娶Kt�&x!t��L�w�#s��[^C�C��n8� ��h+�>��� �,����ٳCq��(�X��Y\0�P����P|����AZ��,U�([��Z�˓�X�l_@�U����R�nf���feJ��!��%��;ϭȂ�+t,-�R��)��&M��ڕ��L���V~_iH#� �/$\�b��F�� �ΨRw�Ft-d�-5� y�1�_BJ&�˳#�"��V(���͌�u�ڭ�����\�/�����+� tsn��J�~X#TO*Y�R�6��y ��\4d�Q2�(z�oN"Ԕّ�'�S�+��Be?��� �N�����+�i3�)�(�[<=ۯJ�X�qP ��=�bc)h%�s��Zn��'� �4�|d�L2�m �K,��\��T:d���A[��{b��9���D���2���0�.�{����Y�p MQ����9��i��Q���L2Jz��,�U?�m��M^W_�y�F9���ⓠP{#����V��l�+����ۣ��+��=�Y�v�ѡ�ew���2/�c�%�a}ͯ̐����n��k1zo�e.�H-�Mq��g�R��1י������?�t_NE�!��'�I&ɢl#��t��$um"��M)>[�L�,Q�|������|�/v��Qu�,�H����&��:���ɿ�lI���)�S&�-O�"B��( ��ǫD���It������+R�P�p%01@�����V�KJ~��9<( b�p��/�;i),o�{�"�����t�Zh�(3���{��ïڒ�1a)��}�d��u��QN�ϊ4ѯ�����d����M6���J[k�����ҧF�|d 2F� ʛ\�g36tA���]#SI�0u�zs��:�����Щ� 8��0f��+>�o�Y��ݱ�_��J\S'}Y�O���S̐~Dt~�Oh�1�/ծ��e�6��1X�`����,����aLS�^>����M���oJ�o$� <��/�R��ڹ=6�em��-�T>�R�/���&U����?��O�F��o�jǔ� >��Nc�#��������^%�/�THg��K���T>�/6���ܵ2�k�<f������@(,�����(���DWYwBq���M��������TG��]�eQ��x}��O&b���iY�gK�7Ytp�-�j����Dz��ʡ�@Ղ*6�1�p��F��N�F�=܊��`-��7�LꭖOɆ����I�vT-Z��k�m|-?r@\��q7�$܈cy�<qC���ޥxB���z ��k��Y���m�z����F$�"iE�4�It�AG���;Yja�D|��^��H:�|��j�����Jb3�v���k����L!T]УD��;��r �����٩�] z#��� ��6�;�G���*;������D�й��6�s�S$�,����}u%t̿�}��7O��u�y���j�'f R������$r+��BG��1V���&��[ �r���K�P����O�Uio�/���؆��M�N��m��c�ڝo�,ᖁ�P�:�!�hJ[Gv3�Κm�(.C�3���Q�i��D�kC���O]��{7~�������Ҩ3cȮܧڰ��0�/�Fd0�|�N��P���R6��y��x��#�%j��e�Pf3#f~�^mFi�A�4J##`pbR.v��]���szz1 ԟ��u��n�\����Nb��FR�GJ��~�'w��=|�����tJܿ֏J,���@��~B4��H��Ly&�e��Ԃ��:�(}���;s��V�De�!����^���?0?"u�bp����P�s�M����MW�q����J�&� ���EP�}N���_!kh�4b��×Յ5�*P�P&DQ�̼�u�:�`{��S� 0���yێ�>����(��R�������;W�\�GiCdfVٟf�����Ȕ�B_�ٌ�֢��I��B,ᐴ̽,��c!�>͎�1-��j��s9�k��������?�Q��W�R��CЎ�$�!��^o���Azm��A;��ٟ�� n�;|�T#��ȉ���ѦS���R��"O&�S�"���"jZ�w�G����Ӣ0�\.�����,XhWl®x���*�}���������So�n/�a%��K ?��t����-��������v�x�fRV����\��pX:��מ�l�/I�_�q?�����6�M�άq�4wy4��D!Ŗ)����k W��䝛'���|L��{zX]���Q?��N�`@D%m�VqxEw��Y���ػ�|U��,���Y���S�ٍ^���,&0y�Z��L����n�����@�e�&�-�����<}�-���) �x���;�U��`�������<���Q�����&Al�L��tT�1H��/p�Qk���^L� r�X�NUW�p�G�IE�'|%諁#�+?v�+��뾠 YL�]�aח������������FVͲ�u��3�"�C.�&Y�W�:� �!F����V��~�K4+NO�{�3���GE�o�=P��F��i�@����:�N��\������o����-�W� �(��:�e���8G `1^T��,j kB�W� �M������s�!7���~&3�f�&%�h���$���i>JC���?^#!nLn�wt4O�|�v�B�� � z��V�(�Y@?? ��뇯��S���y3�<��?�r�Ő3Ο���O����g��b��#y�n��9F�"M����ϫNU�Db��`%��±IM��a�ϛR�f`ww��k�H+c�A� ��X�5_�0HW�x�'��>������_zcfga��i?�������%/M�Z� �"/"��P���Sx�j"���qan�����[��_ƴh4n�~�J ��?�#e͵�y�M��lW:!)N�r�8��Z˱%c�ǯW�t���o��W,jc�b\�*��Y�\{���SVQ�����z�N�C�gΥ�k��[aS�����BR���h�������PS�(v/�5VɂfP���\��.�g�:�L�BqLz.V�K�Fz�����}�$O�vK�a�h��A�.r�'p>~�\�����i���F �#x��v�i�5�͚����~$��u�QF�������<���������� :8��/�`H�Lf���X=>��.�8��4s�/���q������6=��9�C�;�R~j ���5��K���HA��VB�{6�W:v���?M���ʪ��%��9��Za-�3�*���x���t�Dt���S���/����$89�W�-���d�<e@u�3r�;���gW(F����Sv�,$���xU`j%���xT�j�Dܞ���9u"H���w��Z:��EN���a�2d �4"�L�۸��raRT���&���B����y�^���+��3ݵ4�^�����T�ZW�\��e��Q��b�t<���z���'R_�����`椻#W�K
Static task
static1
Behavioral task
behavioral1
Sample
fcabb08e58c0f8580d415728bf3363ac99caaa39ffa411907a4d4fc0ed45e53e.exe
Resource
win7-20231215-en
General
-
Target
fcabb08e58c0f8580d415728bf3363ac99caaa39ffa411907a4d4fc0ed45e53e
-
Size
2.9MB
-
MD5
5b92aa48fb7433eadf1528b1ac6fb093
-
SHA1
047a567fba56298ca7f19285cced7cbe2d9df390
-
SHA256
fcabb08e58c0f8580d415728bf3363ac99caaa39ffa411907a4d4fc0ed45e53e
-
SHA512
3cefba8115a85c70555931b7592c9272a5fb23c705fffb53a721863c44eeb7a7d84e210431aca00b1721cce617679a4f3b3075895b60f9c350cb100f75add44c
-
SSDEEP
49152:3p3U8Kxze/K5nEir+XGcetRLVzAPx2n4gvnnLgx+zl8IANTph8AvsN5XXISq3W5l:3psRqotp2qnnsxoCIANTpaAvsvXI73Wj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcabb08e58c0f8580d415728bf3363ac99caaa39ffa411907a4d4fc0ed45e53e
Files
-
fcabb08e58c0f8580d415728bf3363ac99caaa39ffa411907a4d4fc0ed45e53e.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 461KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE