��Iε� ;x����-|c�E���U�Kv���K.W��-q�v*��rV2��o��j|;,��u<���F.Ig,��WR���I"���?����"��H� ��y8��+=�u-���D�Ҁ��6P�NA� [x~l������z�p�`Er�N���Z�A=�Ƒ�&�������HWR���c�����(5��q�d�h/�D�8( Hf~c������&2�1�P[�a�m���Ql�� ���3��>O�u���&�p� ��#���@5�0[���Q\����p��ma�I�z~��b!I�adk����9�ŵkjhw�-Ŵ /P$ބc|���zlB�(�8�� ��n�KN|�8ֽy!��f�"�:�LU��� $A����+{��-�x�91�}��4�n�$���������m۶*��>|��|�f��7 �[)��~�6Cz���L8��-_�4Z�� s/+S��r*Z���L����|} n��x}]%��lx�6B' x�v뗩V��5b��VH7�B��^���<�I��w�7���4�ٽ4������ȼ���Ü�(���Ǝѵ~$�[�����(���d�V�~��Ю�Ւƒ����N���>�N/:�2��k>��nYJ�yqˉ�5���8�%�t�L���u�m�j2=��D�6�(���+*������:�%�����u��a�9!��4��*�8oձ���m���<H�0�T��U����T�K9�� �������Li�A���t1��+��o�n� olg����C�y��G�6�ߙC�V���B�X2�2�$�)���APEw����g��)~m9(%���-T@#����d}�yv$���_;� 3#�eMV�o�R�����I�a� T#9�����ڀp����Şq����x�Z��*�#�e�����g��8q��� ]�:���i����8>h�����VCo��?�2T"��ޯQ:��3����{��p��~�m\�z�s��7�q���s�p����-o$u�K?s �O�I�m���Y0!�ʂ�ˉϟG��~P�� 6KV ��ݯ*�<�����.��1�����i�y�N����ܢ\�\鍊�_�8kL6ϙ�g���Yg�b���`��Yy��Q<R!�T1��.���ZS��C#�Z���r�IOj86Q]�Z���3?�K�S��d�Z���n ��J������1KS�`���G�Yk�T��', �zK�洛a�J�-�q6*�h`rrq{�LU��?l'���X Z�1�� 'Aڽ�B��jR���O���;0,k5ҡ[�ii���h_�� "qyʻ�m��t ���i�����y�H����rZ�\Z��6G�����P=�m�Y�z��P�'O�%�/�L^�$�_���X�=$0 ��@Z]������4�������ݯ�7��o{�,1��$�������4��#����λp9�n�Z��x(7Q_[���.�/͘�^�E'>����t�/���{f�H�@BU�r�B�c�)�$���퇗�|P�+>���G6�i�)��G��_�y���H�T�M��S]�{H����hT�|���P�>��65��[��D�:~ �Eʩ� H�8v�#��3�%�o�O�弑�0�{I��l٩c!��Œ;W�h���\�0n#��q��%�Y� #CYl�U��\��k��A� =���Z-�Վ��J3����i��w^;2a��y������}�#An���r��eP[R�i@}R����W�c0��#4�9%�{�1��� ш��(�W=u���n�\�@�٢!�r���0�#�>J�᯽G�s��J� ��+3����7��~���!òۄ��g�L����f��Mt��uTlJB��Y��c�wv��x�'G}��̳��l�E�`l�R�M%J�w�z�o��=^�G�ǹNs�,��jA�Z]0^�V �>����0U�z�v���o�M��z��zg�=��J�/2`8��� ��)��P̯G�ݣ.�q'i�omiT"�A� �I�)e�3��j�K&��{81� ���C��'@9��7c'�J]� M��#�N�YL���J��&����#eTѫ�uۇ���s �B��U {�#D�i�R*Ρ�J�����e�I����e��t�_n��l��}��ט��ذr� YPv ��f+���K���Q�,s�CV����R"*_�K%�'�'@ϐStr�̇fCB����C�⽒��vP��8�!6U3��d��Uap5�i?��6l����\��i����;�,#l�\����8����Y�#O�r�[����wᠸ�F�I,6�fm��\�+L�Ng���+�ī-lK`P6%�7�A��"W�&�o��*��̡/#/֟%�����6����%[G��z&w���kee�l�xRp��bv@��&q�������gȐ7��yP$/�0�s��ā���/�k8�k&N�Y0������d$TZ���$"#UN��:����|O�J�Q�P+AΑGQ � ^r�����_%�YEK~��=��?�"�����uJ �z"�.���&���U����)��&��A�=Ge�G���;n.���[��"����D4c��@�s���<LC����� ���5�^�-�}�BqK�i�us�`�JD�Q&��d�;#?�v���,~@�����M$�6Mk�zqb�cT��LfP����o�L��}���\�R����G�v��w�(]doإTb��;Ӏ �$8U쭫��?�9ő-��~"���3W8l_ј4n/�j��:�;���(aT�X���4�Q䕸5�m�˙G�8�ʥ��4O��Y������� 6�S�%��<������ed���ܳ ~a�������f����xLj!�1���$Hg��|YLԋ[�/�r} ��W�ڙ1w���\�[�H�¼({̟�K��-Q#v�ۂ�A�����>*�Oct%��tU����6�����f�}�������_Q.hM����`�OZ�F/���PA-�)wV��r+Q�?S��*���6C���d���ݽ�$�
Static task
static1
Behavioral task
behavioral1
Sample
2fbd639377fc98c64547ca6b8c636642b55034958fcc16b2da1016d270299bf1.exe
Resource
win7-20231215-en
General
-
Target
2fbd639377fc98c64547ca6b8c636642b55034958fcc16b2da1016d270299bf1
-
Size
2.9MB
-
MD5
c707e15b0bbc1aede4befdda7e28f92b
-
SHA1
e01ac946cdda3d982c264f53ec0dfcce48a5de94
-
SHA256
2fbd639377fc98c64547ca6b8c636642b55034958fcc16b2da1016d270299bf1
-
SHA512
54b58ac4239f45155f716776d561f57136313e0d945eee09838c241ebd7f7cd972e405e13a65916e8581ea4cdf4ddc89d9ef0d2cabaf2a34e4e6da22ce02eefa
-
SSDEEP
49152:S8g5lgeUEjGO1AhVTdaztJmnfEGDaF+i60tcTDh55wuiFp7CaYc:Xg5ueUEjGbTdUEMGOF+i6acf/5XiFQaY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fbd639377fc98c64547ca6b8c636642b55034958fcc16b2da1016d270299bf1
Files
-
2fbd639377fc98c64547ca6b8c636642b55034958fcc16b2da1016d270299bf1.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 462KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE