�DEO��{��ޜ����V��Q����������- �sY$��^���i�|h�8��R6p�2��{�0��8"�.0�c ��])�����a���� 0p�� ���|����T�M*ca��'�`�{S���X��)�� �h+��DE<�.@�����҂ϯb�2����i���Ia�^��}��H�qqV�O�Lǂ�0�*,h�G�P"��@'�L��^ >{�����p7 �!KSo�i��2��b�٠I����[#M�M�JVu�r<�+�hǟw��(ܞV�������Sv!ig,4p92$����c��d�w�ߡ O�<K� � �b �9�F���j���u� ,j�&,/�:���'�*R�u�*F֭$���z����)1g���߇R#�2컨�V4�T�[��[�̍�����[�@X�h�U��|���,f��/��<A�G��G䤛Cנ�� �t�ٔ�ڈI{W�"N����;��Y뼖��oe���Uq�����tw�����M;b\E���KI�'0��:ِ�K?:z�}r�O�tdN��5D6/ݠ+;:�zX�.�7p�f�ꌠ=A˿��u8gJ��kZ���m����!�~�>c��Rl�Z55�5[̑��za��̗WUUU@M˞�B� �Q�a��<��6^�c��Nj�9��CC��wS̴K�n(U�0T;wq�C���ff���o֒�'kSO @`*avp�̓Y��6�$'��h�>���3��<3L.@���&�n� %��81�˶u/�;q��������2Ў"� �ͷ[�fk�Q`c�A�`�&�e�ǒ�6�-r��&��Q<�wFz$���L�8�Sk�Z�.~�=�/3�x�'НE%�,��jnql�^���ؙ����&�5��.M���6 ԕ2����B}q��XƯ�����Jx���r�#w#<Ս�h�shzI��^�[��0��2��C�u��GxL��5��ӥ�2���[R�G��8=OR�.E/+x8���爀��ti#�3G)�'�s$�1!a@�>2�,�������� �'��1oM�V=}�}�cf�_:�C<l��_��퀜��-����)��s�-p3М"��S )����-^�־m ` |c��ġ���l��>����&��]� lĖ���hE���%X�|ne���wݗ�K{���ĕ��;�����5)���~CЦ�^�����3���K6�����Q��N��-U�[��@�N�.�fw��ƍ�����p�� ��a,��QX���3��z�Q���˖� �:c� ZJ&�.���{��sn���c����i���h����mOEq�{^��nN���p�������ci�r+�I`�V�ڜ�穷����_b'S��gE�d��Ǚ��)��_��I�Z��шuM26�@��9�Up���m��q��s[ 5U�+�I�X�JI�Q+�$I�u����/��h�u(Ù 0o$�W-,�ߛ�;�Ә]@K��k�������8�پU�g�?��P�$��o�?N,�������k�ZP����,�� �˖н�N��D7���|l`�2y�"�9��_���&�oAa��[1�����1]�[S������w�O��s� �0U��O�a���~g�u��;������=��3��` ����+l܂;������Q=�g�Ծ9!7^��\S� �V@-IV����,��`&vWr�� �}�SI�=b4G=( �w�.j��DCμ��0ɶ�Ge�X$!�p�)~I��.B_yo2�(Hw@d��mm4�*G\N�6>�;���k��� Bc����z��9jݶ�"��o�I�'S�$�M�rL*�J�Q�6#���;��G�?��TB������d�p� _9���b �m/�w�e����X��o(�q�Q�D%����Z�$���YO`e��3Q.m�:"Uڽ��X|v[]�$��hŤ�ؓLh���i�g���I�z�u�iG��[��D����8�t8G���m&[3?��|�h� 4�EQ$�b�t�2BqY��R�f����ƭ_1_��� f@�t��S ����%HzWп�u&"�=����:��9"�>������g��վ(j mU�;v�0S@������ �D*�G �:�ϓ�4�SA��5]��̯AF�t�`T��e�ʂ0|+H���ڿ�U��W��=/��ndx����X� ���]��z�U܄�gCW@��aqmR��W�h�v��D���w����:�"-}��N�v#<\��O��@[5E�Y�A�!"�Cdv�9EH7�P�n;�0�@��J��v�\q-!D�X���N�~4�}r����8�U ?��S&��l�<>=Iur_�Q� r���͑z�yΤ)��H��#�%��*� �F�B\!��S�Z�W��䳦 '1�Dv��.��e�߂���S� 4�t#x�yW�������t>j�$���$��ԅ�"�?��}w��kj�r���=�Y����;���|�E��6O���wW��D -0MvT��Ď�eP-a4"3�)�t��{���@:b8z]1���!^9�Ο���[��A5�w1j;��s���O��If a)��<c�1]< ��j�-���L/{r�i2���םΦ����M�:+��t��5s�[�!~���gߓS�p Q��9�����bRS�{�d�i�u�1�i��������S�~�O�**�}C�"Am�F�G����Ô�]/%,��_LJ?�����H9��I3�����9��r���jy�?h�&95���bO���P��^�\06��s#{����1qj�Z�C-!#�s0 �&���LǴF[���n���d�p�U�Κ�/�] �y������Qo�Fp ±^�{��P^!�l�����̹�8�sYJ�N���)�j 5B��Co���ċ�V�����9��Cb���v���;�T�uT��'>U�K�r������5��/�ɾ����2�rٲi{i��yz��������G\F����l9���b���wؕ�8F�EKhS'���J��
Static task
static1
Behavioral task
behavioral1
Sample
585817766f6f7f9ea76cd6b3d53746ba.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
585817766f6f7f9ea76cd6b3d53746ba.exe
Resource
win10v2004-20231215-en
General
-
Target
585817766f6f7f9ea76cd6b3d53746ba
-
Size
4.9MB
-
MD5
585817766f6f7f9ea76cd6b3d53746ba
-
SHA1
88124438fb4f3e271b6801d2f40c44a906ed16ae
-
SHA256
07151c37f58237c74c230c03c0dbcba34fc3fb531953b20628de4cbce7192841
-
SHA512
7e62c28e18508fbc8a126e85f9f6618c0f1f69be08c7df60fd98909f5571cb5c9691665785201b27619b2b4274c0c2ed6b0d3ea1d55b3abf748f4b2d4d8c99a3
-
SSDEEP
98304:MsV0D1yHo2jrjrJN6IiTZnvjl68Xlddn3LF1b1vjPwKsLsq4mra4b4Gs9J4Zov:MV1yHXFN6Ionvjl6aRn3PZfsxdu4b4Ht
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 585817766f6f7f9ea76cd6b3d53746ba
Files
-
585817766f6f7f9ea76cd6b3d53746ba.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.text Size: - Virtual size: 603KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.multiah Size: - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.multiah Size: 5.9MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ