� ����o����TD������)� hg��Сh�aL����,�.�[�A�C-����A<�Sc�������}*��Hc��k��Pˀ���(�gi�Vnc�?Ǒ �����l�C��"��V'�ߩ�(�{F*��B����0>P@K�� �*����U���S����U��G�M�= "��Ӑ���gB8��� & �-�����p���S��6a3�V�ˈ�%�}�4�R� D�낃c0!���B���ʖ$�#Xc�3Gp���?�/�U�����58�O_+j��fz��a�'ܾ�K�^��㘏*D��6]6D��PV7�����A�&:�)�&u\hy������7�إ�C��ۙт��+f��AX�OkߵQQ��9|�*�<���n�ƴ��B�ws�e��Q��gV��#2���{�s�^��2�'�~i� �!�ƇTi�v��Y�1A����.�@ �<(��7����M."��Ь��J j�jLG�Z�G�ܹ�-�2��I� p;1v2�x����s% &���sl0�z�4�����,�D�_��y�aQ�aVg's���)�vd�M��ᆶC�ؗ%� wĦ��@qQ��)袑���T���`�(v��7��&�B�__�Ke%o ���V��̴G���Pb7ڡ,{�%Th㶤ӟ���,C���u W���N��#H_.���������Ѩ)8Q]l(��N'~�d�ж���<���#ؽS��@�����y e�U��ͨ���K�#}��&�g�p�,��s�_=��^��ȝ�Sg�6���<y3$�1�;hQ:+���4��t���B!�B9o��#�Yl"�p2[�����P-y�����L���E�8 >`\��t����v��뗆� @���5��&�� �l����@��X1��b���d�6:P��ǖ;Ij{G>�u��a�ݷ6�Sh\���"Fp�P��������,�o�@���U��b�H�5���N������� Კ�`�+�-ՊL(�Sd1����#\�8���Rf M�13_v��dU��g�9k���e������L8�`�:�3��\]��T")��6R�a眣��(�� ��Jo��������"��'k��!��4��G�;�t��_m3�^}��M� f[�a7�i>�Lǡ�ʞ�|��έ`I�/�"�I��u���(Qqi�Legh` ݺ���{��y��F�D��ٳӎ�D>[��`U��z�"��p�{6J.bs�b�iƍ�"n�ϦB,e� �i�o��"А��r���wҳ3���/VG���Os��^����yn&E\���J�d�R=gfB���O!�h�.�涣���5�d=P��6��k��M�6b���7n����M�ъ� ��g��g��sP|ub�9�g �b���A�$pv�d9 G�$� ��?��������^V(���&�q�rô�˕�!f#1��n�O3�M�o����.��B��_����J�*���������n�dV'd2�~9ٰ4���GXw��Y-��8������SXx.�0O[�R��M�U��n���첦:����͚0A�rb?�Z��܈Y��[�������a|fC���ڦ�E�p����`����*f4�bx��Z8.����ZPy�7���Ω:���T��2���F������~k��H����;m�g�#(�������o���$��l�c�69R�=�7P&~���_�^�l�] ��������{e�'�T�������bZ���^��/П=a��B�}#"�z�c��^�7)s��t���fi��ѵ`����@��_�$���ʁ�H�8�O[H0R��J�\@��*��Je�!ߝ�� Uq��N�J'%"a �!f��p)��L�%�lũe�*tG"& ���%�kDڀ�nJՓ��%G��<����=�������meY.}}�M���b |.V.�»ćVʖA;7�t�7���㒛��(�q,�D5a��+��(-|=�)z�H�7�Uuz�gi��m_f�k��G���ý��ʲ�U|`�0ak���\h�Da�?fKo�ά�(��w�LP�=�Y�e��a`9SX�z��ё#��W�E6�z5�s��j��������.����2�S��Η��1ؙ���7tQC .G���'�F﵎�ˢ叺����bX�cg,Q�/������E��|O�~��3|7c����Kn��j���'�E�T(zz�����\=jQ*Hk���-���<"���w��9���P'٫�#��{xh~�*q%�� �e��E�Fk�k��xe�"c0����ȯ^fN.T�誎E�$�T������<PμU�1��[��p��P���!�����k#×�����w����M�}�蟳�!���I�� D�y�,�j�;��d�b#�V6cvY�E��� =�?��6e;_�4�9�M����X�,4&�Z����|ȕy��֣� T�m�L��Try�f�c31���s�JI*�~7Di!k���>�������Kxe-7M��dq��� ��ݠr��р���e��@�2�?@���WM(z��Jiۀ��'Z��^m�>�Ƕ_a8�~zYS�#��'#�Ώ�&.[�^���p?� ���t Z1���G�rij����N�<�:Ӵ���kj������{sN3���1)��������R���W���s�d�q9Mq����g��:3�P.�D����X��E��^�����wӷ2�ph�c�����G7�)hFAv2�-������W ���I�ꡪ���VR(�����l��Ez��,ybƶ�7;Ht[}|�N�L�o���C�|��%|�7C;r5�u<c�)Xٌ�X�PX��^����oi$X����&� ��+��SI�cl�� ��_D�$�����;l��A<p�h�}"B���ͲmQ��Kl*�|̳`�JF��+��k���'���0�d��+#D�\��Euɶ�g���J8������W��G�okM��~ݟ��)��Vehzc�������v�#�K1q6��cۦ�.;�������E������Xr�E'yϔ��%��7��� E2�UI�Ѫ�|%���&�l�s��� �ɟ��D���ԝ�ˀ#�o�K����뜒)���V�o_!���q��x�f�P>�x�-/��� �R�D�fI�gZ"u�F�D�@�eAt��
Static task
static1
Behavioral task
behavioral1
Sample
0c5027297d2295ec2fc4226fc9076cf4.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0c5027297d2295ec2fc4226fc9076cf4.exe
Resource
win10v2004-20231215-en
General
-
Target
0c5027297d2295ec2fc4226fc9076cf4
-
Size
2.2MB
-
MD5
0c5027297d2295ec2fc4226fc9076cf4
-
SHA1
5e3182250aa0fbaa57952d4895d2151356ae44fa
-
SHA256
fe9b4ffe47a62c5de8ba2c38d6924a1d30a98d62ef8227c199bdc7d64b420b6a
-
SHA512
7d1abb99252e2ac740ad4b55b229b664043a7034e3fda4a1316dde9488bfbc1a0df0759611269484d78040f097072eee9522bcdedc45f6afdb5f7249d8c47c68
-
SSDEEP
49152:4+VyPhLaO3zeo94TEuO17ogwSbl7Ssj34i+9a3mB:cPpF3zH9pagwIlyha3m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c5027297d2295ec2fc4226fc9076cf4
Files
-
0c5027297d2295ec2fc4226fc9076cf4.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
Sections
Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 272KB - Virtual size: 9.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE