�n�3����r��Z��:�#݂FIw��b"��˞�8{廔���(u�Nu���'��ϟD��#8�7�����;I?��:�"7`���c�9}F��9��;0���� �/�ai�� ���;{�Hl #T鰵!ŸG��+����t�������1����L�j�^��ڋO���Pk�'{'�cA�ܑ���f=rN���dO���L�!�$.�d�'���R��.��C)a�0����0�%�3:��1�����������;K��O���m=���F�f0����l��Kk>ԵӮ����#w�N� �K���Q";�oNU�t������Ih�Z���+�2��^]7q�� ;L�t`�~�@S�o��0:%���_`q+��['Y���a�/��-;3���W}���(��b���4i(�l�<��MZ���%W�#��k�}w唢`=~B"�'�<1TC��X�E�����X��E5zIm�Er�A�|Ԍ�<��7t�>�>rV{���� U�xDa?�N���a�: s�]�e����%C�%�������i��ʬ�ɪ��c�$����[0�)w5��@>Ӝ"*��L����ݏ�Ĥ�P2(%pJ+�+%�p�EZ:�"p� LD�bp$�3Wa�f�6�#?pٕ��P9���M-�=.�b��R�ܘ�.3PF��;)��ʷ� �f@�3���g�����Q٣k�J|A����V����b_t�������Ouo�I����q��4���|A9��c�$`=S�21P��1"E%L=��>��`�����熄Qt�����_qk\o7Q��|dn |�2��Q���y܋��h�Ȃ;�̘��{j�?�A�sj�ޮ ��i�v�j]���C��7(g�����`>=�����{R3¾���a�:y����.{�7SF@�� �2nǻ�c � ��WM|&��_%�~I�p(6n6����Y�3C�����nV�H\��Ph��G�`��F��J�Wh��U��w��0-���8���_E��=_��kY�AϨ��K)�sy`�h��eʠF�@W'���TU���m���r�9��H�#����ƺ�T���������Etd2@'�(W��в�C𩕊Rr��5��g��d�]G]oN���ɰ՚��u� ?�`�/*x�2!��11��A��Wz i4�xF�8Wl5�;Ui̺�b�<}s�8VP;�!�k�V�rW���X��V�ؑ8�4/G�d�r���l:�G�g�?��˖s�9�<�j2�b��CU7F?�� �B���,ע��p��tȇ���q2�i�>�֊��p3 W�S`��@7���?kqS|0/�c�@���a�Q:�����`���V ��E� Ǐ �mΣ'Xj�{��J�G���_=}Q-�<�E�Kz��7��Z�j~`&��`F<�� ����Z�A�f�l���a�@�X��=��6u�ݢS��Um�JysMS6v���6��pD��^��9�1s���+eʇ^ܝ�v���x���ķ�� ���k^NK��OP��!�l:�CZ�MBG��A7��z�vY��T|�y�LŴ��H����$ �h�� `�B���욋�d�s��M]H7ŷ�v�3g��,g��0�����/�Sݙ�˥&˨և�9]rE�c�#4e���&R�L3��xy/iA)�� �kO���� ��_��eg�� �UETA�gH�<���wuD_蘟�Io����ZFזY*���H���FqS�9�*�U�������B���f��;G��I`�_��m~Ѳ�N�Mٶ����/�E��O$2���$�K:��t[�t��$��d�e���� �W1�����S��߶�n,�^.\c����J��&����q��N��A?��o]�������/3�bd�Dv�-��P�&n3��ҏ��{I��ܣ%��I:{ �c.��R��}OlaC���<b��EjЊ�0K?J��k8E��������ʄĜ�-��@�Lj�}�/5Y5��!�<�2/�m���HLJe����<�9����AiͶW/�$����X� wC���ѓc�; ݛ&�ƟwuK0H*�42��WiW��^��+!��ݡli�.�����ob�з��˦�]d*�j1�5��t7�\�"L�����=f[�<�j!�;��'#������C����'��h����L�E����)E�S*�E�ͳĜu�{�h�</�zM ��H���z�5ucN�ܟ���,3���I�+d|2y2 m� =\�Td�3�l��9�aHX�s0�w���,�8�cd��Vo�K>Sb�#v��]!�G4�����Lr�0�ű~h��|�y+��9�|Zx���O� ��ZSg%�cr�n\��}�]�d�j�6�Y�g6/��u˼r��w�+�+:��(�ir�#2�R�d�Ȼ�6���w�m�i�b�Yѝz�����է� ���m`h��<YpC����U�*ӖE����e#ʽ�h��^FW����%R����5�U�U�"��2�������l8�����I���\� ����f��c䛁�\�D"��@�Յܛ���Ҍ|w��eLN�u}l������˘@�ե|Z�|��(�+e �����[��F9���,�A��A^yZ��B���D{S%zD���?�ƀ�l��L!�S8���Տ�f;3��*���l��ɑ�2H~z�`��-ke�"̠V�vYGHy��Oݩ�K�������ٲ�*>�C)�0CG6�e��=�<k�7j~d�hmʵ�(�[L#�R��/��f#���_^[?I�MKptz=�o����e�\�9��v�le��2�(� o��B&6�R�a�O�����8�eEn.BA�Z��nG���i`�p�=l%��;�M�ef��u�5��?�M) �'��'�b$K�3�,&�m̤qx�VCCN4l�X�{�����7���^I���,�M��-6����bYR_:0�hq�T�7����G����Sn�ڪ����\�hu�=��XVoF�.��J�jƎ���؊u3re��]�I�?~M ��%u�O}��-�',��Z��Q�H�]H��]����Ý�33 /���Q�Ş��S��^73�I��eC��_�wgf�a�h���T%� h^w�`�+�>lbԪ4j �:_��u��dX����)����G�Q� ��u~�T��}���������� �ѽ(IIV��;j���\��~iDA��|v�����M�Uh8��`r��{t���E�^�A����!���G�"
Static task
static1
Behavioral task
behavioral1
Sample
1d6f5775b3c23b32128305c8344d9b4d.exe
Resource
win7-20231215-en
General
-
Target
1d6f5775b3c23b32128305c8344d9b4d
-
Size
2.7MB
-
MD5
1d6f5775b3c23b32128305c8344d9b4d
-
SHA1
40ddb92abf8d5728d6975097bddee3bc100ff357
-
SHA256
8b4d934d82eff2393c799d4986353ac42ebaa47328e9801a683326de1a1a1209
-
SHA512
91f1feb9f41a936a24043a7b00e1f3b4a278e93023c211f06a26f1cb39493d487b6f3a9a0c736a29e4849a09f4cc197aeeafb3962074291e0ca89a837feca1d1
-
SSDEEP
49152:7AkEu73vcmScaBlvrl7HR6hHrhmBirjcmnfa6in+LaUWQsEia4lvO/BT5E7jQ/Kp:7/3vclcu3R65hmBiAnvuYl2B5E7MiHA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d6f5775b3c23b32128305c8344d9b4d
Files
-
1d6f5775b3c23b32128305c8344d9b4d.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 42KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 9.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE