��7��� E��s?�/e��W)�_�a���v��Rp�!}{x��pzUF+�,��P�P?P8w�0Nlڿfa��gouL:z� |��TU��&)�& �a��z)����t��\�]�*�lĔ7���?n�S�E��^ku���-��ɱ9�l`���B �p��?K3����-�v���<�6�{>/Ǧ�}�L�R<��t�g������=��r|)��� Q��H��z�.�����b������FkM̓Kz�`~��y�{�d�Iմaߠd�#�� $թ��(���>�����*J@j��s��]P$+I�d��yt9�ޥm�y����TV�ӽͲ��+�ܪ�@ ���u���i��@��|�ޣ������-$� á���=�ֱ�D��Z֚ �Py�L�F� t��{�����k�iOx/6�����.��y`!�0R��J����c���3M����:�}�8�6�R �"���5��@愈(������h�klcAm�+ ���,s� �[g�������kwf���j�#c:��,�Vt�K<9z��ʑ������};�,��긿�a`ٻ�_��_ނ؆�57~�-�0����!D� �ًyW�6� )AY�m���Nj���+6}�5����O�9�-f%��� �q��j��ih�-�+�x�j)��o��EOs�,���׆H0�#�e/�:߹�s�魄��!S��S!l��6�����+�5f��u3[�B�Y�4�Ieq�;Ml#94�[g�c�;~���Er��g�œ���������$u�1��)��F��U`���FV���B�>6u�P��A{ᣬ��u{����T���ˡ��k걄c�{_Q�����q�9?�x[&_��)]p�I�hx�C\�F��h��0�7Jd�zf;�N�0pW0�� 4�P���}7���Rǽl���w~Mk Ͳ�}�_~��B ��=IG��σ���n����T���)!{�����?J*���4-�J�Z�y�$-�h!��RIQ�T�Q;�@�U���������=:s�S�������U��>��{�wr���VI��Kl^ �]ȝiG�����'(&?�_��/f\;�."}����rU�I��K�&f%���0�GZƴ:�`����$K�weHb����P|fQ-�yי=� ���I�n���C������&e�J�H�:�g%�M�/��t��*�|b$b0Q�rA,#��3��Ւ�u�'h]�� w�w1�����Ȥ����E�>v���6���Q���Jُ�K���R�j��H�Ib��:/}6e%��0hrl�0=O����z�H���=�jy�SLt[��T����<��4�a��2�~��� }u���d�� �g MP:&���F*7%?�N���R� ���5&�R�SX�c��5���k��r���T���l9�KSikA+�����<m��\��55���6S� ���8cY�4Π�K�����q�|�Hj��0`P��D�(]^��j� ��2���n)�qb�EBE���)��P9p���H��2l*�����m|��(��i{�Β4\�z�*�{)�3���\ #�O}s��m��I�)�Ra�.<1�m��b�!�|V̛��U�q �.���M�uk��Kw �|o+)U0�ԣ��Ʀs��u���Q�F0~ �T�S�/�}-�c|�0��|�Hf%C�ڈ�OOJΎf��&��6���V�\�`+;�)9Z���j.���q<S� �����W�=�9����9���8��%��u�R��.zub��iK�7F�G4����w�GF�v�Kڍ^���̀�_�K9�U�r��z��%�k�$5:�W�E�2�7�~⥆Ab-.�T�x�~�0��\~�BR���\�P�wvx�F�M�X���Q�M�2���k��~i�@�2q� � �h���� C�- ��&����YI/�v�'�k�>��q%Z�B^|Y���c2���#� `Ra��@��R��<*�����9�w6��|��+u�o���� � �-��J]1ד�4+�RqG���R��5�O��T���,oh:kϭۥ�lI�9��>.�h���W;X����C~�/m��6�������K��[Q~%�k�p����_�u�N|���wXr�,�o�?�1��� *���©�-W�@c�e���O�V��Xr�ę����m�)��6̃4c�QF�y�7�2�nBe4�1�����(�i'ROb�N�U�z�s����/�U;�,6��l���P5&��k�3.���l�Gl"�6��;�9*�A�9�������dB1Xq��,���&��ǂ30�ZE6 Q Q��Z�T��<���I��X{�����T�_<g!���S�����k�F\Tƹ�t�|e����ay��-�3a0�tq�:�����' 2F���du�r קּh״���EK#�0�J����x��Lg-�>� ��za�%���Q�b���E#���1ⅉB 릮�1���>LX�g(����$K�6�'ޠe��m(�_Ml�E�8�5]��r���@oWIP'�=a���J)+&�����5�蘘qV16u�Y�C+�=f"�����`$@kNek?)m��c����U�J@7J�����\�!�+�`4���$�ˑ�!�G� {��P1�HͰk� �6�Y��j���s�O����lRHeƧQ�/�S�c�2�]Rc��c����T]�%#&7Iyf��� ;���KGx��z9 �����Mu6@a�q�,j�{2C��̲%4da7c�{<��z&����^�*q��|���sU�f��8�Y��S9yTlQ�D���A&k�}'N���+��kӶ�o���4R��vʢ+-i����b��H�� (����@�:�,����9e0���+�p�Z*�q��Ӂ֢�����8���t�o��@~6�����Q=7ܙ�����nl���P5��`�Q�M���[KS�^?QH�k�>��d�[1�q0����x�9��@B��1E��/o�G��������?���r_V�x��Y���&� �(�W���o�\��@�L��pK�r�2��Vx��Qל8�qj{�:�����17��.�Bx[�ׅə�e�+�������ݏ�e�:�n�����v�����Z���O^吙8��������J E-��b�'{O��f�]}H�i�]���;���I��}�$�2Jv����D�y [~X��u{sy��k��w�N/ LezO1���ӽN͟tuL�t���F�,S������T�f������]�܁�������8�|�@'dfk���2�C�{uJ�7�>�W�_a��aq�� &d�@3�C+���g�v�8��ѹs곊nM���:�]�]xw�]���U��p�����#��o�J��]��M�H�8�X��v�QB�P;�(�d/p�#^�g�̧9�x�Ķ�_����S1t�!g���% ,=Z%���ͺ����7�ߙv����tI��I����=S>�z֨��;��&�U�ѧD���<���,N���<t��j���"�NG*�y-����
Static task
static1
Behavioral task
behavioral1
Sample
67a4a252122ec6b0a7958577e02b3beb1dd61fe7e4cb92b0eea79bce30b221d2.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
67a4a252122ec6b0a7958577e02b3beb1dd61fe7e4cb92b0eea79bce30b221d2.exe
Resource
win10v2004-20231023-en
General
-
Target
67a4a252122ec6b0a7958577e02b3beb1dd61fe7e4cb92b0eea79bce30b221d2
-
Size
10.6MB
-
MD5
14344bd31ad197be595ee3eec047d7a0
-
SHA1
1b35022a7cb3f8355c95959ee9e0aa5da0372f45
-
SHA256
67a4a252122ec6b0a7958577e02b3beb1dd61fe7e4cb92b0eea79bce30b221d2
-
SHA512
562fe29e4658cb2cb9da17299898e16ba4dcfb8524c472e1692560e28db79b49262d8d30696e0589dcbc7be82c40af5040faf7cc8b61283e246d64d360a2981a
-
SSDEEP
196608:2r2TFGcJe0VnFmwmgQaP8mt950m8jpn2io8RDWR:VZGQrmw7Q68a95N0G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67a4a252122ec6b0a7958577e02b3beb1dd61fe7e4cb92b0eea79bce30b221d2
Files
-
67a4a252122ec6b0a7958577e02b3beb1dd61fe7e4cb92b0eea79bce30b221d2.exe windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 4.0MB - Virtual size: 8.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 906KB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 61KB - Virtual size: 10.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 444KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.5MB - Virtual size: 5.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 19KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 297KB - Virtual size: 13.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE