�0l���G�@SWa8N�J�Tdj��W�6q" �$�Ȋ@�\�YMo� �a�X�P�y3���9�aP�r��!��E�˝�誌��H ��~��a,��()�qYQg��u�$�%^:0�E�!z㒧E*���-��z�P/pn����`��Ya�,�^���L��n��q K�#�R�РJ�?��xӚ-!��P������R�Z^c�+���)��������-ܨ���?3 ����أU���`���Y�_�~+��Ӡ6W�a1E2*��-��rf�O3hF�����2��P;��p����M�؏��߁o��� مD�{ﭽ�+�� U k��j.:�s=��b��Y��=�^c:�`��b�Cj�+��A���m�L�'� �+��buO���F�뚪%�U��l?Ś��M��@��ݔ���(t+C����6t����Nu'x������q��`�UF���\U 1���ٵ���:Μ ��~)Y�e��rإ����Ň�szcx�u�T5����FA�6HV��DRy�#�wz�E�Z3;7�p��Y����vi����H]��D��M4��FY}ۆ�#�Q7���#1�,{��̖�z'�Ӹ��_Y���uа߆W�����e�Ͷ ��\�3?��<��Xn��~e���!��}t��ts����iT�'-r�?GF�ϊ���;D+͉{���߸�Gsڶ�vki���gW���̋�'CD�?��ڢoX�nid���$�q������f���X���$�˰�9���0��Z��1�ܜ���f�]�=�ZM�8-*���y������uc ��#35Qj��� ��'��~�tY%/zTf��O�k������������=>]z�*�Į�K;*�:x:�/���O�j"�{!\&��8#��WP�S�b�mV氠��EжI�D��a���+�� 䞃 ����$,�L�7�s�L�@���e�������{v���->M�QϮ+q}�U����Kn|Qa%nP���Mc��¨�: t}�/��'��r4_.6��ח�ۛ�We$�:<vLߏ#!cG#�dn]�"��ʙ9 ��}:-Dnu��}�4N��Dd_m���G%������l�=T*��+)�H!��� ��� ��My� ���àH|�#T�o��ud �h������2���|�{r�'�D�Ǝ�� O�c�-��r[��a��/�y�w�.f9�Y\c%^b�"+�t�x�"�����>|j�{f������_�#E-�s~ P�-&+��>�\�۪�.}#�K��������Q� �������~s�����o�) `Gew߮�V�TI���Ky�y�u�� ����u��;T���*�K�Wv:�1ɦ�[�y����kγ��3���R�k�X�qߵ�ی'��@�7AI��o��&;��5�L1� ��8f����e���v��?�����I���В�f��o�*��d���X���H�s��"�*Ԛ �F�aq�i��Մ ����{y'q�HW���$�5]�W 4G�{����b>,bz�L���S^q���Fmdi��˨`.��!����p�@ٲj�}��1TG�����5�_7�n&j�X,� �u'� �GU�:m �E�5�W��v�GZ����p��kȺp���si�!��������������nF���@ ��S�y;e1��b���ez.P#���rI���y¦��>��`q���cӱ�~�k���#��.�q�R��Ӎ WRJRdV���9?!�/��pغU� ܷeL�Ө���W�;)$�`O2N8�t��\� �J�����t}��C%�H9k��8����|���侕�T�8V.�)��k��8KgT�������ɽ�#�����2�t��O�c��։��}�:%]fz5p'B�2F�v�Hs�X�(Ռ��/�9�dz35㜿96"7gE�{z��T��'�9��aB�H�,��V���l5�9W�ņ��dZ�1��u��0�e��D�ܤ"��fħ���䋞H֕�5NF ��s���&�����:4��jl+�?0�P�]�u���I��4W�享������fLtc���N��&�Q���P s)��L' pQ�Hb�y�N�qWPl�t�Ac���#��������b�ac���+����p��5CL1>�ƧRw+W�Z�]�$g��EhK��#���h����a�0��"UD�BKĽPm!/����[�;m,,��?(��JgMISjI��U��F�|E������p�1�-m4���Ū���i��9~e3�m�?7�m��Ӌ�id4��<��e,( ʎ>�:g�;b��h >��K�z:��#�a�<�����F:'��s���Z5�ؼ�}ę�M�������~Pf}͖��z���{M������Ic��=�Eu#���G��N�ĉ � ���W�����j�]����%EW�4�f�dw1����q�8����xı��6,A����B��0f�_�` �c�G�2�1�ٻ�Qy�}|査����F.^[���.)���yoU���IJ�S���A��Uw�W����5kol�1Ht�5�6���5� O����$�� �iRJ�P�.6�˗��݀��`��Ʌ~?�s���]_�z���N����9�������E�Ň.��S%�D�3�k?�^"������\y�Z��K�gv�� q[��,B�� ��ٍ¼���ѩ���BJ�ʆ�r�T{/�D(����Kd��[>^�����#���XI���BI�h%i� ���T��3�֏zp�#' ��]K�6���!�s8�㮺v�Y�NV���-Hb5/q"FC�L���5+^Uy"3i�W�FVTl^��pkjމ�V7`t��M%���K�Q.g<7���"�83Vm � ��խR�IP-�/�L���� ��t�)_6���9��&��z���v:�OT5v[��5eWf�� x�+���P@>��.���bBQs�0��m$�Q�D�qG"z_�2�Dcw9�ξ��:�S6���ഢ.����p���=ׇ�\t+p���Z>��:(�Y'�o���˿�E=�Km��^ 0�`�"Ԫ!�B(O�J�sκ�
Static task
static1
Behavioral task
behavioral1
Sample
fd63fa4bbb534b28015bd758d690fc67.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fd63fa4bbb534b28015bd758d690fc67.dll
Resource
win10v2004-20231215-en
General
-
Target
fd63fa4bbb534b28015bd758d690fc67
-
Size
590KB
-
MD5
fd63fa4bbb534b28015bd758d690fc67
-
SHA1
ad8638d4062af661210b8fe45fe41764c589f873
-
SHA256
699c09027dde265eae49670e1a8a672c43ca46a7e78eb9c9ffa32846db0ff0c7
-
SHA512
52150004914edd6963e61d15dc6758dd812f3f4560827f51bff2e9adda24428834d25c9c509ba2d54d59d9f2c2097b9c33a24fa22c78e1ad9f09899b71fe3901
-
SSDEEP
12288:USJCtw5zMVT4OsGMkPtLgvdepDZKcJH5DRiLdEqyOXkf1otwJde1:UMEw5M9Zg1eRgcJZyJy8kf1uw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd63fa4bbb534b28015bd758d690fc67
Files
-
fd63fa4bbb534b28015bd758d690fc67.dll windows:5 windows x86 arch:x86
69bc31a66d88580445946875e562e30b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
WriteFile
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree
GetModuleFileNameA
ExitProcess
user32
GetDlgItem
ws2_32
gethostbyname
Exports
Exports
Sections
.text Size: - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SE1 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.SE0 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.SE2 Size: - Virtual size: 508KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SE3 Size: 585KB - Virtual size: 584KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ