(�hs.;���F�^����*к�r��@p� �s��m8=�0u�?����M�:5��>o�B ,�P�_���١NX\�jA�P���t��W��R]��r�� 8Q�Y���l�/[�5q�ը}&����֚��ڒ.bx�-8vWq'�����/��#�*�͍I�>���+�-3�(!�=L8d#�+˹_�)!}�G^�kh���������L��������{�cGL!��!��/A���(u>eH�1=��3��+��s���l�������y��9M�0���a�Sv���b��[�P0��3�W\�@��Z�H�(+�G�$iB��n ��� �'=�ó���ͣ��W�C0�!SKE@��e���q�.����r�(�E�f�v�ׇ�w�d[N��j�����:��+v��.��1�_��� �d���<)B9$�ev�[��<`�"岶�A>��=��wdOfNJ�Y9c�J=/���� ���D+K$ ��П��P'��7!�R�S`�����(�BD����Z=���Y>�"��9� ������f���E*���59?��5:K�S���šC�UbN@ϸ�+}�o.�Yo�6n1�,�.¥ ��Ō��N��6�TKk�w��>W ʯ�:�>H>nZ�I̗,������tJ�*���%�<���mP�C�����.Sk.;�a_�����S����Vo���TkEf0�PzQ��y£����ߋL�\�#7s� `aV��ч^����s��Q�bc�Q�>-8Z\�-e���9��0B��Ej�)�耷R��4��k��ѥc����jl�w���r�F3�Uk $� x����c��� �!�<�I���5��o�H�I'wi�`,�����O��F6'.�N�Z��������QV��@����6�DN't��U삅+�듃�[���~��?���F�AC�:*n�0�߯�c���u�)��`�;�!j����x�D<�w �>g����̭h��"R�'4ߢ&����־���k[����\����g�dpduPG9%'�H'�������O��D�b�-%Dz`!7r�p��,`�a���[f1]@h�3J����X�>��´�bĞ�IWח����������Q�u#�"���|P�h�I�#j����Y�>_;�� ����S� m����"p�4�� ���N�;�K9.=q~K��{�2��dӬ����*w�&`�=Z�T�����ލ��Q�y["+�ޡ�#��=Fc; =r��i@���ENS��Ð�a�f�f9x0�|<�L��Q�e;�.����|�A2U�$�O;�`���S+� �k)I�&���V4q�-���:r�Iu&ᕣ)S��p�[f���@f�w�_��kǃƽ�tb���En��D0�Ħ���9C��C�q ���2͏� Č�S*E�9. ��i<}�[�3��G�fa��d� �;�@��,m�G���{��0���AFSU�"� �˩V�l���I���h��?[�g�R=. SX�`#������R�]�#�K��J{/�^:�c{d��/� �Q1a��� �U�����C�Lq`�P�j�L�Q���i��=�qԡt�~���C�C��W� �B � @d�ukT\W:̺�z��$\d�G'e8JcY��y^��!�]."���7N&� A��'����e���f��F��u ��/� �/�|x��-���e~-x3A����?��e������ߞ��W�X�Q6 ��XX[�:�>:��iJ|pl��"�~"*�f���`jM�c�~��:4��:�/mX$���#��ͺ(��C�up��0��R�*ފ��7d�%%���&�(���J:�c��l�E�6����dn�|�G3�DG��R�W��Ρ�$�+�����J�aksw~�/]D\�����@� �W��4-����g�u������?rg���HQ<�Iݕ;�t���ʹ�I9fG���q�A����]�����P�����2_�5G����W��KjO���䨵Z�/D�g.&��ԏ�Ğ�x^n��?�#�njv��=��%>a��ʙ��O�T��+7�j �!Q�4-�-��r�����֛�9�Նa��;�� �>�c�������l+n��l#�m�+��16�%S Pmtoщ1��o2k�k��f*z8D�m�M��� ����uEK���=��#��*��Ħ����������*�8L8(Ɯ3Z�+t&yo(���a�� GD�����h��BO@:�ap%� ی\2�=�����Q����ѓ���0(�I�A����m�i����}h��5���Q��R�]������L�agk��pk�$c�g�x;�I �-���� ��EN��Z��J�Yk� T��� �W/��a���������f�Pɵ���#]�a�q��)���98Zjڳ������%��X8�Z�R<#�ΠӤ����QN��f����D�z� �����'ÉFɿǟz6�`TC���#�U�P m�=羡t�x[jF��'o�a����a�)���:̮mt�Є%�ٸ���?P�2 �/#�������7 p=y�".۰�Лz~�6^����l)�*������S}�%�24GN\bSګ�v�~L ���)�3�l;���u\���!51�|��- �65١q�O ����F 1��cչ�d}Ӥ�Z���:m�;�O���N�T�Z�����fG9#������s�7������Of �W%�*�J #������lO&y�b^ѢhKQ����O��`J�v���'n��u��pGv�B_%����x�Ǒ䵗שۭŔ�jQɳ&��c��T��=y-;g_<��U3�x��ER'hl���!�����8|'5�gl��ջI��?d�7�<R�rF&���`qo����,� O�4��ɐ*�N&j�/���C����bwn��~�C�����&���%����mΤ��T-�2ibyֿ*T�q��^��J���n-<@r�M��Cz�ږT��������!�����v�;�������ا��^\�O�*A�)��?��&��Z~E�jP�����r�Aw��B�LQ�C�tV��/�~��z����W1и6� T�7�l5Dr�����#����`mH��=�A�`��}��Nw��D��'���#�mO%�(�N.�`��#g��W�h ����������#|ؗa��#*�F�$$�'AϪ̎3������Ȫ���S�f]\J&��h��PR�'%h��{1NhN�Q_�V'3^ @��s�"�9�c�:����\pV��Z&��J�{���\�R�K$K�r>[VZLs�`��oX����� �����ʴ]�U�ݺ���ц��@�8����a��r����4��k���.�C7W˄p��f���"�� }��寘.2WD�.��װ�Bh�"�����V�9/|����Y��)���dE��{$:�� �pY&j���M�a)��(�4a�A�w�agY~I���>�� -�Jo���x�p��-�G.����9V�8ݹi��Rph%����zD�8�G��zƍ�@���@��Y��Hr.�%�<�����ycS��d���H��8N��&�䪅եD&c�"��}�݇>w���X����
Static task
static1
Behavioral task
behavioral1
Sample
5772e6f313ca3a6539f0c6031a92f716.exe
Resource
win7-20231215-en
General
-
Target
5772e6f313ca3a6539f0c6031a92f716
-
Size
2.2MB
-
MD5
5772e6f313ca3a6539f0c6031a92f716
-
SHA1
6e20c2220a05c8cf65669c92752f234ea15b42e0
-
SHA256
6399d04f2077b45702de8c54e39352e39113f5b2300dcf049d97a7269c16b6cb
-
SHA512
19b3d0de2df13dfe8424d632e60ae7d086c56f926e2950e2b22d2574b00b5aaec32b21235f4488adb32b050f0ee1ab8d1ee1807c0f2269342e2bb729d92629e3
-
SSDEEP
49152:x3I1msZAd2Yu7a4cQDh5Awo7OoPrHMQJa2mbmqaH71eYqhaZG:x+msSsYu7a7QDh5ApPsQY2mKBJGh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5772e6f313ca3a6539f0c6031a92f716
Files
-
5772e6f313ca3a6539f0c6031a92f716.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE