Oa�����h��q�z���������=uuv���=�������WPNU�����+zkԼϳ��B�߉K �g�#�^T�x��Q ��`E5Kp9 A����%���h��j��0�,O�+�|���➐b�����g~�o�ٝ�;�]n��f�=뵍y0�MX�#��-��W�_=����fڒW�{Ģ����VY>�t@��)='���s�v��A����Ǡ��K� yP��<�&�|<���z >53=Ala��(�Yoq��dwC̳��0`�0r��.�z���euSOPI��6zp��b��=�^�ʿE?m���F��A���y��0��L�F�!N��ɨ�y+��v���D��D��} S�#������1��0D�q|��H�o���X�W�O�I&q���=t�����3��צɣ�J�E�+�a��֯���5���?zqŦ c�Ŀ��\��:�DN��"�ܥFuQV)��mUz=yv�{��X�6�h�_u����.�BN�wL�~�H����E�eG�$�B��?\��I �N���a߬�8�����a�6�/���-r jw5� R��Ƥ�J�D��r�ަ"����Ie�{ ʜ:���}u/DC�1��\�������2�N�D��Jz��B�S{�d��4����g���M�y4!ψ���nQf��:������;n�!%�j]����B�PzrD�{�]D-����az�1�M� W}��Q��e[���߇ԋ�[�q)~� ,��݃Қ�u>���� k$.U0��mio;���x��������(�u��7��h�(�c�DX���lEy�g�v�����N�W�$�d�'��q�$�:-F���@�"�����<%J�����U�'i��AH�\O�O�O:��-U���J��� އ�M:E�%���P�{�LO�@ߝ�у�C&����t�H<�������DV5��@&�ԁ�w�f�y ��vɁ�������[�@Jo��M~�s�O�wAPY/���-���-�����L&�:�MU�5A��J�����]:�'{��\4KD�,���^��r>Z�FA�J7��̧E��a��� ��6+�%5 ���"�Lr�)�F6$U���l����8z��� `�hC(����ˉǙ+9�ii!�/a:q�>|>| ^��_s {( �����j%w�XcK���d��fc�� I��tTtY`��y�q�É��4u�S�"µ�3FI!I/������D�����~ӑ�"Yz1i`߀��"3*�@���3(##/����uf)�ݳ~�( R¼�\ȁ&*�-A�#�W�˨���P�b�����l�i� ���ƃe�3-&j[�*�4y���S��"�rכ�Ҷ�]���R�_���ˈR�Dc+%��*!�Ǐ_�#�`)�|�����L���У���3{��1��z��Ot����@���Q�>�����yqh���Ϟ�z1��v��p���X��@v�~�Ul�5|9�@fUO��^3��|�:�&$�R��������y���]���R@9����<�1��WЦ���4ҝ���5��5��00-Ǫ��`��2l�xi�{ƃ!z�l�����D�mö�c���7vY^he���@��+�)��/���?' ��^0z�~�e�I;����r�}�CztX��0���ǠK���M�{�1�����t|�����<Y���҇"}2HJ���~}��ń�=$.]���yS�F~d����c!���t�n���J8�\ m��i���C�)�cס�[pws��[Zs<������%��)���]�ӫ�C?�eo!�L��� +@0��k^Bs �l�U�L��ɀ=���&���p��:��:����v� ;�>�e����������=����0,�>���!�� ��C��5�+87Y�Ժd4 � ͞2��"d�t�����IBw!h��H �o�[*�����ȁ���m$V��7�u��&tUX�q�p��bY,S�ՠ�S��0�ӟ���ڳh���X�+��� K�*p�kK��:VV�c��!�j��f-'zW�l���O^[�`VN�yL��'���pޕ���^1&��4��T�fi�:�����]"�&xL�˝�S ���&�iS*!v.��8z;��~X" 6"����5��U�y�����V�W>'�5V\�D����jU-�_���IA����S�ؚ;���a��q�sRGzͣ���H;� �2�Aa"7���@r4��7�|��ג\�c���˄�^[��ߑ��� �Ku�Ů���ܑ�e���'ʈҰ��?�*��d�'�]�����Y����[����~*�T��� �oA��oF�N���f����XS���C�b8��&Oם[�Mh_�!r] ���h #�U�q�1+؆�c5�B��[�&���o����9�D�B�j/f����C��i�WZ���������EP�.�9�DF][=�d�cU�����q|�����d�t �3z��vh����vRn��v����S�ª�8�J `�v���c����(�����'[}�yg�ILb���%�5P˟�7��h!�3I/�4S�����L��:���r�p�yI40���<J�?U��"�k��M"I �k�*|�Xm"�]u���%���]�ǃj���+�S'����]�dų�\)�B������s5�C���|#��嬃Km�D+��oc����n�֞��H�Ш��c�9����ǵ��{���͂9�` ���,�7-�o���b����r��)���ƩB��21`���#�3��^z�K��x��0H��E�9+��(�������ZE�(����!���~P�3���@�I���2��Y���1+Y�,��,�8�̵,��+!�R���k(�F^ާI�X������7�+�K"8ª�o�/��� ?1;�#1�M�j�G��c�� W;��C�A+���Uw��X����.�)w{=��ӌ4�^�G��A�ӹ���Ұ�n���6�(#���z���ԝ��퇬�&��#�}*����dU� fS���G�V����>�#uD�����8�e7n ��5���\�ڝQ�t��͉�"D�C8NǦ;P0�Xr#N�[�
Static task
static1
Behavioral task
behavioral1
Sample
81DE0B0491C0A7AF0539CBFDDD5248BC.exe
Resource
win7-20230831-en
General
-
Target
81DE0B0491C0A7AF0539CBFDDD5248BC.exe
-
Size
5.6MB
-
MD5
81de0b0491c0a7af0539cbfddd5248bc
-
SHA1
724f5e4ab06069d0e0b8117c1b802bd028a9d97e
-
SHA256
81c8e32e41112edd57ece8eed85bba6fec5b3750a6b264504930798e623d1917
-
SHA512
381ffee29e05b5c78cf85ff5892373d2170e39aa70c2dc100980531c2cb98e0d5ce03918e69a33aeab4933f01f1fb6be0ff8d283720e3cae68a2e990d8442716
-
SSDEEP
98304:f1repUJlaEhSme+bpMt4PUMFfyQJsAHnsByU/On+KfoYY6gwzYpeafFSirJl76:VJlPdHWttMFqQzHsBh/On//gwZaNlrDO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81DE0B0491C0A7AF0539CBFDDD5248BC.exe
Files
-
81DE0B0491C0A7AF0539CBFDDD5248BC.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 78KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 19.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5.0MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE