���|��ނ��1 ݒ<8�D��2F� >A�����)�C;�ÿ(}���@|Hn��s7�����w�PP�m�°�C�SU�J�#�0��ᇾ�H�\�$>���`�\���1��x��i�B{�@�2��0!*+�wm"C��ĖH�*#n�q��"���f��8~w�e�`�w-�R�l(0X8>ii٤���/�-�t����i�&���0:>����L�~w� �v���Pv�1 Q�Q�kh�?=��#W���m�����:����Oj��J�������T\A2fʉxX�҃QL����bL��+�J��E\�y��oc��B���I�*#�V_$��S&����K�p'=� ��ٍ���P1c<eb!ʟ�<Ԡ�]X��L=�%~bq�i`�g�p r�'�k��90����+��8�!�N>'�w*�����I��,�w��2(�Z`�l\��^HO?p���)mh�qq;� �L�<\T�|&�#��L(��>���,N���z��#��Ӡ����G3Sit�(&MZ0�����V-X�5J�V/��sso���:a���xFӝ����g����'�G1��3�}:orS��y�S����B�nOYy:x�]a���;������r+���i�F܄�V�u^��0�$���J������ SR!މ��t��d�k,�b;��V�<�nD3R�!��C�B0������J�x�?��b��=�����NJhz�b�$(��7C�Ұ�B��6R���)�tʯ��[k ���?e�Wʠ[V8?7�5��+��;��Ћ���Ho�7D#+���A������2�e;]z%<�MAW���ԙ� }ۜO%:'�ǹt �R>�^T�"�8$�?p\�ѳ�"#:d���I`-���J�����6fp�hs��*�p��Q��h(z|*B�2M-�eT� ؞=���?�d�f�Y�P4�7ߢ�xu���*��1([���R�eҴ��A��!����Q �G����]���9+V���"���j����[L�z����h�t;���&%��$�����W����M+��/|=��XD�� �������/}�"ƥ���L �ci���> ~NC���;2ԕ�k��f,B�����#�a���7�� Wu�[���:�F���;�<��e�;���u�~�����7(�����_���Eƶf� ���*��g�z��Ҋbm����r��Z|�M��I�~��@6jGjP{��q}��TD�U"}���.�}5Fe��+KR<�G��bC:Y_N�4��W�LP�fr��f���t!���nߘ�Z�� i�ۇ��9d�����k7�J4��_�FsC����0详tr��� `������5��� c����K�פ���cI�^���DZ,R̀��a>��CQ|��C�1/��N4z���.?T�2��3������q��"z�=������}�[nᛖ*L�v'��,���X\��ԭ�Rb&.�ށk�1<�W6۳p��G� (�pm���r̫k��!���%5�8GK��g����H�7�KKr�S�f���q�����A,�6�52eJ�D� �Q�<�R��ta����:A��p�+1����8��,>�_����x�Nհق�Dg�A����~�db~�����ip�I��V�Ï�꒢s������?cI� Iȩ/S��������hcVɅM����_%_�[�����ry���#���5�"�۵�v�㉍���B[Y�r\ w�����1�(�/��R}�aV�1녬;�������҄� �^gʦ�섹���F�?KݱSU���)LPkW�v��*0��wN�-���V=�5�Q��0�"�'�ZE�j�Z��,.�tY'{�L��bO|G: ����f&�jc�uϥ�����Òl�6�����Һ�uo��.P�BsbmJ 6ް��典���]�x��M���(�%+Z�^9�&{���nٝ�z6dz,���y<Kw��k� �#�W�=D�S��6��ҭJ�����)��p˜�>����3M㺃q��^��ϺI()M�NcJE�.��� ��ꉷ8�OQ�N�n�߂�L��٪|� QV�W.�G��]���o\�be���xCߗ�ϣ>�>�7c #���ۅ�������p!�p��%�+�;���^�2X��˻3�����;��� ^�04�Z�hj1�G]w*��d{4�a�g��0������L��^���n:���{��A����������j�.�~ �A���0�����Pչ�ї�xLT���N�^�_.�d�q: �\(�-�|D�ژ�����(�������S<����0ڿ������w2D4�,:~���~���pݘy�1s �/���������hH������&;��.PB�����8(�VVw�ԞXfwr+�9�a�@�Q0���(Z-�~��D�UJ���.Q���/�ʒ�R�[>���3�"�t]��nvc�0<�վC.���m����B{WM6�T��?݁{�����7�Ka�*N�D-��^�s\L��K�$5!� -�e�Tfb��ϙW��pH1��h�� ��V�A��5��zI���j��v�_����#�t�W�R�����q��\e��D��o�WaY}Y�)({��_9˺�"�{�<f.�2���H+�1�sa��]�:A�8_���ld������f͖O@�E�:f�A��1Y!ݽ�)P����qg���>np�V�W���ا�<�)"���?��(�|�D^'��v�K��f���_����E|��:z�e�0$�Cl�35�Bk��f>c��T�K)�j��htP��ˬ �S����%�A��{2�(��)q4���`Ӻ �� �OL��"�Ҧ�Y%��WCB:14�0��F�o�C��ֹ�律V�V% � n�rN��|�ᇰ�W`��y��N�5����u���d���t�+\�ʯ�[�T���|�EC�����ގ�beW���"������-���͌����$��8x?� �ȗ�\e�����/�|S�>�p%SpR�.Qُ�Ʉ}���ի̡A]lU�@�ʃ�2D��a �4^��fx�6���#�~�Ǜ��!��
Static task
static1
Behavioral task
behavioral1
Sample
b24a98347a21a57250674c5b4078d0d7f62cce43b7ccf105fd215b27dcef94b1.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
b24a98347a21a57250674c5b4078d0d7f62cce43b7ccf105fd215b27dcef94b1.exe
Resource
win10v2004-20231023-en
General
-
Target
b24a98347a21a57250674c5b4078d0d7f62cce43b7ccf105fd215b27dcef94b1
-
Size
656KB
-
MD5
ec4ce0596fb50e45de8a48dcabf62482
-
SHA1
319682ab4ff2d37d8b621454ac54801fc69608a3
-
SHA256
b24a98347a21a57250674c5b4078d0d7f62cce43b7ccf105fd215b27dcef94b1
-
SHA512
6d081ea83d765d274eba0ece0d5215e0aee9f710f820cc6459599ef8a90e2247578ef70fb25594594fa5ea71332840e25dd41fe506af6fdb38f17b982367d534
-
SSDEEP
12288:Wr+3JDD26DXrCmjhilnv9zosInwQE9LkUEfapBlGsxF2gaE4/mt:WrcJDxjrCmEnv9osKE+U6apHdo7Edt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b24a98347a21a57250674c5b4078d0d7f62cce43b7ccf105fd215b27dcef94b1
Files
-
b24a98347a21a57250674c5b4078d0d7f62cce43b7ccf105fd215b27dcef94b1.exe windows:5 windows x86
84f4271f240547a01c979e0d5b61318d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord518
kernel32
GetSystemDefaultLCID
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
wsprintfW
Exports
Exports
Sections
.text Size: - Virtual size: 275KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t345340 Size: - Virtual size: 545KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t345341 Size: 644KB - Virtual size: 642KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ