~�F��g�ӋGY��z���m�#��c�����2}bE?O5X���A����mCT����n<3ߑ3~h9.x�@�R����H` ^���|��j��}�����pEo���)�+���T��#�6z0r&���b'�S���X�y�:o��HV7�T&U�P��3.�g��3ui�M�w����=-����Wz`,��#��8��1@�)�埈��j��1K�7��]5���ɍ�cAY ���0м�<�#e���0�Ĕ�<tkQߏՀ��}��b�7(�k���;2EF���5��QE��9e�Ia��?�|��������,��VY�bI��|T�Y��uI?���R7���F!t������'6G����S$�笫vs&z����9='��������df6�n�b� o-_�����]���Vx]�<n7�o(�T쌒����b��Gu�c�8A�'WЦ\أ��۴�z+���3��l�쳝 ,3��h�bY�p"ǩ��BԈ;��7��2��*��i��v�)�Й��r&�cLi��g�W���87�T F�5~5(攑��)��Ow��O/M�Ƀ�����q���c�>�#��������a!�+��ҙo������io�vԳ�#��C�Wx}�,�I;q|q(4̨B��X�m��P&C�~��ٌ�_9�O���h�K�!�ӹۃ'7b�|�3rG�G���!@�n+�z�l[��dz�\ �4^6$#\���N ���E*=}��p������i������x�/K�~���_�e���,��ݐ�}ЙIZ��$4K�!��>����b�#��!H���C^x���_�)�E��0�B�c6��P$�JI9��OS��6�Y�2$xj�ߴ���J������.eUY#��tz4�$?� ����]Pt����ƅ�ckȅ2nfƑ��L,Es�#�(o,�:����*J]įx>�+;��g�097��GFNJ=Hn6��B�c)ؒ����&��j��8��-D��� ��� X����DF�� ���\8�bgQ7�T��5O�&�뢺r/�kם_�i�R=%O�����;����o>�2������K�$���ȡj��0"��|Ճ�v�0e���d��ƿ9�L����~3��J ���~��z�[�SaM��WJ#�;��g bw>=������H�0]��"����c{�ἇ���кs�S3� |�{�W�r�~�MoV.�W�G�6�����K�1���W/Z|����ć��D��"�?�����;(4��|�O$��.�f8�ju���%�h���qyf�4K�T��7ͪ&�1c?~njK֡��'�3[5(��~x�������л�.Ӣ��j�|��i�Vꝓ������K�.*D�v;�Q����A���_�R�@6�J��zs���Z\P.�#��1�T}5�>g�<�o��ꉞݯ��m���&�@o9�9a�ku)/y�N�TiS�w�qD����Q�|�+�'�eK�r��^�X�6�e ���/�l� ~B�諟�����2���Q�vvF��yn,.������.�,GV��?G7c3bQ)��WJҬ*�_앪�u$l5YE�d��`���f�dM�;��8p�i���ޮ3n���^�]�'�Q��O��K��� �p�{�S���_����KT�m�_�n��i��Ԏz���z�k����6�I�d�@�_b>H@�T} ����� ̩� �@��C#sS>���qY�|1he��Ap�fj�vG�y��, 7Y#�f��%Z$)�2�%^��[m��0G�p�!V/J|A�۱��M�&o�~,��g�|8xnF}ݎ<��{��o�k57��^��Lj�e�kr @yK1��1Օ�s0)�^ՁE�cE����b���R���$����U���d^�g}��;]�6�������F�F`�ٻW�'���?�D�*~"�z[�V���# ^�� ߵ2����i��Hj�I����1���͔�2K$�������t��k��M#tq!�TavAә#Ͷ����~�����Y��/����ݢhw�P?u�U�k#�k���~�#h2=�v��!�TM� ��)�~IޯO�Drrq�.��zA�m[�m㫓���M�ר\��]z�$�����KX�Ԇt�3ݷp4%E$��BryF���3��8(lk�ØdB^��0ԙ�A�������۰w���C�`Ǔ��_��.`V����9KE2m��bX�VT���]��N�p%�;_'v�τT�;�"�J�a��Yv��(�ߟv�N�h_`6oE� �L�����^��씃�\�T�gTD��D �Z���x��<�Ɗ�<����u�� ����e�(y����Z=\�B�S����)ذV�+�"������Xٯ�5o�Z�~%L�~ F�M��xVX�y*���Q�1QP>���=.5������sz6\:��, �d/{������/<� (<�Q�ho��PĮʚ#q{�*�m�%U,��P��ЫB�A�R{�$6��|���}i�5�����^(��W���B��PZ��6�%��+�yz���;?��}u��$��9a�D��Kq;���`���&��d8��.����U�����%c��*�m����������|�<mLT� �+�6�,�#;�ܸ��c��mw��* �$�p^��J�/�Xɻ&_|&մ��^�$G�ˊ�[�<��iiG��=��,�������~bƊ��hx��H��-����]� �&�S�ȸ��%&=3�芇U�$g�L�?�}k�@�=���Ě{�@)��X��@�ʆ5/{�J�qÂ"���?u�n��`���չ>B�w��'�6H���M=�C�E�Fӛپ��+>���$��rK� �c>���:��T���yd� 4���^:�0����*٭A��u0���������ݲ��q�Փ��U�>�ST3�@�ꫲ��ڸV�x��� �&=PPK�F1�r2 �7��;�V�j�55����8���N<h/~~�{Nk!P��2���� ���3��� �� ���⬃~Xk�Za�7�!�&�����n�mѸ�f���8�A� u8�"�sW�i v�UK�\5~�#o\��Xl� /�?Bz���x�+~��ӯ���냌�� ����%R3Ap/·�l6�P%_q� \����͏���l���M���"�ˢ0�ٙ�>M���_�?"`FyG��ԛP��p��AA �9�c��@�*�.K���e����ׄ1{)GL<�Jљz���\��3�ݢn\y�� )���,���L���p�'�pd=j����� ��]��%���f����NVCې�4��eJ��vѳ�����bG�:梫C�^C�C�x'������R������[z����Z' y茱�D�n?�V�Tgn����pu�>]�5�ס�T"9��Q�vƮi�?�aO�8K���fU!�Vb:z%����kL9�L;�M�FZ�����[/z4є����u�7_υӊ@�з�{X����7�>5�|ƸI�r����[�x�=y����H�@Ųp"�,��rT_��T{�@n�\��5��z{�}4ȵ@QG�٩HI��6v��Y���q��_���5%�w]t����͊eۜ��]0M"[��CR<^r����e���X�'5F,�4j����`��T,-O�`�
Static task
static1
Behavioral task
behavioral1
Sample
575cddd17ff8d7127e66797e14b82213.exe
Resource
win7-20231215-en
General
-
Target
575cddd17ff8d7127e66797e14b82213
-
Size
2.0MB
-
MD5
575cddd17ff8d7127e66797e14b82213
-
SHA1
3a4524d531ad39fbebef2f8c5973aee350c79332
-
SHA256
8b57e63ca7ed0ec0c3c152ed8ff71fa6156664008df4e3f75a4cf56db2c44f41
-
SHA512
f674532cd7fa31f00f267c3c866ff0c1359aa0e3c18860db587263bdf4051408f98df500909c77badcc97998554092e9dae907fffd75fd912452af531c106938
-
SSDEEP
49152:SC82pr6Xm2TEalaSOO6mhSq0eVkLPxHUONG5hWY3KF:SCz6DEalaS96k0MkjbEGM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 575cddd17ff8d7127e66797e14b82213
Files
-
575cddd17ff8d7127e66797e14b82213.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 42KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 7.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE