�!��K�p��%2d��&@�WK̔63�*��Ʊ��\u����z�A3��TMIc,�����2�X��f�䇍Yՠ���#�Ie;��|кqX��5�sZ<�s���S���XE���f ��/�hD�q��>�vmJz��h�a�/Aw� g��YxJ<Q7S�N���Q�5f[B�ͯ/l���u��~���S��TJ�w{E9�]l����z�@9��Y�^n9��-��(>�l��C Y@����^@��x�X2�����ea�$��Cw+Dz�U�n� /���^��`?�i֭�} vQ�Y���;.l�,lHu���ظ��o�����KY8!��a��xeH밽�\��I��J"\���)MLLƃ�vd�6�U�����x(�e(�r7�\ �W�k�������c�Pl��#�:bモ�J��%I~��9����2ek�ޑ��k!���CH0d���:|�~�l��B�M���8r��!J����_"%xg���4�D�he�)�^�vO]�ɑ���2Qkk��Q�N_-i��mz���AoOUp���a|��J`e�;n��XX'T��Bx�89�JU �]������v-io6-}R�%N����q'�<T����3."�K%Yy`}vX>;b�0[���r;���k�X��FT"Ha��cn�$ �U�fCe���R��T�;Ñ�;S����o�[�ZE��c.��S9k���2�XtLK>�e�t�J�O*b-���f�=��C�n�)U)���j���?����n#(,�K�o]�#$|P6DurN;D O���1�A����2�)��d�sc�t �r�ʶ��C�^� �W���E�����Df"|�Rh ��0 �/Vi���sM�s�_����( ���=����I7�o9��Ng����������� �z����r��M�#J�Rҽ��"%|`�*ޖz�c�7tr;N.��%]�|�y6q���x�{aɨV��D=��T\]|Oj�r���d�+�%��?)z�_Z�ؠ�!n�ԂFN��"J)��YSؤP��u���.@B�bo��������� �e���6&p&Lu�}�د�+TL6�V+SO#ꦾ٪���3߿��^Hl�)�����;�r"�@":�[;W=���) ��-�(� ���o8F>�����fD��l��U�wo���ן�#\�����H�l�~,Ac������$��h��vT��r�v�2�j4ڢ�?-��}�7ht�f�h��L�دY��Ͽ�}/``�ˍ�.��]|��/'��3t���~p�Y������C����hqjQ��/a�Q�t+��^F�NH�� C��K@���p�3���7 �F@�&��V�4�J���d1�t���?��P�F�d]u��Tq@HA�w���C�֓ȕ�2E_����$.8���r.�#��0�?ğ�J�E�:Ӏ�(� �2�74���/����H\D�g�������|���az�gch�I��\�����L��1 Ⱦ��vw���7X���TX�Ӻ�(>ڊ�9���RxV6��;2WF��okM�TJC}�ő��^�I��H`�誉~ �N�0�}�g��� W�V���߯jܘ{��>���$,z�V �=�\��P3�����@|���pnIl0�o��[�NBn*֫��)��LK+LRx�a��؎����X�|1@�{3�e��buqX�`��s09�e�E��"�<bs��{����X��x�R���$���!jU��_��O�˟f�I����i2) ��~^ �Yv?�YϽ�{y��+�V+?��]<���ft��G�f�nƬ�>q�Ԫ%���j]"���^&����'ؑ�JW��?���诉�:9�]?���(� <1� ,�C��r�����[�����0f�@��/�W�s�A�rOU2��5�y��͔������%�NŷB��S��3�7�'���{��ƪ��R�����w��j̔�1��k�������&��M�q6�7��N��n����.kRu���*��rL9(:��Nk�J9x-7��&�-�QG6�fE�����D|�K���> ������h����C<H�N5�������Y��D��E�]Œf��'�)b��ԫ=����y��Rv�RfQ߭R�G�PR ��7��:"���!z!w��>u��0���@a�b���ѧ�� mK�Dz}9�šȃ �L�W8#H����I�P�/���]�8�JZK�L��%S��wԐ����&�n��Y(3����²����~tKj ���7�n��?Ms`yU��V�x���h~� E�Q���+�TN>|O�1�o~�5m����y����]D�Hwa�Ds���e�5���G�׳�r��i�O�Ym�|���R�p�Ί���e�{�d�ך��{��g_m]�������C�j�3�鹀��Łly����Fg�:M��5���wK�6Ғp�Az�:%J*'�����ͭ��+-��0O<$�R��h�\�Y 0�;}� �R�)����(�%X��aO?�R}�4���p� ��� �#��D�#��A:3���g�Or�Kb�����̗ ����N�����<�gZ|��v9.�:��s�>���Ĉ��0��ʌ�b��8������1����,���H/R�y�������?3�{�y('�`1��^o�N,�ZPpU����Hh��6M�G��RZ�,�̅+�C�e��Y��eF2�h�����`#�S��;=o��c"s�̍k���x�Ih��W�$o;�2/���Ё���WX�uw=r���Z;��쳭J�G� �άS�8p�).Wh��*s�af�)�睍�-<"F$+��Ka:�M��`K3�C[F㘮n�����|��&#=��#��_,� d'6Ů>2$�bɘ��c�:.̏�f�t��κH�ĕ���+(�@검����,*5��w*���u�Q�]�Q�� �F���6p�w������B!�U �*h��.z:�=]�`$'�Z���b��D���ß��7_L��3����mPw�y��ѫC���W�@\zȾ4d_�t����Dc-���gt�x8�m~L�jđ�.�֮��:��T��JRM �a����mRH���Y&�ۗ��"_뎅ʠK��zd2{�!Zs ��p�~�r����r�)'"����N���؎Nu��+ �6\�qTӘ?��1ʡv]��r��5Y������ӈ�B:Gi��.��qn��m�Zz1��a���X��S[2��n$0��I��]h��k�U>� m�Fn� �q��eiκ�i6��~���R(�S�'Ctb~z����r(1�uSOP�� ���i���K���~�/�ї��������G�(�:����q&����W��E`NE��"�ZPC�ڻ�ɩ':㧨�C���j��Ϧ^�������v�+O�D�4
Static task
static1
Behavioral task
behavioral1
Sample
0753076269b7624987cfcf51696acc9e465ecdf0a08b713a370818c8af47b5d6.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
0753076269b7624987cfcf51696acc9e465ecdf0a08b713a370818c8af47b5d6.exe
Resource
win10v2004-20230703-en
General
-
Target
0753076269b7624987cfcf51696acc9e465ecdf0a08b713a370818c8af47b5d6
-
Size
2.5MB
-
MD5
eab2289f1229c59a9f8c8ec1c62d43d5
-
SHA1
f711984b7c5a104686e538fb51deb10fa6080911
-
SHA256
0753076269b7624987cfcf51696acc9e465ecdf0a08b713a370818c8af47b5d6
-
SHA512
5c96378299ee5b94cd3eaaa79d79c0d1eeaa1f409c0634edcda607edfd353aa7e7943d4dd79257bfc37df5b7aefc7df4a8f77b54076018eeafd0730e4eb89fc4
-
SSDEEP
49152:7a/3sLvDy04OAUxS7jXu5t19zL0QEbyM4IamozIZSESpp24:4C+04rXXsqQEbyVzmozI54
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0753076269b7624987cfcf51696acc9e465ecdf0a08b713a370818c8af47b5d6
Files
-
0753076269b7624987cfcf51696acc9e465ecdf0a08b713a370818c8af47b5d6.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 272KB - Virtual size: 540KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 192KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE