�Q������c��(�s�t\Z��8��w���kJ�=J̞��~�D�C�-��u����X��#z��}���%�+��LQH�����h����� �fVM��\Pr���6����m�m���� ���F[{�gg�v�іr���ec:~�^�Y�Q%�1�#�^��s�'�nJ��H���d�)=�<⮊v �t@e��J�K�g�H"Z��2�=�����O�kj�y��u����kD��ݷ�X�w@�8��a/3���~��LSWC��!��%�,�����fR'�ܐ��sZ�5��55�ܯrW��M�A����oBoX�]�䪃��i0K�^��6�u �6g��)@K���Y?$�C����X��vN7e�b�O��DY'��?qJ�Cb���&�����#��ke��?~��1�������|s�Y�Bec���=鷇�/�������0`�?� )���u��X���:����âJ�XNz�&���?���{.��rkPp&'|����f{�\O�����o ���r4a���V��)L����ZF&O�~_v�4�axȊvx�p�*�������|��n����ˑ��\������g����E(�nnP����8/ �?��(o�`��XJ���t�R���r:��f�G�|Oj����x�hU�ح$���xZk��ls��t̘'*�K�a�����A'�G�y�?T��v73r�u�мJ�����QF��-���:��;�h�s0�d�a�`������ls�-k��5>m����wg���R8(-�9���隳�{'+��I$[��p�܌\x�"b���6�G��HFAWzM^RIט�&V2&��@P7W�fn�i����O+�3L]��l��}�,���J�pBM��+-��{�6�e��*UȔ�Y�[��:۲m��Kx������P�M|��l��n)A?�|#)��sh�ܤ�+q�Fv��c$�|gN�����y?f�EṍqW�i�T;� ����U����$<|��G^b�����$����ʵ�s[ %껼J��P����yGɮ��R�7�51��6��p'밑��b;�9�F�:+��4���S�$��������~C�s[��t�=�~_ 5��+Oa�&�M�\(<����2�,�c+�Ί뉡�i�m?�����Ê�(�#ԣ�X�M��&���v@E�������V�.���z�ig$���k�����'d�^�b�zn�f�ɠi�&�R�ul)��EE�r)/0ڭާ q10�ib����;.�i�������s�fȒ��ȟ���Y�.��\���y0���j�"Ql��Uvث�W��N:cx�v�-A��;L~���P �MF���q��ų$KD4����Wx��r��@��-� U�r����{�įa�oS��,�O�;Iԏ�[_�e��� y�|��XBl;W�M�+�?���w�I��SY�Q�<q�|�K�E���py'���6`O �a���D(�f�N��������>��3��m�l���3r�Sr�uӚ�@E�1n�ΐ���({۞��Yo@��6��jR" QJ���33���g��D��Po�!��w�r�`�_��7"6M���`�=��kg��2�L���Y슥���{�#��^�\|�\x�K�&�X�˧�0�g�V��\�1KY�o��/��je9�@��W�s�����n�+��L$��2��>�����K��͐p1��74f�����9��v��1dR�w"�i�N�c��$`���rA�EU�/��sx�%0�<t��ep:���L~�sc�����:����d�1쥧�6>����ʃw�ɦ˳��,<D#�W�a� �͘��>8�h��rfe����.ݔ};͊���v��۳~Q{�݇.?B�0�}��hm� �c�쨤:]K������!dA�nr���x�i��dqPE�N|IZ�H��DnT��A?�Ը��Џ���.na����w[o� {���c�{�tI�-r�q��fېE��`3�\�Iu������"��%, l�rO�떒@B�I��V� � �b�ߜsZw��9Sz��Ǝi��0W!"�~�>q� �D���\�I�FhA�?������jg�ݖr�����R{x.e�*��s|����K�3���P�����I?�!�[ƒ2�e�!�l���"ٰ(��N�ڳ�k�8~���ܦ�bt�����@;�y�> Q/���x���+0�?��O2����O�V@s\�xK��L�o��;�v�D_�\p9�ۨ�A��yBcf�oc��ɍi���?YT�Ծqr�0��Y�_-�KcQ$�STa����� ������.p\�&� ���Y�&٫u���\bzi�^%�e��>�D_�� �#�2ƐɊS����ZQ���Ynٕe>)�f��mGy���W���F����"_�dj7�r�0��u��yj����z���i Y�v�b��{�b��z���\8��u��ov��u�n=�1�}R�72��6�����I|�*�8ye��9/�Br��[��t��� [��s%ђ̂����xl������N��~7N�$�8+t}t��й�L;%�lG*2w젃�+[�6����_��/�������Pr�Q��Fl�5�ђ��'$���p֖�T�AB]���{��k`�]��*���Ux5��,*_ z�rRqk$%����ԐٽnC�sQ������!�⃞�T欦agσ�ڑ\[���x��w���o���z2��F����秷A��s�ʟ�u��˚�q����d�@:��Mx&#�M�덉��99��8��N�ls=�mY��_�5"������Vû6f�Ȫ�YU+PTb�����OW:�Ȓ19{<L|-8��%���8E&T�z�v�R9���O$�l�U��ȥ.s�a2�E�����]܇D�B��E�����7Kt[(�p���ó��of5�� ��͞��;2fWTۮi2�Q)m�d;Jln�Q|WQ)�Q�Q�0H����4��+�'*[YYB̬�?�L����:�|Ŝ����Pʙ����z���'�/xzu�@DJ�>��]>�i����C1L{d��Բh�X�.9�oW������ƈ+=�xu.�S�'��G��Qp����P9N&�zsV�z�h�y��;�r?}�g/M�Jj^���a�Rke�?Nl����,ĪA��2e`/��l#��J��n��z���InTw�K����e�]^c�)�,����C�̓]��!V�Ӕ���&d 0��Uc"�Z���srI�U�����g��MB� #ז
Static task
static1
Behavioral task
behavioral1
Sample
4553b8cd3e1cdf2254a40a03e045ea9d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4553b8cd3e1cdf2254a40a03e045ea9d.exe
Resource
win10v2004-20231222-en
General
-
Target
4553b8cd3e1cdf2254a40a03e045ea9d.exe
-
Size
2.0MB
-
MD5
4553b8cd3e1cdf2254a40a03e045ea9d
-
SHA1
f129ed923eccd7da7dd7215f0550753afa8907a7
-
SHA256
b0b39bb0d782be94e8ce706e2d5678fe293084ca87fd0592f3a561ddbe87c43c
-
SHA512
ad1fa9f67bc227697bf7d52e3efaf6a03d4e403f404ac57da2b3a7d98c59cba8f39adac0617ab32bf450b4802513127da4c3fcf3d9bbc71736eadae766b2af34
-
SSDEEP
49152:8gQ4Kza7MTeRGuQj3n6ItHEpusPgPdHqn0YyHoSu6:8ysVTyGuJItkphPgQn0YwK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4553b8cd3e1cdf2254a40a03e045ea9d.exe
Files
-
4553b8cd3e1cdf2254a40a03e045ea9d.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 42KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 7.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE