Vl��ƈ ،�|c��2����Rh� 'Q$"/�v���v�U3����l��R�<0S�c����:�>^�~b1�[�T"���Ũ;~�ܒ� 5w"��3� �R6�nTBb�Jι�����w�t3j�cPw����^�=ɏ����nh!�h�����%�.Ol�9[�f�&�������3�O9��YW��6tL�8؛�K���dy��,�5�?��%G]���Xp�崥f@��㎱���0�C��c£�T"�5{���OAn�qx�=��.*JU%��g�f��#>�z�ؒrV���*�Vp�dB�v��Kcֆ���p$�iO`j�:��q����ܮ���J_�r5թ;;\�ʏ��G3�ZC�.ق����ʘ�����P�U;,_Mk���&�x�tB�v���a��jk��lz����g!fag�S�=ݾ����k�l25��}�S��Z�����L���a��$><��v��I���[�v���R�3QpY���*&���kd��4� 88� ldT�=RP�_;J����ZI�{�⮦��Cקy��j>;�˝��R6r�� �j���.�Qr"����5x�$z�7[g���G|w!���R.sZ{C��\��������0�%*������"�M�)��k�[�m&�,��\�,|E]� ��$W8�͋��n������G���SO���Ր����IEp����-Qn��BT/� ���e�'�Q���?�͊�V����ٚg�V�n�>x]�R�`f<�t��$XbBZ,��g�^����~�]������t��~���/�LJX��.�@`>_�����~��a삽q6`gi6��6�̍���T�;Q*1B{R+��1�1�f'h����i8�Y��W���٫�L,�V"�D%a���>G5�@��+-��1�F1��^2�(ϙ���&X� =�g�ּ�XӱGS� #uq~PėԚ����>O����x���PX�RM��7Q:���=l�����G�d�$��ML����/j��=�X�A��hLe��ӗ�{�>o������@�O��x���KW���[��3�[����oR�t/�r>ǜ8ӏ,�=K�?���x��UrN_�L��n��H=����䡃�U�s�K��Z�pcZRh���V&�b��L��Li���5T�G��<���~�vA���������S��!�����uR��YΑ�?|�1����e� �Hw(�º[���<������{�9a8L��� �-�;t�I9qݵ��?�ӯ78���=H;����Wd�F�!�T�|�9������<n����\�xr:�.�C��><k�z��u���֠qٷ �W0�i��8�v�����&)����ׂ��%�Pm螪VbJ��.V�p���=3��;�+��uгI�>��۩. g��V�#Z�w�v�#�����л'�� X6�}��:8z DL?��ֿ�;5d��;.���\��6i" ���6�Fo"`Z�R^a��� �I��k�~��*%��RT�;������r5���|��H�ߏ�d+i����w�yX �P��%�W ϔG�����53����"�� �d�/�����[d�RuU=9�ѿ��yNSF/Q� �k�����3��X�芞��r�(�g���Y�&��e$XG�"1E+徐�m���s /������1�j�a@̐Y��~�n2�j��s��n��(r A��5���Qo1�}�U����9iz����M���ꞣ�ͩ��B�����K��+(`#M@�C�?;o��Na�A}�#F�iR-��p5��7�� ������<�ܭ`<T��I9}�!\�"^"�E�B����/1!�� �2��Α���\V=�D�u+� �2J���Q ��,��Y:Ѧ��ɳ߯E��b��*���0f$�8w,m���/�����#2៦ԣ2�<[Ǔ��� Ѷ���o���,��[�IZ�G���ΘkH���sĉ���[��a�p��P/s�Z�k��1���6 ��(�����q2r�?�l{�ge5Ȏȳ �)�u��g��Ŏx�9>#�a���V�L���z=^��������8���tLlFkJ!+j��z�='�!�����(��hY4�`����捅�c ���[��LQ@�˛�٩ʥg��iN��e�&1\�v�`���w�~㈈�U��HŹԹ0�K_�� ��E6��| �@�%��������]����>���T'�_0�1��g;����߶8wv�����>��n`*ɦ���9L�kbl�{���-�; ���\���u�3s=��"�~$�-�IG:zf�VF�I��<��2U��S���wG��r�D>���C��y�:�� ���Ih�]�D�}�T�VP4�Y|��#�'T�O�Z�;���;����'۲A���eD~������/�I��W�z]W�ޚ��}qT��ĂX��cR��r��n��������G��C~�,EO[�N'�ߧ��W�r��p��u*K9s�C�J6��#oL�oY_pƃ}S�����z��ac��B������"�/b[<���@�K�$acj�z˱E�ҽ4�'����}m��>e��8�o]��{�����b`f�J:���b5�go.�I}&��n�n5�|U�Aa:����^�2,����!L�0�n�KL����XQ;��<�_}q�/��IUs�\����M�D��b�L��5y�ݑ���(r�j#Ⱥ�rݳ�p�f�D���T���~�6�j 4>�He61��iBPn=��,�3 ���1��R���/������+�617���Ţ�=@��!D]F��)(�$�8�{!�h�~|5(?��o*��$�.�Kh*g��ŻFF �%̷?edn�l�w���j�_��O�`ڙ���j`d�˅�8��vBn� =|��#����\�m���cpy����^&����y��7��3 )P�V[Ҝ[�����H#��� �Ez��:���2�ݱ�a�h�g.�1QJVUZFZ8�Vuc�<� ���K�SQ��D�Y~���q�rZ�w����Y����나�'t��abUk=�
Static task
static1
Behavioral task
behavioral1
Sample
151e6aead6f745ff12f8cbd1f5fdd2c012fcacb2ec2b3937b9426308d5119a54.exe
Resource
win7-20231215-en
General
-
Target
151e6aead6f745ff12f8cbd1f5fdd2c012fcacb2ec2b3937b9426308d5119a54
-
Size
3.0MB
-
MD5
9b1aa78d865ea7b36a571aafedefb5c4
-
SHA1
39f9f75c2e51ca9543391c80977a7e4f760baeee
-
SHA256
151e6aead6f745ff12f8cbd1f5fdd2c012fcacb2ec2b3937b9426308d5119a54
-
SHA512
437c0ed4c6e530f90e3af00396a93844773a698e8b5b830f66da292a402394e8a4cd8fc008eefa282fa1ac96c425d95a8abbac0ee994b3b531602e12b59847af
-
SSDEEP
49152:+W8AJ8FzDjRDvPlpfskP/YRZFjyZX4pai2ck4DgsNAcDPVOShoyMIHt2azYrC6o:f83pHNdpkswRZFjypZEDJzVkLeoqYs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 151e6aead6f745ff12f8cbd1f5fdd2c012fcacb2ec2b3937b9426308d5119a54
Files
-
151e6aead6f745ff12f8cbd1f5fdd2c012fcacb2ec2b3937b9426308d5119a54.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 461KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE