��P���ԫQT���=��Av��D�CN� ����z+Rc�X�Lg�ݻ����2�p�e��R-��?�w����K+�9����=̖�qE|� :?��t�ɐ��^<3P;�s�����m��;���G(k�ɇ��K1�S�@�Lր��[~DV�=_�&z��P'?i�hA0�1�|Br�o�C��I�[��� ����R-���d }��'����;��4���5#���=��X՟v�:[�6J�4��8PFr�[��@m��O���%�z��W��k�K�B�������=���'�pߑ�^�� E�ˮ�~Cװf�qT������U��r�����E��`�7D-lbs�B����������Y�1{�9�{������y�����(�:YJ��וc��=�)N�FkE�I��5�\�F� M�����oj�xKB�c�΅J$�"ŀ�b�1 �R���p�u=��t&�}�W7���b��������k���C��=6W�e��ݴ���@4��Y��"�O ��YS��mU�.����^(�ԟ}*vo�h��)3L����2�B�esf:���_�v�r����9î�TC1%�ig��tY?/.DS`���v�qk&�*��_0M>�ެ� qD���K劏ګ�w?�Ys5�h����^����%\����Y�.2�!��f^��y��X!OX�����Ɩ+mk���(Ħ ˲�A -�7[E�+�����`��rq��OY���i @��+���[ �N���)����9��}B^�+��ƻP��u>��Xc$� ��\��P�V�(�.�xrSz�r�f"�H�꼶���j���\{X<L�0�x�WTmWqy�E��:q,��Fk��Gh�D�� �� K9�q�g9��[��J�su\E8h�ȑ�ZT���{Z]+�t� ��8���Q�f�b�eɃ[��O�d�Y�GJ��г��;5��p~q?�x���݂� ����YZZ���3���r�ݖ��?��Gq��Z����P������,v���������b2��摆$�;߿��a���%o�#�]B�4�"p����(*(~����.h����7�2-Nϟל�HФ|]����H�]y�l�m�E��H��¤fm���d���n+��y>���"g�O�::�O]���fJ�S���m�=�k��ԏ#W�31�S))�}0S ���HP�_��U>V��Q���z_H��R8��&&�����t�����jy�� �X�аV��8x�i�O\�+%\���$�/ht�v�k�"mM���,�7Z�������u:y'�9�^�q,���΄d'�_�z6u�Hg���� �Kcޏ4(��8�}v��D;��7�͎Y�vѢw��ep��(D`���6���~u�=�ΆM�(w[���\v������2���Ճ[���Wa3G�\_Y"�+�O�V�Gn|�<ߝ��� V�*�~%@�d"�c�¸*/s�>d�K��#��A��� Lgg��>c[��z�?�w!��� ����40:����})P�O�pK��3l��Xm^)-�����v}�7�A�2a�}�I��-�EB;�ڃID]�gΒ�e�p,L+B�����ecmy��� �km����\:��*D�HoaöֈW��m�rI���قPX�(o��Jnԯ�R���p{hrb����ݘX�cl����i&�۾|�s H3WD�?.�� #�e4���b�9�$���V�ށ�-��?̰��a0��M�mNYڝI������(X�a�-�1f?�`�f��'Q�Ėf��&���DL���x8 ��~쇠>=Z�xB��|{�U;�n�܂m�·�K#��`y�{� +N��P�~p�x���]��'X�I��i����Z19��#��az(@y�.*!�U%�։;���&1I�#��Ϫu���:'*ZH��\��~c��d�W���p/��7�E�a(�����ا姒���c-��. ���������y���LO��,r�W���o8Ѽ�qS��m�Ӯb�l=�dy�������I�9U�h-����{�{��U�X+a)2��e���}G|*"!�����S٦��2}/Ɨ�'\甤��,i59�\���VDQ�+'���G���ߘaJ��p�6�i��-����'*.�� �`G0P��=���+-��\C`���.�a��G��h��H��U ;��(�?=yƌU=�ӧk����@���!�L ���9������h�.7N@�F�����g�ko^�O� ��%|�`��u���5$���G0^%��������<��Ɇ��r9��X�����ۅePQd�1�S��*����6r?`zJ7&��Ɯ#���y��� q ����8o�rTZm�c��7Nl�P�?�X{# �i��6�-�$W�ͣ�X�A5��/��y�����ɵ�+�xl������q������`O���� w�VH��L���sy:�]���#6a2�Z�%�A��/>߹Wg�eF��9�\Է�> .r�� V��-.���ŖU���h!�R����Xr��5*h��o4��}�@�? /?��V.:=v�����ɛw��9�Ml *�����jsRG��ݎ��T�x�#;/oc��9h!��0�$��/+�('rr�U��6�����(\�G�!�W��RA5��'�� c�G�7��h1G3����d��g���%�Y����<���K�%s�z�]����#ܛ^SIE�X̃��NME��� *B��D�ע�=���G�r�m��C��?����݂��WDXf�&)`2૭��zjXh.F��-xK���%�� ������mb����עL�Y4.vg���C�ѽ�����8a.�?��7�u�Z��� ���WW����aY7D��ok��U��w�r�v��\_�T㞈Dݤ�ğ7�]rS�k���P�|�'ȔiJ��PM=)��dqs �b��YwU]K��q�_~��L"X�z��˩ק��Ty�vV�3����n�� M5DV�����AWJ(�㻘����4���1�?j|)@�eA�dFu�V<b��g?[;ٵB}-���x|��P���7`��vێ�2����%�����_�j���y�,K?E�wߦ(�/����(�h����~6��E��](j����b{J�v��>����3Lh�*��ai����+K��ؙ*��� R�����-8_�Y�9$�(�c�0��a���835wuO�˦�Ѩ)��AJZ�����/�4d��W�_r�g%� ѹ�~Rn���և�f���4m���E�-8z� ���Z�(�Z���<�1��o�����K-�pn�� ���.�`�Kc[�
Static task
static1
Behavioral task
behavioral1
Sample
b68cf9d120e949c1d95a344a71532b7aab86eab2f8bae1db294fe67dea99a993.exe
Resource
win7-20231215-en
General
-
Target
b68cf9d120e949c1d95a344a71532b7aab86eab2f8bae1db294fe67dea99a993
-
Size
3.0MB
-
MD5
40882021e46299167aa0f971e3f97c52
-
SHA1
5d1c0d5d4d66be77d91023d7b41abbc6e83e48c6
-
SHA256
b68cf9d120e949c1d95a344a71532b7aab86eab2f8bae1db294fe67dea99a993
-
SHA512
3b605e727f3ab995f052cdeece0c3e041ed3d7d36f723d717457b066dd57cc5dacc2b4a7c06e07f3e66af4b988b9f62700e1c2e40027dc940ad6abfa41ca4856
-
SSDEEP
98304:PqNbd/E837Mq4Uv/AKxRAjpNdXgbQFTC:Pd83gqfpEBGwT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b68cf9d120e949c1d95a344a71532b7aab86eab2f8bae1db294fe67dea99a993
Files
-
b68cf9d120e949c1d95a344a71532b7aab86eab2f8bae1db294fe67dea99a993.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 461KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE