��������?w���χ���|��+*�j�Wo1g�7����y�� A;(�ip�5�է���% g���j�_�A+��x3R]+37O�I���JO�&Z�gЬX�T�d��Jɿ�����Ya[o $~.k��� �U��E�Ų]HD�d�yM�&�~�2!���m�$�WF讜b�����Ǚ;ѥ��N�����?�}�;&������kC���`�����:��}w��������_xL+�2Y�������_��q&�b�F/ִ��6� ��ً���rG��G]$`�O�!�)���fJ�!$��# ��d�u;�zC1z��D�˪l���O����fêS ���ja�����34�!銍Y�m���*�y^0l1 �f"��m�[�8�ó�r��9��P�\�#�� �xer�j���m�मm�t�֜�*?�o�[j��{ F��xm�)������ �QI�}!��gn���T�>�fX$J���s_�,�ൌm=�/*|���D!f�-e��?���� �A?LRQ�ҫ�Z=���Wx�f[���$R�F;х��H�/oW��FPK�S�cn8�����Sfr���&������Lj~l�/%nUij��)���tfd d�XJ(��s"ȩ�v*:(-��k�PH�R�~�2�����K�w0'�"y|J��-�Ň�.�ǽ�W#D6E8�W,q��{3.�L>1D���{����f�Br`�zj�����|��Sf���U�a&���[B�������V� �_0�fږ��.W�ia7�Γ���M5b���8����M��t���.^Ɔ�-Ù�=� ����*�h^��v�k�����A1e�kޜ���G�o2�Қ+� *n�L�� \�B[ӣ�\����ظl*��Ϫ0�ɫ':�T���h�%Z�|�E��;7���������{D��FƋ�㾦����;��N1���J��Nj��� )ۖ��ɜ/��ܴ3~�VO c�m�i���bBrUn�JC uGZoׄ�]]�����p�0pf��7=k��h�P[-��z�9��4�rI)I��~���lL2?��{c���������{�NO%��ԯd�c[ �7O��U�Y���r�������U��n�B�p/�;o6��{o �����ڼz�I1{�1��0"B���6��c(i��*/�%�'H�Y��-�6���4Ҷ��VU)���Gz/��Ќ����O��og��D��N�zȓga�tB������V��+�ߧt���\��n�r6�?'���\ �ܮmJ�����--<bY�5�%��� g���H|$�ޔ�ƻ�l^�eB� }��=нzo�F�ѓ�л�Nf���в�_�e���)M�<I�uG���������P���LR]5U�e��>/L��0>�ݮ� 6T4/i*����f�Q\�s���D��.�~_��3t���aa��띈�'N��* ���Z�ö��$���P�/9;�^�Dg��L�,{c 5��6ҡ^\ �_�͞ޖ��?���/R���㖏�Y���Y���sy�%�Z�ɞP?L��0i��/��&�2a���RД�������=�-ˊ�y�:�yZEN���-OjE�f'��� >��-Z�1j��R_�lLъ����)s)}X�� �me�B�� n꩒������0h����6Wi�TW�k�~� .���Gb��k=�SPw'�;Y��n�Xq�Z�:^�S�P�">���m?8Tt� .�K� c��5,���#.�8n�9w$�#tDD�g��������3�$����+T.�R�C�0�����A�.c c�ZѓPD�,�=o�D�Nr�K�f�J���on��P��T��H�=+.r���`z��O� �P V6��a�M?qȯ���Y7t{q!�gd�ۖ�� Sp(����q<���?K3vቈx�&��p}�D���qH, ��R�l��;w�@m����5! mi��)Cs��6����z��� U�R�&}M�ɟg�̓9J����ޣ7�i���C�W�^X�8��H�[oh�%6x�h�j�o���w� L%������0�d8�v��ќ���V�m|ҲV"iR�M�^�������2��K��h�'1z��A�;s�����+�� ����f�XH���=4�,��6Ѿ J�.�7�:�l.��dž�l%F��-/:���{cÅ ��|�B���&��l�F~���+f�����������c�q`L��n��C�Of��:��@�_��۟��Q<$�U���|�$��d �p��G/�:G&��C�ikԈA@I#�F�s�x��k�K~V�=��c'���^�J�I��[���U��8d^�S��=�kǥ+��Wɼ���]%����z^'��<y ��M0�ؔki�a�×��7�`*�龢�g��P�Yj�I���P��T�1��sZف�r�$����j�]�<����EL�Wq���.�}� H]ŋ����e�YO$LZ�A�Q�<�4�$V }E�dGl#T(�1_����=�?���䕞�T0=g�V�� ��[�96<���*̾P�����y�9��'�go����o�=��"P�0,? ���<&�f���N���G>=0SE�Yp�k�2��䀰�fW<��EA���1�ٸ9{Nz��^--M�$���Q�m��ԏu"�¨ab��$ ����t(����� Д/�)H�?�Ybk:�a�]�E�����쾦����*żY��\-�=���=���8���cM�o_!��G��QZ^��t�`�q!�$8�4JKG��������'�X�H��x��w��%�ͮo���B����Uz�4����X���K�H����S%�$u0����߂Fҭ�Ě��֟b���k�b�GƮ";�9 O|>_D�U� v�`F�����D���C*д��p�K�y0���F��J3Z�� �1�+���� r �P�]Z�RZ5��@��O�@.����'L����jH�^�*ˎ�_�|�\M/��ȉ��BZM ~i4 o�,��5KQ�B7I\��� t��D-x�Vٞ�,��(��ѱ�!]��b���0�Y�5vH�G�{�����
Static task
static1
Behavioral task
behavioral1
Sample
53a7234fc89447e92eda24b79acb9f51.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
53a7234fc89447e92eda24b79acb9f51.exe
Resource
win10v2004-20231222-en
General
-
Target
53a7234fc89447e92eda24b79acb9f51
-
Size
568KB
-
MD5
53a7234fc89447e92eda24b79acb9f51
-
SHA1
6d47059c61fcf48c76e35f6c7081b1123f36ebf3
-
SHA256
e66fe272d604c711a19cbb8baf74174457fcb8a2f576d8204848c462eee092a5
-
SHA512
ea03d29ff34a291be494dcb296a95779c42d86b4a3529856c332fe290289b74dafd3db15eadfdaa90fe332013ecf2c925d028742ea6a5b809dc09443ffcbc57a
-
SSDEEP
12288:1i4HMY1l+H6kWKx6t79FoU/2UhKuHXLJV14d87GU92:nHMYTeT6t79U6KOFj4d492
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53a7234fc89447e92eda24b79acb9f51
Files
-
53a7234fc89447e92eda24b79acb9f51.exe windows:5 windows x86 arch:x86
23bc872d9748935e87c63b48f160f3d5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord5261
msvcrt
_mbscmp
kernel32
DeleteCriticalSection
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
CharUpperBuffW
shell32
ShellExecuteA
wininet
InternetOpenUrlA
Exports
Exports
Sections
.text Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 736B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmcucuc Size: - Virtual size: 520KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmcucuc Size: 556KB - Virtual size: 553KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ