��Q`K�AY�qpx����}��'En`iL�{ͨ�=_�{��ϙR�*�^Q.�iq��1�x��ҝ_A<��X����&w�=��J��JB2DC��3�;?=��#m.����U���_ӬF�t�9�u��>_{AS���v����Lɔ7 ���z����Ba�T�O����͘�^�X�S�I�SW�5>-�O!5���Զ�TSs�!6����=�� �������њ6�I���vn�!@'���g��� 8c�s�Rr������in �F؍�*�Vj��R!%]��n��v�S���A�yZ��&c��RP�^h�����{#q�|A��.�₾Kю�� QDд1�$�?#���X���~����H�"5b�uH�7������[�������� x*�K���p�~o������~_2G.���mBW��IH�yd1�#��_.Y�p_S}�c�-X� �nɮPQ~��� ����Mh縶?6���IS3`]���/S��r(�������|P��/�ç�Q�yc�ڌs�u]�Br����3���q��vY��yZ�2꫶h��Yna��2����e������}�dӁFOڌ}39E�L�$��ʛ-9rW ��5GV(��4Z�?ҷ��E����F<�H#��̓��ƻ�O���cv?gu �d͜����������z�N��Ā��FgM�e���'K~�m���*{~�)tZ�39>U��%�"��B"6����X�38`�a���HE��hM��F�.�86M� -�,rija��˽�$9��1D�)�!,4w2�H����j�������#��{ ����7����zk��ܑn�U�q\K+�O�����]�$�K���6A.qD�Ξ����Az��d�k�I���)�D��_�=��4�ь��啑�(u�ވh�BȍV���uwe��9S)1��� ��a7���nks�qt "�����J�* psF�f���ƕ�y��3vȊ�gιP)�4y��H�`���h�W��T ��h�O���vi���ÒFCӭQ!n�w'J#X������=��Rϒ�T�c.��cb��>���X�L� �"�:$J��Ѝ��Ŏ��yB��CJ:ι^�� u=��z����h���#�`���F���Ck?@��C��=����Ătga;�9��P�</3�(C7�jO����!W)�m&)�G�^�0��,z:�UͿ�������cڌ�#䍛ͭ��.�ZMp�� ����٨I�����W1��{SQ�ɔ� Q������ƕ� �`f�q�$##g������>V7�p4�Eך��uz�TOȞ���I��#�w�4h��Ƿ�]���A�B>�l�5!��L�`�A�s�k�� ��#/;�<E��,���Je�#����֛�Y��>u���V�':� �h���;�]�]"Y���sz��Zm�����O��{���vp�K��A����'1���Z��1]ڒ�q�S�ob�-V�8�RT_���_0��V�y���"�yN���n�B���W�t�ĮaR������n�!1}�@;Z����]T|��2���w �?dDo���^������+�Ӓ������w5�R(�p�D��L���{��ުNi*��L@��9=A�}�:Ų��S�>�b�� yѳ5������W����L������T��,��(��������<���F���A}���p��"g��M_� ��?+!�%]S�ix��]=�#�l4��DrG��u�34U<4.v��m�ʛ��M=Ht:��[_���(�(~^n?��5#p�f��H5�!��k`�3�4Ef(|s9�.����H��3Z����� w�H\V(1�:�e�n���=T����z>[�A]й�fh��|C� � ��5���sL�I����SNC�)0�hz'�Ū ���羾E�_���]�K�,��G�j<]F��}ϹTx@�P����x'�D�[��Bz%�;�j��Y�b֟�����F���m�=��&/��W�����6��hu��F}�x�]�3);]��<��){H+���&�e;bA���U�z�`Ə�"��K�*ܴj�'.��!h`�r���Gx&F��P�����55�w�fB�����j�a!i�.v.-�!���?��;����;_�G�;��ó|�mƞY��B1��AE'ӝ�q�/3�'/F"ϒa�����2���`���#�ey�1 ��&���+&9�L�r!7_B�|���=�K���[�.ɾ,Soy�~��i� (�.��vxI�m5�Vt��v�Q0����\�W�����-�� p;pAI�}-!��SxA����w��K�TP}���rz��fU�P�6?�w�8YDH�;��0g�Zf0�&&��3�ع��_��&.�r=N���ۥ6�� Y����û2��T�O=��]�-�5e��W5��� u�>��}��"�*�1�(��:�y N`��ece묞g�B��dM��6��]�+�?���+։�ޒ��x�Qq/���G�fs������^_s��{Y�j���ZJ��2�%{X����NCt�np/KkT�Y ��sC��g�ln$a���i>A��>Dt7����?u1i�����.��O��n�� F�wW_x�+���tJnk���Jo�� |��琹>�&����İT���H�Z�١7_enJ��:��y�r�z�Ҥ�����TY��d| Θ���� �K��kEkf�n�>U���t43�D��$y.p���ix�V�U�s���ü�7ʸL `BDSY���,����X`��>R��ͥ���X��'�.�9���ni���j^�1ɚe�Ѱq���x�)r�d �������Ճ��MG�ђ!���^X8�&�yE5��;���u�:� 9آ�i[���tL`�Y�g`��,�"д��3g����}�<zC{ôM�H[}��:\Q;�j�9BX.�I� �9�<C�*�wI�PU��'vu7n�O�=��]�ב�q#B��+-�T��|�8�g�.#S������:q /#�� �X�!�����x8�O�b�x/�Z0��z ��F�� ^�*o�z����g�w�!m"awۘ,�R��m0fD�U��T���$�M7ݕu�dÍ�Z��=���1ғ�V�sD</�>L�pѓ��[:"N�ŎO����O�}��D��B����a=f�G��W�Mޫ��Po^�<z���˔���,☈�(�ֱM�L�)X�7�uY?�TvC��d��O��)�H����6$₦ծ <�ÎA�1-u��A���P�rIu L�>rL�x_��[��!�(*�3��Mڎu����4os�m,`J>�W�� 1��Im�����r4 �f� �;~��tN���"�����
Static task
static1
Behavioral task
behavioral1
Sample
f3fba1d1355dfc71fa48b1e730726f47.exe
Resource
win7-20231215-en
General
-
Target
f3fba1d1355dfc71fa48b1e730726f47.exe
-
Size
2.0MB
-
MD5
f3fba1d1355dfc71fa48b1e730726f47
-
SHA1
e8ad228acbeb4ea96a49f518c80cf3fbb87e0ad0
-
SHA256
0c5129f7ce0c2140caad284bd252dd57e0eb11eba4855540be8f8f8c992400a6
-
SHA512
ed0c1b71040e24bc6921f6837e842e1e18e939ef6ff00e144121d7a7c3ea2ad5a61b0e72fff20afb9c2345bba0d8633069dc3c28ed643dd571a59de5502ab8fb
-
SSDEEP
49152:pI4U7g149h0826G8K3PNwir5zPd7mtfpubpnvaVfhm6t+8LdR:6E149C82XPn5zlkUbpvalTYGR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource f3fba1d1355dfc71fa48b1e730726f47.exe
Files
-
f3fba1d1355dfc71fa48b1e730726f47.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 42KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 7.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE