���L�QCSա�j�aZ�u�מC-�}z�HN��G������┰����|�|��ۡ8���UY�O#��>UvC��ދ�^��:���;�뷻|���ӭ祖e-�Uj��|8����S1ǭd|!��vP\9�R���[����T�����<m|���;����*p����r�Y� ��":ָ� :Et�����-�g'k��Y��6Vl����c�ͤ����-B� �������p�'=8���f�`ܪQ���N}0K�h<8�]�V�|��ʄa8�}�t�\/�]夳[���V��S��o ��]�ָL����*�V����`(eR�B$!!� �O}��r�S���Y��k��� s�V���p9��dEu����>E,�b% ]-챎:�����]���2�K�=�l0�F����HR+��$��kx�kT��V>����~�he۞������s�$�ŗ���yb9���v"��%itUį)P�)w��I/Be�!|��7��S��^}ǟ���m��Y4�����+OS�c���p�#�A�n� �r#��`�~�a]�6��<���К���0�G�S��6�n!K���ץ����'�HH-�TZ�~#xX;�8�0���#W��t���#�Q���I�&a�<�U��߷����Pp]S�"�r0�F�*�s(��(�����4M,>�v��H�,�a̳��I�qO��n3$����&7��ŲE�G"c�������k�v��S�H4s.;� 6 ێ�c �R�j��u��nI���tt\��X�sf�z����֢b���q|��o/4�f9��>�� j��pW;���d����zǸ\�b���0���?�sc�}�ln_ד�hk��>���|SN�6�_9O�LM<�W�AӐ��zK5:��Zc�7Sv����q��8V�+?���|����7�zdJ8\k�n���h`s�U���Z9|Z���W}A��H�U�@�����O<��-�cc��Z6rh�;��]�ƞ�2����6�����B�8�:����y~�#�Z�E4c��F$�^�H��yx��MErƞ���ǘ�W�;���4�a��$�Y%�xA�ǝ0����`�p����o2��_��2��j�`iϬ�W[U l�.��R J�YD(�i!��] e���UݝB�#�xf$�ۡ|8;"�s8�KU��rs��Hv>-c�#��3���_J�!�q�Pw�&=_q3V�k���M胋��w��i�a`a� ]>#雱4b�9��b��f���G�Y�"y��B�{��%Д���F/n����C�uQ,'���=�*2C��8ݦ��(6�%I�W˹�����X�* �K�@����:�����7��� �KxY����� �[��pל_�[�|E�\� ���6���e,�lT�"�d6�(<�%�0']���0b}y&q� {N�������K��QOϕ������Z#�Yԇ�l_�[��Ie^d�����f�v�����c&b^�����X;�d +�j Jd�?��.&bd��#]�o�V�_㶣��E�v��Z�W b�#x�e@3���~w8���~�9��6q�k�We�7FI������� �c+�C�o��(� A��<a��Й���>�@�0^"�z��2��Goq9*Ϸ��+��o�w�Nݭ�Q>�[�O�jHoNF�v���Aس�_�]G]�Q�9��Q���hb�rը EgB��@��ӻ{lW/��{� �>�4���Z�X�O��#V|���$I�̃?��uDB%�ꢐ�((���2���D���=��^��]� $P�K�/�j����ml�b���{E�\W6��{�����%B/�b)����.B ��om���!�U�<�<�JfNK_���-�5� ҚS�-��sg2Q��� �\[�yE�:A��y�g7�ޚ �9�0�F��wl��$��������_��8ph6*jڤ���<7�^mE�C�����d��;K�H2�ҝ����\a�[4�̅���:o:� ��L�i�8�tR�U�2���g:���}�]d�֟�������������|Yɬ���2 �~a���\����qp=�:�.�]�"�V��غ��Ʋ���q�R�HQ�����'��r�K�1$L��u��)�J���?a�K)5]\��dA��W�sZ��n�F\��~ZE��/RH8�p���k'f���&�u$R���:4�T�Vx70�6����i"x�̄��2�0�8*1��8�[�M�%�3�b�h���=�w�s��������!�H���py��[�v������0�T�圏| ]�pOǼ@?�Z�2yɪ� [/xR��b�җ'�@�5��>��~�~��&�w���6t����N���Z��������^E�a#�X�v�ytG,��R�O�|!��Z�څ7��K�`�d�h��q��r3Z��:hC��F5 ˖A6�N-��T���G��a���!�&�1#��x�����U�.#�_�ЀIR kc�<�To�a��X`��"�P��W)?K��}��P�:"�*���FI^u~�1������iw�TfE�(s�s��L+�T #6�}E���x�`3���.oC��gy���^r�i�W��_��0e� �X�0eJ�����lU�E�6���䢥�y��k���\�߫������U�5�`�����mj�B�� �;���qY/&���ۋ���iH��e$,�8M{��xE���Vٰ���P5� <L�W&���A�j�=Dˈ��9��V����_� )��]������z]���{M,0��%�$Ԗ�ub�sj��[ē��/M����ϋ?R�-��9e�]�,[�Ի�������O�J�O�YP�m�Y��ݖv7EdI���5�L|�3�{�o�`���5笴;ZTd8Xz돖�p��h��'PM�A?!��ٞƃ��}l&��ѭcDE����|�7�ͅ�m1�tg�v�^B�3En����#�B�\fw|�AWF�Y���H2��(Ӊґ�Y��/�� ��J���H�c�o�$�>P�[:���D"��ܙ��u�lQ$g�F��ALsQ��Dg1�w��v�H'�١_<g|�$�.���6Ҳf�"7��肊�UkC�B�����u1N���� 0i�����ԶqQ�2���F&��q�i��Pt9#�:c�)tyc�f�l��I9wխ��X�j��=�GL���E]�p����r^���U�_(��Q��Y~~ ��T���-l��A�lL�u�Z��ޛ��u_FN@���p��t����i.-���?RK����'�����L���=5Lr%I���G���cj�}L������v<��=�� �S+�'=Ù����4jk��jKCٗ�#�r~��a�3Yl4���-���v���Y%J�T̾�P�BX��LX�bKnأV�*��%XӞ� ��E�y�~�=�� 0�>�!<���϶�(�M5�l��lȾ��rX)vd��m�3�F-�P�c`F|Q�� �u�����'&�8�����msƁ���4�$$���QL햓2���|ԫ�Ŷ�
Static task
static1
Behavioral task
behavioral1
Sample
37e4e283445db6066854aee132e6095d.exe
Resource
win7-20231215-en
General
-
Target
37e4e283445db6066854aee132e6095d
-
Size
2.1MB
-
MD5
37e4e283445db6066854aee132e6095d
-
SHA1
11295ea52a7ba4891e9cbef3a88250ad9f0d6b71
-
SHA256
f2b5d00488d6fa30d54279ccaea8452c73f261f3a9888451d7131926511dc128
-
SHA512
226f7c17127cee23f557121b09a024a584cb3535a37eab157b4116f38155140a8ba944523a77e25fec43f36bc218ad7196a16346ab5f22a63789b5b26bd6c5cd
-
SSDEEP
49152:gvbq8ig/ohER/4cnr5R2EkewQmrY1ym5LENV:gvbq8ig/ohEnnvF0t4G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37e4e283445db6066854aee132e6095d
Files
-
37e4e283445db6066854aee132e6095d.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 45KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE