������1�h6����<ig�TT���X�i�X��K8s�ۄ ��0=�=r|�|J��3٭r_JVѓ�щy���_����h�ڒ'R[����8�bT,��7ג�Qet�M�X���@��8�#�G��X�%�/��Q��f g��ˑ���6�pT�����RBز�Ի4� ��4Y3�~���n%p��_�������ȑ�]<�ʘ��'�]��w`z���U�9;Ď�2�����x��&D�B�*��o�+��¾`��?m�2g~�E=$�2 t3�� ��E�I`��g��L?���鰫�)��$+'uc[K֍��!�h;T������[���������������s$�sG�AI^��xQR��������Ѻ{�����1m�D��ēY}�ǮG|��D����H�i�9[���!>�1ҟY~�"��|�,�+���=�ʺu-������W����D�נE"��Q�&\P��E��{v���i4T���o����<}�O�86"�>���D�8�q�ވj��~N��` e d�B(�e�sK -�F����z�х���+ �`����1o�N F���#������U�Go4d�w�J%�h]���z�\X�>��(�?OUDB�:��i��bD���-�4p�ԥ�I6������B��}�w�i�S�o�:��0��mZ���u�NQ�.�K2���Cf��[������^ex��fa����*��� o*^G��~��Z�5Ǘ�d���3����[����@zH�k剆����}��d�ݧ_��M;���3/��N�ɱ�Q�^�9�q�?��� ��Q3���CZ����H(��2�JA�:n̕� 6�f���͓FfpR� ��2 F1��/��$d���/�? �<<������tx L�qd��DA�%��a��ZV*A&�����p��a��\�T�R�xc��@��K;a�����ʂ4*��A�$K�e�(�J�[�5�! 0��fM��`���{��iW9'�cl}�n�-�y���B%��hU�N+T �5I,A^��;�a(�b�"����S�/mG��~ʟ�D|�f?�b�R�6M���~����6�@�@%�nAq�ˤ�WV����6�*n��������X�ހ5OU�KM�$�ȟ��c�]f���-6��̆\"v(#�n��gl^���|�P�ڣ4����<�}/+�Rg��������'`���_.4PK���|x���rհ�3��GUX��+������v�W��<E��/�N(U�S.����P�"�&:��$���e��WgL�Upד�/�kb����ƥ?�3q��A��i$Cb��&DW��Z j�q0(�z/o�X�C�E��x���? ��@y�JeIT&�aZPc��H�
Static task
static1
Behavioral task
behavioral1
Sample
00307c9dbe13bc7ae9e22ca4bade6787.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
00307c9dbe13bc7ae9e22ca4bade6787.exe
Resource
win10v2004-20230221-en
General
-
Target
00307c9dbe13bc7ae9e22ca4bade6787
-
Size
5.5MB
-
MD5
00307c9dbe13bc7ae9e22ca4bade6787
-
SHA1
171a5efea769d616fee534f2865d4edd6c03b885
-
SHA256
37d3ed98258ad6b10394ac6bc329baca592c088e08e182c19325b007cd089748
-
SHA512
5fee4d812ef857f225b4a34fb7fe28eef1181f3a80fb5733b45403dd68d2c6e5d18596b536ef265505eb395b6f4b2bd0782acdd38e7357b339f3d4be1d0927f5
-
SSDEEP
98304:W+2sc0tBDdRP14wpIIrXXfGqd+QG4m9o4h0RG84dBt/WNYRBgjLDYBBoRxh2r:W5sckd5GwiIzX+IG4VlG82b/WykLDaCU
Malware Config
Signatures
Files
-
00307c9dbe13bc7ae9e22ca4bade6787.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 1.1MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.8MB - Virtual size: 10.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE