�Ȏ�+�a�ңE�臉�(z���ӎU���p)�Y������u����>Y:]���[&k͚�g�v��a�����OBm;�"A��N����S�1���V�x���<�+�2��`�x�`ǦH��9�U}fc5:�G�����2p�[f)�=��K }E'�o���祚��%�e�*���b�|d�X�bd���`�=�k�!���rPO�Q��`��J�4���3��G{+8:�IU��&��q���@M��'��7���_�JDԖ0�p��mm�o�O_I"����Tn��M���T+Z��8�x�P�M��Ԧ����j�b>! ���]�P�� ��`�1��J'T�g�fu?��0�ˈ�ໂ�����������vp��:6��Y�����k@�H'"�����<p��T�%�t��X��ʻՊ�gS��h}���-����}s��+L��fx���Ah-+M� � S�B[�Y4��J�<��Œ,5CU�K-�5��(N��_����M��b�ltH���kF^�g�1&k�;E? ��rs�͞@Vn���̰���7��9t��\¯unα�����(cO8m�F�o���O�?:πz���a�\a�s����tg�: z�`�%;�k���2(�#hŘԟ��b�"�yv�օ�[��n/H���P?VǸ}�\]���Č�WP1�ӨÛ����xC�o�G����:����űJ�t�N�/c� &@��?,�!;�!W��ʿ���Y����[��x"�M M(���T�x�N����&z��bv ��[��~A�/>���<���I�vܽ��CJNGh�����18��**�ľ�\L�ߏR��������ɉ��~}���'��6ir����?�k���g��f�W�1���t9���|ѯ! ���Fx�&��˫W�:W� ��j��֒���u���������7�5U<�ܜH�PW��ҩ���'��k�ae��'�k9��m�wLFf'F� 铐�--,I�[;K�%�|����~��m�11P{�,���nN���=ݿ�\Gl��2A��\�����Q��Ɛ#�C:L���\�zk9���%TI�����*I��!�q?�U��c�0$D[Ahi���]���M���~{'5T���m�m��ֳ�����B���˧G S���%�E��:�P%��]��̞�ӢRi\.i���Ɍ<.�����̗��;�At��ó�*���� �����^%��8�ȳI�P����>Z�M��x�l_�o�"��2�f-�S߽/d�� �2R��e�\�Pf�c�Epw)$��|��i�,��q�c����>1��ݍ�fb`�y��Аp������hlc@��H�ϡ���ˑ�Uwf�����c��"z����$rt���1fR�b0sq��1�yt�,*�����&ե�>(7��R�&�Ftm��P�5K��A`���S�m�����[Y̟�?�K����|���e;q���6�&2q�Q HsN߇1��:�W��BG<S��1�a� :a v���x�'�hÈx�.Y{�h��fc�E�����b]w��.2b��A�6v20@ T�x�t���?cqi0m�xW��)� c�QW�E�oZ0oSр ��(�-��32DH��}�8!}z��UO^���9\�qȈ��ckkA�*��\e�yŤU���!U1�v��� $t=���j��>�|�R��W\��(PV�O���o��~/iu�d&&���$���IJ/�#�!P鲀e)k7������\�Vv��`�R���I����RwP�!���0���>83�"=�ш�UM;��#�l<qF�II�C _I6���6�h�K�d���Zl�rۚV�e��ϝ��\�N��d�<%�'�I��k*�,�|y��r��J�C��7�:l�-��]v��JVbd�<�E�yO��1(�$KO�퇍���D>���3h�Ac_}�(��cK�By�GZa�@f.�1���n�A��*�R�+#�݆ �姂�%"��աIt�W�N�Z�2�H�'x��Y�}J��&����@��q�cdO�ų�z�s���CNF�f5�M;A4��ݛ��L{ �ݲ*�6@����$A�2�d�����d����F��qORJ@\�����r� ��_��� |52��A9C zT`2C���::��!�癱p���к��V��SI��FТd\�8���6}tJ���c���j�]����-��O<��㚝|�~4�9�gBr�.�땐j�p� (G�1��6��Q�B 9�i2����&�&��S28��w�s�Tdp�h��H�����"�?���iЃ��9��"OR���2��<��[���.���ڲv7z�2c��ԥ���|���=y��G��6nH�g�ku#<���Hz�����X�+ �k�J%(G=s��+�RY�bB0M,���Q�!�~���fO'�C{X1�� u�lA0t�0��6�Z�_�<���� 9�aR(/9����!D �-ŝ)%��nZE%NC.�JL�����gl\P��9�zS���Ƥ�k��A�X�SW\���tG��9�k�,Kk�TEjP>b1��`�F���� `:%?�g��̅H5|�������]t��P��i ��dX)?�.<#WR�%V��e�h�T�p��6�/0 ���G�B��^�Kc9���(��Ю�)wX��Ȣ��4ѩ*��J����qGȠ"�P?t*$4�l8v�(�c�`����} m��zj�|�3]�}m��_�T*@b�3�HP����x8X�H�-�gxt\�����nU���.ֱ ��%^��O:ˉfMR���־�{�z�K����Ŀ��������<���z�x%8ߧܛD���ie%�j�����m��q��΄%���FZ��ٹ���Ϝ��U���ml �9�b�.��9E��6��_�.�w55�n~[����!�d�hI����ALS*�N�>����� �7PW���Ikŗxv�s�^y��E׆�s-��H-.��dF�qv�c$��?�' �#ipEe�v�8Z���t���#V�Γ��7=�}�<@��θ�-#�/h�2��{�`���yF�0�N8NF���s�:��>���6!���4=,I�GhvHⓇ6Y�t�]�}{����g����U^�D} �����j���`3ȋ}�V�ˋ��_�P�J(�n(Ë��nG�'|2��F��J?[�j�/Q"v�S-ʝm'��.{q�>;Q1ç�*�����|gdW���ڣ�en4�I'�:t5M��b.ql]��7�E������p�ϸ�.�7W"��I��O3�<�L���C���@�h�%a`��ҪH��G���0}�YN|;kp����4XE�#�_�1�ś��ro�uǬa���G��Z|Z?_��WT�0mQQD %c�Ǜ��X�⣛m��X3=|�����-}�Jj �"��m+և�0�Ԩ�� �����h&��|��̂�`�e��[0�(��w�_�� �B��HaT�0����Be.i/5�r�
Static task
static1
Behavioral task
behavioral1
Sample
30dc5dc2f8ee89b8a7b764b09c163929f8710d6d49d38c8021eccf029a066961.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
30dc5dc2f8ee89b8a7b764b09c163929f8710d6d49d38c8021eccf029a066961.exe
Resource
win10v2004-20231127-en
General
-
Target
30dc5dc2f8ee89b8a7b764b09c163929f8710d6d49d38c8021eccf029a066961
-
Size
3.9MB
-
MD5
ce29721e3d1b71c975df9acc77ab23ca
-
SHA1
48d53c0e1da944a20c6b681a0270e00dff2e35c8
-
SHA256
30dc5dc2f8ee89b8a7b764b09c163929f8710d6d49d38c8021eccf029a066961
-
SHA512
103edf608282cdc650d369c3bc020766ca8982096adca8d84737f36f9815b25fe30ccb3d7565650142210663a6321d86568c47792085e450ae2596f4695b0373
-
SSDEEP
98304:+18SHoZeL0ZK3XOloYZ5XR1b8CbQDlogUeFeiCRoRIzDE3R/YrvPcX/:+188oZeLs267b8uCeeAiCR0gDuSvPcX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30dc5dc2f8ee89b8a7b764b09c163929f8710d6d49d38c8021eccf029a066961
Files
-
30dc5dc2f8ee89b8a7b764b09c163929f8710d6d49d38c8021eccf029a066961.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 842KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 92KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 399KB - Virtual size: 796KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 68KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 287KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE