�><��(��ّ��KH}��^zLj�U�h,�'���m{���e2��t�n��}K2��T�Ǘlr�@O>�#;��,��v!�'M�y�U:x�\R��:�&{4�qzs\���q���:M>��U��]���Bv(5K��|.����Z�L/$�����2�H��c�7ɱ�ݖ��;������4��sрB��n�*78��*3�~ �N��*�1e��ι�5�4����1:������CǛr�����g���N�Ǡ��d5��X�dœjk����翞E����-@4��t�7-lh�IYl�9ﻍZ�Ĥ#����`���}����K�����{%��iT<(p *�FW��v]�g�W�I�Mw�\_lP�5L^��N=P��CK�B�;L}�ޛ��Z�����S�,�s���Z<ӰCىɱ<Ai8n�Ӆa=�|��p�W�Ƿ2萠��B����uZ��� r��o�y��8���3��p�>Ҹ+!��f�&�ьd�G�knBsV��<���2�s���Pfi�N�{��*eJ���,�/��#�(��'�u�#����@b��s���f���0��u��m�z�4j�A�N)@E@����о�%^�7J�v����:����!����M�h���.ܦ\"��� B1#�N�:q��X�щ��eBL���F�V]+�k�P�?�aT�瀞�U�8`�5�wF�zj����+`�gl4agY����=�Yj�ZHW����8���%ג�3��` ���I�;b�s��o�L�/�>�Bt�]+YG��F�3�ӆ��݂��Zg�"����s�k[ ͗�C�jC�h�L�����t9������#�y[�e$|�K��e�7�,+�ޡ����e �R��ؿ�o�+ta�n��m��|ޯ�.���Ur��m�g����%��F:�)z�փi'��68�u��9(�����<��}��Ɣ���K%5*T�Il����?f�5�,:���꾉� -�/���4�,T����}�K�]g���\����J��G��o�jǯ@[sN�瘲�ܟ�Ҏ���=N�t�����-�Q7g��9��GOW�U��zk�K@W�Cě�{Ώ��v�')�W`���6�C��|��N�h"ݯ�Cz�TB��#�%v�&7�!`>C��$��?�=U,J6pkz�1C�sK�"u�f��tR�)A�ai���tXZX=W.�rSr�=�{V;����F�����3�h?&���*���cJ/��7e NNSx���DzK�zy|`WÇ:e�G��S�]�xc~�npX��/`9=H0�7B�}���fиڹ�ȓ5jU�s��'٥���Cr-�w%�� m�滅����S�������h2E�N�#��0�7��<�!!LT�8�!�،��^����m����o��Gt�}��)�8~���>Z�l��^ƣA��?�-���;)-�� sݱ�Y� ����� K�I M}{�b�mL2��n����e;x⠥��pqiGE�*S,���ͭ���+��;+I2����L�W��I���YԻ+:���,��32(�}�k��V��������5����r������[o��w��B�1��Z #�1q�����%ܚP;[�-�R�����#`D�mZAmf �,_oa�|�#�ф.�6��9��O����:]<�4j���D9�������S�f����?S���w-��.�[Y�,�j���|�B��b��4�CwԲI�� ټ��LA�`����qFm�H�?j�,�2q'K��l�w@-��s �l�[C��)��Y� !���+�O�o)4�N8�ޓ�n>~;��jb�|��X�@o��*��3��Fb��5�/ZT��af�_q��� W% �ln��\����VB��H�0��4M��k!�a�����ٽ }cR�o��2�O�D(it�$��]����Sޤk�U��-�����PhD��^�`1q���v����,%P7�bƙ�~欥��w����>f�r�J�g��8���K��#1��uEn.�/�U�}����|Lvz�����=�Q�"�;�b*DX0�` �/>r}��]Ÿ? 6&Ѧ�Xg�^hPeõ�R���l��x��t���f��s��y�8P8�o����B�%J%�{�I��u��-5[��2 ���ԋ��Q(��o}������6._�M�)Ṛ�����#RR���� j�m4`%�8���������H�.����J�=�6��} ��Nb�0�~�~a�k�h��n�G�-_����J�(���*F���>�ੁ���b����R����2�k�1w���l�[5��MIr�3�8��i�mt]:�nf����K��R�F��5�`+h��fKBں$��֔Q�mXs��>] �1��/��O�l>QY �^r-� �Xᓾ^6X�7��'�k�� �i�<o;�Fa'j��Tb^��:�t�̺�"l�`�C���e[����$��Ԟ��yp�a����i�X�n�i���Q��:�U韗Ƽ�Џ���uz�'�+X��VOf^m«�\K�b_�@�t�I7G�E7G-�P8cd��]�֦�*� �f\\��,�L��'[ԅ�Cl?���L�Ԯ`)�4��b���*��=u�k�qY���|�& ��p�- ρ��3��E|��%؍�_^�� [@U���d�ۄb(rR� �Ղ�J+f !��O2d����Օ�_���fxq�/��#x3k����Vs�yZ��a�A� �� X?����_2����oJ����N� �Dk+�w˛MH�����L[ Aq�/T��g$˷~������:4�N�9'�����@�YV6@��y�<����y��U#s9V{ �r�DP"1���~��?ʯ��p� H��!�/u&�8�v�Ï�U�8���t�V�c������F{��d���}$�`�6n,��/��&���*�����K�7m|�R�P��+at���jI�S*�[�����f3��e�57K������t A����[��6A2����s����#ƭpJӜ� �ȅ��c�R����+�����[�;�q��7kr��÷��sG�c5)�������g���'� s�"� �9�r�jd��x��ZQ�����+J�B� '=�G7�9�I��J�9���L��������w��X L�Q�<-�M�!Á��S�t%�� �/���g����Z�,�x�fהӆ]`.��}�֦���!��^�3(�,��Fc�O>C^�Uc������T�C��:����/Y0��H�k������<.'�oE�s=�Z�����'ga�D���IV,�B��\��ֺK� �=r%ш�����^W�0�b`�v=�0�H��" �ޯ�`�F���>$�o�c?*e��j/{eս.�d�M�Q�Qz�$��vKqЂ��1������#u����*�OM��O�g?1ֽ�Q#���Mv M�N�����D+�Z�f��d�ޅ �rq�\5˯�gj�{���������[���L&)�xJ�����|~^�9̖<�i��b-�1�e1V��lp�m�Ĭ<[�|!�@<3�q5������D�x˓�1�����}�I���UCR�]��F/�#Ȫ��7W*Y��#�oxR��g^��Q�����Z`nm��ҍ� ��RS˖|C���H.�Q��S�6X|���u[}����C0�?�}s�>So�>!���r^Q�Ȍ�����vʏ�SΙ�M�C�&�E�a�������Ŧ�7�;�Gm�����I��k�U�V�g�C�քK<���31�Gʀ��}::�26}�DW0��YGw�B�� i
Static task
static1
Behavioral task
behavioral1
Sample
38a58ebb53d4f0379ee1655537e23a6a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
38a58ebb53d4f0379ee1655537e23a6a.exe
Resource
win10v2004-20231222-en
General
-
Target
38a58ebb53d4f0379ee1655537e23a6a
-
Size
2.2MB
-
MD5
38a58ebb53d4f0379ee1655537e23a6a
-
SHA1
bc61185f92a263c6b63104dba912140b62040365
-
SHA256
f13629f3a022b54ff9304676926352ec78f8771a521ee238fd79751ffc49c74b
-
SHA512
509197a07366edb97982b689a1e9b9357f5365b485052533fa84289655253778a22abf2ee75bc2c40b043ea6d6ea1a26b266212c89a2412361a898f391b8691f
-
SSDEEP
49152:6km1TT2dObRR8rcvOXla9reozLvXZuOj6AdtS9YTpWXJElwC:6kYTbbLjsmzLvXJ/oa9+JS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38a58ebb53d4f0379ee1655537e23a6a
Files
-
38a58ebb53d4f0379ee1655537e23a6a.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE