��eb�F���y�,C�2�Q�=Chf��%d�LB��&��������#S~���h@�i;��v7k$ĥ�k�^e�zsM�D�w�ߔ�/�����5�}���,c �ᐺ�(F�Q�� ����5w�ש<����b� T5G���]�B�iY�����˜M�'v$�u`M�>ߥ���Դu���b���۞Kn���O�b�Ū�3%�i���Cʜ�`�X1u�3+���]X���8���E�nb�rʘL�BհҰ ��N̫($a`b?�b�Tkμ�+�S#��~���������[���-�RW��S�v��{��"��P�Ϻ/z�<EɅ�ϊ�[Gl�j� d{�(�Mc\BW�G��M��Ǣ�Vlv�)����E�_��'q�Aj��.]��0���4�З��v�Hd͠%\k���HD�M�#��,��å!�B[i�>1�VFW�D�KDB�h_ı�(g�)�ާ����FX�a�~Ţ,��2��ZE�v�}��*��/��}h[��-O]֖Ɵ������Yd��N�" �<��^K�/x��x *�\!�t��:[y���X`�����<��{�w�������B��|/�#���Q��֭�;�(K d�>�B���5u���1k��P���y��n`�Q6���Z�l���D�.��A����u�����C�to�]��j�h��#!���:CwH�QuݷL?��6䬕���;@�[y�����M��i�������}����6��uq�U�<�D��oT��A�tP�'�÷�?�$*YVsJ�T�+Gw�jP��a,=jS��J��4/|���9�RK@;�=o?�d��1������,�J�����͑_D�q_{_I� bK͛��)v�/5Lp�2�>l��^[.�{�x�5��,W �о� ��t��G ru��6�H�<�����{��#���q��)��|�w�*>8���^��E��!�3�V�r|"�YYs��P�j��M���R�6��~c��������t><�)�کb�e��|��1U��[bT>P~<ƛo�h�`�K�qF��־'c�}�cE~�h~'�5��ϥ5O��W�6c��4���&0K�l��� ���w1q�tl�퉫��&Y�;a�n�(�-�#��B��p�}��A�s3�#&�e�(���bO��kXVjx��&��� P�Տ��l����<�dz�q�G��[�:٬��m7g��y�`s��� 5&���Q���j�آ"d��'�r�xױ�����p._�@[5 ,l�����IV0��z��Y� �{FK��/���O���Q^P(�s ҂� O�����i��{���!�x?��Ю[���)U���z|�w�=��B�%h����Nۨ�?�~ѩ�-b���ƈo &a�k�f������~����ƥt���*Rj+S�/��U�D�L7A"!E�3?�Ә%�� ���JY���ܑ��l��g��m^&�5��v��Z?������ZI1i�) =Yh��� �\w2�\ nMr���<�an<s2��u�� �cBQ�<� s�#.��EW� a1\\i�V V��q2�]Gi�����ZL��W1pM&�$F%���H ��������(.��-�G�������#�ׇb !��.�)��@i�3PteQ8ҍg�8I��-���U�;Vgb��?��w>z:��l�BKIj�"�\R9� qi\��.]^"�ʯ�0��)�a�и�k�y��.�������P� ����bP ���T����gYE�}�QQ0�TI��ە1���t�����������P�u�zM�-� U_����K�!L��F�O��i��q���N� -Z��ڇj<�t2�.;ʼn��|��jə��ܰ2��=(�v6��Kmum��x�#c]E'p����RGHr�dUZGq��'��6�����3(�*#7�OrWN�u@�������Иh�b��w�v áưa�5��9= V�{Cuv1 �_x�+b�.���4{U�O��g ��UE(���K1�ە�mi���xDI�U����&/|�q����lzF�UL�O��W>_� ��-ء��/�L+��1 ������{l-�wX-��TuG"� ��G`ݮ�&�2꾃������$_B1�*���� Q%E�g������EK��s4I':����[��(J��6Jk=v�+Y���l�z��ދ��o:>�{r}�2q*?6����V�ȸ���H����DY��hy�1%\NvA+�2��YQ��*4��ko?7�+��y�=�dQ5)�Ɵ�>�K�m���t�`�r��_hNR�B�s1i�_��ɻ��ƎG������{h�ߣ4^>�����bS�/�0)�SI����:�LZ�@3�R�� ؘ����#'M�2Gz8.��<E"�1�9-�;OpH_� �" ���l<�m���0p�ϰc*^�Q)T�u� ��E��Fa���u����;!�U����e!����"���K�|��#�u�����ڊg���WD3C�ӗ� ��;ɯw�?��^R��?��Kܚ�,%�>��r����k�?yV�q=e�f3���#�d�,Fj�>����'���mE+o�8�;��i�? k���$^͈L�#ϰ|��o�na���xς�si��nn*�rqJ8�㋨3����.J�Ç�gJ���Ꚍ����pv�vn�B$r�ۭ��b����X��H�9j�֙IA(���GN��A�O�&�{Jv~��#ax5�M�� �� ��6�������l�kƗ�����v��~����&��w�Q�ߑ�BD*�����z2.HvH�l���ҽ�)] ��E�;�%�E<�[���>����W��Ӱ�.:8������u��Z�c�Θ�W����t�O��."�˂�9���d���6k7��� F�A���b���CK�Pb#�;�/�$+ �X�����w�z��r� ~�B�������a:�� �DP���BWE�5c��j�զ�^�A�Ŕ��5�.p[���%��0|_pT��+�y�FTr, � I���*��WYmf^5��F��(<�5�I2�6k��S�̈�YrF������b�����8yç�`�_ޮ��b����&. P��ܱ����}1}������yB�m,���y4�z�Z� /��^a?�����+p�<�P:��>2��4��ܝ�T��@�ci�J�<:Q��/�`���bG���fUSD3i�uw/(gB?B
Static task
static1
Behavioral task
behavioral1
Sample
4edb1dbdd43f2d09a327594202b74897055a6389249ac641a7d854af2c9b3430.exe
Resource
win7-20231215-en
General
-
Target
4edb1dbdd43f2d09a327594202b74897055a6389249ac641a7d854af2c9b3430
-
Size
2.9MB
-
MD5
f8a580061a0c5cb970c1d26cef97883b
-
SHA1
b85c60aa4b04dfadba08a40cd0aabc1bde7a0765
-
SHA256
4edb1dbdd43f2d09a327594202b74897055a6389249ac641a7d854af2c9b3430
-
SHA512
da2899652f7413f02e5a0baf1fdf0b53bd3a73d888d77b4dae7641295228d2d9acbe01e247065b57bce8a4a539e1e2d69a318e65339fdba88ae12b68b7bef266
-
SSDEEP
49152:smnoIajAcjHvcqxaMzB2kFeDNAKuxaToKcC3gzpEq8aggQ6JapS3LsXG7THPakBe:BXajAkH0qPIkFyNAv7A3gOq1ggTJap7F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4edb1dbdd43f2d09a327594202b74897055a6389249ac641a7d854af2c9b3430
Files
-
4edb1dbdd43f2d09a327594202b74897055a6389249ac641a7d854af2c9b3430.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 461KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE