�_y��^6�K�%�x����>>W��)YTO2�U�h��(�b���Q���+����A�� =,�{Tn%�/jim��j�'��������H� �U\Z���L:��~6v��#��g���ܪ�88q)�2��ޞC�Hz ����x�16�O���$�����G��߶]�9*���j_3�<ҧ6��0f,����=��Nǽ�K��OeU��)��1�H��%�;Li��N�u�pa'��2����N�?�h�Ę�OÅ��Bbӎ:Y�xd$�Q�����HJ�w�Q ��������[*�?�4�ɸ��O"��qA߲��2ƪ�b��� �̜���h���c��Z�l3��C�W"{��b`�J��3%),��N��A ts��ErV58��}�K��E�ֿ�9�2��Iai�H�����z�;�֍j�M�0Q��ve/�P�~ˤ��ZZ���c�����p�g7-����'1"B�_��B�A�D�� �9Fcdk _ �U5��������I�_3��hk��K��V���Mj��8���%X���������2[mq#>���t `�붅t�Y!P�('&nM��{(E�HPP�7k�^[��`�#�Sƶ ��D�� .[�!�(��M��h_Ww���Wa"ơvwQKp��#0صcS���������6�ɉ��ynH��E��\-R^���L���9����O��7�:���|��и[/+�O$��+��l9��d�~�Y~��I�WГ� �݉�ą���7̈́����A� ���n���@N��5�]nb ��h�G��7b�捳���9F'c����@q�� ��:ϣ��#ѭ��@@�<Ϟ�)����F�,1�>�="�|�F���,G��<n��2�jXJ���-�U�A�S��°�6�C�(c�#4�yw�%֩�ƺ��[�GZ��i�b��X�����taܗպ������^F���ZYW��`H@y#�B�X� e �k�$m�J�4�����Q��)��)./= ��꺇�8ϵ<�0t�Vr�<ʂ��-C�3j�Ro�Ih�Ks���N,fͣA]�n+L��ܻ���3�o��5/N���t�ćB�I�H�A�zҧ201���݊'���G{��vk��^�&�sM�h`���;Y˓���Ri]{��?��4�#�5��b@�}��V�.F�"�dv�T��h��:� ���z�Y2����6q�xGfF��k��m}״2�p�t�@R(E�(��� Ҿ�f��g�7�4FP��KUsڣ��{�ʖH����4-�ºPȑ���j78�`��~$�rі'�U� ��x%���uCPA��_�m¸xѹD� �;�x��-��o����*��f��� ��v��'>���F���������Hl��j��}_�Ig�~�9��J[H#�4��l6��"2�D#M0-LR�y)x O\�y�L��oeV�� Mh1#k|*���N����J��]�o��?��X*x$��{� )�K�-j"�L�eE4��gJ�.��������[�B��6~�?��u�T�w|�滈4M|~�}s��U*��S��V��Xt9��gB��d��zh�<�1O�~�u熞�������NQ>�A�,,:k�r�F�)��M#�]� Q2����G�ߓ��ii���"ڠB�Mn#��5.v��66�!�ق@:b!k���w�k��T%2��q(�.Mb@���s&�y���FT4�֮Gb'G��O���@� 1��2!<T��+�S�,OA�B��>�%��-(��HVFⰇ����� ^ u%#܀���.�����GY�-�vӊS�fOE�#�m��7��v�}Υ]}�_4��1�1���爳jndr�h.j�9D�c��D�]n�d�X��L@VS�E�'ۘ�'ea6e��O]�.˝݂��w,�0�!�����(#311��0�8��Qt�m?Gإ^t�4����({��_x�TF�f ��ݪFK�4R<�^�-=ͣ1U�=ڊ3���D�,Z�,�e6�,aZt$�R����v� �1�'���>[�Sy )'-s��tDH�?|�khV��y��]+�v����J��^r/�i�hr�&��|�����=�����N����u>�s��XP����ٲ'�j�g��4f".�}�|�A���b����oIv�X+�B�d���v�s��`���a�l?:G܆`�jm �U<��S������$�%�`���?�hi�쨹x�:�P[���;ʴS�'|��/��:<֜� R�"*�t��3M!�+D�����K0��<.���mA�0<Eq����X�ȊEA_}��}�ܓp�Ue"PF$jV4B���M -k�?C�pdpR[�0H�x 5�/��%�tFP'-�~0W����@�V�� ��>�t�4u�s�"�/ c gʊ�u :� �:nX���`�ˋ�;�:���1�U���c��������d��$��W�d��� �q���b,5�O�>a�M�ȻС��u8;�;������q��)z�y����nm�>M�����ݽ�:��C}�tYY��h�)������=WBZ���� �q��dxQ�!k1I��Uh���(,E�3��Jų�Z,�H;9�W������cz�(NW`yf�#��ܯ�Лct�Y�C��~v.d����{9e�u�,p ���G�CZ d����ge[�Ya"����ekm���Ȏ&�D�"�5�����2.�����{�Rׄ��hU6�y���+����v�!�F-c�6��e}xz�:��,�B�Am`~��JbSѱh�R�x?@f�+.d��T8���c���Z\�YK���G��3�����ct��츻N�0<�X�U�U]:����>;��&�����~��5'�?�a����r(���i,v}*�i���!4(��x� 2�x��j� �8��3�e7�����w��z���O��ج��#���M�� �[����b�"ۄ.aM-W;�2~��2�8`��+Ŀ���e%���?1R���*+,�跡����ގ��f��$a�]S {�̼0G��=]�pH�Ɠ����#'z+E w�)�K֎C[9Cc}^�'��l>��,���矹1���p<B$�)`�^qso)������MB,A��'��y6�3T(�:XxcsL{�����r"������xx��)�_��)P�؟���^W���3���ʂ��d�~�mYeC;-d� ���:��_Ǵ�,F֮5]6<��5�-�|��}��o1�`Q���W_�I���|���E��uޡTc9w%գgyR�����vִ�]}̾,x@'B�ӧ.]W(R5WZx���G�Y�?�9gp�j����YN"|�G.<d!½Z�7��j ��I!?2uhN"�K\:�]5� 4 ��q�������U�f�=���^�4�������&�B�ߡVq� ř�<n�vhT�#����K!�#������"]C2�S��F}e�?�%�r,�X�o ˛���cx��@�RP�_c�g&@�*c�9��&VDv��\��k���uR����*S�G�R�<r�>Ɖ���Z�i���Ç<�������!⿀\]5�rG���/�i�祁�!:3懗� V��8mJ�)sl��oZXA��W�������Ӿ����s%rό5��oxKR�L-�:'�7{J�a�����5���(�Ի�-Z U��8��k��>�;D�7� ����BY�Vv���0��E�N�B�ǛBBoc����m�˰��/�%C�Ğ��4+�Ǜ�=h�f���g�=j.b
Static task
static1
Behavioral task
behavioral1
Sample
f37a3ef6dddbe82e7ff1bdd739bf64c6.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
f37a3ef6dddbe82e7ff1bdd739bf64c6.exe
Resource
win10v2004-20230703-en
General
-
Target
f37a3ef6dddbe82e7ff1bdd739bf64c6.bin
-
Size
2.7MB
-
MD5
f37a3ef6dddbe82e7ff1bdd739bf64c6
-
SHA1
c6cc2597feb7c87ceaedf88926558802b1bb5171
-
SHA256
85b376369149c090a645fc20c6e35844c125b38b1b9a5698340de280819293d1
-
SHA512
4ee73044e2a85fc798f220589ffa8f6399768f5d26156dcdd6b8b4dcb801b8acf84007aaec3a9912d7223c272143f4930effe8049700f1e370667d7d3151311b
-
SSDEEP
49152:XcPzDIJIZ6Pv8d8kIcB3aodiEaVWISiLgG+wQpRqYTdTj2Ey2I+f5P8DB3u0n4:XcLDIWkUPszsgb+wqqYBfR8Dtu44
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f37a3ef6dddbe82e7ff1bdd739bf64c6.bin
Files
-
f37a3ef6dddbe82e7ff1bdd739bf64c6.bin.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 145KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 53KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 314KB - Virtual size: 612KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 272KB - Virtual size: 8.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE