�#�b��i^�~h�岌�b��&kY����2(��{�G*bە�==�ǃn�f��k��0C����B��;X��H��*��)���洤'!��˟א۸Ɂ0w�>�����g�A��OD�P��@*X�O~�Z%��WnݰN�S`&Sh���O��(d�=�9�7�aP��8�v6�� [D]ҫ�2a���Yf=�b2=^|F���nQ�d[��3`���r��`�n)B�7+s����N����sƅ��.��݂]D2<��s=��>���+~-wz��9�թ9%`E�+3��.��L1F���h�i������?��?��SР�X�������#�\�2V[J2m�D�� .�yh�����E�pmb�����.{e�6b�Q� �Ap w��������Axvc�'��3�[���!�R��9�cv�gO��.=:]B�{ #q�A��}����C�^�j8UK�k���ؠ� pj�4G���{���C�ܕ���� ���'�H}Vf/����I;�*,�hzQ���X��<�Q��8����P��@�:$g##h'�lj���!c����������˗���/�!esY���x�Op�L�_��X�㒛e�c!��<�C�"B��U���������w����] ��n���䓗�$�)�WC�vO ���:u���6��P�'���v|��V�:*`�o��6�/��� ���?.����G�D�ɸ����.雖m+N�y'bf������ԻO���r�9֛��+� º#��{�]P�v8���0[����1��Sqg�L�cw��[����d��ѝ�,CRP��ᯃ�B�"��[@EBoDY������0c:6�'�yk�]�вɔ�1�it�� u���r�6q��/������<����q�qYv�\��b�"n78{�Mò�Kh�A�i=����h���j�����%�2� q���}6jZ������N�hi ����ځ�N�I��{8�3�!vRv��=�� ah�55 9��T�S�(�71:������4���p���jD"�}�iS֓��zc�^}�%�&'�J�s�����cwH�Em��sP�Z!����z���|�}�_�w9�})�ס����@g�|g�hp��!Ah=�͖���a�y�`��*��R>����g��='(�Jz[w>��6������F5 �\�w9TDM=����c�ȵ�i�H�M߸e�|B�����n���1�,���S�8� I��yz����F��zC~����~G���T��5I0H�-����.�j�g�q��1�ώd�̇�b-�����/��?2w��Rw�s,��Aʭ�a&~d�>��p�%�>"E����Y����jT"��"n`��q��-*N:�R���B2Q��+��p͟+��h|+��!��^��oG�������x ��*��� 3���0�E�h�e�ߗ?ke�܆uI2�����(��%}�w�5���r�r�r��b9P�G�z�M�k��B�%�:{��Fu�9��N�CQ>��~�@&�e��[�!3���4Q�v�&�s_����"���~E�rt��:A1f)a5*�xe���c���:����"�Ei`!��^ ����� �Ϸ���H4 �$�Vݬ��͝�U}���vP��b�{r���w�؟��jm06a=��@[�*7�#7Xr�AG�r%�> eHN�a��p�T�9 7 ����^yg�5�7=�gn_�p��)>"�蟎p�X�5"��! cbC��z�Go�U�,<��}���� ��_&h�:v�}$~���+;�~a�7�*�'ѱ���V-��6�f4Bz!`��yݰHX�i���x<�#E��m�v�����4�>4��Wj�����Ne���[�m��fϹ�X�Q��[������� � ��9����ğ��{��q���p�Z��S,S �媲u���2���>��_tw�l�}R�����1m��n������(=E�|�������A5T&�'q�wY!8Rש���˘e�pƼ��&��Q�����3�^d@G�꼧}�U��[խgv^X���B���uf5�z'�g~�ׅC?U���@�>�Gc�G���H��71�=9�Pd��/7�ߌGC[ؼ��P�Ot�ˢ�N��ݏ�"�/��-�z��/ʹ��`��������.l�����*���"U�Vo�Z�A���*����ގa�Hȶ���ݧ�T�?�0��n/[�� i�-��{-N�!�Ռ���w�_;/�[�I�}��Ӹ� �[,e��R�.=ʭ�$]� ����9��?G�l|HN�&�d�� `E���۰s)g��[9����)q�?��'�Yq�u�c���rJ4����{=wE��c�s�RB��U�����6�b���^�^7�}��4HѢ�8���"�)$�V/�����<���x=�ѤZɖ�ę[����ۣT1 ,�W�;}|����?�MC��? ��&ORs�����,i�?\vxg�l���_�ꯛ+��uc�|�/N����>�(2<;���;����:�]gMZ�6X��(�$c�{쨱�� �DH��q\3���x����[��E5yI}s(]v�O���L����'�1��+��V�S�z�BB���]�Q��:�rb�^� \�̝��R�;"��t�2҆Z�a�N� �:<�� ����4�WT��d� �,ȕ�3O3��B$� z�!�C�GP��f����$�����i��b[�Dqh�DlD6�|2b̓��u�Q�sPt����ܹ������I*S���n�m[*$ǽ�N@>ޅ'W\�l��;=ϗD���K度����<�����i:�}���fl�D���N 322���hg�+��ˏ��*�a>����7�S tZ�z� �� �'�:���q-!9qP�E����0�%V���졦�)���0�j�Rw�V�>y8��2N^dzlD�V3����;�tq!+�`����R�v��_^�{�?"k3�r$|e+����&dK�(��U�p��0[�|��)�Ԋ:�Q�<y"�P����7��Ĵ����y5��^� ]�����+n:y��ф| '�A��t�&jӵݍ�ស�����Yb�:@ktK�:���9�h����Ym^o�<-��>/OAO5��pz�s�BM�]D� MzH��������F!�bP�ۓҋM� ��eS3,����Aa�Vi�3����b�@��q�+�>��; �\��ph$H���l �1��}�~���K��M�_V-T���[���������rl{��o�>{��5<e����ƯL��Y��S�\* ��_�@)���m����nOBjgw1��%nF3y��=s�$t��?2�g�o�b�[�����%x>M���M� o͡yh����|����?��fV��bx������������w���ᥓczkj�y�By��p����:(E{�$E�ח(#%��������?�����b��^F��#����*��՜�̶�N��ANn#��|��j.��!�k/L$�����REeb値b�<�L�꽪p6u��Xv��H)|ߧ�=�U��Ƞ����R5*�{�:�K,�Q�J�s,E�K����rf�+��b� ������c��_k��4�Cm���t���!�V�As�%�sq�"��+��S=��bޠE ?M�7�SY�(C��ɑ��X�3�ƭtk�%j��:P��ǀz]]��>a���ڸ�*qa�ץ�Y~�� �e]�*&�H�9p���7��g>�he`&��U1���'�)N@<9�D�#�#�'��\S
Static task
static1
Behavioral task
behavioral1
Sample
0A50F20D9399E3E1EEE4EEB46047932F.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0A50F20D9399E3E1EEE4EEB46047932F.exe
Resource
win10v2004-20231215-en
General
-
Target
0A50F20D9399E3E1EEE4EEB46047932F.exe
-
Size
5.7MB
-
MD5
0a50f20d9399e3e1eee4eeb46047932f
-
SHA1
73499763e46382a4fc841432c7f0d033a65a993a
-
SHA256
6fd198ca0bf7ba6b2e2dcb365bec8b647a8f49e7a44be1aa610b15e17363e7f0
-
SHA512
26980222bc3f73bd7d935f58208eb73aad76c48c02c947399ff85326ff231299fc21323f6feba759f4e13a73dd5c33cfb67811095cdf538020074dddbc2d4d5d
-
SSDEEP
98304:sWuF3Gd2tpnFHNjHNZjT6nRhe6ETlBH4bdql7AZ3F5h0Xjldz3XYPO:sW/MtpnFtjHTohexz+dql7c15KpdzoW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0A50F20D9399E3E1EEE4EEB46047932F.exe
Files
-
0A50F20D9399E3E1EEE4EEB46047932F.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 82KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 19.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5.1MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE