�ʓ`_+���K<�t��[6ո1HN �̺�ͪ��{��2�"z�2���)���N=[f�sz0���5�ݶ�c�p���h�i�ٚ��WB,+�Ƅ��f���ÊļI��!F�?�<���%���C����B���w��N8܀�9�g!$%@��F;0� I�nJ6so�{�*�&2G��j��͞��-���9����>KF�]���4�����$�v��O}��X��*lw3���o�{@�Q��S����Q��ݶ�Bboo��9���Q�"E�x�vK�IiJ�b�E� 5�&��G����'�n�'�����҆�~�!<�P�3+2!2�c�3��Swѻ�A�1�wmÒ���C7_3�X4� ���,Kp}%W��A;i��p��)k���d��(K�<z���^�A{E�K�ɩ2�}7g�S�c� 2e������(�@�R�!�3Rވ�.�Z���4`w\�Q~���z�X��c���F p�H;��,�x�Gi��7ض�����-\�F�A���32~/���ݯ$S�l����lY0f���T{UT��2���v��{t���Cd���ә�+���q���K�KWo|�|�H],�)��� ��4;�nBSdJ��k\a��&f'�?v��ͩ~��\B����gayP�o�dF���Dž�i���7 1�j�a8�o��cA0%Ǿ_�kn`}�#k2 ��J�e��YƝ��}�V� lQ/p��{c��̦�l~1����+m�+��˽�;^��d�~k+��}��`��T��s�-�ۑoapL+Q�{�ع�X�O�6 �`�ܮ9��N��#\�+��NWz���A"i>a�����c�m�A_ �d�j�,��)=k�Ѫ��F;iG��������Q�,�u2��Iz:X ��"����Śq�r��꿜0���U�;�ߨ d���G'I-�7�)�Y�D��[�F�QH�Y�6���K2�U��$"���)Y�QA�c�?0�����L�W�Q0dCSX$��]�����N) ��$P^F9:�{�0�47*� �U+sLR�� �t�7�ə�S��~���*�����S6�u!��<� �@�'<���_�1=�\�]��̀��L��ʦ�_���Z� ��m�Z���e_������B"��c5��7f �2 !"_��G!>�t�ǤfP[l��Dl$�X�".����{�)����I���nQ`w���U�������' �9?jyHW�W=ߤ&�0�Ì��2z߈���@5���6ӟ����@o?� ;j����z�rln��L;&�C���=wq$'�U��f��1n˔���5轷m� <pb�*�ce��,�08/�OO�3��2X�L���[F�l�A�U �QkVp�J��B���#�"�>W@T9h�po���J�Z�9�X �]ݟ�KKv�4��z�Fo�1�4���rl�Q��_)ƃ5Y�� ��Z�\50nK4��?���2Y�z��(C��!֑-/�)!)�/����>����d���`�d/8.�k�ʜ�,Zr�p�S�؆Ѥ:5prҌ��7j���=U�F<��R�e�ׯ�X6`6�m�,�_���X����n8���C���e�Q�|3nc<<�� ����>RyZm�L��N&�r�ܣ�0���O�Ku��S4��RA�Gg��e�ޡ� ���jx�pL�P��Y��+�!C�E?E:�C\���ǐ\C��Hz3%��Q+�i���|�'f�M�qh1� h�t���?��@k��� �����Ҍ�o�Ԫz��%�X� 1���z����P�UZ���&�kgB���{�(o�����@����z��v{p&jK&����ˆ}0��� �q�.�8���JN��0a��Y���R/��th.)C�+~s�J�Z��T`��uA���"o<�Pe�����>y�f��� ���h��5�l�S�}�JG�%c���z�(R|?_��L?�y��Rmx�&qJ�C�[<�&</��=��2����U���'�;Y��a�ӽ�~o�<����+�h�F=��ӌ4������wy�rL=C�KU.'d��bA��lAN=��u���&���aC� �#�-��G�| �a���������fb��kX|z�*,������[��|��Im�\�?`�.1L�ö3 ����dÅS�ӎz/�{��oʝ���>K ��O�$�h^�|��-H�_��:,�MY�4ȫm�"����YO�u6< L��m�,�� �f�!�����8��������PlZ�pT���~Ɇ��=#D�ڑe��K�M���,��t�Ӽo�"Ƈ ����������VI�e��; @�g"V<��Eϟ����j��Qf�{%}S5b�z�t ��<���V�<1ZmK�/��[Y��6�/����ר�e��jm6��p;r7*�6i�Nbg��ų��|M�Y.f�m@��aK�`BX�q�����Uj��(l2�����]Ԁ��E|�C=R�VfvBa��HQʃ���v�F҅J��K�s/�.�ʹ3 t\'��:��iw�H��i��/����,��Q����� ���oGVi��]��h����3|�~���u��Fq��~���T�u 9+�Һ��K@� ���K)5(7���%�bx�ִ)�X#��LA����X����\���{'�~��Q�I���Ĉy"�� �L��J9�j���8@��J������lVz=6���C������5�=ŗ�1��R�������|� f8�t<���>��D����夂 ��~Ԑ�؈�Zf�,�=����30�<��@%���07��� R�����g� >���T�M^%3 ���*���Xf2te�-�r����ى����Y0�U� Dnw�I2�~;'[SaB��4u��e�&��d�i/*�_�k o�8������ܐ�S��p�-�8~y��iNZyC��m����F�ŧ��V���ike���́�5�=e��U&���[ǜ�Ѓ|a�!z�#V�U�(^�+�Vr��[6��i��u;�w��'i��#2��1�$�$�̧!�Wc��y.$V��Zjvr�{�Y�F�Sj�ܮ�o�@��~v~L�y$��V��i�ׯ�_:4TI�>��@�*��B��+�Vq@Ý�v4_&j��@ |�PIi{��R�� ��̆R_ӒGz��uX3SJQM�# Vg>K�8MO���<���Wqv��bc�����w��ZBx۟�Q�O������m����vێD)�` _�����Kſ�����0�놛�i�엕�ƍ�'��gH% 1�҉_�#��М@��(��'������#&b���ͫ����e����4�nڮ�6J<������J.z�~3��������F]�͆�y��f[Qh���Q��f��t�l�W���eX�������«� ���+�&\�������T���I�[�Q��զ}k�V��j�W�0���7���t}z��ۨ�*D��o�-u3&ꪓ�'�f�sޏ�rh���DoT�e$>����%"�=�Bq�@P..G����֟��"q�������Ӓ7��$o��;��_ �ȴ�n�d����-u�� �[��j�5Nb�^�\f[����p��KF�s1e�쳊s@eq�y�\4�Ĩ�h���"��14���H��ow ��и���ج�_Qu��%��D9T[cܬP��2�-"�-�h㷕%@C
Static task
static1
Behavioral task
behavioral1
Sample
50b3a3c900e602fcda1302f35c31ff83c9834e6febec38274129d67ac2e309d1.exe
Resource
win7-20231215-en
General
-
Target
50b3a3c900e602fcda1302f35c31ff83c9834e6febec38274129d67ac2e309d1
-
Size
3.0MB
-
MD5
05c81d7b3197026402e78f6c5cd11738
-
SHA1
c312035cdbfac0fdb3cbeafd21ac7ffb711ad341
-
SHA256
50b3a3c900e602fcda1302f35c31ff83c9834e6febec38274129d67ac2e309d1
-
SHA512
d58fa407f2344b3126a14c45518e2349b40ceb8a6b21966f96f341cc33d950958b6620019238d141e98928a107d2443239b2ae568079fbf7b75b684388dfcc43
-
SSDEEP
49152:MI+T2eY8rNzFz7KixpyKz4bHX79E8+vPNqVWAVpQjXkDgwz6bzjMPdxAYAKc:MI+T2m5zFKieu4bHXRxQPNrapA0nObz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50b3a3c900e602fcda1302f35c31ff83c9834e6febec38274129d67ac2e309d1
Files
-
50b3a3c900e602fcda1302f35c31ff83c9834e6febec38274129d67ac2e309d1.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 462KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE