�GvA��ט���|�{"�qq�Q��I�mVL�)�1 ���s�[b՚8�[�aSF;��nc��O$G�[����_(�~,�}��,��U]9p�*E>42�s�6W-��Ѵp=V9h���e�G��0�<&�a��>��u�>��IU��d�:���ӇE]�K[�w5��p��8���ۖ� O`_��V3˞�tC��B}D"n���|�+�q��!�� ��f��0�<ۙ|=e�$Į]���s�ǽ����h��G��r�4�=N������Tȣ�z�k��_`j\�Dװ8� ����4���">f��M�xzq�:��| �i��k+jTV[^�7SF �ܢ���K!0,�U��Ɖ�����s�E}�G�_��� �.o����*C��7�����lc*�}�l��?�IJ'��,�Y&��;Xq��Y�l�����<C|���(�kϔ0�'l\D`N ��6]2�~�_��[Yl?9�H�ϼ$�O���R=�����̽�z:-�����b�1a�UY�r����E��9������е�n����r������"�$�=ukU��#��U��h�٘��YxX?H�gk@�A�GR��Vt&���E�t1�@�*3����"�y&��E�^����gNh<��,:�@óU_r�V�j�t��g"?̫F�s�B�c=��boҹ���u�i�@���� @�V���&�+Nue#}R�#������<Ff�a#-�H��"��G������B� ·[b8*= @��1u�z!Q �i#| w�^x�n{ �ځ!�/jcH)>Ǫ�8�wcS���G�R��-H7��X h?�CR�ʌX��g�~��������6k 6�H�ݣ/��V�S���F�V�s�Y�54Oc0l[g�a����8df�1i~r�(�� ������: Vjd�}�82DRp����0R`�ԯ�\"o�ƍ:��5��<Z�uJ�E���Z ۻ3?�!p�s$ڦ�k�ݢ�:������K�zk��&���YW�R�A�H���[��$a�c���nv:t& �sݫp�|Ք@2� bI�l����е�߽��g���*z�ȰcZ@z��d��啈�����m�Φa: ��|��\?s-��1[qϠ����r��"=(yUഹ�? 1[��t�v�),�?���������y5b��fc�0���+I/ˏ�[D\�k���h?R#���M����5ih�SwS�L�n:��eC�F������h�6�i��hϚ���pVIVtX��PK��V���G mS�f�V�7.N��D �u�� �3��1����f�W>�F��-�R;�?���o��4h�_��O&�9Laa�f��| ,��^�2s�fg��!�����Z��E�����چ�� }p�}�!@��VŃ��+)0-��������L��C.�U;.յ�}���1})I����P����ƺý�e��X~�iD�$:��h�����ī��P�(X���콖��2r���ҌQ����C<g#����wg�������Ai=P�A�$5=��?P�wB���7�+r�g��B���:������ʌ�������7D�'k�bM����|ޱL���JC!��Am`Gw��O��X�_@�a��9 �Qj�����Xp-���3��L>L��5��\d��K��_ٮč CA�L<2U�d ���fo�W��DMyg���^[�<ˎE뛻Syȁ�Rؐ?���/�3`�(�w��i-���7�Ge~'Qbx�����.��]��V*>�[l�T��Cg-�,b���2O�[<pk�-C��E���!��0��`'���x`�j��FN�P�㰛z���E�c 1!y�'6)���[�N.mZـ@����: ����m��Z}u�X37�k���d:3=���S�G��}Q�ciV�ܲm6}i�����s��^���=3�4"[+6!=紪�����1M'��b�_O�� �c,��ĵm0��{�EλyUC2D/J�\��!�1}>�NR��]~NLt̒�c��༊��w���b�u�OT���� %~�Z���U����0t�jө^�/v�����6*C���Ԩ����a/����e��>�ϑ����K뵉ׅ�r��d�֬���M�ؕ�z=���� [�d�O9���QE���\���|:^f�$JxAz��:�teB�Vi�To�F�5�x{jy�K�������іHOF�|�?��y���P��-/9Zq����P �=Z],p��Q!�n�2��?�y���0�WPg��5�y zSNQ��Z�5�/�o�箃m�mQL2I��V�W��bʀ,l|8�TFˎg,�%[�;hg{dI��n���|�Ns��5cy�g�v^Fb���M7�p��X�-m��wQ9�%:�o����@��;@b��"���͆9(���~�l=0㈬d6�c�P�y4K-��r�����Q'߿�n��Fiz6$�d�au=��g�h�����8��-���q���䬛�A��������� HC��N{��plA-ƌ�t��S��t���L"�#��k�`�=>H���ܦ���LR�l�#��aT�_�oh���$ww�k7���1��{�����/�cܶ�|����N6%�[�vN{����m]�b�6zR#���Yɵ�53ș4��tCl�P�T�{��i��UF��x%wذ�����UYk��������$����+iu�a/�����x\a��6���l'g�n-�q���b8Tٯ����*��#���^(Zp&W�t}�Kp$����\i���\��#>���m�8@��:jC=S�d�tL�.�nv���O��U;�5�$)�A�6<���ʶ?�9=��0�����_RX( v�D�(>2OU�q�K���;'Z2Fo�uxϝ�F(���y�:'���B�n��>ַ�E�.�X�应�e-�2���� � ��z���f[Y5���Ev6vW�9��A�SM��K�V��lԶ/?�fE��N;�1AB��F� Bez9��t��;����Y+�(�ЪʶrM��u���;��]IA��yc�.ƳQ@VU�g̚ �),Pؙ�� �kAg�������Gl�!��|�k���r�^�l��X�b���&��5�dZ��{|�m<�P��lS�������`�ct�Qr+S�@ڒM�/�K(r\��Ѩ����S�a��1���f,a�W���5�4�&��a�h����&�(��fu���f�䧘t�$rS��l"Ҡ��=B��cL\�f �/Y0���4�������l��0t&�̃:q�LO3R���1����0��� ���4��'fb��f��"�]�5R1�[��|���L�3^{�t v�&M���|�*| �$��ld�m�,�9� ^5�ʬ�� �ͫ��'�Z��3t�b��|������?�� j��: |_R�P�51~2��Ku���5��S<��\��e4��G 3Nq��X!�U�!i�d��V�ɷ`����VZٖ_F,A��z�i{FdF�Z�<Ѐ���qo;<�����vs��8 RHg���
Static task
static1
Behavioral task
behavioral1
Sample
13507d47cbc2b2bd6f75044690a0fec3.exe
Resource
win7-20231215-en
General
-
Target
13507d47cbc2b2bd6f75044690a0fec3
-
Size
2.6MB
-
MD5
13507d47cbc2b2bd6f75044690a0fec3
-
SHA1
f612da09f14d977b2ddf26e4c79b0be5eeac0090
-
SHA256
f0b3dac07f5b18d00319d48bf40f28bad9faa0f264b48975ffdb6198ea31e85f
-
SHA512
a930952ee18f8080fb476c6e6c4d1a662fd5c7db72a9629f99ee8006b600c98f1a6ace0b9d61128eeadd785d2705682ff2c3ce8d4caa7cda38c6eee3d9c64719
-
SSDEEP
49152:wVfPF9VMaTrEW+sHPN5qSRdGZUXzoY7SjQ58k2THzzntOD8gLBU5yQqaqfuW/3rf:wVPT/N5v828Y7mQ5VcT7g4ci5yQHpybf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13507d47cbc2b2bd6f75044690a0fec3
Files
-
13507d47cbc2b2bd6f75044690a0fec3.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 42KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 9.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE