�m�ϱ�[E�/�lZ�y�,Η���\�䉝�h1�T����Ȍ�^�@ѾX��Hjf�"�QZ苙�y�DI&"��}�����4�m��dJV��5]�8�D���in�A��UI�A$��W���~�|�>䧞&Z�Y�Pv�&!O�So�A"T��.Mo�0:A��C��M �h���) D=>�5B��%�D���~K_f1���d_H�Vm��ҧY}IF�S=].��*#�8G2"{S$>a��>�.@��4M �w��M3(�d,�v\v�w��(,�����7 ���ja�2��2��u?E� Pm�j����O:���*+�$��+0����|pX�������M�ѐ���.�����M��d��H�1�v�/Y. 3. �Y��淎�h��N\�������a���1�U��$_�o �)�^m�Ӟ�o��w�W{�m�����dh���'H̾��_G������<����>�̷�%6F/�L���-�`g���s#?1����FPv�ҋ�Zs_�N<uS�O��u��������|��V§MqW�>��$i=;6bas�<��~�d)�Ȑ+��. þ���`=jc�>���F�e�P��J@��)�=���a�����CO���d �WN�[_��%��bP=���a���T�L�����ԕT�?ݕ1`���!��eN��L���*\+\���Λ�W|�Y�DT�<����fP���� ���P�Q��٬w�^e���!�s>]L)v} ^��m���~y����Q\ڊ#����M.B�/��9���q=��xȍQ��@<ro!��{n�#�����Y�9����"V�e���G��'�3�+�8���9���_;��, ��`�*_�]��ƄcYf�wd A�ҙ�Ĭ?5��1��]Ύ�V!w�D��9�І���X=���r��Soߕ3��+����{K��D��6�B�0ŵ���/ Q8R!uv�b��#�o&��p,����5v�5��7�"�i�"�Vvo8@��a����z�/X�hS�S��ۦf����$�NH��`���8�u1�Z C� !:A���.� n��05|,�h�+�ovL����$��A�a#Pj �V}+�āx�*�����U6�^��șCV�_��i1�4#�F�JD����&mu�=#�n��,V��3���Fl�9M5$lm�1���̎e�D�:����g�#�k"�i������c����u��5��{� ��@�Bk�Pĸ}�Wے�g)�� �;��R���:t�������{S��V�k:f��G���L����3`bn������n�'������8��C��&��f��r�om������E\�dm~ܛwϘX�uow��B՚O�2�֜�Hpw;0o�_����������+[l��s;4�QR��9�|�3,�\�{���n����\�x�%�Ԯ��)�!�Ա�,s5�? �r]��JEɄR��ӡ���A��4ƭd���r�SK�b#+\��yNQ�5{���R-��VC��)�T�/kg��h/�[۬�����̸"�X<<�]��c�偶fn�ɜ�b�2u�����G*��h��y�ۨH��]�(�Ë�Gz"w���}*ϖe����=�J�rI:惯(t&^栃M~ԟ�I�֥�I��B�*����}r S"�"6ݯ:Bw�Gg����i�Y���e�%���X���(�M:�EIJkv2-$���P2���iȝq�ɭ!ϸ��fM5E(5b�MY��yU ��hw+偫DT�����o"����'����cjW�K�jiZ�$C��5�����@g����i:�ui��=0�Z{�P�}���T۲$����`.��OA�������~]b1P�%�H���A�1����r���kc ����V Ԅ�o�k����dĶI����U����V�zRvul%��S�o�_�6 �f��˴���h�X�oFv�lӁsuO-�Z� �D1�٫ÄU�q$+�My\����I���(���~� @�����K��Vl��QJ��tL|� q��M��sy�^��^��p��\0�(�.,�X�����e�2�仠���`>Y�M�Ka�ri���Q7���kϞ2[�9���H���� )〜�fcr�����aF���n���1�5C+�*�F�Z-lJ�*�����!Lp���5@�2��.#}=��}�����"g#��㐚�R�e�RЌ����*/2ef�H3�x7{X�~�Y9����7�c��<��F�O2�,��n���<�PQ�ף�1Hף���5�<���Z�Q�� ������u��>H�O?W�<����� ^Y��Z���p����{�p�e8�2�����f�μU`ݞ5�h�� bf=+��q�]�Dd�I�,"�ۢ�v����������D��L�w���ן���3����ľ��z�K�H��x��v-�a}���0�����dž.�`T�{���1ÄT*�":y����[JcOp�Z��t��Y`1;Zn/��GB��0� �� Z���ia�H����K�KI�ԃ`����j?%������+L*��5�d����PXd��}��<���Dui2뵬����kZY���Ə���kEn�('�ְ�{��:!8�˙}$]s�o��aD��"��5/�ϒ��ݓ��@��#HKT �� � h��-QI�id�V��rTOl�'�U(2ϴ���rSM礤6���~?�]}�3� z֠,�����.��M莹��:�/S�Jla>S@�Q�.> ��VXp}.��Y:_��J�)��}���g��G"�AY�� �A[��/��/F��]���J͆�)�uj��k.4v9kӨ���R�9gcَT�o~�,�aN�#���p�t�z|�-���/>WB�������vf�;� ��r��م_T>�IE�Qז\ܩJ� �w����b{YԸ���|^����=����&�;exؿ9��VCO�%89�;�ő ����D�1#{"���*�����e!��� \Ό����Ѳ�,`vd�)x�f�F�eWT�oj(���\�n@5�S�!è@^i��K��)��(��=�������8-/�j
Static task
static1
Behavioral task
behavioral1
Sample
933218e01f51d517eb39f987b64a9ffc6f9713a6fd44354346b28d6c956a329c.exe
Resource
win7-20230712-en
General
-
Target
933218e01f51d517eb39f987b64a9ffc6f9713a6fd44354346b28d6c956a329c
-
Size
13.7MB
-
MD5
67d75f3e50d4239e1acd4409a7395351
-
SHA1
6ddc1f4cc38aeae59a3741c97b9ad98cf50e7c84
-
SHA256
933218e01f51d517eb39f987b64a9ffc6f9713a6fd44354346b28d6c956a329c
-
SHA512
227cd5cbe24001dae5bac6ea20db7ca18d01446d4be8bfeea430df308282fa18bea414ca7e2b7c5a5487fcb706afbb6e4bf88d63270e1db1915109a50bc8ab06
-
SSDEEP
393216:pPLDw207U05oQAxj6qL0g6z7iQdz+tBRHnlC0rl5Zg:pP3w207U05olh0gI7iDBRH4wlj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 933218e01f51d517eb39f987b64a9ffc6f9713a6fd44354346b28d6c956a329c
Files
-
933218e01f51d517eb39f987b64a9ffc6f9713a6fd44354346b28d6c956a329c.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Exports
Exports
Sections
Size: 13.1MB - Virtual size: 18.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 752KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fxxnqluj Size: 596KB - Virtual size: 596KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wqcfwcud Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE