�SC귃y���\m� %LP ���4"6�I6�������v�����Q�������Q��|��w���{�)�3 f���kL�p/AT<���k�H[�k��:Y*a���J�'�����z?G��g<��5P�:V���f/����z^�*&�}Ѭ3��,#�DM�&{xx�"��x�5���E�^7-j!F����-���10����d�Ô�vxʒV���Fw���t��7C!�����7����eU�>ڦ��i�͙W�op\!�t)I;���Pz������ԳF���E�E^79��[�����(������s��n�2�X�� �����Զq�b�)o��|���WԆ��L8x��k�2�ͥc\��KF��Z��s+�>���G��d�iE�"�P�L�|IK)�<���)�%���X�I!��}��,�����^�z8de<�G��s^ 44� (3���[���Eg�%�Ћ��L!��3��`�0��������J&GLN���U��w%��O���!���"�3�]@m*�̍$��l$��qB� �/G�����^���z�;��} +쌵p�wʔgW�գ���)�%Ŕ��벻se�X�ƛq!6�I.�y��%k��Xe�M���,ym�J�@� ���m)�gm.V�����I9�)��h�%�N;��y�('FH$��ؐ��R����9��>���kG�}����_[P�� ���H3Ҳ[b�;����vfq���\�N�l_H�_L�����80 ۳kX |y�a��Y$�t�R��\|�y��''ڽ4Ư��zo����WzV28�b�3�7~x?��'�����db=?L��-��!�4��h���;� V5¾�`�H|Q����R�,4}�+���B~l�D;h�s)�f���<�O/FO�� 5P��0��������O�"&{��A���a�lY>�<�^�l� 4E�x5�i���0� p��v�b�s��h;7Td+"�֚����B�B��Y�Q���}wY�S��4-fχe-��)���������f�e3vX�T�E���������,NECfT�6<"���D�~� �>�K�lm�6���m��"h�P�·a(,������=9��$� z���L�-O�5��� 9��j�F眬s`�p� ��]GBz��Z%���w�&��ؒ��/�R^{��DY�����%1���;���)Jc�������G���4yX=l/�b��O��\�W$�eGs��䋱ɣ�v��\����c�/�}�l(��Y��a�dC��|�J�;�d���>xj^��jԆ����:�Q�p.=�9�����,w�A��@˙�ׄc�l2�]�2Ks�_f.Ą���H�}�iŪ��h�� �d����~a5Kc��5& {Q�� ᖏ�k*�6�j�XAT{b����>]$���\##v�h��M F A�|�_c���nǎ;��Zy�u���a5���"��]�¥p��Gg�VЈ�hS����@[�U~{�Yc bш�� ��Fʲ��A�0�<��B�R�,��p�rD�������� ػ/Ι�ݨk3�Mv���q��p*�������9�G���%���%�п����L��I�7����)v-cy�=Pw�ۚ�\6�5bs EEM�d��~�Pʢ2���u.�ۄ,�7�i�^��Kf�X�,����L~Sw����Փ�̇]=C��ыZJ��'�uTb��'�҇�3m�[3��Vp�pq�b�z:/cg9���~��0�ˡd���� �u�ڢx�FNO ~S/?}2�-XP��7�;�g4Q������Or��l�I5F���_WЀ����&�5��4*ʨ�>�jb�u��2�uW�' ��PF Ç�h��E�O�/h�L����A���+c��A�CS�,t; N�ı����\��@�����ݩ�e�*bGw �#��N��ܧaS�څ�������I��ZH�O1��@�1F��A���T�a���Aԥ��G�������ɝ�!.��f��G1ߕ�.B� �-ΐ���������L@n�6�l�\A��H�>���pо�!�����.�sv˹2�@�[%6��AC��3���g�Z�kr�HH[�ٌwd���7h��Y�[D�������N��u��MB�lI� a)�Cln?�T� �H�S�5�Ѯ��4p�U���Q*6�1����NQS����41Y���%a\�'�S��߶�wC�61po���Zr`$0w�ZV`�Yl u�#����2G �X����a��Έ�!mnc8��BQ�D�a���?��:|��dL�+� `ʭyH�?8�I!vߐ:8A��FV/�,>NcvJ��h��B�~?�{M�Q][ާG@��+Y!�{;����=\h�$g�i�~AtnEt�Kʏ��-����gHe�w;�N?=x�ӗ�������d�.G"xߴ@� ����t:v�i��U�n�?��&Ur�����c����w�=$�}P������,ا��SΕN�I�y�My)~|��e=��yW�"a.�Qv���C��L��QQ�����f�'^���г6��l$<\/)�gIT@�F$ U~3G���Yc���D3ۈ��7T�w8�����xֆ����Zq4�f#�����a��:�3ޟwzԧ����da�4�+����C�bO=(��b�2��`�������"�+q������?��w����J�aikv��9��o�cd{�~`�p74eY������{�l�=��A�귚FA������\ �?~���06��D�k�"��;��Ք�`�k�ɶ��k���C�� ';Aȼ������_v\�D�/5�;/T��X�]�Ku��.�W!J����� ��7{��U*݉��M��n?e��5��DL�<��z�ӯ�����O:fB2��1�=�Pb �(���QG �X���v$?� RnH�s�y�7��u툊t���ڨv^������qrɎImm��P�V�_�c���R�����ҋ��İ����2��"��a ���>���D�.K/���p�����Q��J�x�� y���3��-�����E��`K��q
Static task
static1
Behavioral task
behavioral1
Sample
66a0eac36e1b863cdc45ee9ae4dcfbf0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
66a0eac36e1b863cdc45ee9ae4dcfbf0.exe
Resource
win10v2004-20231222-en
General
-
Target
66a0eac36e1b863cdc45ee9ae4dcfbf0
-
Size
228KB
-
MD5
66a0eac36e1b863cdc45ee9ae4dcfbf0
-
SHA1
2b0573651acfd093f844ffae2f20188bf60b7648
-
SHA256
77ea16a12da7283eb1df94e41f46256203bbd9871e35595a506676900be7e312
-
SHA512
8245c539e135b46125b4e6b5662a274d844d263d68173a4e63b6af23645dd94326b284b134bba4b7cc0cab3dcc9e1648d22201d86d154ede537bc9938093f590
-
SSDEEP
6144:Abc6cK1ymtwgSMuQmiyz/xI0LjS+hsMzgoxsCelIQvhB:rG7wauQvyznLjS+hsMt+CelIQZB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66a0eac36e1b863cdc45ee9ae4dcfbf0
Files
-
66a0eac36e1b863cdc45ee9ae4dcfbf0.exe windows:4 windows x86 arch:x86
abf0ab1551d460b2c1d9eebaa7b32540
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord711
kernel32
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
Exports
Exports
Sections
.text Size: - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Wrrrr0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Wrrrr1 Size: 208KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE