c����f$�z����I����zŘ�d��4��a��Hi_z3��f� �N9 ����|̿|u�P �B��|�Q8K�$����^�K�.\���[�H)������Nޱ���]�ɨ��<y��@��z��z�p~�8��^��W��o�o�T��D"��'��۱A��z~c��:���[�O���=)��g>5�������'�^��6��F�cD��.�'�h� r��w��'���X��Ѱs���:P=fF*����{\����c�=<n=�Vr6x�j��}{��E�L��Aֳ-Z 2�j)�|���F�MT�p*&38P�=���4��T��F;���ұ_{�����`���`������n��Ã��*��7�j����eC���u�LH�����vg K$�}="�R2� +x�E��v����2K���S�z��I<sOݫ�e�����L��W��U�K%b�~���:q}F`r!������!���*��X���M�� /�e���0"J}���<��C|S����+t��Ĝ$D��O�V�@o��+G��eg�HlU~��đ���G?2&l���ޞ��-g�b�6u��0�����&��8��s�/B���L�� �OM����Q���_^����U5�K����O���`�������x�����z]L0`旴+���o������/���9�$�[ٺп������R�K�>iIq����`}���_S��iG/�G8A���ދ5Uk�X���1xםmF�$�ۃP ]�iS�F�x�ߙa�7vAS�:7��Y]�b����e0����$����Q늸[C�3������C�-#�er�q�������N�X��� �zQ�o�d�x�iK��e~}�ӭ_u\��;��� ���vW��.�KDڐJ��������p,E�RFl��IV�o6�T���0���5�t��L��,d^CV�c�S�{0�� �}Sd�����U�:��j��� ���+-�_#�7�[�e��:�'�JKX��s i�9��V������o|~�}��1�*C1�ƣy�2h�d+���{ZN��h�<��no��D����%Z�BJ�����D�Gk[\2�V��$�����Z3��'Ĵ�M�(�}��@�a]������pz�3I*����1jG�y�W����Wϐ`~A�]Ua!$5$��������쐫��&�G�t�#iBfD��|P=����P������j�Y��p�MU�DV.��7���wX,-Wk�N�"�l���j�^a��UD�\��;� �oϦo��~�8��U�����զ��!�Y�1۽��v�� �:�?K66�gեR9W���f�&a���9�������JJ(�Ԩ�0,�� ��z�e9[F�fJ��y ��9�����)��0'n�)o �~���WuNyK!�x�';ex=���,�/ L>�N�R��Ԉ����T�Ee��w��ۘ����f%�-1���~ƽu ��-�ǯ2��?r8�Z���>�=���/` ����|Q��I��nj�y��l)��e�A8��v\�^4_{��k/6��=�aN���ϦfV�b!,��,���p�����y�s�K�C�:k|Թiu�D���W*<ź�Kwc/�݆�U=�Ń ��W����E ��kQ��'��{qɂxLGEڟ%ݶ��a6���#L�L����BR�d�(�nZ��ߴ���G�a]&��WXJS�G��lj ����!Pk.C)T�ߣ������q$ ��Ę�LE��S+:H�+L"Q�<4=_b�fX�Bibm~�8�=c%jB�L�Մ�z��U���>�2�K+���z5t@Y��)�ޡc-�i3�=r�2�KyH���[dq��d�)dr8�l�������:$$��=�P����2���rڗ���K㤧��["w�jǡ!��L`�u^�'��VN��LJ��!��~�D$��kFS�©���3���ݾDL��/@��U#vK-� C1Ho<���|��>������Y"s�#XU躰�Wh+>���X���Y�šu��\�6.���`�^��>���´c�_q���NܮnEo �OijF|B%�HژH��zt��e.��-��V5�#yr�'���M�O>xZң'Dog��:�������q�^I)�ʛ����#������ů�,�W1�l���mb�}����7��%S0M�����HD�.�����%_���\S�g��!��[u���9�퇳-����Ǩd�4lj����FĤ��_D�he� ��Ѡ�r����6��a�U����XEf~�#�Ѱf�,ﲬQ��^@<���&�8W���h������:z�uv_�}��^�<dD}���X�,�q ��@���`Ã�����So�Z|�b�*X�D5F!�� �� �Y�����B��І�2�x.פ�M�*w�xٗ�0�X����O��iQ'��L���b���d�ń2�))am͌�[������!�Sb�P��,��{$t�~�b�!>a�:bM����(ޜ����6��f��)yZuO��%C�"z���_9��o$�?m�M��7�OE2N�\�G�t�<B���H3���۬v+�7���ǃ�t�!��Y�V��a��1dTlh���!�� "S ݯ�: �H%)AƱ�Sw)2��-�Ɂ&���V�?�(z�<�g�c�:L��0���c0Ԋ*!�&<!��UO��VÈ�>Z/T������ ��k�cP���nێhX�*�)�z��S2ޖ]�} ��1�y<6�P��5"�����!Qb���*�]��oE��>��\���P%��G���%FB�fp_�"��QI�:X%J�����+q���aY�#?�#J��4C ty�!�>/0&cJu5pҝ�J��B -m'9;�<�-��)2hhD�yի����3�f.���b�r;KQ��M��E�'G>{�LEF!����X�U-[�����O���[���Ze7��Z*,��U#���$��x$�UkO��)f&S��1)�0�/"q,���F>�T2\Ne�����9f*nO)M�����Z㴌2;���C�n f��Q���q�+ǧ8I�ѩ��[��hKc*}Rl��u�ʯR�����ɱ�F��x��.\*�͛���f��V���]�����դ涺�/��\G@�L0?� �2h��0O�(~ű�4n���ʹM��)P�ک>�&i�-��(U�W��N]xCU��/<���TH�l�nebK<0o]�.�&D蘗�D/�\�Q������zў0�;cz��_��!+����A�/�w���7}�g��ä��s�:���Y�*{���17�t���#c�,n���^UYК��7R�V�����������J�Q5��� k/_h2ܶ�<� z�Q5�3�
Static task
static1
Behavioral task
behavioral1
Sample
11b7030bcf60dd2105ebe8468f818372cd72db93d6b2796386affb10635b9e10.exe
Resource
win7-20230220-en
General
-
Target
11b7030bcf60dd2105ebe8468f818372cd72db93d6b2796386affb10635b9e10
-
Size
5.7MB
-
MD5
e29683ed21fad784b0112a1eb28dea86
-
SHA1
3e07187e3cb276a2188170071fd300530dc14cfe
-
SHA256
11b7030bcf60dd2105ebe8468f818372cd72db93d6b2796386affb10635b9e10
-
SHA512
cadd642eb1afb8ba45e89e7a048d13b8b421c9b5b851a17e76dd79c6781b18aef13a05bdbfdd6f50e6545828c26e52deb08a558e6ce1a93eab7e3533f8be0a4a
-
SSDEEP
98304:Bk41dabxMCCoGTzISvBeOptFuy21Ec+iNuI3lUZVHTA2c2OtZhpMRP:Bk79CBT7wy217Na3c5hpcP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11b7030bcf60dd2105ebe8468f818372cd72db93d6b2796386affb10635b9e10
Files
-
11b7030bcf60dd2105ebe8468f818372cd72db93d6b2796386affb10635b9e10.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 1.3MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 146KB - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 328KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 13.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Eninm Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE