�&$?Y�,sv������t*�䭳���4��cFh}q{Q5�,���j(8�y_�2�|8�z}�������[{R�i���������64����Ft-1\� ���͒S�A ��n����Q�ukz-v\\�AP˦��R��Eޖ+�f��l��5P�T��)F��,r�Ǐ�1���(��}��v�!�$&*F�@7�P��x�A��/1�^�����d4�3���3t����K���L���G�0Ab����w�E�+�n�E�n'WO��8������-�YѺ�g���K=v�,$7"1r�[0ۃ0��=N����]=�t2zx�^F�O]5]��c����tw�'tNW�PY�g�O�]��wĿ�+W7���n��'kֳ��,�{�z_M;�u?7�3|-��Oh����c�K��Q�M�VAK9*שr��Hmg A_��f�T������nn�M�}wL�5iw����ՠW�$9��EA˖��Hn��y���k1�=k�����A�K5;��&�q4ی��!.��j�BT���KH^>�Z�2��bo��M)���x��{����c�P����02��Ϟ�$c��S�3U��� 1R9:z�h [Oe�˄����Yh=X���n}44�2)��h���e�#��{<S��L�����UVJ�]�5���ݓ8]m¼�^���sS��L`�.0���*�Q2��J�Ohg� �����& .�Б4�My�6���[���U�.,7ݿ�=�W���,ˮ fo�/ �³�_�A�a�bV:��?�4GKm^C����,(aFm���6��2;�����#��P+�p�0� �,I�w���J���6�ܳ���կ�2G��s��Gf�~S+HK��0�?��ͨv���Sh�{N$�~�0�Tһ�iX�*���F�Q�6��Ǒb�����piDgף�q=e!�i�|l�gs��&�X"(�/;U uE�O�o�� (tp���OO��v�����9�{05�i�1���_x��x��{�2��,u�����m ��==��w�f��+BM�,�s3�H�Q��6��d -� o������Yc�8^���aA�w'�ȀU����.� A*����ж5��1�B��Z��/'�pd|%���}T_z ���_!�JE�*j��.�R�1)��Z�gk����%�zPҟ/��] �:{���N�e�L,~��ݙ_I(�7���+l����-��Px!s�Rx��[ ��i4��9I�м��$�g{�+�3�X#RM��2%zG�g�8���&���}MoP����K�5�w�(�B:�:L*v��d�W��OU�����h��8��g���YK,(��-�fY�խ��#O�U��Ĩ��R��y֚��4�;J��4�k����K�����B�p�)Yú������e��ﰜ��*'�5�� ��P������ )&Yj�y�F,��m#�� �iد���(��H��i��Q:�{?X�����Z��� �p�j�I��VC����F�� =�YDVg��Y�=#Ⱁ���a�}���.|J+�b���e學�O��|�9�-��u����4�p��.�.���_*��@�n�iꦫ`&*d��g�%�-��¹���NWyqnO*^���&�����Jw�7=9؞������{IJ`:_=��ܧ+�v���0��������CN��hf'��00�3��|�}�9�/�w�L��Yg�gw�fL�h��V�4� y���-&�~bԤ��SE�����B��UL�^iqv�v?�`"4f?��k�A��HبH��n��_�,g�>����y��Y"���j�TF1"r�W��z�f�{g8f��D����:lj>� 2Zbp� �ԗ_e"`��#k�ȴ~�i��*V�i(GM�=��Ӏ�YM���: �rM�TR���x�}>b�WY�<�اJ����ӝU��[�.uNL�)������<ܭtǗ���y�N��=݊��:7�V���Н:~�asv�OmE�yF�)��E#����P��(�l��oڣ2�E��b}��[f=r%E@��l�B���������K���Ex�^��'|EYɴ��%����n@�mǩ���{x���`]2]a(�+vh"$Dl�����>�@�$� �ȒFu��r�t0�{�h���y ��F%��y�{B��/�_�DTu�N�F!a���8���b &����O2�;j���&��-���bi���:ɖ<��a+_h&_Ш��`Б�ؼ5;y�w�֞��� ��;�8�6~ n�������������~S��j��iq���� �z���5]�1Xt@��u�o$<�0Sy�Q����� n~,l���� ;X�Qӽq~��B���k�hD���?PA�6ߩ�a[Q�ӥ����'=I��7�t�����g�x�mm��h��|QSF����*�c��Y��,�S[�P�uTQr�CѬ����s�\[����]^l�J��p�~+�'V�H��ύ@�?a�OXb'�' .-����w�~�cCo&Ƙ�G��L��); %#[*U�*�/��t�%��+tT3�3�E����|�Ao2�6�}렎ԭ��L`����ӱ)<t?��ז���{ں����D�~��|��Xs��d��������PLe�$J�Z<~E�h/%C�%�UA!M;I�)<�g�-�� ߹%�j����ٷ\s.7:3mE h�ʆ/�D"��ʰɤ���q���d����w����8Ɋ�I �8RA�ۗ|dP������R$v���\Cl�>�@��b"���[��9�����-�����yD�� ���qj� \���G�flA�7ԆSe�/��b!Y���e��D@��{�+�����8~s�R�8�=�_R��g�p�m�C�d9��8Kub�VX ;R)?��o�(_/�0^�=�)&U!���:�p�l-�����S����t<"3N&Bj썱��A�P����:��P&9+�N�p�_�%D�3�,��k��q�����-a mc����pLʌ�F�/?{�c�|q�����h,WL���/t�9�ŜE���i$�"e�zh�Y#���+�U|E|�����*3g��k=܀�E���b�ʹ��ּ'^]�C����?!��]�9+C6<[,�U)��eE�.S����"K�D��?�ի?�ڽ�Ԏ��K!K��� ȎY��i�����N�\�U��!zE��t����>v^�_1͟&�T�1�"҇~1S5i�{�`Xa�����e����ϡ�hɜ�I?2���f�Zy�3\�z�0��]~��l��L�%�� �O��B��ЇZ�Ex��^�雕?�γ���z�+˔���?��[U�d�������&�@(��9%���t5[�~��!V��\%"�{pL�����z������;l��R��<NH�B��c��X�\'���66H%=������Uł�!}�1��t!�����}XH���R����k�taz��Nba"Xb��(�9)�+�8=�H������L�=(�m�R��OrV�\%w�GGu ��n�ݱ�������Ce
Static task
static1
Behavioral task
behavioral1
Sample
273faddfbabae3a9aaa29fe4a54f105f2c0f859294cb47cbf73e25ffc2b64ff6.exe
Resource
win7-20231023-en
General
-
Target
273faddfbabae3a9aaa29fe4a54f105f2c0f859294cb47cbf73e25ffc2b64ff6
-
Size
4.2MB
-
MD5
1d2189335899e952f713fe8b267ff401
-
SHA1
0a1b7889db6cbdd749528a6a7f491cddd62c741b
-
SHA256
273faddfbabae3a9aaa29fe4a54f105f2c0f859294cb47cbf73e25ffc2b64ff6
-
SHA512
f39242b220f0c319e24fc8f7f7d705d25ad54acbb8aaebfbb12e12cc81644a822a2d69f54fba29801b8da68e071d879ab06ddd14d5a8c2930a30a8ad346998f2
-
SSDEEP
98304:UGBLUIj2v9bmJVSz8EIo2R33EvJq3ki/sCYuPGIKwrf+T:bL9j2veVlvo2R3IJq0i/F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 273faddfbabae3a9aaa29fe4a54f105f2c0f859294cb47cbf73e25ffc2b64ff6
Files
-
273faddfbabae3a9aaa29fe4a54f105f2c0f859294cb47cbf73e25ffc2b64ff6.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 428KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 28KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.5MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 192KB - Virtual size: 7.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE