1�b����Ǫ2t ��1�����O�p�We U�R_���ֆbZ�jG a_��Y�����Ha8���䲙�;�_X80ٹ����.[3��:�9��q�1D�Ȕ(�z���/�d!7�9&?P�w����Uy�6�,�F]�%^��Gq�%���1[���3�?\ט��/�Xܤ���x����L�5�S�~aΓ-춤4�R�MG�g�+����3K�E��=��ō4�#�2�D!p�~1 }��+�5r�ba�o[i�l�פU�@��t�,ν#ųc�}ض��0qF����:�����Lpt���0� �S_�|d�s��*�HV/Y����c7�v_�� M�r�pG ���MOA�+���;�d��D6���$v�%l�B5_��/%}~��g��c� �<N�.�F@�rv�}�� u��\v��&���� �~:"^Q�ac^��H��;V�x��,����ϴ�M!�G_�!�^°9 p�B[DM�aI*��t}�ESv��rϒ��Z��L�h�4���M�^@���>���0�K�������]~5lD���n4�^�)������j����唬�k��f(j,ȡ�e�Lb}�⧕��O����@Q2����@!���F�A%;����z@�O{� �_@S**�W��x������ny��Y��N��QB�2ii �a�y�0�c�M��S�5��7���W�U�Z���ߋC���� ��� ���۵��_N�\N��������{P��(�����5�t�Ο�u�r��������;��h�sVH���Lq�;�ysb��ҁ�S������+6�Fֻ�)�X��w��wom�E�6~(�5Y�9}�CP�z�yboF'�+����3����v�W�f4�&<����p�nԌ�� �j�[;�L������n��տ�ns����Dڌ]S�_<L�lQɎN �fK��"��}"��9J����k=L�p�%h.&���� �N��h���d�a�#'����8$��'���"yh"-)�R�C�M; X-���f��#�/��(#O��Z�F���vS�4H�ƭ���=g�<�/�>�X�Bõ����e�5�9X>�D��Y"��~d� �u�~Pޤ_*-�HN(9�?9����uX@Se��)��+ԇ��C!�42�l�[i�-d�K[��༐Zr|� �����gvw��ǧ�ba��9Ɍ������v��렟_hpt���óm.{:lC�����������5��+[��L�[���������k���Oh,㸲&��?���2E�M�o�%{v�'/� zS`P��䔇?�(BT@���a&�1��l|�h�q_��Z#VUmiۻu=����ٗ���N/;��e_���!��Յ��R���{�)W�c��a�9Ӄ�E|� �^�r9R�������b���!�(�J�=Ȼ ��U�=��o��͉��ܯ^����$�?s��P n9Ċ5��.�dk~3ؙ2:5pj�]��^��=�uz��U���A���?H�h|�Z�Dޤ8������A�B�����1���J �<�QG��)�0��m�#��NX!��a�� ')l���H�Wi����@�=�| 7jr��1ӻ"Ϳ��L�̍�+́�{�̓� (g�r����~�2s�/8�l�@�q{�L%�����Q�؆fܴ�1�����CD�L� J(B*d�G S���U��1�d����mMa�!7J|�.�4�Q��lK��4$�5��H����M�����wǺ����`��y��2�^!j�9�YEh���r_C+(8OC�V��;���ݿ���ϕ�r��d�|�"7�Q%�4魤{y��ԃԒw���L��J`�.U�w��t�w��IE՞0��M�J��_���J����zC�*�>�,�1��w�@���������O�1c�}\�8!�����m{����&T����7���f>����H�{�.�3F8���G�ˎ}$M��0O`3��G*��^�v�C�R����F2{G�md<p*���mcU�Q��ߛ�F?u�V��nH|�4����h�>��ø��:h}�D�:�D�j!���dw� �:������7��?��ӆ���@n��i+��˹����3��0��ܳ����� �<-�~�UZ�����M��z����C �A������L��ĶPd�Xr6���UV��Ɋ�庳u�C���n �h�6�CW��t�8L��qmCS^����O�]c���"�'A͖zH�L�`�z�]���}����Q�ˆ�9w2���f���.�;3gO�]^%����z�g��ߊ.�B�d�$�N5����U�sLn�����Er�����J��\���A]�S٤[��\xu.�<E�Y�ęH�Aƌ�Z�=7lJObxP���0/�������ٍ�p��y�q*C�4cL�fz�`�w[\Q2m*��������\%偯�5�R������|��Zu���J�a�f����$�$P�^��a�;L;���)dIZM���Y*�����UsH/�� c+V�};� ��ߗ���n�x��2�@�]���V�֜)�%�x�6ԏ����4�h`���]��U��~�Q�lN�X?l=��|�|P��@���_4O�*�c#D:)����e��-�b�f��<Z��_��(G_�^��K�.�q��j���Wf����� �E�����<����$�6α���F=�%<�SGn����n�-��Q�tVF�Χ0�Fp�嵞b��vq� ����-�Y�-n�Gq�m�K ���ʌ����;m�o��I>U5�����x^��n��k���8�r��<ゴ�oXukV����3�g����T9����/��F���-f��Rq�(v@=&�@�&횶������G�>H���DsqX0 ���p���D��*�;�|���d'_��}b� t[���0j�k5���D�,�qhsB�ƚ�/�F,D��9���O��2�@`ѯ뷸�aR&c�A�^H ���T^�^+���͔�ݞ'�#�!���#u��.�WW��3�c��;���?�I�tM@y����֧�[Q��R�$,D@u44ق_ֺf(��(N�=�ٴ� �^y;]�E>$�H]0�EwF$7�q����a>�i�n����I���BPh8�9�#�Z�-mH��WM��5+{�.lI���m�2�F_U���,
Static task
static1
Behavioral task
behavioral1
Sample
4dc1b4330497891bff0e4e891a5b5b27.exe
Resource
win7-20231129-en
General
-
Target
4dc1b4330497891bff0e4e891a5b5b27
-
Size
2.1MB
-
MD5
4dc1b4330497891bff0e4e891a5b5b27
-
SHA1
185fd98f7d1e8ed2c67a40f1de4ab68af80fae99
-
SHA256
4eb8f3e56637931b0af48abf797d882ac89f66e5729877446560b549eb8bb991
-
SHA512
796cc2503d6bb342317d065415689ee150ce203ad4a45a9df21d69c628871cc087836217f4f376f35ccdd0eb67724cfc1abc86d85b94cd0f0d7d3ca2e1a5e118
-
SSDEEP
49152:YExvUCZTOi1uJSaFjHlrc7RIX0lcnYJzPeIFC2ejbePz3Px6Ecjb:XpOtSaFW7GX0imWTbePz3m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4dc1b4330497891bff0e4e891a5b5b27
Files
-
4dc1b4330497891bff0e4e891a5b5b27.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 42KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 7.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE