��m��ΡTTA��k�K�~��g�W$��3���tF�� �Tz�28r�|��=�}��{�# 'tWi�x�.�8p�8'�T[�c�����*瑮��H����|�mc��1�y!��i= � �I��`HqI��n���ǡqQ7�[��4yz�s�s�j�Xq���� �M��_��u�;��D��� دw[� `]? ��AjԮv+�I��C�ٞ� 1�i��R���yf�'װG���Z_QRZ��<���=�/4+��S�y$��v7�&�������#e[�0Pc�<�1��,J!��*n.%� eC}�}IM�ˊ�Fz}o������Wp�:$EJ��Ɣh~�J�Q����z��4�}�C�k >�\�Ê��PV�n�^ }��W9�����@��F���_�L:���]hyq�cO��g��ͭ����Q뛨�:,J��"y�KT'���/���T���VKwk��N��ц |��{�����5��_���+�WSNU셝�%E�L��0�I���b���l����ٮ�]��z��.�xא�y���i�~���3D#;�U�qdv�9��>��������H�|��B��1ʻ>^_����āf����%����s�Zq�����L퉐��Yr��i��J�%vx�pD}|� �#1��T�wj� 뚝��5�*7/#C��,��H�9�j��$� m��K�5T�)�i?�i������J��u�z���EPRh���ew*p*I���o���=��qwDd�A.k�ˆ^�N�FI����D����ެ��u�K�TU�5��ܟ��ʼnR�B��I7Z�9w��J3�����3u��}�]�� ||x��?3�6wb�&�j�&c�W�Ox^�U�&��%h"k��'�j5�xB^��Lo�,�[M�6�3Ѭ�Ґ�$�LP����+����8�d���j�����N`� /��`�ZU�e��o�,W��sY+�ɐ�H�l��uż.^��v2�3������'9w������ 8W��#�6�b�[z�R\�u����w?�����"W��?�m�=��:]��w�.�������ӘB�s,�6�#�k��l����٤�Fǒ��0�T�%��MA�m��" ��Y�4ǡ���VЮ*�ŝ ��e��[�~�R)��]�Sƹ@.�b>�8t��[�c�+N�"�)�6(�Bm��cN�hR�e3q�G,[��$G���CI�$�K���G��2�j�������g��J��@�>��#)������W��K�P�3s�ŏ*��<��9~�vb�-I.,��$A ��H�c�z�,�L�g�h��D��z AjEQ�Y��7�1ئj�z+��'���=�c����Y܈�:����⫁A�����\`,+���ޮ ���W�r��b���ڛ��~��ã�¡�p���%g�Hh�[��c�si~ޗZQL���,m��>tD��8 ��UĿUJ�QX�N�,p�����i}/�������)�>�����0�K?���&� ~���n߱���P�fU17��M�-;%��:t爣�Le*��A�k�6ք�Ѧ� }��J3\SX�4p1�\��e�ȉw�ok2�iЬL����`2SPs�����Vc�<�%a�ܼOf��R�1-AxX�O�M�jE�L5�S$ bT�o�"J��.����2����-�0�D%˒4�����9��hS�� 2�����Y�!�7��U7xx��{nBmW�*��gEN:d�'���O���>oq�P�A�$BD������l �?��L8j�01_�a��^��R)�}���L��1͟�ID��(b�*�S@�������=J�٨&�O�� �-������TK�5�i^ϙ~���\�R�]�z��z�H�9f �B��s��<�([O���/���e��(V�u�}���v-tH�426S���L��x0°�� (��Ws�ЁF����㇡i�=���:��)ˁ����(��Bco"ӋMy��lJZP��Yz��hy�IfQ`�]��>��}8���*�5��`i�A�Nj�G�r6�� i�Ū��瓜��P"�h�~^X|sllS��(H�"I�bi�./?�|'0��:��L��D��DJ� �;j�.&�ԋ���B��1~-�V����q�x-�PKq@��PX��B�;��v�6��0t��˲�s���#�:Z�����+Ғu�^�h�.I_^Sb�/^k:�����^����l%[�v)*��Jny���LK�NU�d���C�xy������R�#r��r R;s������x�1�"S��aE1#�jd�~�U�\�.��ºd�;��u�~�x�j{W�����u�Dp��o�)\�q�VDG���+K��W�z�Q�*g�o�#K�,���?��Q��f��JZ���M�n�r ܛ�|.9R��}���/�Y�%�#�����={��Э��-�� ��B}�ik�hC6�_ f������M�Lb��u������>b-P���6��#��PTt ��o{��BU�u�bz�5�9mi���=�/���s���#q��X��z�ɪڝ�C隕���lE.���%�D"id�9c&n�@ ����7��.�|�b*�t��UCrt���>��6]S��Ѓh�ɕ�4��?�r�'E����^�0�B�@��E�{P�č�G_po-���ݳG7��^��'2�GpCA|w�)����R���p�s �\o�n���Y�<ՆN��w-fA����D� {9B��A>��Ō3B_�$�M-ʬ$�o39�ct���_���ծٮFeј�j����s��z�Q�F-<9F��6���Ub� \š�Y�ox�Ԗߑ�AI�m,��M�r�����C�f+`�Y&,���<��kyU�#���d�7�l63nwN�l �;-ڃ�&iS=LA�����(�=��@�"Yh��%i"�����BN�r��|Kg�%.��q����_�t�$�� ��tಱ���NI�{�B���j�_��X�׳��N#u䧕ӿ:Pɧ��:5q��.���k�s�h'P��#-�������ţ�,���ٴ �f��g�u�R>��P�Goڕ�M1W2�_|Ο�+�T���8Gգ~�
Static task
static1
Behavioral task
behavioral1
Sample
fc2d795a10307e07e66b91d33e5295d8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fc2d795a10307e07e66b91d33e5295d8.exe
Resource
win10v2004-20231215-en
General
-
Target
fc2d795a10307e07e66b91d33e5295d8
-
Size
648KB
-
MD5
fc2d795a10307e07e66b91d33e5295d8
-
SHA1
7dd0ea0045f3723efaaeb1239a03daf55e0d6260
-
SHA256
9a0e75ffd61660206f7671fc68b0d2f94d2890f40940ae4c833dd2eb3d56a446
-
SHA512
275ff7f214aa1869ba6c70aa771e41fe8eb91a1d49b4f19e992c9a8aef564361b07c294507216844bf52d7ddfd283ee4e56582537e2ca519683cd1260343acda
-
SSDEEP
12288:fdPdhEXSghOZD1fDkfTG9VXxi/5iRpdbHRPVLVCgCapU+SG1mInN6W8:fdzZYsJfD0U02HRPLi5mJc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc2d795a10307e07e66b91d33e5295d8
Files
-
fc2d795a10307e07e66b91d33e5295d8.exe windows:5 windows x86 arch:x86
7dacb2ad599c7450cb02b67c838fd1d2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord714
kernel32
GetSystemDefaultLCID
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
wsprintfW
Exports
Exports
Sections
.text Size: - Virtual size: 408KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RCData0 Size: - Virtual size: 484KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RCData1 Size: 628KB - Virtual size: 625KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ