Z������l'2`��ے��MMF�c��OՕ�)�Q���?e��N�_�靹L�����L�YT���Ru��hE*�U�BE�y?�Ͳөm�T�ğ{m����:�$��n�^��k�P:?�ML��s�G��2��I��e�um����F?��\mv��A������2�k{���Fzџ��)�\Q�����~� OU�& �}�w��������k�tM��{���H��w2��m�|�*����.����w�> b�\��%�� f�h�c���mr� �pv��^\��(�����=�Bd5��t�P<�l�q���|\�?�4��Z����\[Դ��f"�:��<ZI;��w�⸱�@*�Y��T������.v�ǚu<@Z����v�n#�աi���P��xT�����κﺼK��[��K2�L�\Wk�ز���� $��P�Z�&� ��/���2� ��\���7���_~��_��';@O)v������WI���b�`��E���Г��U*<mU.�ZD=z�>��u��8t�f#���vn?��i5�%�9�l��ao_����PC���&�*ډ�ܸŴy�aig$������X.(MHA�:�6& �P֯c�,��q���"�aw[N��0���McR�yD����ې�����$M��&����S[� 3wY���J�d�،�s��e�: q�H:n�<f���\�Ȇ���F�a�:��$�C����V�N�o����8�Jl2h�6��ٵ��z���O����/�O~�j����u�0bP-o�/����Z\h�8�B4�TxF��1�������l-0�Zs=7:�@y�>A�/كk���b���!��zq ��x�vO{.��w���ϖ&~5៑�b@��ie�?z�D����/���[���0t\�J)8�K@g+�p��%K�Z�^:����[�i����!��l骯\m'گJ �z��'��@�Ϳ����~Zt��+:!���ߘ��6ҭ�Ʒ��=��� 1�P��Hu�@&�a��PO�x5�Z0�fI�epE�l���ĵ�2 S�۶0�<,��V\7�>L��2(�U%�<p��h�\�����p��_o��z�RzG�C��A��=�>��>o(x0g�2y�W�����b�H&����F�5�_"���+��۰ϰ��>�:D<p�r_�2�p�U���d���if�_zC�ȩDnl& i��C����#���x�-�90�ʊ���[?��Գ� jz��,��iO�)�R�E�-��0�7��5!���-��������Ç�c�g"+y���[� ����Ư�g������)��)(���Qo���Ǚ�+?WKUۮ�7W�L���������O �2ɑ�KXX���R���{�\D�2�I4hm(�<���H��!O.USk)Z֎.I��Y�\�썁"�uo��`[�z��Gr�2c���#9Ԩ��!�,h�A�/ō�yo�֒�}�������w�Q���X�bb� �@=��#Dᄆ�8ֻ-��S��+�Å"�(������R:e�������+06*L��!QwD�������@���������i��ޅy���\�U��<V �\�A�=A�.������[��TBں���Y��1�.��*8��A;�k�$'�ƭO-��e֟�L*�\��"�9ڡ�a��;Ʀ� F>ATuFj�9t��L�%���Y�Τh����_@�y�� }cfE��Mg�̡�T.µ�T�;2��t4�-���S�k��>�9m�*�y�i��E58:WTϭ'�8H�5�"��8��rrذ�K�7���2�+��S��'"�la:���=tR����8���j�A�{+��?�M���@��!���d��]7�,N�%q��aUƣ8�^�ք�fD�[DD��W�F��S|/;�ւee�If%KPx6����5���ϟ�hNS@��-�h����y��|j�5�N�5�Xu�x%�"�W����X�n �LYÎM�\�d4����y�:pq^7�y�'@���K�{f ���9\�CM�4��/*Ρ��$ȉ�_��մ(� ��p��[���!�Oz "����H�_��=EV���ԍ��f/�����wŎ5��4���S�Y&�)�(]�c�g��0����o��U�Ʒi�x�J k\�i�c�n�:�ٖZXBow����|`��?/�>O��&�Nw.6�����d����]�e�(+2��F�+�EJ��m?#�������w�I梿���+�����l�}Sc���d{E�d���*YGR������,����h �}��Լ�Q6A�C���k��]$(hP.�RWD@��~ ��xQ x �M�N���,J�����V�u�q�R�b�ٹO-�r�9���!��u�]�f3�<��]`��Y"���K���A}�g���'B����NE8�w�ʥ��Ħop,tV,!��RTA�?&���7ۍ�Z��+�8"��6�5����q����e�;f��+�I�K [#� �B�y:��@�^�ͼ�?0k�������������x�$��K��vSfP7.M_T|����NF��O����+v�JG�Ǹ��5���z!�]��XF����a�]�%�u�a��r@�DH�����* ��l�q�5��^�ȳ�{A�)�F�� =�� ÔfW�L}0��-"g�$r-,�d��Y�V0��"�8%eϖd��X����J�Pb�\��[ i.=��� ��$�-F�V��}Kɽ%�{z;3w,ܞ7��şm�Y���K�U��H�y.�`h�/�q��a,1w�>��/���J[�MI�v+('�Ry% �piY��tSi��4nyX"���!�4�p�Z�]��V�ʡ�,ՎgB �W}��CgE����~Ǥ?��F�ew�� Cҍ�<��Fl�Ed��T�S0�7��H&�, x{k � K�q/��\�����ԚQ�_����vE���y��A��W��%_��9h�M,�ܔ��Oy��X.�G���"�19%_��Sw�d�l�'ѡ|9�H�)�)v�W�q��o�mbSƧު��^�g��{��dKn�� �B}=�����ՔTM?.��� ����c�����g5b��G�D?�j͗L8)�YMA��
Static task
static1
Behavioral task
behavioral1
Sample
275ce5271fdfd7552e8127236c6a1493ef3478d0d23520c772b5cff97db4c830.exe
Resource
win7-20231215-en
General
-
Target
275ce5271fdfd7552e8127236c6a1493ef3478d0d23520c772b5cff97db4c830
-
Size
2.9MB
-
MD5
8148825533499cc2bb1eaa1c36dddcde
-
SHA1
85e2a5172e05ef8ae2e684b5440aa8119a0d9868
-
SHA256
275ce5271fdfd7552e8127236c6a1493ef3478d0d23520c772b5cff97db4c830
-
SHA512
1e4d4a0e05969e942f1b5254a2ad787d7150a464262f674c001c74eb1e797679dc0412791cd436f443956f403064e0a82ee991183b11660c13ffba0ed9e1140c
-
SSDEEP
49152:vD5d9Xbbuln6Nw9TZksRpRjs/FRgCV3PEwJwuugJatngSPw+4i36vT9HnOOasLf:79uln6eklFRFEwauuhgMrMHaK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 275ce5271fdfd7552e8127236c6a1493ef3478d0d23520c772b5cff97db4c830
Files
-
275ce5271fdfd7552e8127236c6a1493ef3478d0d23520c772b5cff97db4c830.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 462KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE