�=�~cf��֠D起��{6�%8n�`O���\:&��������xZ������栾�q�p��]�Ų=���t_�z�mgdJW b'5������#/�6M-�s�&Hּ�4��L�WV&�/�X��㕖�'G2G�����Y (�9߫�^Nt*�[��kV]�U��sCc����l*�Ye���y��)߂*_&r)͟��*�Ac���;�Q60�6�+�Aj6:����{�(zrl��R��K#죃��~ �Z��@�L���w��es!0���-��-�#6_�.)����P�y7e/F�ͨ}b��N��zБ����:�����SEr1lz�^������L�w�T�y{�#}�{��P���B?'��� |/:��z ;�e�I�&��D��@�0m!�0�4PeX*��~�8���L�L���B��y���v�d�IU�Ey�h�Y�80�q¬���7�d'Q���Su'Y�@�Z�䌳O�������'����U����GJ~C�U#��ng�*<���H�~� �Q�ea�w2�g��3�N4�#J�h�v�B4P��x��T.�Da��Iy�9�-��xht5ز��:�_��������|M�e��w�M���+�z����̔���������yU�--���3~̕H�מla�l*%,�X�Cc3�$���p%wi�/�i2����\��֒'_pS��cNr���yC����E�na��oB�Dd�H�����\��'33�P��&}��9�7�c���8;s��`�ߛ�X*��NB��J�wPa<��c��0�"�[�k�o<y��J$W2�v��Z�N��0�R&�� jb���rV�CO�/uTO��"z�N+��x/y���� �W(1Nf3 �b��:۸� ��Q��n�=���g����3R��0@>B��8-��@��/�X5fa��[:�7X�y��і��� ,�7S��>��^�d]�i}!6�D��ۑ8S9\��)wQ�3���湀$$;�.���Up���Z��3T?ф#A�b*�no6�@˾���(�"�Sr�&��x������ql�T¶3 �S��r��|�e ����P��[��EhM��*�����h�F֖% ���<f��,B���/y��l�W�H����Wo�4R8\ҵ;�J����?�"�7� "�f�H]���Yy�Yu"dOB������� N9PtH$"eTiPq�q܂��ԁM�zp_fr`��;MN&�����Q%ޖF������. M7e+U�$�nMڹ���9��$���\���F�d�W����m�>a�U<�{�'CЃ!�+��9C g�����x�����^T����] ���0WMɿ�2}��;�h?�u"�m������6/�{�Ⱥڎi�Nn�S4�a�u_"�e}s���GU��2O�9A ñ��,(�\�/�W���A���,W�y���mҹ#��t&���z2Ԏ�D��4W��tRhe/I4�'ZJwu��:����"�)��J�M�r�voOU"g;@�� 82�������#�y�1vQv���^*�RW�,��5t�\`o`�5�KxX.Cp��s�A�0������H�jt�����4��q��p���J�l˞���Gdz��v#��Ҕ��DR6�8}��ln���a����w��f�#+,iI�EDp�x�<=Y�!�N��`��1eqt�W��u���{R^�e�q�L�$��I/G\#ka}��G^�\� A&$xv��������^���W�ș���,�G�2 jy8{����V���#q}߀�J�fl2�`8D�w ��;ss�kH�$o���4u�j��-]h�u[_�O$E[�q"ݳ���˙��� w��ȃ^9�z.����t��B������8��w;4R<��^��*."�:�]�,:|�����{ J���a��5yW���Tv���g���+�|F�P�GL�dW%�gY��^S�X1*$*�k�=a���m%��P��� �\�ռ�a�.��r��7*�ļ���ςwQ�ş��>���i��M��o�d�ӞJ��S�D������D�j\�jV)Dž�U���|9��a;�����h�P:�c���T 5IR����c�,}���;��'�O�h �VĎ!T+�t��*�?Vt�8v�}�#@y:b��/�h�Ei����NQN�������@�o([�/���^����)�y�M�2>�м)��JԈ��q�g� @Ż���An���,���K&�C��P�<��_VAǩ��9H�\�4� Z����Ձ��Г�Q���"e�?��B�������9�Nd1Q��4���sL�r5��o��O,vk�csf��I�����aØ:�^�� �Ȝ��ҕ���k�r%��康��m6�4���ض�Y��4�����n����^60�:f�3�+2���S��ۚ�j�@Ӿ�5s�*j��y�冖����@�i��}��0F����'��[�F�G�7��\W��-�U^��t���mU��)��s4ՠ���5�C��Rb�.��["��)�[����<I�����Ɔ��$��߇�B����@ݮy��8gAr� �כ�zeC�g���(W �u�w1˯8`S��ٳ��,�l���E�#`�ˀJ��V�.9�J��v��Xs0n�ۨJSc\��_�7h�2�z����l��zSi���t�Q�3U t[�0huk��wB+t��(� j�ݜ4���0]��n�Kz[ ���x�xԄk����E���!W�f�-�'���C�!�W����m��U��M�9B,쎫n��B1 ��a0 ^zJ�W���52A�L�D4Ҙ�`�〲�l��s�2ո ��o>�ҟOM�(5\k�{����"!��+�¥+U�a1�2���V�F�3�T���`��r:�,]DS!���1V)E��h$}�a~6�j���~��b%�({c���{u��Us�H)�����Q����* ��7��{&kT��FR�'D�> �D���4ƕt� �i��%ڹ�E 7�2����*��t��)�kO*�����^ �'��u�ucȢD�P![��χ3D=�e�ɤ墔�B�c*7���n�-Z�����c�sK��&S�-s}O�-fn6�>:'�%��'�ta�R|�|�'"��O�Q=nۨ��n��n.��P��o��e��"���S0}�O �Y`�A�@af�b�58=��=S'�t��d��>+��|���ǒ#57S�,��̓x��֝h�8�9�f��r�e���A �猇��:>K.�8������͙E���g����>y͝��G��k�UŖ�����k�C{5Y"�=� &w�%��{Dl18؆���& r(��6�����0�`�#�
Static task
static1
Behavioral task
behavioral1
Sample
c0771afb6d2c438738d475a030345155.exe
Resource
win7-20231215-en
General
-
Target
c0771afb6d2c438738d475a030345155
-
Size
2.0MB
-
MD5
c0771afb6d2c438738d475a030345155
-
SHA1
532b817ea3d16a3acbced3e4d385fc485ec290f4
-
SHA256
f1278b48576982cafe7efbe9a529d710d90462ca3015f915890811c1a64ad503
-
SHA512
b4a8f99f8b1d0d7f101a12106675d7236104bfde083f057820687315cf4fcd485a27db051e477900da7348d83023cce2d006f3c7372dee5d716877a8293fdc05
-
SSDEEP
49152:qs82io1naWsNH2L7mVWjxYNqGJ3f97rX569FLJnbP9:qs8YdoNWL7w+GJP97rXaFH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0771afb6d2c438738d475a030345155
Files
-
c0771afb6d2c438738d475a030345155.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 46KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 7.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE