D"V��꺾��'�������h�����T2� �ϴ�q��_�ųI�5��/���.����j������h���W�b���Dyk���?9K��o�8��J��ʶ~�Q%�j���K��r�$u@&b(་���#Y��r_��qCW�X73����ýJ�L�u������*P�&ϳ�! ��w�S�����N:.��\�,����4���) ��`��[�)�t�W/��Z����w�8�D�����OM�]}Va �������Z]�&+��9������ԟ�d��[1�G��/���l)Y�K�(je���fdMU&�5ɩ��ٷ��QXnz QQxR�� =���jHL� �T��4����b3}䫣�z,u����6Z�)�&?P�Z��K!��[' �V\N"���4��̕�&cg�ʸeEr�}`��Cg��h�B&�#�祈e���X��@�F��#4-��k �M�D:�����Z]Mcu�Ub���-R1�,:5h�В&��iC��sO���-����Kt�����K���=c̺��%�To��cA�ccy�Q3겏�|�D�1H��������&h���Y��;I�${���e��b\ђ`K�E�S�P/�yS�A�m���K��b�§�TN�;�T�}i�e��o =�����u7F#J��>�Տ��w�.!�Gv�%�2� �����A�~��YZ:�}����J�����Q�:}��$�_��6�[6�Ë�I,��Y�FŒ�2�$����E�j&Ӳ~r��������������4�wo9��B{��>��$q�V��R�����_�+^��b%��b�����EݻG�� �b�7@��s�KV�Q2�5���*n0������k����mG�0} n��U#ˌ ���k�qN�����G�ѬylS�1�(k����.� �F�`�Iڀj"L�[[����U�ثD�|�[�GIV�����8��K�>খ�OkԒ�f�˛}�l�����Q~��DŽ _iah7�k�g���N.v=M����\Gm���c�^�i�Y�s�d�%��Yr���QiM_%�"�y+\�����ɮ,���߿Y�E �P�Xv�y,ዘ��� ���LDH����X-�O��_BE ���{�c&�6���1ۛbX8�2��6�yZկ+ɭ�T��\X��~�aێ@>�$fQ���U����RQH�S�$�䦪 ��M���n�P���L�o���=1������mv��~5J�⑄��b g<~��lN߽&F�T�?4��&�8�B��1=;�]'�<S���4=Q�~�����aW{�k�S�!�n{S�;�(#}��:��s��7���>0�#U����q��I1(��F&W�j�*�n�4����N ��2j�S��۞��Xl� І��CM���76����d�V!��H�|/��77g���疫 &� *��c��6���)���m-{cu��3���e(�p!H�&�V�"D�$2x�T�mg��P���o�^�cHZ����8Q�x��]G�y 픚p�������<�� Xg���{�SH<|I6zh`�R�s��w������I��z����Z%Ŝ~l'��(�`���W������t�F��B���^�X�Z�8�GA��Hg��� �zZC۸�o :�sR��0ţ��' ��o=&,jj������ >mҾ�]%8��*6�����ғՉGBC�=0�j�9�{tno�&��T��-͒HH��$zDp�{�Q��l���|�Z��eY������2 Q�/]e3ˆ<,�}Tx����$�� �V���1GC�ϓ����C�F�Z��W�M��ths��� ��K[/� ����`0��ۿܓm".� %�$t���?Z8���0��|�����"W���s�/��x�@�p����|y�Ж��b�9N����<��#C����)/�|�xV�j+Y[C�oCW�0��i�YɗR���D���f�r����_\�r��ꩍ6�� 6�.�=���Gy�� CЀ�� Z�P��c=��Xۨ7_s5�S!�驲���b�p�\odf�=�ZP9Ȇp$y%�WhH����>M�6%D��Ɗ&�kכ� ���w��p�V}�t�sWDlb�1��;.����W&�a���#��93?���fK���[n]F,VnYX� �o�x�sM��|K�=E�e���J�z. ΄R�%��i�����L��o��`�/>w��&3~k$4}���[�/�] �j(l�W+|�"�3>���Q�,}� �n�$� s!�)`�֗��=�*�7���TK�>!w�D0����^a���S�a��5.��E`UO�P������z3��[�惌%������ʜ$�<E8�����f������F 1P^ i��:ƾX�܇��{�Oo[@�s]h{cP���������Ck����/ ���2��a�%>����cǯ�Y�2GA��/��Kg'I�ʀ��� /��bȕ��6]�p��s!v8�D�F�R�[��N.`������<��R�����#$�����MQ��]G|��˅wQ;�X�kNͰ�~���"�)��y�ɟ���I&��������5���NR�U�<�wS8Ղ�xl} N�^�;~s��<�;F�ZI�v�uL�"��7�Q�ÒH�.��X)W��\���Xǩ�� ��ޔ�&��^�v5���yo��-oJ��<������ $��¡��=@��mٚ�����uY,N��BP��2��)%.�}݊"��oÌ���Sr�Bp/*�Mݖ[<��y�7����s(@Ł�Z[j�Ę�5�Ma�/y3ҪW\�i'�c��`O'�;�X����W��w�gr4Z�@�Ip���[5թ�x�I��;:����;��e'�j��! �WY˪%|_qi��C�`��G��d��+��_�,���T�����\S"�⥆�E�8����jq���]q!ߟS*��j���C���X�3�����?lN>�RtW@&nr��c�a�3�� �"}6�ဵ��1Q���߂*,���t�� ����#t���8<3�ƫg�<�I?.%��G�+��j��A�O�@/�����;J�Y�Y�~��>A H��6S-��+'i�=zB뷑����U/�o��1�t�dD^� ��
Static task
static1
Behavioral task
behavioral1
Sample
ec945f2d6b7a41cd6f9ed4b370f8a0bc595db3cfd8abfeb9edc06aa88b67729a.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
ec945f2d6b7a41cd6f9ed4b370f8a0bc595db3cfd8abfeb9edc06aa88b67729a.exe
Resource
win10v2004-20231127-en
General
-
Target
ec945f2d6b7a41cd6f9ed4b370f8a0bc595db3cfd8abfeb9edc06aa88b67729a
-
Size
5.5MB
-
MD5
d414027b4174b50f1b66b4591414673e
-
SHA1
633efc9e4ee12c0eae5431b434adcf410731950b
-
SHA256
ec945f2d6b7a41cd6f9ed4b370f8a0bc595db3cfd8abfeb9edc06aa88b67729a
-
SHA512
581333ed6ca5e13c7e21ffc51422fdf5cd34592c9c3d91ef5241cdd1ccdd1cf8ca455762f3688d4faa4adff246b219ae1cc24f1098909b78f59fd7c72be42218
-
SSDEEP
98304:YclLQZyVp1vSIpvrU38WSJWN5orrj6/GGQGSZ2P4SNuF2Fo0i+M7xdI:V1BnU38WNibGSYP4w0RxX7xdI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec945f2d6b7a41cd6f9ed4b370f8a0bc595db3cfd8abfeb9edc06aa88b67729a
Files
-
ec945f2d6b7a41cd6f9ed4b370f8a0bc595db3cfd8abfeb9edc06aa88b67729a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 582KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 61KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.4MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE