+�t��t��Ar����߮�ɚ#\�|����Q� 6�X[N�DŽ&�Fs��֛�9C%^��N�� z��K��C����i� ��?�=����b��1��6w��y�-��B��}S��D��i�k�/N��������n���������wd'B&��l��vx��XhkS{䟇tpkY�5�!W",XGhEw�`&���<[-���l�� �r��`���dLO��OY��� ����Z��+EU��T�U=I5 |5>�>��V�c�8�k���x��%̭MiJ/�.� W6�F7n��E?b�$�_h����I����.�^�߅|:��נ�dFv.x�=tf�ܥ�SW[�DVv�"w��*^����nOP��Od\EsO}��N�Y�u���� ��v�To 7-8�����j���-=��֬H�{�)3C��������(-�����h�����a�<�cל�|��!�$�M�/��R��?�D �)�WUb ��]��z�����w���[�/�Of��������Z��O���t�g>�N(hs��)�\8�X1�x�*�ͷQ !�px�N�x��5�f%�'Yo�o�u��F���Y�8���{���� )[���*��ҧe5��8�� !��gñ�F|h75�z�g���2.�$�b�p:���M������b�{ �{`����;�j� \��t���<��'�8����:��cd�7m� 2$�h �6~��m"t W�����Qn{�&����2��e�c�ї��f�V"�:�� 2ί��Y[���KP|N����}�t��,�-���@qB�F1?T��*��C[��횲�������\<_b;���a֓�~C����]�؇z1�\����2�pS�I=��S�a��Tv��"2��%��+�qe�n(CsG�!�U��=ExZ� ��H��l:���?��Ծ9�h�b��0�_���ȭ��N>X&��l�_�>��� _]%}��]WZ#���㬁TYh���~�d�.#�2��h��Ы`4B&~��p����1����Ѭ�� ��T�u x#QEU�� ;I���%��`v�kJ��8��ulk1O:�����7�g8��T�, ���'�UI��t%��DW�QmF��"Yq��ϳ�VVѡ�{����e��M O3�Q^=~��(�����7�6^v���#����*�c>�,OFo�A�@$bf�\{�a9���j���?ǜ$�;Au`w��>Tf��b��t��E$Ϙ�a�^�/ZO0{V=� �xj��� �n����GIv�D��*��L0�����p�H5�������`��hF�1qbj�@�N�i}�{���)fP�X��H���y����g]\s�C���$ʲyũ����/�ZS];`�`����~�o�2��;���ku���n���(bZ��ժ�gh&�������18<$���� g���܍*"���|�����Pv[i�]�?�+Տj� �?J�ʒ�����'(#1�[Xk:K�����=%'E�3f��=�C�`�{�D0� C�F�d١C���S��������h����@��� �Tˎ���ս���ί:z�$uq[��QSx�?6���ZIM]~�/�|L�Q�i�b��0B[��%Ú���]aj�#XqoRK%�S���<,������/iq�9�)�d�� ��V�q�+Ik�(]��H�/�oT�-��Ϋs�J5��"<��!���CtF𢷤��aj����J�X�J�����8Gm��f�7���� �IKDp�RZA�Vڇ������#�G����ݫF��3O�lp�w�-k�~�?<V����z�� h�����K!���q��0��~��Ts�ͅ��o?}WpC>ظT*�(lC^ ���t~���{z\FU��O���OmëQl�a`�r/����h#���D��j��#�c�̥�l�;J]�p�-d-�������A;+}���O3�.��@ԅ�:�:M����oY&���y�Z�g����,�uC��VcOܳ56t���dTL>����J �5v0P��t�Q�,�.��#Ȟ�r��=�߲5]?�Ue<Y�F��E�$������_XiƵڇ�.��nD���[�i��f��ew➪��S�sL�_�?� i#���Dr��'ny�P=/�I�����x�����R���|���2Z��yƖ���g�"P��v>+�!�_��NA,<`�W���i�"���Ï:n�.{�U���ϩ/�^0_jK[�������,fuǯN�ځ)�ѓ�X1춫=Ek7��6��;d0���6�˨2ك/b�[�FtR����̩){�W����p���tF]����<��e�` ���Â�|pC�� �����X�F��W�.���5ݱ`=��z{�2���� �Ȩ��x�s�1�[^�)0]PC�����2@����y��$�-և2~��6�4�;;�� `�vq��Uu$�P��xd%ũQ�� B����Eȅ�Iu���@x-�؋��-�OU����Q�B���1�����X�{����Qi�y8�ܖ��ϛ��uI�N'�X�~'Z��~W��_����A�G�tKe�%BY8qW?�Gd���ҝZ�����^Ċe��!M��O�2�����'��B�X| ����,c������-�o��# ��*S� n������J�� Z>҇dw�%�`'Ӭ6>f���2o'�E/ Shm>6Z `%�5 ����u_��j�S�'��#��6e?3��o7��8�D�X�P2��'AėgF�Zp�̚A�"t:K@�`�}�����/� ��o�2�H�a�a�����ؽ�ki�ي���-V��cV�����C8���0�K�+�iX�7�����v@���a�a��K:s�φv! �F�`���f~��HR!���k}#};=��1T��~,-W�V�|�X�NZ��-Fz+겕�?��S{���g�`�9�ۏ2�MZ*1�L�!�v�~��}�T_sZ��.)$������b�� �*���_��.��������o��U�-6���˔�[_�.$5��� �U~<x����E-y�+�9�N:8�X�5Eg���W��RR+DO�8\c>Y3C�����k�Ҽɑ9�b�x���
Static task
static1
Behavioral task
behavioral1
Sample
fc6e38eeb149664e5b998949b4ac57819e7e536589171dc7a9fdf7d6d1eed15d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
fc6e38eeb149664e5b998949b4ac57819e7e536589171dc7a9fdf7d6d1eed15d.exe
Resource
win10v2004-20230915-en
General
-
Target
fc6e38eeb149664e5b998949b4ac57819e7e536589171dc7a9fdf7d6d1eed15d
-
Size
2.7MB
-
MD5
1de097f302c9310b8320f811b9e81e2f
-
SHA1
300ccb039507f3069de6df77881453eeeb61a064
-
SHA256
fc6e38eeb149664e5b998949b4ac57819e7e536589171dc7a9fdf7d6d1eed15d
-
SHA512
ce8600f8d2b77ebd96089a05368e30a0ae609794b8a917f77b94a905e087538642402384ad5a35b3875da013b61d54252889ca381fb8826d0e5b7129cef511a9
-
SSDEEP
49152:qqH0cSyqe10ZSldlsbuhLBvLxDlSv/vqn/dpLzHCEK2LS0o2:qBPe1KSldlsbultxc61pLzHp+d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc6e38eeb149664e5b998949b4ac57819e7e536589171dc7a9fdf7d6d1eed15d
Files
-
fc6e38eeb149664e5b998949b4ac57819e7e536589171dc7a9fdf7d6d1eed15d.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 2KB - Virtual size: 3.5MB
IMAGE_SCN_MEM_READ
21`2c`1 Size: 546KB - Virtual size: 548KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
21`2c`1 Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
21`2c`1 Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
21`2c`1 Size: 325KB - Virtual size: 328KB
IMAGE_SCN_MEM_READ
21`2c`1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
21`2c`1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE