0(��Lk �����������"�9W�͢HWLM�_4�ݎ}ٓ����XG�W��NX���Z�� 3��xG闌&��v�$�|��!J��N $ .>�{paS� ex�O �R��$�j!�1����k��!����U��/u��agЪ�,n�W�_���I�$wZ�|�Չ�>C؆���A�jx��.�DX�e�K���' �������r�ab��P��&l�"�VcW̶�#Y\��z��5���ǀV�}nɘ���D3���pL��� ma�Cc��":�ܦ��4�����Xx͕��U��zg��]�w~��E^�6Fe��^A�t&=,FWdL��x�숕�����yYO�^�ye�����MQ�i�]�Z���r�(Nh~�~D"%´U[�b{%߈Ƴ��)\�Yn�W����b�����vy�Ů��� �{韠Ab�;<�Iy=��3���q�%���j���FW$u����A���$���#z����;��d����h&G7�:�`����T�d]�nWHF\^���E0�Rh^��>O�z� e�k� ���ӵk9Z����Pc��?}^lY���l�_J� F(8�ij`߸8�c-��b��]�+@~�\��B��D���z��5��M����/�uN���Z͋g[(���]�$��6z�6:\Ǜ��J��>���ѝ:������� �Ohz���®�>h?�r�V"��UH���@ζ�֤Y(�x�v�C3����*"�6tӠ%��2;;2il�}��HΝ�{5�~;��S �2:6�1O���`|���BG��p~��s���o"�{,�:-@�}�� ���L�m2���>2Q~�^�<!@�ͽGO� �+�=z��y�f�A���@��0��9��x� �E njT��ӾfI���T��U�5c~uP���4D%���Ł�.hT_զ� "xi5��.��.{u������<��n>^ d�{N����27y6���n�X틘^R^/Q���& ��We#�ي c¤�� b/|*�e� i7���h�)'Rp7<sD��b KG�����Q=����@]���ˆ�kN7{,����x�K`������?���^�=F1t8ї �F��#��Eیf�'�n�n��ƚ�^BUD��t���P�U�-X�M��ʮh:#��\5P|-a�|q�����v���#ڛL�&S�}���ԁ� ��0���ƭG�|Դy�46;��GO�֨�~n:����/)1nC� ��?Sế2�8ī�����Ur����.[Hq� ������ū�,wxLX�t����m 3�(E��}�Ch�����c߾�93��Fʵ�,Q�$+m���R�� ]���;LC��g����E�X��+����zK�s<���� zT�*畓��/P ������?�'�$���X|"�����`�$���/�QAe�s��s�ьc�pv��7�D�]:kѬ���](�?ѧߙ��nɗ&]�όl �\���#�����y�S?.ʂ�d)���o�5 {z�{-��nc�c�����:�l�a˅_�?�}�����/.� rF d:�v��a��lQ�|���@[s�S�~�����ɲ[?��LhT?�9�bl͟o�>�T�K�� �m��E��(�B����x�+�[8~�{QfS��*���[�L�TQ�FjJ�6�e���M���\t�� P�L�y B$A�t�.� b��a��[���d����(8�T�j���DL�J�Ԃe<�(��_��7�ѕ���xs�m��l%Ý���gQ�j���`8}���9�{�)�j"WC�w�Ȧ�P���;A���4����]�+��w�N��<?_��Q���tx]-|r3N�J��p �l��A���U��9[����d�x�%2�:�iB���X��?̛a��%7��%� ݤ�6���*C鈴c���.�X�ŝW #g�}�h �-z��Y�����_��I�o}w��/��؞�-R� �dOa#iTS!�IUb�w>��M{����H,P?� ׅ�"���1:�M�|���^ּުg����:93>���"�:�i�}���;���p���E����L_h��e�2�2�O��GQ��4G���ªn�MuL�Ύc��'�L��(t��t�Z����K����!��j��Yg~�ޯ)��M���K|d�+���.ʵ��� 2��w�V1�����R��+�K���)s ����%������x ţ�iF�}���ġ��>tI8H�)�Et�ΑH�ǕB��j�ҖT�n��]��yu�f#4ڹ�jyT� �sv�Fh4��ﻡ�Lt�ݦ��@F�SI��Y�F�)g���ʿ��� Qባʝ��?�an����?튒6����ah�C�I���'�T��B��jgE54���a=���u���!{���u��̓ؔh ��^��X�6(��k��v�=]�,��7��8���o{���߀Y�[.���$0l9��rb5�xR�yZ��L�ב鎷xZCp^�Z�鉃�8���5ԭS��I{ `��V�mE�F|�l�CŊ����U�9F~L��]�{��d&�>a�6NͨL"��?@�Sթ1�Z���H��.;W�Y����P��"��l!�x����D�m��Ĭ�����xV��H�Xg�RX�D0�a�49��8���"�E�q�����v�,pSH7L��v�d&���S����'<{��H%��es&��-��w�&����}���1�Ԟm4��7��<���]&������َTT@o/$C��=9�!�a�)��ӈ/ �ѷ��e���R��R�7���Z��\�7��/#��='�S����M��,�!�1�u��������>��O�|�)��{4��33��b�Y����"0lJ�(��!��y4|2BA��a2��N{ixmQ5u�����${6��[�ΐ �5���-���W#�B������To0]��]Kd����C�9��r=nJ�cŻ��%�^1�e`�]@�l]��j����~��;2����%��DI��Pa���ؘ��B�8RE@ {]�����4�.j>��۽��[JE��ЉW*cM���IF͠Z��4���yE}n�'�ɍXh]�j��N�Q- w��K+"��� k�R]�̂ ]?��k3��N "��)d���� ~}��# ,&�����L���AЃHxOI��Z�y���9�q
Static task
static1
Behavioral task
behavioral1
Sample
519e48c88f9c31d8f8af9caa344be7f067e8b0aa9048ad1260d9f2cb13b612b8.exe
Resource
win7-20231215-en
General
-
Target
519e48c88f9c31d8f8af9caa344be7f067e8b0aa9048ad1260d9f2cb13b612b8
-
Size
2.9MB
-
MD5
b487e0c691f5a2ddaabf5412de796d5f
-
SHA1
dc2ca2e9d5e78f2ae28f80ee423677b98dcdf099
-
SHA256
519e48c88f9c31d8f8af9caa344be7f067e8b0aa9048ad1260d9f2cb13b612b8
-
SHA512
89ac01cea402ddf2c1325521f8a34f95923b9abfef6d741d1bfde10d0efdd043d4779b6daba755437fb25415f96cb76899c769e043a5e97ded22e8e613698cf4
-
SSDEEP
49152:f2t+MeKDAugrz6A8OuXY4Myc/NioEcNpSkr9SJyZiRvw2y6lB0g+odVFsv7qBuLv:f2t+MkRrzl7uXeYoTwkx1ZidwK3dUOWx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 519e48c88f9c31d8f8af9caa344be7f067e8b0aa9048ad1260d9f2cb13b612b8
Files
-
519e48c88f9c31d8f8af9caa344be7f067e8b0aa9048ad1260d9f2cb13b612b8.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 461KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE