N7Q�#4�0#W:����qe*?��S�e䚜d�����0dY0�xw$&�]ۨ������1���Q�,�M'�˓(�;���v��|v���އ8m�����Roy�t�һ@���Eы��=)�?�˗[�bB\M���z��Ғ� �@��GXQ���'�J���q�q�`c�e�pP� ��r������ ��������}�91:@�B���[%5�3�h����\���Z����W3ڐ��f6�cuo��P�At˳������f���W�t���_��Nr|�Q�w��;!��G-b{���gf�R���M{���Z�@���ϙ��حD- J�7�IxM�m�y�'���ECQ�����V�0nGX;u9�bj`G���^���~m����������3B"6��@��;\����|j�A��́�)� u�un9˵ } H7�O!��K=QU������Ѕ��X�����o�Ѐ^���,W�ؿ�O�U� �\�������&���:�l�������B??18�S�2]{!{Ue�#��r��G.�j;��A��Z4|��������9K;qW}���jg3}>�'���t�Ӻ@.�ce��p�BWi�}� ��e�]%�7����j�P����zW����n1��6�k�5z�����_��>���+�a�B���Z~tr�>��lEj&/�!��jN����n�+y�Ruu��4ha5�:%�m:��f'/P��;M�J1I��S����~�~J38˒����T-�f[�s��Oשy& U�I��i1P�R�"����c�<�,��>�酠���W����"�GZ�aԪ�$[h�V'e�f����H8�+�CȬ�'_�'�f������j�������O¶�A(�Ȍ��cveo� {�i�Jq�7�=ve�����X��8��o��3�7MH�-����]��H��������%��ֺ�{��-L0�5&(@·ij��6�S�����~Tai���̻._r�K��s Sj{ӳc�2���:k�]��ʹ��&���c �����7����`!��:�>4p,��{���i�ƾa�m�5P�R���~��Lkm�g� �p�ai���1R��O�w���f����2������%rC�1O��C1H�9��<�й���EV��M�QL��56i�����o-��"!���э"�N�ޗ�l��!� �T�^,w���/�pJ���C���46� v�0%�� ��@áu�/)�W�G����^7A����sXfh)���[)O�������J'��/��� y���N���}�����`�B<s(S�FH5IymzY�T�5 ��n�`!�T���*L����� , ���]�Or��Î�P��gڻ��]��$����T��[��[xP�;~{�X����E+jG��)�Շ�q���ZX{�$sMv�?��E�F�ȅ�9ȥ����in(l�h>�{���\}2��L��܉��riCG���q��cáy�L�L�֟��@���1��Z��Bp���5C�9��0�\������Ę�l[3�O�q�ץ<�Ɉ�o��ԨE�E._m뿥8��?��k��usN_��Ao���S��p��v���K���h�y+t�2�7���Mv5���U�ټ�#�A/B�|�k�7i�]c�����$���� /I0�-������qF#�M���������t�A����턵vj��v}c7±&o�a9��u��Y|OJ�H���[;�D {:�ؔ�{��X���"�%��G��][r�[��x`��Ũ۞ӊ$����-8�0��ݕ�y��i����'-eDTE�z��a��o OcP�y5 /�Y�����O���_�p��M��Y{���$Y�;pGN���f�8�EnUi �ࢿ���Q9�<�M�Q�^ٜ��y%!���s�3���?�q78:|����T������9�rx�%�\oh$��(L�;�0@��k�BV��#��z�����SVg�cRX��>��$�E����X\��;$-�c!`>���4�a1�:�NXy|����0Up��p�&���}����3�[�U��ݺx�rUbI�8/;r\��#c�%|�.^pH��'����G7[7֡�{��5Y���&\�H� ��|tK������ѐ �ɷ�p( ���}�Ń�,|Y��CN#�ꐄ�n�� ���A߳� ~['��Y��M���*�=N�it;���h]i13@mB%u�ٔ���]#���� �VQ~�#���N��b�I��$2U�ed.Ⱥ���H^6 Dn���6�����u��r������-��"?=YHF0Rʶ�K+)�'R-�O�*x(3�X5�B)��%���ƺ���N"�?��Ph|�������5�G������A4Œ�}9D :�u��c�"B����O��l�Ƴ^�+�_��s��q�W�+�Eұ��+�p��|��{����o�,��px��.�%�!;,�sm:�'���������ɣ�0�z���ih�j��&��y��N?L������-`��QSP �$C�w��S�uB<�L�Q+�3 �\�����x��q�̊��bv6�&b"�x5�ԮIeՒ��VR��!9��V6G��f��rR��fC��s�Rq�-<:r���7yv�n��/������ULu������p��C�H�L>(��(�'���#�vu�۠��w����=��%hC� j��V)2[�>���������5�P������VP���S�>��3!�>�63��uŨ�%�,J�1�1�p��*��AD�'�J����Ѻ��o���(b]��v������L5X-6�ÃO¬�p��>�u�țj�!w��7�Q$�n�C̄i2�vj]�G���ZK�gHN;=2�D�(�z+�݇�P�[���Qi�Q����}62����g���:��@�ܴ6O�D��|�ϥ���&�9Y/L�F8&��p}#��7tJg��4 ǭ|�aa��"@�+��"'uMP���Q$�K��3�o��4b�j��0��t��δe��:,�8F6�_t�M@���m�$rhJ���Q[B�CЪo���v����90E)�� ��!>HV��s��>��MF
Static task
static1
Behavioral task
behavioral1
Sample
58b30c75db050e57a9f5c795c823627eda37ec253d63db428c970dcab058d9b5.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
58b30c75db050e57a9f5c795c823627eda37ec253d63db428c970dcab058d9b5.exe
Resource
win10v2004-20231020-en
General
-
Target
58b30c75db050e57a9f5c795c823627eda37ec253d63db428c970dcab058d9b5
-
Size
608KB
-
MD5
4bd206c9746ee362c938805e60dc113c
-
SHA1
eeda90caab0dbee1c9290c697e67da3fd4650b95
-
SHA256
58b30c75db050e57a9f5c795c823627eda37ec253d63db428c970dcab058d9b5
-
SHA512
affe396366e510e305ceb20ac0155a03b02a06b588d04c2aa2902c00ae3e8ea8cb41894dab8bc96891a94c8acceeafa9266b095b9ea2cd056ba43ef24116787e
-
SSDEEP
12288:FF/QenBaXWZY6elsVQHm0NDA+QkeQN0dQLih0:LJnBROMQHRqkerQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 58b30c75db050e57a9f5c795c823627eda37ec253d63db428c970dcab058d9b5
Files
-
58b30c75db050e57a9f5c795c823627eda37ec253d63db428c970dcab058d9b5.exe windows:5 windows x86
ec9ed0c048b54c873cc3b1c7b5de3758
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord606
kernel32
GetLocalTime
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
MessageBoxW
Exports
Exports
Sections
.text Size: - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text0 Size: - Virtual size: 541KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text1 Size: 596KB - Virtual size: 592KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ