0����t�5�nf Pc@E��WĹm�<:LYq�s�7���&`!�x��!b/��@neB�K��v��� �F��>'�3��2d�����]�'}���mdh��@�nWEH���J��^�)N���ۏ���M�&�>Hgt�q�Xu/���� Y̕x���t1}�<�D`�<��#!6q����d7,FXF��u&&�����1�����MG� t'Ь���?��� � �ԭ���#�$w��� �e�T����C�(�nUƨ����V���]��� �!�a۳�l��n���* L�]-�H/C�h�EC|��������!U'��TKt�w� ��.��-XĆ��6�d�֓y���UkeǮ��t��+)���*����,��]v���v�7��˓G�4�n��䱇E�"��w��IfH��@�7̇o؛��S�g|ˎ�ٮבc #n@���T��QqAs��Z�8��V���9Me��G�V3*�'�:\�=��1��h��g&���ES<�oy��b���y���@�u�Z�z1���W^��8Vy�yQ��J�9�wʨN���ȁ��jۂ��))6H���8��JjG����.%_�%��0������DŘpb��U�������1���D��W4=�K�Z�!�pDS���/�h�\�P� �\���ȍ4��Ѽ���h7�X���-|�Aw�@�h2O�6֕r7�6�D�ҤW�������po�[齌��M����Ӹk�)�Kv*�)=E������ؤ���Bӌ��А(�������^"_;�����=a����m�]3 }�2�G���r�?*�-�v�UF�����X��Y��\��j�b��"/a��c&(�U�s�]tO}-�M[�jyr�Fv����JE/�x���Y�nd��4�y��Ԝ1.�*u���jsω�ceb:���p��.��n[���`�*A���z�݁�.ԟs&:��!����� ���e�R `�i:t�)���a� �_�����|Ƕ[�;+�����<��Eq�Q ��HFM�*�C'�k��͋�݅/kc��5��K�qS����L�Z�d��|�U������,`���s�H��k�g�i;t*M�w���r���C~I&��p��7u������m��㸧�C����ϱa�_W}��T����,O�T��2!b�Q+7�<s\�����4��!=>o8�l�2`mW![J��z�o���6��>#~�Y\0�<V��r�����f����?4��]Y{��ObM�����B�����mtY��=����o( σ�1v��M-ݱ���Ǖ��͵�7��IY����]P� ����8�@{c��S�|fEʘz�>i�7��O�Y� B����6k�`ɶ��vƃ{�O�Ԇ�A��h�����{{�ȃ�A�f5���z�N�#_���YI�ی�=��B���HC�k��ye�q���������&��u]?sn�{�U�h� �-t�0)��V�Id4�sF�jf�n�^�� ����ސ�l\f^�A�4�̂����� �x�y}�j�� �BY}7N�������{Ǜអ�s��As��z�X�M�@ 84]�z�����(��;qCƦ2�'�.����Ն�K?�@�W��7���� FǥӢl ��w�~�Zx/���;SͺȄ2�m �KJ>��2 WC��ڄ�@\ZJ�^/\>�?1[�� �1��p�]Ǡ J9zQ��� l"�.�4L!Vdӟ�^0����=X�o�hX~���g6��*�Yr����q #�CF�d�0g?*#�s�Mp`-�Σc�Q�h�����%�8��FCƅ{�6��!+f��g�����J���X'J��\U��G�b=|t��ã���]+�난?4� ɢ�1��k�ՒC�|"��C=n�,\�J>���{�k�9�~%6-�j�F��:qՖ�����ig3&/̦<�L^ѧ�'�4@���➈E�U4,����XrpJ�t��.���R3��#���%y&� ���AW��dd^}�!��p/-/O����V����ӌ(n�q��/U;�UQ�.� ��Ŋ����ݍ[�ҩ٧�����3��ЖĖ���gG֕/,����5-��@r�0�zI�3�����Z�{6��IA���J�y}�r�3H�/g�@'�j*�|1���:p�{`an�N~�P�����mgU� �u�[���!uXi�Ns�t�Ffwv��^N(`.�.�i������$m��**�^�2SA��;��;; �2�K�A�3)�Mf�4�p:��U�v&?��ؔ���]�(��oM���*�����Nt�S'N7�r�&�o^��U� �0�%�ܦ�$�M,u�\�i��0}8�*,����e:r~7� Y�L�-�������N��j&�9:�寐�u�gj���,caIbX?y�<�Ϧ�̳�b-���J�{�B��E�M�>��;���i6�#�̫�9��Mg��E�" ���6(7�K���V����j�p���\R�tp��"�C��I��{�p�J9��:���n�K��J%�#78�!"��Ex�@�7���!'83P����1Թ�����H��A,��jP��P�_@k_6�76���}�s�Z��A/�MfU���@NH�ِ�@:�%5�DX7Bs����暤�u�h�=���٤��"�����aR%�쟈;W�2��1��h�C�I�������$��b-`mE����k~���K9e�����"����~ߌ$�+�0 vI�/o���:�,�+F��Y+��|G��NDw`or �m c����X��;���#��Y����$���di��R��Q�{\�Q���V�Q�3Z0������W���"��_Gϧoͬ��05t�2�\K����'��F����/.�(�s�),� 2��~$�O�L�q�0P\lĪ��V�*����+�����%ӎ�֤�q�k�<�"�T<\�+�IS��axY����D%�������)D3)�d9��z�ޔ��l�\땪�������G�S��;�>u�SV�����1p�BeBS#FP�en*oAw�L�E )�v^J�w���fC� ��n ���<��Ӿ娽��x���N����m�����U�Jv�}��]1��\r�d�=����:oa.�] X����X����������T�(�����~�p]�oj9�?�����pz�98���6�H��,����+p�Eo���k��D������tA�B�a�L�Ur�$a���/�.���ST7�������R���n
Static task
static1
Behavioral task
behavioral1
Sample
1c6610f0d08cdfaebd0db1659284bd2cddf6af809be081d02af277a6d1493a9e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1c6610f0d08cdfaebd0db1659284bd2cddf6af809be081d02af277a6d1493a9e.exe
Resource
win10v2004-20231222-en
General
-
Target
1c6610f0d08cdfaebd0db1659284bd2cddf6af809be081d02af277a6d1493a9e
-
Size
9.2MB
-
MD5
a4220978b7052f0a89636a6010622de7
-
SHA1
cb2ff6ea0d3057e42a36f0059fbf6cb2caf6d999
-
SHA256
1c6610f0d08cdfaebd0db1659284bd2cddf6af809be081d02af277a6d1493a9e
-
SHA512
a2089f0a90da0a84964887e774a614c192b9d85cb8136184851bbf4556d9ba796d822ee3aa4b9849915a3aa01bdca7dce72e3fbd2f29b9231fcd95fc6b171085
-
SSDEEP
196608:dkOBDql9BT9SyZ0FlLKaqmLN7Xlfh42kFwLHDsh9yA+9:d1ql9duX2Pc7XZpkCHDsnyAI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c6610f0d08cdfaebd0db1659284bd2cddf6af809be081d02af277a6d1493a9e
Files
-
1c6610f0d08cdfaebd0db1659284bd2cddf6af809be081d02af277a6d1493a9e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 336KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 292KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 460KB - Virtual size: 460KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6.1MB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE