��Ia~��B�ਅ�C?{%Da�-����'�|�P ����Н��F�Z�����������i���9%��6!�^C�]��F�Yhu-�p\�M�\��M�ϐ7������G?BCfBuUI~%Ä4���;cr����-�x%ر���4��0c�a��e�M�"���Vu�o?}�櫪��wǔ��� �eI�8Ã^�j�4�A[����e+�����7⥟��=�ng�������c�]��a�NNU�՜z�E�b�q��{6yі�J*bv�#׆�P�ۥ|3�50J����iQ�QH��}�-��y�&s"`~Bl3��C����.�\��x�|��5�$gk��X��/��a�/Y���FK ��9�ew�&�N���N(Eak�8k4�����ms&�<�t�x�����}BL��OO�Qs�E�u�r4�r�m�xY�ؾ�����V.���KR�>�����\��ٖ��s���.�w�.ws��Q���@�ӑ!.��u��Bd�ߋ'��Q6���R�Uuִ�0R�ޕk瓓Gy4N�G$>�{��>��Á+@-zo.?)ivnQ�����{�n�BT%�{[�>�>ڝ�=�UI9ٞ�l��MLEYV�&vp�F��o������{<��<���.�.T ��]1m��5 X�I^��Ra�g��[����7-�f{�ͱ(U���"�Q(am�b�y���e���م���4���G^����ɀ�N���ˍO���%��_� �R�����7�������w֏�)�k12%�����sB�������H��.eHYl�)�"��W�Q���S�W���D���k�@��*�j��,;!^&�2:xW�(p~�!PJ ��xˎ�>���h��2NO�UISba~�����rv6�-N"i��4��{����a�8�a��ۨFsG|5�g�ַn��"e��]%�[�e���a���n5�� l5��r��fq�{� 0���L��Vyʟ�C�1�r�ja�^�`�� �LG�a�戶�����R{�ܩ� ��5���(ئ}%���A�pA�p*z�H�E�(ӈ<���R-�E ;,�g��P<K:�=���O.�T��'ت,*����k�� ��7�������aLy��AW���$��1���n�F��ȇ��7�dӷN�Ц��|!=�\��i���s�)J��hz��52��1TpU���Jd�/��z����w�4���ҐsB��5T(��Ov��B�O.ʙw�p�Rf��1��'�<�m�htB�Hg����%���Vlӡ��@�1�|�k��j�r���a�h�f���yT]9���SO���n��ǖY����?9�y�3� �]72��Q��Uq�.�,\ZD�Cӗ�E�u���9�~�����ؚ淘�f@@�v��Ԭ��7n_������-�6���~�yO����� o��;�����N*'�˾,�m6���~�T�r�Ab�__��9��IZ�ԞJ������z�~w㤋G[P��w7���ˌ���3W�Q�cA��!��u'\�E������Gj����-m�l3�\��m��#�]]bA�R�P���n/���o.�6H/ca*O�k���z��kTp�ԣs��翿�#A�*��>Uv��aE\Q�"���t��G� nx�gBN�&��#�3�m���%^a����h�ו�V2$.�e���ͬ��0[�D���ց9M6��2�k�H�������%��"$�xC���q�������2�'�G~����.�"�ߩ�=���Х!�.���&/�^�*�_���X�����{�}.�{�7��i�6]��#����w"%_w|z������y���o��4�Y%+�5���l�75����8)��Os��@���s3Q4; M.�kki�$F�3g46�M�p>������I�Ľ5��9�A9V.fte�-8��3�%� b[iH:kFE��g��4����NL#���ܐ=x��sj�lQGe���Aޢ��d�{)L�8�x��#�6�:N��t�p[i&�l�U�=���NY Bp��A�(m~�Jh�B%LC���� ��u��Ier������\�s�rE>��S/J7Ƚ7t���+�_>gn�%]�MS����+�k�plj��!f#���½���|~˯ ��.OG[����ޓT�����]�Jʲ���BƠ�f[`x���4�=�+F���~z6P��s|&%,&i �ŀ���~���a�S=�}��d:X#4Q?�A}1$e�Q�i0�O�a�h��bx�5Q&��qxlZ-�1#̻��6�lۈ� FF�'�J XZ��B`��{��w�b!w���*9MJ���"4ʼnX��b��.�k;=��E��~y��Ղ��{�"�P����ځ� w�Y�����]2j���lC�S��:A1g������I�(MB�&��=WHx�BR�*��M^)�q"t_K"a�Xy�n�?j�*���t�}85�\�eQ#,�X�q��mAG6>Z�ƽ�s�y �f+�0��:nJH����B�q��l�9b��o�+�����ڍ��p5� �����H�וo0�@��kp:�,D�O�I,���N�k&ʍA[rM�Nt�����X(%뒊��{7��Fb��.^�0�v}��(b�є�F6#͌)� �vR"p��,����_�P?C��^�(B���|�a���\�T��)��Xq���8*/yۨO�mV��}�w� �<:���(ݻv8���"+2D�h%��(v���`vQ�B)�����U} �1�WCb��(�� 0o����6��h�a砥2��<��X#��u���ZU�"�\��}�}4�\Rc)�5���N(!�4GHR�ss�y+�+���ڦ��x�d�vH\\ٸ,D���2��i�*ީ��L��nNU���zgE=i�)�lފ̙o&�>F�եLG������h��(4l�����r>S��<��<Ew��l���{i̮��#>�"H�z�0kS}k�pǒsЬ�<���� �H�U����ڟ�1�^��&��H=�Ha�4�r�pi��->�,e3����t296����+.P���*{
Static task
static1
Behavioral task
behavioral1
Sample
58c26fede0b15384b698d3c5770ef44c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
58c26fede0b15384b698d3c5770ef44c.exe
Resource
win10v2004-20231215-en
General
-
Target
58c26fede0b15384b698d3c5770ef44c
-
Size
4.0MB
-
MD5
58c26fede0b15384b698d3c5770ef44c
-
SHA1
80d43d4a15e497af93bcb2f5282f36acc2976f50
-
SHA256
695261e94d126068438a1fece9d9f102dd8fcdb1dc0fa2bf6118980fc7d6202b
-
SHA512
7fc48f54b22d06a596ed0550c6892dc591e464af81a9b5bcc1b173e054fe8e3650f82aad0a1a04602262036d6edf1224a93d0d37b29efd7fcf20c328e954f137
-
SSDEEP
49152:OfGyxeOre51jKP48yZXHVSuoaesz60QI/Eteij+RqzyEk4tH+w9IiwsmOKwpvgu7:oGWbOm45DoMzLQI8eija0ki9I+Xbc8f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 58c26fede0b15384b698d3c5770ef44c
Files
-
58c26fede0b15384b698d3c5770ef44c.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 1.7MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 106KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE