��5]5I�23�=�69�T��W�W���Ԇ#R�[���rg����Í�3#��.ڏ����U���y�������;G�T��#Ƀ�By `�ܕHX^t���W$�ڨ���\x�������dΉ;vT����h��H@ I+��g*��~"�4�i�pQy�q2%��s$8=���A�p��v����3����m���e�+r�Y"��1VA[���_7GbA9�Вy=�V�Mt��x�c���L�t8:D��Pg[N yvw�D|�G!�궒*E�Āe������)��'���(�&#�Ʈ ̊���w"lӕ,�[�ﵵ���A�7p�l��h���eQ,x����4}I ]�bs�R���]9M-�%ݔ���Q�ZyP��{��ɮl��Q���� x�r���ˊ�i��s���@��x��;�{�(�N�<��܅G?��1�������ؖ�_��,��$��o#����P����:%��ΣKK�L5-#-���F�,k\/w���:笃}^r4��V��m��ϱ.�s���\�_����-F�U�G=}�[�>�e����MJn:VT8��|��<���te����8(g�ؘ_������}���l��S%�:w��DT��±��[=A�!��ӯ���e��\п�>ԲN�8��O}m hk��5蹋����#�4�5��x2�sg3����T��������Wɍ����x�\ݦ݂��`���~a�ʎq��v�����w�g&i�E���}�h�)�2�}L���x��P�%\�P�Ҋ+�0��UØH(^�8ɨ�L���%A�n3�h�Mjl����P�~��Ӆ,ѦW�N/�t�#(P��t��MNc��wT�Y��Q�a%AX�Hؐ�O������^�j__��\� ���|�D �? ���%Rg�=}�?����P٩��ǁ=Fcoن�u(Pd��DS�}`P��&�����ÎUe�OQ�&�0L!"��q)�����VC(��q`9j�??'�����N���v��!��C &��� ��zVUN+�;�|�AmUژ���6�"3�ɰ�?�{��2���m�-R��3^M��wT�l\��Ќ�����O�:*����l�5A���!KPM��[>^�xp鼯�ʦ{������#�{SH����3{���;+Z�.�}/c"� ��(4|��a� ]{�Nܶ_u*r2j%�1�֩�?�A��Xa�`j�����|u�6�f/�Fw*ˈ�fOr�?������ٺx��3�is�G σ,��>�%��+j��u#�=n��(?9O��*S��K�A$�� ���%���f��;��X 1���=`#ަQ����░��)��6�g�A/d��kW i�`� 4)������`$G�cB�J�>j(��ì�v�4!)V��p��_�f����G�4F� H�4A7�����������|]��f�+aJ�R!7G]g�#������R]�Cݶ�u[�N9I��y~a j���\�`�u>�3�P}��Qڊ��X��� �n��3�������{�Y�Mg�҃"V�&��U��b��1������L�`��9iG&�Y�z��M�Xi&�i�ˀh�3i��}o�>Ը@�T�x�M�a��(��XiOݽP��C5C|G��^�����(��n����6�:�?fB����I���UO�A��0>u0BB�K\v'.$#S ����x��8��:�y����&c��m��x�/���h���r�4]/Zj�b[��m�Np�;l��@D�a�3�?���7�O��a��.I)1�"���Us~b�>p�3���럲uf��C�na�9��{w�������x��_�������9��M -�K�r7|Y/4��$P<hZ� u���Pޤ�Ψ��LP�E@a����m�j?��"͋�1�5� 1�kxٻJ_6��\Q��[*W�o����;F�J�+W.�/�1�{�5W���(f��(_ėʳq�uO��*%� ������lme��� 6�0u�O�����R�[,n��q��V�lAg ����&�$1����$������[�nгY�y��tb��������_�闐z��g{B܂d�L�DS��u�����;vc:|�������\�mrb�m鷒7�a .3f^@��L>5 ��:�֭�G���Jb�� �6�i�6Q���/8�d�h��*/�D��P���<;����H=��49:J��9��2z�4LW~��hX�&�bB�p��|6�y�r�}���������wC �2r��-�����<xX�r�8���<�qn(�+V��)d$#K����l�1�i�4"�u�m�!�A[�"�Ћ�� ��[8����]+� �*?l��g�Xp<��r�%8o��2�X.C��B ^�X��;��M�Z�B �����������ݦ������3̾��V��rA�O֊��pO<.�&N��#14#F�{�Y�*a�D$� �co}ir!����j;�Ws��qd@�u/{r��uC7��a�����#Eu��NI�ГOWU(N�ȉq�6'�9�w&Ca��~h�+&,���,Y��C���Y�I'���?��e�44.fhPY��}�rR}-tQ�b>S��+���P�L���fv�>[V��gp�(��Lq�IJ��D������,�{9��!� 9���=���)�y�v�&L#��-xb̒t�<UnD ��W�G�t8���&U��Ӛ�3�i�5(�'�|v\/�֚h��1������FuUZ��jqa��*>J#���Z�sq��7ؑxw��[<�ٓ&��^��rSiQ�XS�M�d"��8�;�A�2��@g�r�!OJ/�~������+�=�w��^��H�Y�7~�@A/�u�#����Rr�A���E�E��� K����|�?���ۼ¸_pط�i ��W�fߟC��D�RN�?��,�l��9U"�������'k&z%R&k��5\~�o;���?s'y�ϘèZT��y=:R�X��zm���WV nOm:|W��r|�� Ёwc�> ��1.�=��0%T�FXo"����u���Ւ�t����')d�����4y�+;Dq� �* �]Z��
Static task
static1
Behavioral task
behavioral1
Sample
ce4a4183ea6288b7febbf34325de2ad36747d867ad31656b80eca937df0eb766.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ce4a4183ea6288b7febbf34325de2ad36747d867ad31656b80eca937df0eb766.exe
Resource
win10v2004-20230915-en
General
-
Target
ce4a4183ea6288b7febbf34325de2ad36747d867ad31656b80eca937df0eb766
-
Size
664KB
-
MD5
7e08480612833d93872337222889e19a
-
SHA1
1bd54fa166aea9cc376afe6bf50eb5a0a86c9bad
-
SHA256
ce4a4183ea6288b7febbf34325de2ad36747d867ad31656b80eca937df0eb766
-
SHA512
6a3b5743342ec04355ee8987a45a15edd17ef493fe26a4b06b677987d4d690dd8611e8776a7f10c0360f6853656d7141eb46d6618367942c3ba054fe9a13fbc7
-
SSDEEP
12288:1fVROYHq98kJIL5SSNYBFhb3NpLU0z1uFmlRaPrSAFxrVXivs1WOiO1cm4Q:1fOYK2QW5XNC9xU0Uj/XV4Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce4a4183ea6288b7febbf34325de2ad36747d867ad31656b80eca937df0eb766
Files
-
ce4a4183ea6288b7febbf34325de2ad36747d867ad31656b80eca937df0eb766.exe windows:5 windows x86
01f20ebdd629cffa1330b5f39cf7d3f3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord610
kernel32
GetLocalTime
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
wsprintfW
Exports
Exports
Sections
.text Size: - Virtual size: 325KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.date0 Size: - Virtual size: 592KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.date1 Size: 652KB - Virtual size: 649KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ