Is�v^11��E�Z�0� #-���b�q�D��3l�����ב�(.�����W,�i��Ę)w�z\ɖ)F9�e�����)��l���WY/E���C�&��빝���e��sx7o?�e��3�z�3"��A�ah�c�2n���bs��;訤���cl=Y�CL�(D�:?�E���G�� ��0�R�V���Ug������Yv����j�%2T����5���W��J~�~��S�-� "j�Y�N�����qlT^���e� 14q,qCP�eH��� ��ʞ]}$�pJ��ߌ�\)���]#:*FT���N;�G�ț���=���'��$;^Xب���E�&��Q>0������ȹ�&l@�QfE��+�9 ���e��jT���n�&�/�t+Xy�����J(���=N���8�?[iX^q�)X ��jfbfH���r���� w.�����v�$�߽Ɵ�n�E�� �nOo)����^4��e�d��"/�۫R2 ��Ӟ%�δ+$_��l�ʹ��Ҋ��"��8I�B��H��ۈI�xr��� R��Ygh��')l�w���RdB��^|V��S2a���5�M���q�U�`tu��A���I3��<|���X<�P���n.ޥ�o"�{�h��sDF0�QXt��r��SWPa�ޫ�,=*�X0� pŐ�9_ �P������=L��DŽy�}S�pۄ��jf���=\tl��DQ�y�k�@J�����Z�u���R��U(��!�;�������oƓ����gC�w�d{�|�]�?(�i��Ņ'F�/�ԅeA�ظ⪈����U)_N8=-����}���P���H �M>ٲ��ԐAbu��;�g�`�� W=��`��UCLAu�O:���#����x��ђ�ɯ� �f0�É_mz�W���{�l�;Zy{��k��{N�kQ`�>h�E�)����{"ie�� ���_x���d��!��J�&'�]?�����7�O煅H�O��������J�a�i��v��bN�,}��RѶ 嗉��S�*�/�Z������ u��(H��N?\��^�c���"�hHР��r���gH��tN���W�Nv*��_�4�?'(��$1�q�&doZ�8&������֙�����Z�+�$Σ��^�R�����q=�-��E���gJv7�.��������8\$7܈�T_$#������L���Vg=� D?��TOL�l �$��H�1�N�1�J;�'�-�Zr�$���U�&�&$��&NU����(.希Il]hT�s�[(=����W�m��*����C�;!�ˡ�t-Y �,t����UI֣`�bʜ��}��S��@��;��jֻ��a�k^���9t�^*!I6l�7�f��LqU���6 @:`JO��[E�b ��ݶu�X��e�h����~v5ro|�4�1@�.v�d<#����Щ���e 8`�H��vt��rM7��+�~Q n��Y+4>��_S#Zj��키8�F���cl#�tm����M�:V������K��9W[W��q֭WÌ����r-y��*>����n�#5΅ ���iDh���d��$^^ɍk��5�Z� Ak�#���ٔ2�U9E�BuG`�BZ%��z��<ǘ�)�~D@���ò!̷<�/���C�_��F5n �q5�cVK�;�ڍ:~�����j��PN��M2i,���NuH�G�@�q괄�wb�HC����l�+�F/ ��ds�!�E����&:ϻ��]e"|�f��� ��&sցa�����|u��j��CJ�B�3��� �#���<�͞a���S�HhcU�\�mf�i�����G5�~�>k˅9������)� | ٝL���&�"U��!o�q{Щ&����֛��!@��c�v��$�|�;n��-}��]o����O�*1��S�T�B<��Rʔ�7'4�*jMhը�?�:e�Gk��:^(�iJ�6�@أ^�6�#m�]a��6O�|n!/�'�B�n��{ų)��ֹ� -��iA�ňߒ7䡙h�=;�6c�T�l���-SxEH���KD"G"}���kk�R��.�O�~E��A�c(5JR�^u��0�D�SSx-x ���Z�6�r-��qȪ�46���t'���6$�i�<2�E�]O>��y�1��ʉ��k�#��ם��ߗGW&O�P�ʿ-�P� ڹ5�,���U���=��9?��%���#�_0�e�⽃�1����|�u��MQg��X:���(���A[^��ĕ�2���1̪R�T�C����D|v?#P: ?5���� *�L��,��~^~~����S�8�l�Ф�͓��$�a$�JiUf����\I�SQ@i�e����߉~���O=�D�� �9��Ȝ��!B��T۫�9�Z0sS�q^��?��Wn����� �q՟^[�`w�I���7[�(K��<o"BS�仟3nF�Q�W!|���zu�t��<���`k��M�7f;k�PPžT�U�K8����8R���ᥤۃ����Ic���y�͵!�;K ɪ!��M1^\��0���H{bQ1%�j��&�z�͖ Ŋ��~\{�����+�I�s�Z���a�O�Z.��»�-b*�]_����"����(8�i���LF`8�T�S{05��S�����Gì_���Y�Dw���7y9�.�Mθ0�z-����]*�~*D�od*�o�i��w�U���y�5(&��:�̓l��b X�E\�!��ң�˼�b&�/�٤k�'�?&O���c�Oi4E�َ�G�I�?��d��4r�-�VJ�ti�����1W�d��p���0݁?�83������j'[�HQR&�,;��6~����2�2e��W�Q���L"'I�'2x�8��o`�X\L���m�*��B|#����2 K�M�N�����p��� ���B��'��^�Q�m��Lr�s�����.���X�Ƽ�FS���%����4����U�Ӂt�Ѧ#T���n���!4�E�~UA#�^Q�/pd�a��E�!��kF<���U}S4R#jh�E&�����x�U�d��q]�2���� �q!�~�}�!y�@Re\:j�|=��7�&N'����
Static task
static1
Behavioral task
behavioral1
Sample
833f76a702858c1a0fc0a48db673e2ae79885e5697caaf6acabc4b7ed63392e5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
833f76a702858c1a0fc0a48db673e2ae79885e5697caaf6acabc4b7ed63392e5.exe
Resource
win10v2004-20231222-en
General
-
Target
833f76a702858c1a0fc0a48db673e2ae79885e5697caaf6acabc4b7ed63392e5
-
Size
4.0MB
-
MD5
32dc4e4082d0f27daa04a935ebea397f
-
SHA1
a72250ac40ebfbbc61db7416261339a783fb42a3
-
SHA256
833f76a702858c1a0fc0a48db673e2ae79885e5697caaf6acabc4b7ed63392e5
-
SHA512
cd3cbecb13cdfaa545c74937c2944501a631d4ded1761ff433629ab162a3fbaae3de951fcb4b0f59800fec1157ae22151d49641388c61d380323598f4c6522d4
-
SSDEEP
98304:U9g9JvTiyXSFT/QpNH2FnLM4bDAwTO8NkoOXxLpfVEXHwkQY:U9KbiyX+T/QpNWFnN3ydxLpuD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 833f76a702858c1a0fc0a48db673e2ae79885e5697caaf6acabc4b7ed63392e5
Files
-
833f76a702858c1a0fc0a48db673e2ae79885e5697caaf6acabc4b7ed63392e5.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 665KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 89KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1.4MB - Virtual size: 6.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE