�#��\�G:�0͙R+���4�/�v�Z�.�r������ 993��s���ǘd}��w� [t0s���E��)�v��^�)xخӒ���ř���\����\Q�g��j1m�!z�����3W�0;�ߏ��ɯ����E�b�� ©�/�1^�q��ҭ�����!+*���}AK\��Oq�QW�w���?�邡�rT,̬�"�Gю���[P�A�|��?�A+;I�����Py�`�b����V�C�-P� ������L�H����/$3��w���딢��_��,O�}�\ ��Ȳ+�WX�*Mհ��?��͎&�+�*+��A����!����Q��&ճB�%{�Jg� �5��`;1dd������p]�B�����B��ɾ�~�����G� ���5]��at��)����h�7WEx�F������������Hr/�"�B,geYu�V�MX�B^0Lvs�9�����FH�G�3UJ�q��U����dL�ވ�؏� �>�Qdy�<-:Q��A����R���������� vS��:�>�&O�˧���&?Hw����sa]a9��C>j�|S�.����2C_�3�r�G���������C��%��p���m�nS��uT�_I�?�^�=�%?.Oj� ���`]/�v�I&��n ��{$��k��[�n�ǫ�+4�`Y����+S��B~Ճ�U�j�������-i�ww�b%�>� z>7_X��C�U��8R�h�fn4��D���l���Et�\Q���}��o�J���(]Y+����F}^m����b+F�>�L$@���<���Q ���M�ޖ�i�!�YZ�Z[hj!3糪��R )1���g A����<���r�X� ,�����e�p^���!b�`ݦY��0��]ї%N$0�|.��5�)��L�����O�����W���k� �4�0�+=Le22� �c�m=���yY��@{0d1!�,��)�ֈ$� )܆���K7�/Ji��,\�L?TgQ>T��MP��{�3�b(-ƛ��b(}ꤕ��W%�����^���1q��F���K����'�@ɚi�8�@�d��@Ѭ��Xm��mg6V<���!��ꕋ�L���A�ks.)7n:\�����uJ*#���n���1�B��ꤎ����d���n���{��c-(�k0�\�d��//9g�;�ݢ�b�� _�&����+,��S�� �����&��͚W��:U0\:�0���ni�/7��a:���i��dq�DI���n��~��-������<���s�n���nF?CF(AA}�)��,�,�#��̥e��_)6\g����Rfhjq��]O��z�d��?y@���6IЩ0�zς���fs��<����s��j���-'�������)�� �ݒM3�v�-�ALe�fP��8��������0c���cm�l���S�yg�K�Gְ���Wf��N�\~����9D���< 3��?�p�㤿�m0X�-r���:w��' �T�EB[��Ɗ�H�<joe"�!����t��o�s�n'\�p�(2�~s{{,���i�:LD�3zGm�����Kǵ}�� K�6��T�+�J}��[H?���ڝ��m�9�s6��m���yj�46� {�x���qT:)�������O֔ �i�/�������v �L(��e��1W���`܍����`P��ٚ���<�TwPz,U�8&�o>����il�߰�1c���{�ز��`{�U{������d�k�n��9�]�W�*��Q����2 \!��?:���{<G��ql>\���}��=�o-�N�5�)�������f_%��k�W4/�����CM��l�ΊEзz�J��6��=�'C��$pK���Z_9M���K�1 '~���t�ț�_��"��ρxVО���5 ֫�H��M��Oq<�V{����k|��]��&~R�hGd��8�Ϳ�D��w�f���� �B���R4�+g��0-�+Q��ۿ�.�J$1�咧IuN3j���M�@ Ω+��h����nw:��K��&��b w�.��M��.�����%IZz]?��Y?��N�Q�ԯ� ��D����CC�u��u�A_�A��b &���cb�ћ�y#Í���΅n�^g���W�Y|��2���up'Ur�����h�A� ($Z���$Yv���^:3���&Q��d%� �s/��Y��c���0=hKջ����;��U�L-5B��-ݴ�ڇW� xȰ3��R<����X�2���EV#n�v����Ͽ�c��غj���̓�^��g��?ٳֺ��g��Y��깣��Z��ou��긎�ڀ��X�Q�.з�q9�ܸ��@Q�7�f��R����� R� ��%�h�m����Aҋd��1�A��N�j�v>�'Y�j;�>RUΌd�Ҽ\���]-@���w��Ɍ����Bi�2�X~;�� �ˋ���a�%Z.�� �,X-����پ�����g�\��d�B?��|������7}c��@?g*-4F��+����~=�8�!鷉%����eFF�h������?�tp�=F����ED���q[��X���Z\�8���6;��Q[v���\EkSh��"^�/`:�K>b:u*VV��p LS�#��(^Xl@���L1K~L��ۑy%J�������fg3'b�#N56��[��'Ht����D��HL*�3�6t�jS1i�g����&]ڌ<�Y ��{��� n[:�Kl�"x���pq�ZbH2���6��S��7E��f]D*�-P��\{xψN��AU��� x!7"l��x�+��,����2^TAY@����1I4F���|�s���� U[��}�`LV)� ��*B�^�>ݻ��������Q1�Fo��K��#�lǯ/���3ֻq�A#^��[}��N�<�*���̸��D�!51�(\Nl���s�����{� X;;��7��sU��委l~O�9�ʅU�Lڀ�t�k�~��ȷ/�vu�df=����Q Dk�JD�ؠ3�(4����}�I�Q��S店;"�� �R�'����b��ܤt@[c$,���g�4���>p�}�)��J�cag�2��x�rX�+j��7�@"�X���{Y[���'V)<�h����t��ٸ�<�1�͡ :�ŭ�̀P�w�LK-����J �&����"�m�(��d(,��VYXT9E�(@̵��_����GL| m/��d��_�s��S���2>G� f�Z�v�����������������G���@y�Ր]{��z��]_$��h;��7��7qҰ���ڹ�"^�gS�� ��g�����\���_�_>���=��A���:�VNʋ��VL'��1O�B<e�}?[~�6��.¨����۵ks)^���6�m?֞��:NZ>��~k�s���ֆ u����$-P�������!�N��E�����fX�5�Ő�k���8���B���1$w�|���P2���tbP�<5fd$�=������b�=i��z*���Y������{������N�;㓬��w2"N�S��lo����� �PS~�
Static task
static1
Behavioral task
behavioral1
Sample
44829a95512a7094fc9686e8c486665b58aab310b03a18b696297f13c31d1d53.exe
Resource
win7-20231129-en
General
-
Target
44829a95512a7094fc9686e8c486665b58aab310b03a18b696297f13c31d1d53
-
Size
3.0MB
-
MD5
6bcd808947d2a00531e86229987365c2
-
SHA1
8ce04d604cf4c4d2a2b5abe529bfd6532e1b3630
-
SHA256
44829a95512a7094fc9686e8c486665b58aab310b03a18b696297f13c31d1d53
-
SHA512
1172351ceb0e8d5836bc2615a7c8192edfe64eabb089751fee0ddc77e500acfd02427a8a4f8f9a330fbab609c3e28b57c5a6daaf78e1f8734c652a1411eb1d98
-
SSDEEP
49152:AsOgMea+rSTt5qxyM0eq1US27rQJiZb/FzjoMSU5jfmbWcfgABWz+AY9XQsy17:urWSBCfq1qQJKJjicmbWtABW6bXQN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44829a95512a7094fc9686e8c486665b58aab310b03a18b696297f13c31d1d53
Files
-
44829a95512a7094fc9686e8c486665b58aab310b03a18b696297f13c31d1d53.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 462KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE