����G�>Z�\�v��}A �R�x^\s����^��� s�sL�&�8T�F����,,Ss���J"��#�a5����s��f3#��oˁf�ն�Q\�u���w�j�3$B?�!X,wή,����9������r,ڢ.!��/ǘw%k�n@�`T]����,�L�;�l�����g�C�Ń���� ��B"{{|B�[7��9ՖOl+��G������{���啭S½+�o� �*�01��`v��"qOr-��El��p����W�\b�mn�]����rp�"S��2���L�� �!��������5��!!%Q`��ӏ��s�9��}\�~��5����<%Q�5d�� v�}�nq���d^I��XylX�j]�+D�dI�ͅ~�0���&�š�% ��~�?�Į�'%���5��y�陃���W@C{�S-�8g�x�S�=B��=%��G���Z��<�9��wf�l T.A��>$Y�cV&�;�0�t��4��Q�Y�&)��g䕷H��W���J�X$0P��d�"�諩 t �c}���`= � @�S[$��f&ʳy�';�j)|V#�U{a�/-��:1�vO�� 3�4�X?w��D��I6+��>�� a��j�Fg�{,̤��'�L�^��y#��X��f���)�݂�Q�O˞;'����3 �2�1J_檦\y�ɐ�V.�"��5V�U4^�ބz Ȗ 5�Q�M����ݵ� AP\"}H}�*M��/@Q��}�/���`x��Z�.><��{敲�c��L�T��rR�"}�b�D�6��"�dT���i�Dg�px��/ _�L��m氥j!_w�)��=]�~:�/3�.��k�~{�� �wW�w�b�p?��~4��a�e��UE�+��J|Y����?��B6z�% aw������B�\���xHX@�p��!�FC�3-B��l&��Ƌ����3��p�&J�B-�`��=D���4�� � �g<B2��d��m\~����Z={�$3��=��Re>,ƙ��h�|x��lcH�d��jf�F��Q���b�cW��[�%v$ф�P�rk7����@8�s����<RY��Y��y���A����]1��8#bFm��63�����9��%|��28:"�.!�?�Ǹ^ � ���'gH�}U�fv7e� +����|0�(=���S`��_�u"�ܗ3�rc1!�S���3L٤�J��e�~���J.~��zN���',�R��$��2N6P=hL�K�V���N1��&#ALӗ]�+s�.F&t�b�f��q�*[ (l,"�>Uð~�����Cso ���A��M����U�T���&Y#FD�#�v"��R���KW�!k�c�R���p~��F�kSj�\��މ1Y���W\�.q�����#�/o C| ���%9��E���(��yPfi'����o�'~���}{��az<e�guS�����q�������h2��f�U��r���������B��Xc� �O{$��K�'�|:<�]�q�x|,}>�-�)������Ow�Ŋ����?�v^�s̫���7ԋo���4�Y��gFc����žte�6`�%�Q�B���.`�H#�6���)N<e0)���X+qkդ�餄�2�2�a�d��6nE%g��m����?�'c��>�e���|�* �����[��'�3l���)*ʒ��gwN�P�U�L(1g�W�,�1��&�,���%�1Ep��bH"{�ͧp�m��U�YѪt���2����Ӌk��V��YO�ȡ�i�Z�Eͤ�D^��i�q7Lc�ɨNe'6�Uȫ9i��ԧ!-��`AN~Lp�q�;� B��k��n��!��=� �QJ�W��W�M�GG5XZK$����2nS�,���%Xfԑ�s�.�oH!!N����� �U r���"IO�H��쭍��O�+��'d���'f�������V%H���G�IR'�h�*���t����F�2�f��q��Qr_Z�N���qK� e_=�h%)G�o�̚1� � �v"W[�-ٳ�!���J�p̤��:RS���O�ގ��|��aM�����1;^ ���wu�#�sS#X}GQ����D�ҝ�[7�駔�Z�v:�)OΑ�%`A�LS�VE��i]g�0ҳ���5�`�S�ɬ5��4$,x�E5Y��k,��D���K$�� �x�u3���Sl��}����+4�Y�(�\W윊w̠S;8Ȟ����n��92�ן����O�c�waV�F�H�r`���.�5��i���ur�8�)�;���w�)=�3� G����E��]���9-ip��x�H�d�E�5��,�����;{�����2U�q���m_4峓g������z�����i�E�L� �l�\$,*֭�Rg��=n��I (�B�kT�8L�E���f�멥e\N�V_�sf瀊Ѩq��K�eIgEr�������JN������R��Fus��w��wj���D�!v�ѕ'�j��ǚ��� �*~颰��y��C������=2�`H�s/4�������=�f D�=L�R�PU�N�駦T��+z�<�_<D~��I-�4��N��a�)�e�1�OD��5������JB�;��Y-����5��.��i�wSx�`_��ó��ljU���7�������X�����H���ѝ�H8������e&^�� ��C���)���d��0S��cb�ۀ�2�����9�M��'1z�!��S�Z�*�\x��#<�����c}7�Ԑ�\w<�Q����v����X�����e G�Z� ���\�H��L�� ��ν"1��7�!��=�����ٽY�L���"�r�0�Y�FA?�h�ġ��%�aB �W���.�������[��8��3��ZV����D+z'�'3Z���Fjs0�B��d�9���9{����@�i�� 'yݦt�.����l�Z��V�4;E�9�z���=L�<�#A�ճ@�W��}[b�J�LՎ��D`b\곶��"*���yB|�,~syj]�l���$6��~���s���+t`��EvlC��U�����gtms(��#]�Ղ��OYVƘt3�4�Bef���H)�ӣ��C�_ ZS�[hi<��:�ٞ��4�b ��>{o�B��J�Ʌ8J6g�S����;Ձ4��l�����������O�ͣ�tp�N��ՔȪS��������6β��i�̧�[��l�?��N2��)m�B�|�NlW��i�<�L�/��Ck�vpgN����[�"�i����D�(�:��2���:������F6�~�+v�a�SN�ub�ˎ1;�<*���)UL�aGn�?�c�r������8p�`��#��[�/��.�-���ȗ/v����{� �T�������aҮ[����z�a1kleWIi&��ʶ`-X������ m�ͷ��@�����c(2���A2�d<l{�+Հͅ�X�V�u���1p25T�:�y��J�L�QrHj���D�Gɡ��*?�?�eN�ww����8Q`�o5Z �>9�
Static task
static1
Behavioral task
behavioral1
Sample
91e3b5bf801e146753e864cbf9f1433f1af4f5cd074dcb95a8ff0629ac2ffe98.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
91e3b5bf801e146753e864cbf9f1433f1af4f5cd074dcb95a8ff0629ac2ffe98.exe
Resource
win10v2004-20231020-en
General
-
Target
91e3b5bf801e146753e864cbf9f1433f1af4f5cd074dcb95a8ff0629ac2ffe98
-
Size
3.4MB
-
MD5
5eacda9622428f1054cfc18389f8d8cb
-
SHA1
d9426ef9ec30dba4d2af0be70707c55a04d41059
-
SHA256
91e3b5bf801e146753e864cbf9f1433f1af4f5cd074dcb95a8ff0629ac2ffe98
-
SHA512
a8f1df27facb28a70838699e49f028de46079a14f7a8df351e81961dde84b38e9ef987159ac0ffb1a50d1b95777610db2d347d84521043027836ed3974fa204d
-
SSDEEP
98304:ptx31FySefulO0hfMEpYZ1JuO/SEqnPHPcFT/J6U1R7:pv31Ff+uw0h0EAwOsnXcJTp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 91e3b5bf801e146753e864cbf9f1433f1af4f5cd074dcb95a8ff0629ac2ffe98
Files
-
91e3b5bf801e146753e864cbf9f1433f1af4f5cd074dcb95a8ff0629ac2ffe98.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 840KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 80KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 56KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE