�Զ4���$��,Z���A0${��/�jg>Ѐm���|�$թ9�ۛ;�N����S��L�U��%N���z����ki!��z#���Ir �����2� f`{.���I@K\�"O�Y|�b����!X6��;i;���X-β��ut0�3 ���U1BJ��+� ��d�D���Ӎ<�V` ��ހ#�� [G�Ҙ�9*��c^m�W,:b� ��qPj�:��.���,���u��͑B�Fk,����%�v��4�Ʊ˜3�"�떻�_s���v�����c����H��� ���)}RMYq, ������E�q����B�sf7#��g6ڬ |��T�=�0a%SYpm&��y�Z>�8 Ҩ[��@D^�n��H/>��������l;+��h%N;w�7*�AY�A��h2��=�^<���-5l��wG�J��@I��xDP�*O��(oX(�����0`$g�����J�+x�*|�^ҐS*��*�m���G� �*D�]�����{�U)�Kv��� Hrsؑh��g�d��yͣ�[�)FL�i�R%y�2Up�(\o�S�����E��c�r��*[����� "k k�Om!��8��-TZj��ҸD�QY��SX�/�G���W���xHb���^e�L}w^�����0!����ꑰ���!�D�v1�Z<p�`^8��i:�(H*���xVk<G�G~^T�8�B��̟�4TA��恾j��i3��.ڞ�\�(��r-9�MQKi�<�IP����6ߋ�#�#�j�M�D��A+S�>X_"9�y�q�ym���=:)�}L#6pG�'�[&a�q_r��4�Y���}&<�ْ�h�k���?�ٻ���\w�uv� �fd^kv�]����[�1#&W����ZsA �SV ��K����� �ڕ����i����렧��e���.�z' ����{5t>f�"�c!7����T�J��g��BĊ�Hr�E�|#�b�&a���&(;^6�l���j8o�/ȩ�ugi�vf� J��Ͳ7�b ~�~��ri��t %x���?6��ЋO{lg^YFa��aU��oM�����e?����$ [�^�l|`a��!2&�aN �>�!�� ͂����t8"���sz���z��Ɉ%����아L���Zw4B���^fW��"af�����:-~y�%:!Cp��G|'J0Z��'P��h��52���S��T��, e���zEJ�RM,�5��hUw_T��u/\~���6�c ��-<�?����`�S�|~���\�N���@GOȳy����g�($J!U쿚��<������{�}9�e�{t�c�����y��`u���0�\�����2����dE�[��S�֕F��t8�ޜh��Т��i�B�'�*$4���0��vH�)ck�-G�vt\�JGx}��䞾3��2�j�.�W�9���� �#g�EU$�b�t4��V���&c�n�x��7a4�1���2�.Ϡ���=�Z���:�a:��G��,�P��q��^��Y(���Cp�8o)笍�����d,�ȺޫA`C����DaE�M������"Pz�Dt�C�h�wP�1G����Af[m���d�Aʃ��.����5b�Z {M����Pi���`�����iID�q�g:˝��=�Q#�� 2�B�M�J0U�A[ߥ�./n�U���� ��_��|����W�WK��ev�<i����V��cc=�HF�Y�L,���5x.��7ñ���#�-]�;�����"���������z�f���V�t��_"���o�/֜�k��c�������`�ul��o�K�O F@�T��4c^�0�s�p߶��,�9���'P� m*�= �?��ú�<~οBިbvP��4��`��n�a!�XO�Ȍ��T�����G��������bi)�e�Ia�є���/dLxy��������&F�9���3U���H<���&�襶D���Ai����d�8teNh ;+�> �Ҥ��c�B���$��a`ݡ���)Q���V��_���E#���^��K$mZ#���ϣ W>�`I+���V�@�egl��r�:�a�_�R8 ����B�����fa����>�HjP���R�������bA!�Yc�s��%���8�^Ml���o�3/T�c)�D�a�VʉE=�*7�bR�8A�g��l��b�r I���[��ݾ.���k_�(N���I[��Þ��HN˸^>��WA1'��������^�0�.�B�#8���<�������C���[i�S��C��J$B�R�/Î�0��Ϫ��-���]7�H�tl��䃜�ErAJU�V�|��V�ğ+���d����}ܚ2R�K�y����Ǚ�S}K�蝣cj�p�y�e�L���m�Y�,_�k����.E.��z�����[��ow���ڃ@��4���x���p̬n ��^�����Pp��9���Z%>��/����.�����(f�zP�Ngԛ/&�}}O��w�^y *�X3�8[�3E�~��x��b����x�T\-�U:�n��<�]:��g���}��lLT�1�:�:P�4';T�j�2\���߃�O\O��IB�Dw�A��3�p�aԁ!�Q�7�en�[��!�[m8.0���7�L�[��Q�7x�{�<�tM��@^�ϫR���#UP׀cU ��k9��l������y���/�Pl[1�%�z��P��6��=�8��&d�ڹ.h�d����oBe5@/��$��껌F��ʹ�ctpbfu�P)� k�� ���W�:P�TR���l=3�:���±\c_j5�{��]P&�,�&�� +�~쾉� &�Q���]��{�T�=�$9��?%�қ�:���2wl���A�t?^J�z}�f����X�Ǫ?�� ���X~'5p�BBa)�J;Sk���o�:���q������lcW�1KG��A ��ف������CЪ�s�1Qf�Vo����}����-���GH���v�#�z���tC�؝���hV�|��-��7�P*����:��kS������$Po��P��(b�
Static task
static1
Behavioral task
behavioral1
Sample
82248a037488bcc40687c275cd188675d0fa304202c0e4490930df43faa3536a.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
82248a037488bcc40687c275cd188675d0fa304202c0e4490930df43faa3536a.exe
Resource
win10v2004-20231023-en
General
-
Target
82248a037488bcc40687c275cd188675d0fa304202c0e4490930df43faa3536a
-
Size
458KB
-
MD5
be8c05bcf275aa42af95310c2bd8124b
-
SHA1
ee1aa3ac799a00455b063aaef41d9a1967408346
-
SHA256
82248a037488bcc40687c275cd188675d0fa304202c0e4490930df43faa3536a
-
SHA512
27e2b442579e56c1f65e20656439046024a519c4ad5710b3060b027bca0855fe7619f54c5ea59ee91cd80e04b8533596498241a250dc8856bb24b1838bed8e47
-
SSDEEP
6144:6bH/fF4Phd/bjTIR+fFetyM4c/xIbmXujhheRH4oSY:6ruP3jjTIR+detNdVYhhW4PY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82248a037488bcc40687c275cd188675d0fa304202c0e4490930df43faa3536a
Files
-
82248a037488bcc40687c275cd188675d0fa304202c0e4490930df43faa3536a.exe windows:4 windows x86
ffe4ee3cfa00749400ff342dd72e2b6b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeA
kernel32
GetVersionExA
GetVersion
SetStdHandle
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
MessageBoxA
comdlg32
GetOpenFileNameA
advapi32
SetSecurityDescriptorDacl
Exports
Exports
Sections
.text Size: - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upx0 Size: - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upx1 Size: 284KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ