#��U`_2���$����/l����0��\$�k1����%��i�?�� ����� h_��NHû`������ z���g�/J����;X�89S�昂<�\�~��ƛ�Ou�}����� ���\��Ww��X����f`�3v9�Z���/!2�n~l��|�[���5h�g#�.�z"r�qZe�;6t�I1_#�P�����ӛ2G���f�����d�.�.6˙U�E�`�bM��u�����(��wRV{�*�O+��zsplx�ĺ,�(��� "@��KAw���G=S7��j�I���n�:G��i��o����Oz��"�ccSk{K{e����6��e��p���Df;W�ޥ3\�j(͝F����ٺ/o8Z[��QR�J ����!�nA�"#��+�ѝ b4��I�C1��t�c���i.����V��S>_��1A���O�[�*��QO͙��Ό�������������b�m�_@;��Q�'[��(��|�S�B�>���� �6�&���98]��;����L��4��l����Ӈ���?�e� �mIm%z �O��t�_5����(�Q�$��o�44=#�bф���@�z���W���E�\8�#g��'��w�� E��b�Nd�q��H�&:�]w���S�옛���3�@��3����f�6�s���hi"<h%IA����"���P�t8L���r�^ڝ��a�ϟl������p��v}����=0����ǎd�:t�0��)C\[N�lz ��v���6�2�a���7c�ⵔb��P�+5�G,}�+NJR�L�#����\��iY :�U�g�ddc#=m��I�Ҷd��חc!�^c}�Z�M�p����k ޙ�V.����#NzH!d,]�*����)t�d��Cb��~�iG��i���~(���k�4�-�1O�>y&����+��K5qy�jN�9ֵd]�i�r �.� �H`��z�";���ey� A�#*V8&�����nx����J��&��:~���T]b��τ`~��$ ~�++���6���m��;�?�~�.�3<k- �:t�̟o��bo6-��ط���w�d�&�5�Г��Ҹ��8}��?TK_�������*� ����oX��3�����N����!�8n�2�?@��/Vp�Ѿn��p���d�K 0������fͱFyԶ�1�{e*�R���|K�E�W}�Х4;�Ŀ�C�*v���Xe\�1>�.WXN����L�?,]��1��ڂ+����<�F.�>zg���,�����H#�Կ��7�9�Y�U!$ē�qdz}�2#Z��HW2�E"���e�e��&�:�l0��bR�4�ޞ�����1ύ������,� �(�5;sW �U�)5�����h2|(�.K�1���l`{J0�U��mh,��z�D��+h�Xg�:e"����Q��uː��V-��6o�� Z�[N��%8������`h�(D�� �-�XC�E��SA!�Q�N>��8Rݾ�CA,|G7��̖O��b����c��[� ��ޒ�,��O�ߑ�r�A���Ũr�x���BX1��y� ������юF�������n�<�x ����t��{o3�2��w�,�Г7t=t(������ȝ�����)���`��ea���)/���'K|��- NA}�(W���昙�{������u��H����E�D�8O�4�� ���?q���_>����SP$Mz[J-֮<T��;qM��.��)ܓ��{�%U�ݟ�x�)`�&W!�fU��4��Sy��}�V���0��^r�Y���p�{�Y$�5�G�5�A>�⥳ ��/%���������~�5ld-���י���$�����p ��]^p��a+Qy�_�{˙K%�2�ឤ��5K��������������As7�PuI�_�6�=����xA��a����D��m�ʅTD�E^�����E��3��jZ ]ģ�O 6>�HX�e�@�˦ |�- ��G�@h 3���NT��w]�V�r����/FM�����>BB�2�Hu=� � ��B8ğ����n���N|t{�����6���9���Ǯ}+�f��TRPaЄZ�4�i�~��̓xE�N_��>;sb�?7x�ێ�^�|)1����>6)�r��0>�.���mΎRA�� ~V��C�xG������� $n��u_��[p��T����<�$M$�:���%sC�,�,Q��OFƊQ�o[�e�_�z�N�tCZO.VR�b�'��7S�K{�6���զo> ���0��U����u�M�~�_ �O�_'�ȑ<B���/�\���+�H�^�1�a;H. {��X����N��Lc�i� �������5��H-��&�hVL�V{kR�g�^v���-�9��<~�����h��'��- ������>��%����χo[���9 �x�}���Jϑo"��G�a��5��u|d���ۚ�p��`�V�)��%�d.:Z�7]?I_�mrs��rv&L��!�K,O���b������ţ��ɖ��F�n�ܯ��>?Tf*��x�Ǚ��نXE�b����y0:r+��]"�ڙ�&�:�lkm��+M�֎��B->�������Ϸ M��>����)f%k�����wSi���@,v���������@�@ ]��&�=Sؗ,��q;���^��Ǚ�ø`?�)*� �p�� p�{pn�z]jJ\�KR!��Ķ�%��;#8�Җ�/��>1+��3]�`���k�d�qBE ����0�}UJ[�w���^*�C�ūRj'�/M(v9�/z���3�,�I'�����n��%�S�Q��5�g���)"��'�+qP��]SQ��{䕋����̎���#v)���k�6,b����0�o��qk��yk�2:�n#�>��1��Xi����=�qM>�a�Q���G��9��;%G�,�`�"���\m]�Fb��#�w� ����f![K0�f���yi�i�� C�p}�o��L�I`����9��u\ ��MS�1�H�؆쉫t�����7J� <�UW
Static task
static1
Behavioral task
behavioral1
Sample
9883ae323ef224d0d385c7dbd47fd6a3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9883ae323ef224d0d385c7dbd47fd6a3.exe
Resource
win10v2004-20231215-en
General
-
Target
9883ae323ef224d0d385c7dbd47fd6a3.exe
-
Size
864KB
-
MD5
973e1aabce1d602e1b3a014233849553
-
SHA1
da08780bbc8e3a87ef0a1f6bef7922ead82ae49a
-
SHA256
bd9aa5fe35f11cf8e84c95bcfd3b7bd263f1470629ea2d0c9d524893980565c1
-
SHA512
f4e20f798a33e2dd7539a45dc14b3f5a9e441778b1951a35050ffc81d0181a44fecddd77464b2ac6f41e43e235e501ab2b40e15de61867e51c81e3720413c813
-
SSDEEP
24576:w2RufxQz3AXhDY43JX0PNG6CYQxGJZtB3ryhf7:w21Ch7JX0PdjQxGJZ32hf7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9883ae323ef224d0d385c7dbd47fd6a3.exe
Files
-
9883ae323ef224d0d385c7dbd47fd6a3.exe.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.text Size: - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Yfy Size: - Virtual size: 10.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.unI Size: 1024B - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rS2 Size: 13.1MB - Virtual size: 13.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 521KB - Virtual size: 520KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ