�]{��*�A�Y^�n�=�����ڵ�i6y��Sa_(��F�����: '�h��/�U��[gV�?��<�C���,P����5��4R �8J���:�#h��%��}3��Z��{D���]�d{�!�fW+C��D�;{,�r�HZĻY�*4��[w�\K?3붳�u�r��l��o/�Ӌ�!�w����_8�K�a�,�-�3;�?�+��x���V��fS��>��m {6�� =+�9>$l8? ��0�Dz\���0%tVMK�\ �6=PX5_)�:��<߽�z3x'��"*zI/�i4�1@�)�kٯ�n]Ό�*b��c�PO�H��8��� 3�_�=fX�eQP%OS$C �� m=D'����FF��7ݍr��M �M��a�x�O���O={�����p����Z�?z��0#� �1�Ү���ߨ�Ԁ�̑�zj�vO��DhS�by4r����{��mYyx�1��t����kɎ7�tW4ˆ���N��պ9���dDy�v��9}f :t��J$� ��E��bj��;/���ꓨ�{r*�2��(qP-�؋��Vh�����V��&M�b�sR6(S�L'6�s ?v4 ��V3`S�FP1�Վ�F�t� ��yؽ�B��>kc�"Bg�-�%#�_�i��Z���~���n)����2.� ��6+�Qz:��S����,g��T �����`��4$ɗ\�k����n=Y��k��0a��I����y�A�f>��lO���?d�yrL컮 �lB�X|�'WO���S���}�=.qw.6+��"��}XȊ A�O�O�46����~~Gj��9>��; �/�����LB���B�5OSaD$\KH�+�rOt�����ޭ�bAt<���� ��d�Ye���c��(x�k^��L4�K��pcj ����L'�x�(�/�7�,��D�N6@f }�~?/f�2��%���=ߤ{F-��4M�! ��������+��A�]M�V~0���;��H�.I���'������T�\W��]��"��d˔����d;��K ;�`�IY�H#��o����� �m.�.ir'V�� LTg���-r]��A nkz9 N�G�DRPGG����GϨ5�(�=�" À�=7�t�e�D�M������h-r;,��L�OV<��kMF�t�_N���١��d�lS��ܾ�۵�l]�)b��{M��{��@�Ǧ�8�6OI���l�dxzz*x6�-\�I�It��ث"F �W�6oqJ�}%1?�*ZG�S�q@^ҧ�u/G%�a��0q�߿?��6�˚�I�9�q���, ��@��/R�$}E�K�SRP}|JFh?���)�Xx����gv�]O�V���h`�z ��qa���}� M����Gń�?3xFa�xGj7;��Τn����S�i= ��f�E*�-�����"�ϓ6oZ�4�����w-��+u`+�lI�c���[h㌍ ;�̆rY+���ar�˹�\I��~&��鲘[�vkm�W�ϋ�(B� �J�9M٥�Pf/�����<��.lh�Dž������>K� R���]�����1!ϱ�4� ��M��'������kH>��$�-LF��㭖��V1p�t)N[m��w�<l�3�ez7��Y>Q��(i�����ϦL���D�J剼�b��h�7� �_���K=��#0��@�/&�5�I0]�f-����?X�<P��f����ҙadž�E%#��qWEF�4�Ԍ'n`�@��L�Z�Ť ?|[�#�����a���?9Z7O�S����yEo@pq #-����%H���8�qn.��Li<rj���V:9�7��w-�m��I^l*��c�tÉ>��٠��yk��EJ5���?�s����?r�؞r=�~�]ON" �-�r��7����A?]��t�c��w��#��mQ��J��l�^��R~�E�Ҏ�����/��m���'5���õ&��I+�R�� k�@.(��$3����$�L�:��� M�tXgݎ3<�H���άF���t��=?��u���G��a�W��[��}���J�G�7�s��aݓ >[._���M?9C,/M�I���Dʓ���L���a�Ņ?H@��|����2�7bG�ص@�f֞�Z)�a�0`�13��n����8��y�q���2u]������z����e��LJq��߅ q��������wj�Td��e��O쩣&�9�?�����颐ݚ�m,��s�ã���}�rdc��'�������6, �(����s��IZX*<e3��)�{�.�TT2z]����ˎ�´��\'Qu����}����y��M!B���^Yy�$���B�G8�e�*90K^�=W:?��{i��O��pj�o��x\�ˏ�J�Ֆ{Y�x�w�+�v2��)�gI�F�7�ᤰ����IM��n�u��W0�oF�hH�Kt��[�f1V �X�{u�{4�����EJ���O_��ڛ��B�#:=~���y(��ٿ��鈍���D=����[���h#�i����Ͳ��?�v)��(���0�� ��Y��!��ҝ0��7�d���3��������x�a�G�����봏e� ԗ���%f�%�ˠE�B|�����U�Bs��!�=_(n�t����y��j�������B�G��x���eB��^�1��Z:ZO1���»��j��AǼޑdVF�m����45��G��l�dtF��k1����Nۖ�t��@�?�Z!)߶��)���?�D��O24&#T�A���xP�(��ȕ��6=4�- �v�tȅf��R8����GW��:q� 2:痜 �ַ�����O�ۯ�!Em�������W�{ʬ�k@ �T��K� `�p����z0S�0��q=�����^I���rV�_��0��w ���J���N4�-��r�l]1�Z�b����Ez>���=DN��/��_�a�����,?^y~SxX��S#<?�M�D���)�R1ެk��f���և� ����&��̍��nLo��"���8^���!�>̷$��O��Al�U"���e�y1�3�>�,�bQC0�HV&��|�WáR#g��yD�(?�(-�����KU&'��Mǿ%z� �Vf��Pƨk4+�7Ty�u���ٶ�"GD���^Y;��Fo8�e��� =����:mD��e���1)H��o��j���nn�E91�����$n����a�;���B�����Pֵ�5��"��ST�`^�io�p�c@���� ���Kѣ����b_2�NO��ضr�^�p(`|h�7_����Y%���*�!M��â=n�](Y�fw9A�#.�y�%G�s�#��(���a' ��|��Ԑ�M]�4|�K��hy��B�O`*_��Wb���N(>xP�)U� $s��ۦ#����v`�s�N��F/�}|������5/����ʮQ"�}� ��Ktз���l��zk�X�j�?ϯ�*�D���)z�x��ڈ�n��:3҉1��z�J��
Static task
static1
Behavioral task
behavioral1
Sample
7b22c1d8437236151becb4c4f7c43a8a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7b22c1d8437236151becb4c4f7c43a8a.exe
Resource
win10v2004-20231215-en
General
-
Target
7b22c1d8437236151becb4c4f7c43a8a
-
Size
10.2MB
-
MD5
7b22c1d8437236151becb4c4f7c43a8a
-
SHA1
e63bdab48ea9fa12de543c06f2a7d1c02b4e7044
-
SHA256
4b8aad5eaba0fe1925b25aa94ac39cfaba38931256370655f6ddba10225f5f63
-
SHA512
7a9e8c1801175bae40ed602a66f805f414ac5099fff75a5b9e1f975ad95d1c45affa65f1e6609da6248a40643718f13d890490f9d357f3528c66d460fa084efd
-
SSDEEP
196608:cWuvhiZ+yQGh7y2aMq4CGiIBYeXLQcoN4ZPHPLdLFNPOYC9w/Q+1WC:cWuv+DthFaMKetDdBC9wY+1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7b22c1d8437236151becb4c4f7c43a8a
Files
-
7b22c1d8437236151becb4c4f7c43a8a.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 283KB - Virtual size: 916KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 42KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 23KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4.7MB - Virtual size: 20.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5.1MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE