S��Փ\�Y�A��*Xy�en���h�nj���]����~�w�� ���ȩ�Q���G��w<���N>���P�s�$�n>�����u�n ���uf�KU��#j�'�8]77�J'$�����{ A�s�Fq������9����Z`���*?oO�s��+� (��/W���RA֙�n�����3lw�Iڷ�N���5o�1��>*:���r�߱{��4AYR)��ss���<Z��|���e� �$�]�^��֬� ��� jD\� wX���,R U� |E�kb�-o5b��� /u�o�R(s��� ��)=��jQ���@���N�<��$�Q���;���L���m�3Wq�b>�˹��c%+�3*��H|��m�R�w��Q��}i�l+ ۶B��ѡg�G�˭m���^������a�ፏգ9�Q�Q�2T�}iП�2w��9�Gdz�P�^-��쪇4�<����g�/�W���E7<�ݹ��Y)����X��+�P)ܜ��� ~�û�`�։��Zs�HvA�^7)���Ѻ�T'����I��ŸWFw����q��s��$i�pl�"��_����`cJ���T��V�a��������L���97��)6S ��ɂ}��]Kp2]�þ�&�ކW�Y�#�B$%�=�&eaP���]TV���H��m^icc���W�Цa�Dl�ɤ6G����mˇ�U2�;!1��>�ՠ��-���0���,n{Z��;݊Sn�`�0f�Z����+������Nk�zpx2�ٻ�v��"�n��kt�?� bd��}���!�#��ʦ�QXU� ��9�.U���\ñ;�s?0:o�a���u�^o�6�X���,C 'hb�5�3�&s7@�i�Ð��L��DZ��ӧ�����c<�Ml��$�"��A��\&��m\~�e���z|V��$R��MC\ O�x�E�k�P�n���ÃWй}�%�1S�3瞥?�4 e�g�u 3��9���Lc� Dː�)���)�]}I%�-z��^j����)�*aa�ӍɞG0)��s�67� 8�bQ��j�Q�z���1�ͱf6]ny�9� �¬���C�V�5/S8��fet%�G���;��9?k��f[Sb`J ;y�%�c�)���9�O'C�y��L\��ޓ�VF����D��}r��n��I�P���#4���G�1J����x#5�Z2 z>)ް�N풯3�jc��>�y��ĕ�k4j%����Ø:{.����ͣ���u�a�ޗ�S$: K�}Gj�?h樨�pe�{D��Y�¶����Lp�p��.>����u�a9:=����l��5��R�< �ֲ�}���r/e߁��ta�����5��3kV*�4̯�3�m����ũ��<��<�>Ht�y��g�@����cC�x��.�A��i�w�P���0�V�:�>}�˒�+�$�v@cF��՛(��@�r[BϺ��!`���O��SijӤi���5�ѿ�1���f ax�t]D�L��������F���~?�ez��cS�T�͇��QR���Lp�z{��oO�!�Y!����������P#��I�v�����<�N�2��6���ĀS5p�?��mJpB���i&��>�����R��v<�0��o4��>����_A��2�H���Ј՟���x~�i��<.g�T��v��o�X�I(a�wNo���?���ބDz��W�v U����*�"7��C�.���ˇ�T��Yp��2e���~g9[�e���˳�t�?�F�V��ԧ���^�s]�H�#�9�1"c��E�δ?*r8���~�*s���:D%u�[؉h�ws��d��y�c�^�K�v�C�x�D�yY�=1�j���QQx�i��|:���Jm~��aD ��e2���X�� L(ຄ���������0���OC�P�<��'a7e�XI�-�=��y���ֻ�D���$��яK"��P@BU�� ���,�?�/g�pp����Ф��E*"����-�C!¯@Y���e��� L��̖3TD]1(P�$�Z���e������?����LX��B��Ʊ�%�O���)�#}({��L�P�N�xvMb�ͷ�����=' ��&ѵ�l�����|ğ��([�Vnj���??4Lf�216��-y��ћdRX}�p���Y&Rދ@Bإ�ۉd��\�:�V�,䗥u�'w����1\.��P�u2N�ƲA����{,���U�_�K:��d��u�_��a�����Ll0$�"�t����� �7��к�R��C�h"L��M��y�����;�z�.������yϓ@5� ����)�L�)�P�I˳������fl��4�n[-#����>#�B�^�U��ˠ���v��[".H��b0̾��PDzj�)�������Y�(A�i�� E���(h�O��-��s6e�z���d�z)��F����o�S_JtG��ʵe�����M'��ew �i���b^y)�j�̩�sO�W��}p����{��<�,��C�2�M0���B� ������!ʢ�M-ܤ���W�r�������`?*E?z�b����v���`��D�v�G��+>'���!Ψ��ϫ��:���� �{%v�EN����F�,��L���.�U:�H¬��H{|J�zh�c�ь�����4�T�������O�s��+[�����ۜr���d���#�c���TzN����ϳ�7��|�FMR{�1Ҹ_J$�ָT�"#-�G���D����\Ny2�eǭc�ϲ�m�Q��X�8T�)�:�HR�īP�T^��ݞp�N����눩:l��;V��nC��IWt����c7��y]���kx|�Y�� ��t�r��E`^a� ���d֥���2 c�� �E\�פ�d�؊�r�b����-�?Nf �nMNW��&�u�{�N���JW(jJR��E��W�n�6 '2o��%ưF7X���^"ٖ:ğ�R'��7��i�-FO'�v���)5%�5pK�X#��; �,E܌O}���H��0&�� '�ǻ6��xb�
Static task
static1
Behavioral task
behavioral1
Sample
3ce51b043fe138128d3e17feb846d4a9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ce51b043fe138128d3e17feb846d4a9.exe
Resource
win10v2004-20231215-en
General
-
Target
3ce51b043fe138128d3e17feb846d4a9
-
Size
3.6MB
-
MD5
3ce51b043fe138128d3e17feb846d4a9
-
SHA1
4052414fcf462b687f848ff4facd66b516ea70f9
-
SHA256
dfccb145f0f9de4cc3a41cf14ccccc4cb30d1493a93ce77e20e6c03bb3c81da9
-
SHA512
5587a916e1ea7d30ac0e96ef405c5110714877f09942248e2440fda9df862b75ca335b3c31c5b30c3619d93ef015a85af41bed3def8f1fe1c7fa17e94fe74240
-
SSDEEP
98304:gyRSfHzz70fakPZIhElu5PPVtW4j0LmV2YY5GmOY:5WHzz4fxhIIuh24MmVZQ6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ce51b043fe138128d3e17feb846d4a9
Files
-
3ce51b043fe138128d3e17feb846d4a9.exe windows:4 windows
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 186KB - Virtual size: 12.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE