�� 4T�������.�X��c���u�<��1y��9 �&�]QN��?��v���Z����"������@�=��l�w�<gΧ��>�&Ъ�)<�1�`(|�v��z� � RU)L~���S_����kA ������l2�um�x�G�&&cU(I�����N@H`1� NB�N��\.g�l☭��&n�������:0Z ɓy0�8œS�]şΊ�uz�\��.��U��zcq�s-�Q�&�7I������qL�Z���Ѿe���]_�Ys�R�~�H��n"���Cpv����9�s�,m��x���.����*���C�c��w I�:��F�W��N�(�3HJ R��LY�¹h�Ӄ�3@���pRS�&g�����\RKh����ۻ�'$�h ��H�-ᶓ�j�]���* I���Kh�Țg�k�W�j!�'���c�'�{�ȖLV�=��D�K+�cFC:r�8�ߠ�B%�w{������[ B�:z�U4�|�dT^ds�Rq٤I;P��2^Y��e�G6Z�[]c��F��u"œ��ƥ2�jU��l2��f��{z�7����q=E�B�t�X�(K��W��e��W\���x����*j5����[h��籈���g�U�S]J ��O�V�ѓ��څ�R�����YF�&��[���1S!�:=�A�Ð������t���qÉ�lcn۳��t�S���m!���s~��Mk�r���:S�M�`�A ��}���n'���X>�Rqd�!����w`dRqz:_'��ԓCҰ5�Q��>���g;������yb�&r�1:��X�[4/V�B���<S���&2��gF�n$Rǩ���.ZN3��2�|'�pDž�N.�0�++u�4���R'?�� 1C������������;����W&�厃r9�aS�g�@�E�y��8�ٕ1+� 0;Xl�İ����-]��ð���L�U�.���,b9)O!���bt�>�ė�Q� őc����� ���q�����W�2]w���?�ӫG|'���j"��VScN���hI E�R���p��;YYΥ�7�b ko�\�QK(��^y�L�SzUo\n��K؉V�L���ؤ��S���~�(p;ym"�s7uC4y{W���~�~.U`T�f��e�m� �F��YM<Ȱ$�*�-����s�r�O���[�U#�/����[�w^�ڐյuuz���Tǀ� �'S�3� ���|�n$$K���Y�'�\���hX��x}V�n�;��u��ۙ�D��)�U<��� P'�p,��'ҸSwf��k��쁲9W?�� [�ԝ�s�NP� �_�����G<%&��?��k|�C�&/�یWD�)U~vӡ�Q�wo���2�,�] ����.i��75�Ā�'d,gKK��|�ٸ[J��n �ߓ����i�����v2\�Z]� H�#K5�ģ�)����l��pձ�-t[mK����Ok"��o�`�L�]�af�ܕe���n����� �5��@�Qm��-��T����,�H�U��� ��|R��;oYmo)�2�i����y�s�W��s����mY����)hKx�ș�Ф �Y�3����[`q�3�� �B��]��tSĥv��Lihw�ԺD>Q�G�8u��8(v� ��'�u'6z<m����Qb���A���!�n\dva��A�\��cމ�kG�ͩHm�O\��u���,�[>�wμER�vV�I�ح��[�l�7������G����9�M�\3E��9~$�t�%3��+6͂М�C� ,��!�����ܣ꣹h_�P�2��8h5�Wm�d�Q0I;��"-��b��r/C���T��2 [���Ns��w�kzno����x�l�����w�G!�45�M�0������P6 0�"\�<)�uν?kt6��;��}O;ϒ��x99����`}�6�I�M��g����=Rb���� ����6N,`t��U�2D�%��6�F2 d]e�R���3���i{��"�ae�L�˙A:jkg`�%��g�K&Iz'z���!#a[9���@��z_���Yn~5��\;�SaC��#'e��S��F��^@�Cj���&�x0�Uo�m��4�I�A�����B��C�C@!����}�f�1������4�yNlC�������L�$4�Z؟�{�H��4� 㐒�ď%'9������m����w�:h�i��X" X'2<Łk�QtR����:���[=��Cf���9��xi;24P�qp;Ph%�yz��$�Nc��j���d��`��K|�$m�������'���!R�Ag�E�K5zz�uVn����K�Jh#����w��U���`dG�ł2�,��c=���~�K�+��g�2zlZ���"�M6#�l�CE��3<��w!��yF[�M���2�oXq�� C~IMS_������e�?�鑧�%���S|k{>] ���^�z�f2����� o���Ì/<�u �z��Y��K��\�1��U5o<����r7�(K��p�$�|�*�0[�>?�����Ix���B�8�� ��R\���^���Xk����lr�1���#�u8 !�k��o�4Slx���������=q�!��y��,Wx|��z�� �j��a4�z^��&�rG®e�Fi�9�j7X��� /�F��C�7E�����v�{$t s���9_82�����ݎ˃E|�e|�/y�+Y���$8�����d�����X���g�>GoȮA!�����V����Q�����< �=3i�6����v�-(G�W�Ƒх��mfA~�$�ܮ-1:z ��S�d��d�C��'��!��n 6w]�j{i3\�sۺ�k�&g<�N���x�gM�u��������~�ո5/��)p�����M�kK��c\e��@���W��H���V�u?:�4����)��q�m�J�߰�,w���"'��=UTE��%e$H�M�����1���&q_���Z-� ��;��>*UM�|��v�7dXt� �L��f2�;p�6��\�����U u��b���*�_��E&��dI)�{���'8S���u �[�pv/���TR�5��bH�gyl�1�*�ZrF�Y�u����k�C��O�Ht�&?4eR1%J$ue����`[u������(*����m%D�㉄���/�����T"{�V�_�9��Ǘ���W5D,���R���$Kd��`�� ;w�ϓp���.��0��U��c�; �5��Xt~�a�dy���X�ns��I�M2����=�_IƑ-���b JGL���I���L�m�1l�e_������F�����T��Kɿ$?�ǭy< 5x���� Ϭ�;��j��v7�R�DWL�c)��ϺA4���*p��b���d��U�(�т�r�R���ӝ����� v�XТ��q�ƌ&:yk,�^�xhiW�w]�!�b����3O��%��UG�c��W� ���\��s����t6�f�G@�w���Φ�%��^GB�ã��J3J'�?k&��A����x�Ύw��pħ���Mq���61-�y�6�"��m�^~�5�ݞl!o.�A��]��ֽ����4��6��D�(ow7T�;۴��z?zL�T���waHYop�6��(�e�ݴ� ȅ�L�~��*��Ј���bU�b#A%eɪ�~��`������5�d��s�O�,�������x�y�
Static task
static1
General
-
Target
cb3e380fd76299c7f0e36b352705756f3bc8b826f2244647d0e849b64a0fee69
-
Size
5.4MB
-
MD5
baa6bf9f27d3f62d25203d81dba29652
-
SHA1
9de6eb304b450e19ac0ddf490e50ba2a78e69fe7
-
SHA256
cb3e380fd76299c7f0e36b352705756f3bc8b826f2244647d0e849b64a0fee69
-
SHA512
38f8f7000db573b468f9ed7e7808d3fcdd096c9f866239e3a014270a0d9fdd6ae39ad0160eef5754817cc6828181dc5b50ac71ce4735be249f47deb93f0a51c9
-
SSDEEP
98304:m43tpINuCfbWcd7Hzk7H07lu4UtbtEh+waQb2vTT6QJN3A87Ptnx:m4P0fSp0k4rUweH6QJ6SPt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb3e380fd76299c7f0e36b352705756f3bc8b826f2244647d0e849b64a0fee69
Files
-
cb3e380fd76299c7f0e36b352705756f3bc8b826f2244647d0e849b64a0fee69.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 59KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 19.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5.1MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE