Iidr�5���:� ���e0�� �:�O�Z��������.��� ��4������J �`�3@G���V�V�i�p�^f�B����NA�n���c���h0ض@���B�+�_LC�(2j�?���1�4�����P��v 7��D2�0t@�=�I{�q�U�7�����℅���S�����~}����|�3 3�/�D{��V�Vt�%ǔwGEK/���o%��o�ն�Iʗ���N갈S��6q9pn!�B%��7��(���7b�/�o�|�ЫRHQ��$s-.�*.��;�J{R5Ym%������Hx>^�?.���'���c�9�=\a�,-�w��&�ƚ�!�r�3I��"��D������(G��rf�=�ߨ���83?0ؘ� ��=�)���tJ3�!͖h3|�EQ�"ɤI&P�t ��h�G�x���\�n:�a�ye�6z��ΫP`�9tǢ%ig7�[%*�i��2�?|��7����n��saq�5�����W�VǓ�x.1��ߏޖ�O��3�ey��#�@+cL���rՏ^X�`;/v=���'in��#�[K�Ѱ ��]P�<��7/z��m�R�`=� *ɡ&tk�5�"��~RX|�Z�zJ鬪t��������A��f֏��6��$z�?r�\�PY�2��8���u���mmg$P�k�j�m�ƛ��|�]�碌��܉��,��Z58s�mP��i�c<�L��_��>�m^)��G�,�Ea�� �=�����[��1�y�Jz0���0O��x(ߚ��{�_h~�{�Mz��%2��6�U�'���j�6N���.���L;%�������J�s}�%TY3��$�ת"<�i�$@pV�*��uXR��OKI�ݴS7m�K�Up<s����B�L���b�BTB�!E>�u8T��������J^��"�)�@A}b��: �,K�}\�����@w�? <S~hd��+ns#�O9�����3���VݝN!.R<У^M����D�&OEk�g�I�o�!�|$T(���8�B5^�\;���(�W.�s������ r�M����l �I�A$#�`#�cŀ�vȭ�u� �+��k��w],�Uv��s�*����'Yt'w.R$���� k��c���������F�{TYA��hZ�����ԃ5a�01-:%\��`2��C�s=r*�p[��NV�a�έ�����I��e;ji`aK��Z��i�:�0-�{~o�g���LZp����y����J�����ǻ��_�����QQ4V{�d>H��ۍ`ܭo5R�?��+��2����0+�(@�����1�4 OQu�z$�3E֨�ֻL�di���xQo�R�����b~<��F�(;���c����/�]�V����%�)6nrPs��I':�HsUƯ���ދ�V$����B�.�W�����Y���i|��.*�H���ڄ��o_��k(;n&���Ԩ���'M�s���C래�k~Q�,��ܓ�fy;{X��(�~�s?y�DlA����=��N��[d(��W��X*�.�J���G �>L��1ꊘ��<�o�G�5}#:M�t�Zڳ�X/�i|��4��h�O@OZC2�O��5���tZPF�)G�jjp���Dƞ����H�tM[u�4�Ī�6�R�_^��/��A�3�u�a�|$�)���Ja���/jќ7H�Ǫ��>��7x���[wG�����P�F�S�e�v�k,�i5�@�����0Z5[,'�6�H규�z�(� ;��rDUqp*P�q�H뼊�&#�\�_B��2�&A)_BXZ���꙽����d4����^�����X����K[��uӥ�"�$�@Ƶ���^>��\�ÿ�y���0�ؑ!� �H<X6�AC���G��ˡCՃ���[+��y�W�m �A]����|�W)a<�sW�+�It)i�K�������2w�g .���� ��eF㕶Ft���>��ŴW����5��8k�b�C; "l<fj�x]�Q�,�j��wep�5Go���Qh��2�헍��7(�P���^N��胂]��N�@ 8N��pm.�qkx��c�D���"�)H�x.�#X���N�W�*a�� ��<%թH��-&�5�e�#�p���t�v|�'���XW�����ڟ�O{We�G��2>Y���_2x���йKHBbYI� �;8��|��7��z���}Jy������G�싄�2���WS���Ƌ�5��Cd���&I����0�i�0la��ع����?jņ����VבL��"���\��w�C�� �� �%�`{�gє_��lB���sV" ��КQ�����5�����G,;'!f���f��l��K�EcK#��+}�*O�?P�>C��g���H���Vco�+9]��D>�L�Fx:��r��!^�rQlm�e��+L� �Ρ��Q��� ���Yi����/[ ���H�V �ܺ"{ҳ݃� ���pA���Z�+���&�-�#��X6��\-v&��rE���$�w�ɫ��+��,[��`��l��t�f_��G*�!����j��ʔ����{�"����l--����nZ��d��Ҁˡ�Sj��%Wi&�3~)PTD�[y���T3wq��N�x����:�EM�]�����&Ϡ��wnD���L����'��u��M����PC�4���;:Jx��>]����tG]������+ S��N����q��������S�qQ��=Z{�Ԧ/"ñp+�� zg5W=��>�P���*j$-���$�����To��&��K�W~��f@�z�E(%X�xX���&1Dנ��g<8B����J��I��4H0�;({6 M�r���J�e��%O �&3��|C� ���s{� j�A|�]�k���Ӆ�k����?���1�!<���L�s��n(Ԃk���s/`��6إ��ŏ��Y�Z�Ń���;W _S�����a�>]��kY�����)�V�n�H^�&�F�����ǖ�o;Fϐ?D0!��O�c�z�:Purq8uK�=VH��(r�ndk끠�ø��6m̎�y �D�т�9ژƠ*�AU����S��;�*��v)�"��^�#`��-�]���[�7�uuarZ�%����vˬT�A$��{&D�-?�@�V4�`��Z�3[�5��)�5��1CDL$��^��~�c7��P�i���� �e��v�='��n ����Dթ!�+��I�ε����93�'�ϳ�{@"� çƏSa��I���g�~�u���L�Q��y'��[���Ch����wϤ1�?#���k�@�� ��b�9pP����dߟ�>^�`�hS����]�'d�"ۏAŔ����L�x/��K�i�/2����ĥ��;^��?8-�|ʻ%V��J9A�B��a��i�����I#W3���g��1?��H"��ZP��Kդa����b'�0z���l�H��K/O����.A��O~���z]ۤ;O�&.,�fן��d��Oj�����?���9?��Đ�ԯ�F*��MA�>7�����$Dz
Static task
static1
Behavioral task
behavioral1
Sample
8ea9c555c6a53b7dee50185e6a7b2020.exe
Resource
win7-20231215-en
General
-
Target
8ea9c555c6a53b7dee50185e6a7b2020
-
Size
2.1MB
-
MD5
8ea9c555c6a53b7dee50185e6a7b2020
-
SHA1
4fcfff8b344e47b9a34083abe906eed2d1554c5b
-
SHA256
6094096f91caf7c2f762b5c51c945c796fc5522dcb07891458cba8fafddfa564
-
SHA512
726127f98bdf2df4ba51e9a5f13290e0595b5630cae2675671f4b02c239e9439a45333e0af570c7142cad2f92e8e42bf47f0270158ee1b52dd5568e82c4ed2d5
-
SSDEEP
49152:fA/7oLb6rnBfqMBbjoVpcHXVO2pH0r64Vs4eb49R34K4PA:fA/7oLb6rBfqKYclOB/s4eb4r3H4I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ea9c555c6a53b7dee50185e6a7b2020
Files
-
8ea9c555c6a53b7dee50185e6a7b2020.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 42KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 7.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE