����ǟ�k:!�*pJ��Yq�1������ �j��63r��8���L^E�k2�@������Hz¢P����f7Joq�m��C���ڋl�ȑ�+c�U�!d<'ΐ��\W�i+�{��$;r�w�����F�s�ү,|�-�c�OoM�DQ ]������i�Zp�:�"� ��v��-��ZC�l �%|hR��` PΙ���<�x�~G�쥷�d�F��Q=��L�6z�qY�w��u�ZH��d"�E[�? 5�Ίɪ#����oǭs le���I h<F��\��7��[��j?=���y������;ɹ��m�$���?�ml4'�g&Ղ����_���ԣ�gu�H>� |.>�Mc��%�iQ���03h�Rj~�A���*��Ԛ���/o���S�����OF�?�$/��o���:�1,�#���v��[r$�І������6�,Q4&��-<��n��o�m��N�چ��;������B)�)?���a4j���[�R�����Ȫ��\��������e���X��.VN<I��J�u^�rַ w� �2�RWq'ӗ����f;��|�v��8ƚ���|����8�����=�d��3i~����s<Q|ՁZ����~+��$�7�%�ud)䡘/,���$z�ۣ#�J�哪�WI?���9��J���NΈj2��`\eu[� �駵Jjպ�&��q������z1��f��� �9?0���`��@'�Rp=���Rv7�W�.e���H��Ȁ��g[K63&K=Blho�D����u�pB[9��!��)���-���w)$fy��y � ^��4��pG��vÒ&p�����~7S�(�FD�3��7�*H{�I�a��..0���ai�=yEz�lan���(�x>q^PT�c�5�v �`�6#�/������`����XwN|sb����Ȏ���Na��5Ξ!�%A��2�hG�a6`����6-� ��t(/Q/JO�1dQ[�5�.��6�J{�,H��k���j_�J7��p�i�"mPjU�J�$��)��H&��vX��е�CYc����ҭ�(K��ޤ��^8G��l��Y�>NBV��-��V��i�T$�� �A�3�u"��U$��o� ���!��1�ɤcS�|���� ]c�ƁZ8��_�(_ gq�b��D£�;�9n4���=��,b��l���^f͢�dzA��j�|"���\ā�sОȁ��J�;na>�x�Z��H��k�n��rle����R�g"ܱ�j�� ��0w��E�m�W�`��\�I�*�n �5�pӰ��t$��E�Y�����}~6I��_Hnc��n�Tk�^��v���a��A!�H6��o��o�p,]�|8BIl��f{(������/�����s�^ش{�e����y����)�a# au��wy}mwn8��=<������w�W�/]&AA ��̋��[���]+�h#��p�2J�"F�_r|�8&o*m���3N��C�2�3�].eL/�X�o-]�P��(���;T�4G�zs*��HN/�+Sj�*��ܓ�p������\�-BH�O9���@hظi�-S�"8X�j�5��ъ���B �́︍��?�\������)����m�c ��;hɂІc��|1�E4�� ������ س\r�z���d���R'��h��� X&�� .���L]����ҹ�����S�O����J���[i��C2y���iWY�fP�Q����k��{��N����/���HV�%*o`�$���1%t�}_e�Q��� X��KgH�|a��*�u� �fz[F̷ಐ���?�?T$N��"�-.� ;l���d�\*�k�ɓ;��<����\__�9��1�xma�_b��b'����a� �:��4vm��G���7���Kj+iW@#l�rױ .�d�I��vb��LH��<e6{�6J+)���پ�b����g���PȸZ�R�6z�H0�{�7k�p$�B�����e��<s� �?Go>�Z�֪x��75-@�%"j5�3�}���؎d'�Ph�Xe[�xf:�"t�`t�o�mL����D����3��P��P����j`��Ȩ���~*�d!�|n��JG��M�K��9ݦ��*Ǻ�C�Y3p�x�Ȉ�^v�4~����g���8��X���>o�>�0��8���g<zN��9��0��*��N�ci� ���H�8�G&�:�7���D���G'�?�����GT�m"H�X,�DhIS�C~���37BB�^�m-���ς��2U�������>��� Pv��i��@^}������p�G��Ŷ?��� �V�rk��V#��^���Ԍ�c�9��S,6hLz#vQ����7B�2h��+P�Q�Sߞb2q�*|w�nJ��KAi�Lļ��%��*c�H ��wW�ul�0t�Ä��NG��GPzB�Ǹ�2���ϏX ����ʑ��T�9����G٥Ts�����>�6,�>sqHJ���p�2s0vB-������xۡ��8Z�����0N#�|��*��ֺ��`�l.K�Y��_V?*k}9-M �ת���+^�h ��6Vɋ^?�CC�i�)'r0A� vo�ǘ|�*__/o���f���B~�����4e]H�� ��s��"��9��<oL��$�Qd �9x{�(1��}j�|Fv0��T���2ͬ���-�V��_��̜)wm��;)\� G�OYa�"k��P�(h�[)Ǖ�A��Xz�rF_�u�{������ �f�g�����۶jV��?��~��MwN��G5�Mk(��x�k����P�l�8�)Y�ĸ���-jk����t��N�^ ���2�(i��ӚM{_��X�n�jܻ�Hl��<��`�<�N�y`aՊ�=����]yn����?.�ݰg 5&i=,O�UWi��&�����9�������>J���B�pВ�����=���n�_�k�h�AY=�?�<KePx��1Y�2a���Q���l雴�Ԗ���1����������gS]��><"�UY�����d_ G�2�帊��C��H�Kb�9�P4z�6%od,ogd�NS�:U�'Vx�L�=F@� '��C��`L«w|�����B��b�s�H�UXo�Y�Ω��n�~�a�WM�nv�7??Q�"����H�3@���F�9�A������.oŌjCUI�$>Y_oxv�NR��U�u�w���T+Ҹ��e)o��/�r� ����Ȁf�ﭾ�T ���� n���IZ�^���n��)�t%��|D����$Lf���*���Co�_��Z�A8���@T��̀�!;��5��ŋ\�艢�����=9I�BF��u��0�hI V���r/c���8�ȼ��A)��jEN�b�h�沬�F�I�c��D��*���-G�V����8���� H��m(X��9�G?Й\��=�Q�Y��tgCk�ݟO[��Y<ݝ�� �A����a9����5�ak��[z����4�Lҙ=Pk=�<~���~�vtNE!w�T�9}u3u�2���=r��rY��
Static task
static1
Behavioral task
behavioral1
Sample
776874dfab4c500c50a92c2700a12c9c5b0226d8312f2b990712fdc0851a8084.exe
Resource
win7-20231215-en
General
-
Target
776874dfab4c500c50a92c2700a12c9c5b0226d8312f2b990712fdc0851a8084
-
Size
3.0MB
-
MD5
8deccadd265560e62f58c678ba013bef
-
SHA1
f543825a0f771036ae4aa5b7ebac4a92423dad6f
-
SHA256
776874dfab4c500c50a92c2700a12c9c5b0226d8312f2b990712fdc0851a8084
-
SHA512
30359257e4b43dbe4e10cdef933a5e10c9ccc78003c0e0390b5d730f52b4cf6fb59a3a8abdba689daf32a3d19ba3e41620f64f845e5ac7250142978242aa7a8b
-
SSDEEP
49152:yCwsCaCGFFgOgGSNG/jXIAjt8AlxqXbH802VkNNBfZs4v91q1Mf:yTstrFFgFELS6xqrqOs4lE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 776874dfab4c500c50a92c2700a12c9c5b0226d8312f2b990712fdc0851a8084
Files
-
776874dfab4c500c50a92c2700a12c9c5b0226d8312f2b990712fdc0851a8084.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 462KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE