��U�vpS����|�đo��X��hKkMފ����&�J �H7$D����r�^���q����݃�9�\�ߒP�I�|t5��Ŋo�.j��n)%b��a�{9����S"������mg���O���^�R2q,�&R +4*�z'Q���<�G�,��z �4JJ���y�~J�0�F6�C�K�dO��Ĝ�:WzA���lG_(�$�C��N����ouo��g�4�=&֍8�uu\� �e���o����4���?2G�d���?������J�`�� 3s��5�"2�Hnu��jn���m☮p�N��E�xIL֥���F{�Mǯ�I8�6�z�s�l�SZ0<�c}���4��$� E;�+C�Ms��}7v�]��4��i1��㰘{����#�U3���wO*?���>v,��]ws��,�):�Ƞ�t99�&����������yO ��B܌v�r�W����ϸ�|Z��q����W� �{Γ]�6�,�n��̩e�u���!�c|Fm��[�n�UM���"��I�@k�� 7�9Rw����&�¤Yى�x���G>׀/��@N��K=J�P�/P�b��֧��/0V D�x�#u ����A���WF�UO@�9���=ȃ�����x�R�� �cJ���$ ��E84�(л����v��(�v���#ZMԃ��\UV� r�z���5���, �G�s鸑��t'�S��8揻h7fF 8'n.�~[YE�Qw��,�C ��i��˫OZ_��Iu\��>��&��Gg��lF�,~��QR^a+�~Z�\�� b�����.���L[, ����[�~J=��vv���)+1���p��x&�Y��է�,2xA��u�4ܻuެ�V���|���C�5��&9gF�Q���;�fIt�߽H%�*V�;!ܚC�2��'�2�#A�9�9,֥���1���y!#�T)2�c�����37�(3e`͑��Ɖ��5���ҪT��� q�UMZ��p���rw�&��� �᧬ŗ��5q���#(+Y����}Zx2��-ă2���մl����ϵ3��v�a(T!>��w����i/�� ��^��K�T>��u=v䅺�M��� 9w�>y���u`V�F�]H�K=��b�|<����3��K. &�!����Q�'��woR�>��h�`[օ������Gŷ���̍��/��:<mGLXK��ڹ�rtn���/L&}�s�Â��x�\Y�{`0��'U��M�MG���Gˍ�w=��/ ��E����վX�1�NƑ��1��(h5��~Hk�n� 3�r�i�y[���մ���]�,r�l�s$YuH�X�~��B<�t����_�a����n�>_��5;�\��1�����16y��Md�r�!cg�pHđ4@h���F���=Z�kڕ�ʚ��7����ה��1�[�Y+u����~�abW���)x�M�.���� �xv{���m�v���5{m�\S���5�8��̪�0z�M�m =u]����Ɯb ��\>p�X�ȱ�u8�wl��r��+�k�if���B���v �(�S��a�^\L2B�t���r`���C���7�~麞��G�F]b���n�y��+�W�� 볘��R��W�MSB���z x|o�$;l��e��z�$�]�6�秮�L+C�,9ہy�x�Xo���L�mػ#��p�|�tL h��.�T��(�.]6�y`W��� �VK4]�����8'�8�e��q�ڎx��t������D��%rB���d�:��Tz�:<�� !�d|6(���2x9ʡx��"�x��r�V��I����rC�V,�۽�ҥ��&���/�����8B�1� .���L*+<�$�I���";I��FX����·�dw8E�����J$Z�Uǎ������$����� �Y?+y��vu߬C������ �E���Pٲ���umHO�~��~[n�9��:��Z͇�kd�GO�4�mY�o��<F�($>���-�J�� L���>T��=��2�R��mV�s����@x�j�9�,���]�0�SDr�|��i�Y�JsU�OJj���P=��D���"��z�?�W���$�f�S~ ���繙��ڐ6�X��3Wb����9_� ��z��YP�Ɩ��cMTomE%�Q�>"v�����܉d������Ѐ�����]�����# ��B�|C+�&�����طU甶,�L�ag��-`���ɟ݈M���[�v$,���:3����*`ȶ�i�:8���ib�p�����k�����:�f�|� ٤&��Ɵ��f������<A���䰰����^�]ʀ]�L�I����_���������Y^��0n=q��q���O��'�L9�ƃ�C:��vR+��f-�:0}�w����ƛ�wr>�T��n���<��dkC �0TY��.Xd�`#$�G��H$��k1��F^���]�n�#�Aj=~j�h��+����c�x�;Q����$�2�θ����q ,Nr���7[���ܯ`�hMr����AW�x�R����&M�-�Qj��m��� �����f�W�����\j�ӆ8���[��3w��5Kb���8RuT��M �Ed�j7�Bj햚>��&0<̂����n|j�}bz�1k�)�k}e6�9��1O�ל:5v���:a dcz*����Bn�nak����0�5��D�1��j�66�`���W"f���������v�l��D~Ý�/�����^�+$����_���,HXĴ���JLu&��*fv��lѻ}u�P�(��i��%T��F����qa*7�/|E\3j*V>��G���m:+��t�6�5�e�)����ckF4cs��5N��=�V�R�S�nU�24���!8]���;�Í`$ezt���� �D}�'DƋ sSIg�G�g�R�x��B�Ė�դ�*���RV�6pàZ�`u KY�|���yY��+\!̷Yr/7�����*"z��g�~a�Tq��X���?z�Ͷ���p�4Ԯ�Cy����l���u]�Q4w��U&�3�������}���KZ�S��ю&��xCi�WgW��+���ZDO֫��)����<����+:�\�� �<���N.=A6E�|߂�)v��S�H���c���`MO����d�b��Z>ΓzId���+�V|�\�a71EStx/�����$�U$���v�߽��'O�O�a�����7�mN���2�Y�Q��ڏ�Հb���:�Um�!Z#nҼo���*�P:c���[z�d�]p3���8���҇�竄���a���|��28���Y����ݯ�H�[���i��| ���W� !V1���|������da(�J�A�}R����tU���eؾk�VS���������c�0����y�}h ?Ҿ� 2�� F�])���A�g�o5R-C�ag?��C�`��
Static task
static1
Behavioral task
behavioral1
Sample
65b9b57446190ba631eab5110bd60b27dab7a4386d8f2d0d653a3ae6a26e630b.exe
Resource
win7-20231215-en
General
-
Target
65b9b57446190ba631eab5110bd60b27dab7a4386d8f2d0d653a3ae6a26e630b
-
Size
3.0MB
-
MD5
3e3359b8e91d33c1bb7f79510b167e5d
-
SHA1
8f62b6e8dceef4626ef50b372fa880ea0bf4f182
-
SHA256
65b9b57446190ba631eab5110bd60b27dab7a4386d8f2d0d653a3ae6a26e630b
-
SHA512
5a39e55d5284cfd1cf054c5c794991a8277db02d91e5e7db69d2ccc78c2eed3fab1e0dddfb0db5880b40e4a1b1c53fcad5b69c56e3216a2341863b4d4832504b
-
SSDEEP
49152:sdHq7iddbabCX/WeUqx88kNFd5J3hjGRLZnmcIEBFOZB7G3Mzo3fGmX9DVvis:so7ZMhUTt5J6mc/F6QMk3xXNx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65b9b57446190ba631eab5110bd60b27dab7a4386d8f2d0d653a3ae6a26e630b
Files
-
65b9b57446190ba631eab5110bd60b27dab7a4386d8f2d0d653a3ae6a26e630b.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 462KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE