�gD��H������!4�r����e�V������Ot�9�4?wJ�?�{�.;�ϗj�m��F#���{��0^��H�j���+H��=��~��|5�8[q�W�����N�$��r�;�{�:څ���)~#e%�z�CxQviu�(a�� ����&�鳅; �%4�py.0��n�0�8���P�������<���,���C���(uX~7U��PP��S�}�;Q1_�����dӬIR(��#���o^��~����<�y��M.ŖK4�Ϟ ��w��ݾt������z�k>�d_ӄ�\e�FU���� ,�տ?{әd���xcNI[��a%:�]�(k��j�zB(VhȻ8!��X�,����'���o���>��M��Y�|�AV�O�P��(�T�Rf�E�N�f�MDE�{3�C��M�=%Z�������PD"n�"��1�bT�!��o�a��R ����U�rC�(=�]n��3GQ�i�����#�o\މ[�b����8��߯�w�T!���L�;O�u*����ꀯ�Wk��m4��W��c<*���q|2t���o/;�p5��i�RE���9 *-1k6RO��,?�ܝ9U�^�����&��)q���LzX����pı,ը/�洦�nfA��Y����iW�S�<M��D��&j�m����R\:�$�\F����gd�����S�"�������Q�CL`$��ٛ��-�����7����������n��p��Fi��\(�)ޟ���ցFg�'���{�j0��2�@B������g���w@;}*vRXj�RDžrd�$�*��#�<�0>�U[e�ysQ�j�;������0,C�<!R ����|i�T� ���2>� ���ߣ�= o��kKb��Of�I)EGk���2{�����h!�1`�\��r?i�W�� ��t�湡���A�ō�� 0#��/?qa�/��\Vx���fզ��p���d�ԍfn2��� �*)�w%�S>@��$zzy�hO����å~�|"GH�O��{u������!�$�Y����҃��\��� �X�$?�*},}j�S�a;��s���h.|$�� $O����Ɓd��[��������m�������O&�A�Rxۆ�c)�Hva�Ti����3�ŎW+��Lƈj|��J�I���I8 ��;!�5 �,���FX����n�oan1���YBU�U{�p1(�E��o� 8(��b�e���J=,���2�tʘ�=) �\�l�=�E��騱yXn�8���]���u�up ᩹Q1IM�rÊ���ebU?u[�j`��w��W��!�>�1��/H��}�Z��>?���qC1����.�ŋ�(`���'i�yv�zu���4P�<I��grECde�ǁi2��S�5���T�Ը�b�|�P���n�xoc���A#�����g�����c�#>�L�p�ڇ����o��`���\������%��β�i��7�{v��;��p.�r��� �c� ��꜀�ϒ%s:q�c�Y��Ga۞B'<Ju��Y��d?u�ޜ���]|���h�A��Z�F���<9�����^�guZ�A�����F7�.�3K�=��,�TsZW3���'��f�4# �5go���9f�b�മ�x�D !�[� ��p͞��������{V!l�ҁ��Cb!#�G6�p���/�!�M4��K�8R�W�� ,����?�)�� �Ur�W�N���2�B�c�#s♂�|q��.n�@�6�4�;Ϸ��Й������ ^P�� E�%e�q0��d�:�aYj��,89}�<Ǿ�U�A���U���fo&�f��-��M��`��u�5�y�* ��=F )m0w����$/8�:��˚��/��.B������������G^ӈͺ�ZY�9���'��Q�ֶ���qg�|�Wf�\����eJ�����m�����^%��xHz����� �lsd�Ƥ+�S-zAL tG�H�}~�M�?�f�d��fs���Ⱦ^;�Nܠ��<?_�Ezs�y��B��a#�r�b=�� � O�q{��OۡΧ�b*E r�}鋃S��2�4�����V�5ߤW����Z�g'�/�?��;���� �6�<��Ď�8 `[�(U���EIT���<=%�'>�R�O�^��.,ǚ@��?�_i"ސ���T@x�-Q�O��'H:[2�qqۂy �Lx�~0G�����?*��I��$=1��}|�$C>?���Y*���%p��MH���_ce40ċ4���:����d��Z��+��B�:��%p����Q��}Ν3n!�B��G��8�~s=a�y�K��C=���#A��Ǹ�G;���ʹ�KNt%����q���?����-���]r��%�Hs"N*USU۾��慡(ű9����j��zt ���[ȈV��K��9k�}`6������|tAEJs����H5jE���ݒɦ�}��l$�;i3eAL?!Y��~���J��.����(���ۧ����N8uq���+#�!$"Ż�{�+��:-��L1��Š��g�*�SaK�0m\F�Fyճ(8f�n}��-���}������FKE�4�M�ӏ��\�����>f���M�k6�Y�I��6��ns:� )���ײ�-�۳��xO�I�|6���βZ�"G ����6#�5F���xċ�C�Pk#��'�Z�x����-�����!}nl����_cЍ�z�i�|vRϔ �h��`���`%�����a���gEGe^&���q�[`+g�M�C �'8M��}�~b�� 5H36�:��L�v�%�{f�|7� �q��6(�&��,��|��^'�>#�)M������*�+iO�#�[�ןG� �힚_�]�{]"�j�p�oL����_d�]U��D8V,b��i��HF���6M?��[DL�F���p{��%���8���0Rm��= �'���8=���\{�cmݽ��v�uM4��u�V2��F��3��L#e��|ٙ��R'y��BQ"�cG��I�"H�[��ĥ ��L��D�.���W\]�k8���gYZJ�����n�O�1����� JAmW�������G���$�|̑p�������m!�x��m o�i��S.
Static task
static1
Behavioral task
behavioral1
Sample
4904a716d64b1fbcb594794883e496ba.exe
Resource
win7-20231215-en
General
-
Target
4904a716d64b1fbcb594794883e496ba
-
Size
2.0MB
-
MD5
4904a716d64b1fbcb594794883e496ba
-
SHA1
cf8cd63cb4d7b03671f871e0ab4bfc85a5132dcf
-
SHA256
0457f119d3d5dcb88bd5b27a4893208d8331132bbaeff3d4829aef7c590e8733
-
SHA512
9a7cbcfa0105cb533e7325901bef26cf2e6798615b986b47170f5def35e8fd1ed126558335b309630e3ac58ed3c45ee70a2504bb30104facc148f7ec1ed6d49a
-
SSDEEP
49152:L+26YxAfubBrDoCVYDbWvygK2pr4+XV9Fyh8VGNSAbhh7R:L+EWubBroRT6rthtGEUfR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4904a716d64b1fbcb594794883e496ba
Files
-
4904a716d64b1fbcb594794883e496ba.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 42KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 7.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.9MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE