��V���{��=@�Wց4Op��dY���~�����R�����+���Ҋ�/��D/�$��LR���o�*8 0�_��"����<�E_�M�������j\��{�u�����f�C�=�w_?��%��Gm��O���Ck����c �����|�[�:s��Y���|.����r�����&�݈������A��M� �3Y��Ǥ���b���u�g{i?��`����C[���-S��l�Q��h����vwu�N��(�'�A��1l�����%��g� ЊZ>�qRDy��b|�i�p��[�&#��/���Ҩ����V�(2/D��ʚ|�����ׄ��Q!+R�*�"?�|V��kMn��+:(Avd���z*����e���Ma����9�L���8^mO��b�z�1����A�X��L����;h)0U�P|~ H���2��Z���܇Ӈ��C���#�M,��h�� =QG?^0�M����ZLJ l��T��o�VP'�ڔy���=���E6�H���VJ�2Yԓ�LJ'y�~U���d|81%���||�d�S�e���+V6D�v��p N��%���{������qV�?��KJ[Zx��,��{�uyO{�6���c}��p�@o���Ua0}�o�77��ޞ���,�L�0��](.���\z[/�k�:���♱B&�?��q�.H��f�[��9�� ��E�_���)��k��22��U�H����K�E�C�F�E�&�du�'�� #�P��qq�يY�e�iL�h���W{�qk�b����y���؎��o�+(Ñ,�.fU�noU��ٖE�>!O�c5�F��O��J�1���wPC��,/���\�B�Z���@P�Ě*|@&]\aM#���� �Ҧ;f;�M���T��@�$�c`�����J�}Bv{�p5f����]� ^��|�7]�K���>lYۈ���(�Z� B��|�0O05AAZ�xRP��s��Wf��zt�]N�-#�B�,K�+Y�B�e-��ķ�I��E{������2����X-���p|dէA�,L16��� �!�Df��ncGp ;v7�����A}`;*C�R%�|��e��h�z/ʄ�:��U���K�� �[���䡥�sId�c��k+�>?{RY��6#�Zy��!Q�E/3� �^�nA���=�c,>�CX;��l�>�P���z��N�`�=C>&M�z��J�����@F��SE:��D��N�cY ڲ��Ӎ��o���"6���eX��6�Ha���]�T��������o�=�Du7e��� /HU�\��)�� �2���d��/]�}K��P�Z`I]t̘��_l��R�~�_}w���C���W����5|�O�z��K{�PK��풅�*�vK���Mƿky�Uh?jB�uh[�K�z �S�t��,�G������a�_.��n()�Yr[_,��0�Z�J�5�D�>]9��Lqц��*�6<�ѿ�ꑻd��g������4�9���U7g rXV�ȾXEҍ�Y#�N�YՒt��W�fiuӬ���Fk�t%p��=?U#�.k��o��`�������~�˚I3��(yb[����đhF�W��Nj�y���͚�/�fB�z랐e��G���1ң#�OxP���sD4�z���ԓ5��m�#=E ���/�Q#�C��_}��~I���pT��mE�/������rW5�� ��J%��� �ۊ���#���u��T����U��]�A~���I�]W1]c���|�GX���g\hX��cAj}Y�</���{A �����M;_��o�cJ�SaB�>��'л<�d��X��I��t�Cܞ�1"zUR�3D�����֤�f�ZC���L�yB1�Az`=�uƠ��\U�&`�G�x��8�}1�ݱO���*�����/U@ ��G�����C�^v�<�O6����H�$GM-� ]��T�X,���� B��ΐx�g����ʷ�$�udLࠐ���r�|b���x��:j�*f�+�?ٍMV����}5���p�'�Q����V"k���ޣ�%��;]֘�ɕ@ֻ��������!�O�z;B�Yt@���>�4f hb/X3o���?�+�W��\e��L�X�y? �M�G��~cII\E���k��C�Ks�8n�KC'��l���z_g��F����/e�^�u�{�ޟ�u� 6g5O[b$����ȎE�]"���f�Rq�����:��b7���J ���7��f�O"��4_w��0�gqЃ�Џ��XmW���L��C4�Կ���l0�.���m��_����ᬜ8)+�� %ΚS2&��Q��3\��V�W�,�B6x�Z����w:�i����<m����j�n1���\��6廸[��[`B_�i�K�iL������#J����V/��i31�uX�{tˢ�'q�$��t�2�**�%&�KOj�N��B�~`�j$={��n����l�־9�V^�������K�t�H�0�+3��h�&ɗxpۚyUy^��4���������Ol�Yr�tUب�6٫���A���_ $��Ԓ������%�B&wЎG��Ѣ����}���l��E�-DrH��"I���;��Z��ZS��H���;���k4ܖch��]�ҷJۺ^_SRxig6� ������;�����x��ʄ^� �4��%�'���R"~��sy���zS�Щv�y���0��qw:�~�� �#��rI��ڈ�{U��I� QZ�8��*g��d���3C�ܲ�M�O>rJ����Nby�7�uz���l�Q�Oj�����̔f���w���C���4S}������1 �|����WV�9�}|���/"�ͤ|�����!r�8�$tO(���4� �Ů$(:F���.�ʤ���*("��X�4B�'xM<�0��N�P4Ky�lfO�1���`����o����C�Us �%���W�nؽ��N1���K�߿��.�����S1�/��>��1M}����̣���Nb��R���q��h�8$���j���k벽��4b��%�-���W>\�݊Z��ζ��b�UP��fèU�?��ڗ2O/��
Static task
static1
Behavioral task
behavioral1
Sample
eb552198d04c8017f19f565f899b0c1a1bb44e46c9929dac666c0346d96bc7ce.exe
Resource
win7-20240215-en
General
-
Target
eb552198d04c8017f19f565f899b0c1a1bb44e46c9929dac666c0346d96bc7ce
-
Size
3.0MB
-
MD5
883715db33e9dd681aaf2f7c55ca477f
-
SHA1
5444b552652aea6d3f16d7b21c584cc306ea1e57
-
SHA256
eb552198d04c8017f19f565f899b0c1a1bb44e46c9929dac666c0346d96bc7ce
-
SHA512
4b312ed5b38e1cbfa5452c5d362a4dc1b24b1759ab674c854a5fb743e22725eb3e6470972d1635e794bde51504bb69f38d8026a830cdfe954c2c142a99820c09
-
SSDEEP
49152:I7wEvHEA0zE7WTNdlsnOgevOr6rLNKtv/PgmSxJWAuNrpJuuRYsjz:2vkA0zE7W/lsO9XMPMnuN1Jc2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb552198d04c8017f19f565f899b0c1a1bb44e46c9929dac666c0346d96bc7ce
Files
-
eb552198d04c8017f19f565f899b0c1a1bb44e46c9929dac666c0346d96bc7ce.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 461KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE