�V��s��U S�J.��sO�Q����̒i&��:H�<�Q�7l�~!b�t��` ���w%�����ִ2ͬ�Ԫ��&�0Z'>�K������x7s��î�-*!O�1�0�v&&���+ C#3"�rI��R{�0���<�X�8�����Z���1w�����8��i���R�*?�֜VXo�qC�F_,���l���zV.����K�$�tCb]�9BiV�_��>X�t,锣���$�n�� � ��]��%���ֵ�O?Q�����&��#|&gx�ğ�~�˂{)��DC�{��]M��UX�6Pjk����Q�uF���q6�o����n'N%��wL�P%6�T��F�k��>U��(��x}������5x6�pw�)�����+��?�z��".WM4���r��9|\F3N�=���6�>C^�Iq�_��� g�Z�FJ�>���@�u�nn<���J��o���$!��T5 ��m��]�[����Rx��1�eA��cBxA�yE�Բs��_r$ IQ��8��=��e�F���J�ٍ���!(���S� ���eeo��������t}�gr��������Y�19-����Α3V����� �m� L�F!�`�/�8&H�RJ�{A^�M ͎�k�[T��μ������Sj����R� g�F����{��F���j�M����n��v��N��3D�U\y����b$�;L�^6�ڳ�\��(>���q�d�.:�iW.��e�p��ħv)�G^Z��'�#�m�w��}���D��dZ��z�eJ]�һ�>���/�t�V1ێ�W ��'p����ˡ#����\��^-�A���."�K���� J�E�?��O(��g\�D��ˮ(`���џ���' W����I������t��S������$�����Ij0�z�^�?�����^�̡W�G�+1� T��b��p�Tq��V8���&[��ǠGc�P����iQZ7���[���dx~�aY,ZZ���������������C�d.�s��u�qq�C�c��2��}&>N��<��X�a�ߌ9��y/l�`�Y�[t_�18�ȅ�L \�k+g�a3����<c�L;���Unm;��~ۯ��������%X3�0�0>��]����"���l����Oǒ��} �V�j��k����H�.�9�dwm*O��x�a����u&�泊@�vd��q��������U;n�r�,��@��2��z��`;(�s-����D�ʔ����l��O�cN 0�yK�������D�#�%S���Fm;W-�"�0����CE/GL=՚��/�r�O�$څ��������p���6v?)�@��D���!�}�W�<�Qd���+�Ϭ�e���ol�4Vr.y�U�WvX�l�M2��O��Mu1����ZK9�_��0�]Eˡ}�"j��_p~��3R��kk������ \Qe���b2�S���<����dջ��xDp�+�\ƔP)�J�f:A<oؽ�& �>e\t��['��-g�%U2Ͳ�x����bIHD�t�K'�}��zA��SN��� j����=w����=єe��{�ߒN�#�����]�[!�lj�����nb����K@�e�$����ˇ,f���)�7*��;���J�<�c�!�O��T�s���:B��0<ŎLߥS]�Y��_�xC�s<��/�vI|"ߣhI�n�xw>!7]v���q.���N~<o��a �s(r�V��@c*>o�Dk�[ƲJ"f�< ���#�p.�˞��9�����F^�P4��U�'��P*�Lz���Y\!�f��� ���#�_� ��?*1o36�ɹ�O5Λ�Y-��w��>l��,�o pZ�:M ��Q�'f�=E�/�lnv�qS;AhǠ�Xt[*�Zb�I��A�G�؇�۸<tNF/����w�b��q��+4��R��ᑹU�^�R~���*'�R��]*�G��t�aw�˚��BQHJ�����c���n?f��S��;F��7�W�����``2�H��II�5����w�I�|$U��c��BzA�.�n�[#�����P<��� ����:M��d�.�h��0�Tɔ���W(�,���֙�� j���!j��������x;���E��vq�35Fh����03`&�F�`ثU�W�6gA�o��` �\�5�vE��h�7itw96 ���F#�kd�%ק_���E����b8���-P-2���'C)�J��z�SbJ�!�(o�o�p0�M\�j��~ay���}�����b*�����x��,Ҵ�����-��"Y��E_��(�pc*)aF�c�MNO�G��ͪr�[�FF�x�8������)�����E��4�j�a�_;p�Z��7>� �4�'{��a��-������Еڪ��^�\tþ����Lh^�OEC9�S��&�s�P�-���!L �&`���YFq�A�x�9&G��c�����@4��JO`\Ŗ�dғ�f$�3Z"#�̋H��%�a���6��J���������.sı�PkMa���V�V!��)c��C[Ǹ�� �5���W��W�.�-Ү�fvX�3U4�J���Q��>�5�ׁ���j�>T�E=3D��$�K��C+^�`-�\�#�gޫ<U�T<�U倄x ��(C� e��d�~����oA�`���l2zߛ�����Ka@*{���3��62Lڧ:��<��������Lz��q���������s��M��r�LwR�m�����\��L���2S�g�֣�;�%aH� &�L;�p8�V�.�����bg���k6'iD�\O��x��:I�X��m�� � ����a���*��R���9�B�x�\?8���A7�"�*����4�v" !Ѓl���� }���8��Xn��Z@)E}����桴�ta��� ��Ԡ�F�R��^� !���Ձ������Tܲ����u�����}��# )����3����}�����* L;��1$μ�v�71�Sc��"��{����vNٮ.���J���h ܅7o�AҎ�|U��6m��H�^������]���eW:���l ��(M?-J���c��e�w�5J�Ϛ��Z�Y!��;��_�@���P{.�k��G۴n�U��mC����aת0;���7Pė�{��Ʀڶ hJ �#�8����������}?��u}�0�y��ȍ.eP��Q�X���%��H��S$���"���6��ը����䓷�0U?��4���Y�7E@��vÛ��&��)7�XuG��� ����`m]�_����Mʘ�����LT+��QK�P���&�Þ�w�b�?����&<�4Z�$����ϱ����.�{e�SIf�p�~Y��}���� �cp���0��J<��I�ިUun3�iw\�����}�/1�&6� >V������t���1K��Ae�gb�қx8'\��g;g�geO�b��[0�g���2���s�07�^}�Ēw� ��)�
Static task
static1
Behavioral task
behavioral1
Sample
592284e44a4618fad4adb1e2527b5382c753277b814e61882de649a8232ce958.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
592284e44a4618fad4adb1e2527b5382c753277b814e61882de649a8232ce958.exe
Resource
win10v2004-20231023-en
General
-
Target
592284e44a4618fad4adb1e2527b5382c753277b814e61882de649a8232ce958
-
Size
4.4MB
-
MD5
45e75952c8fbd73fb34140d96b21a49c
-
SHA1
d2e6f0ff77b2797f10f7ce55dc88c0f2e8cc00a0
-
SHA256
592284e44a4618fad4adb1e2527b5382c753277b814e61882de649a8232ce958
-
SHA512
c8deaff766637f2cc6b701f5c0b6d9da875233b3e795dce988cc5d2492aecfb53acabbf29eaab58686f1ede20c30317fde778019a71f87001a0f0ab4757270d5
-
SSDEEP
98304:brx84p7XDvPh228TzLRsQykVVoXXf372/j3pw6UsR5Ail/:brxBpPh27sfkVVoHf3Ci6TnAil/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 592284e44a4618fad4adb1e2527b5382c753277b814e61882de649a8232ce958
Files
-
592284e44a4618fad4adb1e2527b5382c753277b814e61882de649a8232ce958.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 544KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.5MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 32KB - Virtual size: 544KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 192KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE