������ouګ�d��>��[@��ۃ��(��-;�X���o��1c�]6�Ձ����Nr�4q��n�e!+W�!.��� o��YA���w����7��s� �"�7���3a�"Cy����>��ɡ���ٙ|:��~Q ��H+;xRu�fWۚ��E��e{���K6�����^�����yh�_��Q���A�/�"1K�� ��P7t�\�I-�v� ����pЬ��9#��ڌ� LJ�#N��n=x����I1{.r�Us����i���yvoi�Ld��&�������uY<�8�:�� �"�.���w���s�R9���m5�DW���`�pw�.��.u{kxoؖ�&aLA}삢.�,wzo�J�JY�)��[���T��Fy��<�fQ�G�D Z��TM�eo�&I�����i�>6y��'����P����}��9��z�,����+���#U�E�A` �]�Mj7�!=�E�I$ �I�_���&��G,�3�Ӣ�*kfю.0|�rҀqQ���kp�F��N�߁4O�RM��\�#����b��B��^ibZ���r0a��AC��wMG_�s�S���Va�KM�=n=�����������<|�b�Ӥ|]��bz����0�Z�Ss�H,�mɪ+W�zK3{�?�b��ϭ���^#߈r0$d�B����(����|l��� Z�~V������Q{�L�@#�W�����h�,M岔egPa��F�a'�܆�r ���1R �J��B8-b*��:�)]��`�?R lh�i)H^N��O�"�)����Zv4Z���a�2�[H4!��u�t������<,��9���C�\���Ha1���4�-{}k��g$����L�O���{��@��>��!:$�|��JC8����Q��s��ͼ8�[�Չ�Jrs"�qFK�NE/8��G�����ja�*�-�cP�2`Ev��0���w8_���o~t��L��Re��m��ͭi��u����E��ˮa��M�XY]@,��"�!V�T��.�q�80��og�3�4A��o�e�@����Ų4�U+˯~[J�������١/���S5�ni�Hz4W���{pt�SX�ժH���X& ���g3.�!��������9�"�Go-2�2�ܿ����f�\1O#R!%�ˠ0��������IVK��}�lؑ� u���F>P�t.��<���y�^�_Ҟ��h��?R�p�٥�M5_r������3G|���b/_����4Tm����������P�0G�#�"��δX�%�$�s��Ç�0�zQ�s���q��I:z�T�q=~7�'N�;|�I��X�)�'���Z��K#*d��D� �<�Z�˯y�ǃ&��~777Ȗ~��$�<Py��\01� q�s�pׁ�|�V_�;4V�>�X����u�����݁�`�� 7�ၑ�Z�6�~~sJ��3Q�dX@X,���Q�ǒQ����[ :�5�.=��`k�L �V�E��)��sJM�Ҕo&D����"7������E7���+��?`�"*-�^�J;:�0������OW�n�H��1l@��+�%��o�U_�4Ѭ�i��~w$��BV�,����8��˲���{e&�lZm$ˇ,�K�`��u�u'����� �[�!G]�F*�֍�2+�����h��} ���!C׀h���o����?C��_�?�����{K��T��ov��WN�^�a\@���߅c8�y��ٯ k�y�E ���y���P��p椌m���;Cv�?Die�,��h쭱k�"o�����h�H�7<<�|H"m/ԭGj3�텎��j�P��5Ƭ38�S��ވ������a���׳�ޢ#��iǫ��f���J��2����ÂR;��H$�o�����&{���� ˨�l���g� ���jS�'U;�ωG`�^3`5����h ��(y<q=4�Yk�Y��.�b��8�ٺ�qdGp:45�P)�TSd���wW��J%�H\,��$�lH��t�)o����P��F��hmE�)�}:���������[ X���>۫zˑl�"�0 -1���qR8f� �K��YR����ĊV�h��d ��������ӥ��4�71��� �����@�]/ �RI-���Գ��oYi`��1[ͪ��I> 9ѹ��f,��7�2Խn 8V�bH���Jѐ������ �ƺu��L���U#����%��0� r��B�-V@Eў�NBV������yd��c�����S]���O;]���`�������D��T2����d QH�Ğa���78fz��0�y�v@4i="�=. ���d������+a��άq���ZIh��U:� hq�!t��PU�o8B�50U��a�V�z?hh's��1M�i�|J����y��"-�0yϷ<:����K�9H갮zՏ�b�� �5 =K?�ɘ|8�~�*�7ٯ��V'�1�Q�椴��\�N-���D?B�Sqm ^��t;�.�˱���B\c�m��e �s4�/�f��w$�i��8���wWd��pܽ��Y�:ی8��H�̸ö���{qx_���#c�z�r���̵�b�\�!:�x��%>�7���> ��I�lm��8��e6�~.�H9m�Bi����M�4I�_A!g��ɶ�8c�t��V2k�}�<4�n�����m���u�������a\p�#����&Ȁ��'��{�`E{���(���$�X� zDmx{�wy��g�����4�� �G�@�T�? ��3 n���"����/�M-z�Qy�yB��Pη)�-�r���� 0���_7�N@�rDxJ;0�s0%���#�X���϶����t/}D��'I�H�]�Qv���tm]b��ׁ-�GV�������uf��x�Ts��@DvG��eg�hi�hTbXB���Z˻�wf����f���TOk;��h��vK�v0�26�ޭ�3E=x�����dy�Uq_���g��[Ŧ��H�}/��q8�8�=�w���;t|`8���Q2��Y�H��F��jL��4��՞�4��T��Lw�POU���,b�{d���d�{�f�k�S���v ��c4�qDu��Q eW��C�%N�!������� 8�\#8@��a�&Z���)"sM��j8�M�f����c����E���fTP<>�Ѝ���� U�����/|!98m���F����-���;*���.ma�C8�F���G�絠�Q������+�\���-. ��9�}�JP���ϣ2��z\57eft����8�d�� p���K�HB�j,r5��NS�R2���1��ѡs���Y>{'͙�]m�A�k��,��yݵ��)��Ɖxx ��������s)�}���s>�?Y��j�����-��?cR� ��A���s���I�/ZW���A Ԃ�f�g!��q��v�a�\��E�VD������1<!<��2ܣ�BmP˴���M�$@�i��"~Δ(�Ж]���4� �w�|{�ZX�ʆ}#���V�ݦ��A���&"F;���Y�Z����_x�P�ei���J{�-�b�"�W�k0�>�aa�2����\>��@2la���10=zh9�˝���v�t��;9M[}���d`%#C�a
Static task
static1
Behavioral task
behavioral1
Sample
4568ae47da60d4eef04549233919c5972341f2918b838bb168f477c60221d268.exe
Resource
win7-20231215-en
General
-
Target
4568ae47da60d4eef04549233919c5972341f2918b838bb168f477c60221d268
-
Size
3.0MB
-
MD5
8a5fb3087ae09b2c7c9d266ffc80fcbe
-
SHA1
5ed4a81c69336315c35ab8f89f34a19fa8af6a19
-
SHA256
4568ae47da60d4eef04549233919c5972341f2918b838bb168f477c60221d268
-
SHA512
7bad93e9deddb3a7f10f4cc167edc09ea9ef08f5ccb008839486e30d7ea084bacc2ce11f34b5f3f6b9a0f72e2037eeb08d536fc9328266cc62a6eb459085a4eb
-
SSDEEP
49152:P/hsfG0mrz+QxjYhZVjxZjLWAJiFgTACuxPNGrvRSw7Ke/XKhsDu0vy5+I+O70oo:B8mP+QIxxlL8g0CuYRSwk+I+OZFBfSx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4568ae47da60d4eef04549233919c5972341f2918b838bb168f477c60221d268
Files
-
4568ae47da60d4eef04549233919c5972341f2918b838bb168f477c60221d268.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 461KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE