�Ԛ�t»rLuK�ޛ��zs� �C�|�p���iGZS����,���>�M����A2��L3�(�w� ��V<����(3� �<��x�H��Xa^� ��?�]�7��@r�9�~� ��Ɛ�fT�U�`=Jb��D� tR�]K�Gh�~!��R�3���8v�RK]i�\�_�枷F�&CWM�dP����3Ź���������,y��98'w=��ܥKrJ�>�iz�蜻1��b(2 ��+m�%�u����u+=�~��}"�Tp�#�M��h��@�.i����D�G�����M�\����)�l��B��j8��R]�?�Q�s+Ҩ[�I��}��"j �M�g��ӱ�k�}\����A ��2Vuv��b6I#c.R�j��[&�5ڹ�O���#~|g�`�,�p��^� 5{�S����}��T��U� Eӓ �"p�\�`ًz�.��D�4�� �E-�r�Q(�>��X�lI�m!|��]�C�.,XK3zX���� �`�6I��R^w`��Q<s3�/y��v�p��#�E��jM\3$��b�''%4�N��Kd`u�c�� |8��=-�Ν�g{�h6J�O�n�k�^��Ԉ��ڥ�o����e����Uj�����H��n?�Y���ưwK���]}��c?0�e���vNrn�c�w�SRO�������9�;�w��|9��]��c�q �� ������䂴�&L8�� �SZ�n�/�)P����C��'=ܦ@�~��B���e[[3�����J���cEC��&��%Ć��Jп��X����k��sG��� ^>��k�dt�A$��3tH<q�=x��V��z�]���c��IN�/��t��B�����'��ˮ�⥀8cT�-�FW�|��fq�Y�u���-�����a��|�Ԉ��dzQ�CV�;6�<Dkz���/_���WCe��:J��:g�F��Dl�{}�`J��b4���Tm�}�����Huaar>�3eo~���A��(�Z��8t��z��d*G!�+ٟ"W/a��خ��w0����tȘ�h$ `R�,ޚ���E�s��I�v ����e���J����vQz�������0�ɹ���̗$�eN�� H� ���w���`R�����yLJ/d�o+���f��?2��6�O�����Ӣ���"�Ӟ~_��x�!�YS�i�g�c;�#nEVT$QT�����]���!�_69}1V�(�p#_q���%O �?�qM�nl5b���'I'P�Վ��a� 6��g�ZBX�G�|e���eY���<p��&�j:A�v��Y<w2���%�b�1uG�N)�B���;�ƙJ}�|�Q�&�8�y$�ğM���Bs��/dvFm�@Q�^ ��O�~-�ts�k�F�8L�"j㚇u��N�x����^����R*�D�R4�a*��L��H4DF�����uR\������B�J5�j�����l��=^^!�X �X��O��ꉂ |r�5�W�b�u�>�V���LVN�Z��>n.Ko;�zmܒ/ڇt���R���� 0UQvȊu ȷ��:[��2����G:�'�l�� V��b���a�� B鑜O��g�w%)"�A�b����D���}6,m:�_@+2 T5~�@�noҁ$��b�J �F���n�-���1���������}�����tY3}W@�\s��d�)����$��X����L�v긿�Z#�K �GAc{�@Q3�_N�X��K��2(�! �m��ek���C��(,8|� ��h��[��L(s�ۮ�����!k34�x;��G&��_��.Sߒ�K��s����v�%�˜�]���P�Fo �P�{E�0�YX�)��O��IJV:<0�)=?u�\u��\�=϶!�9f+�d��S��(*�=�ߨ�C'�7��Xpq��u1[k@����L�hHvƇ=tJ8+ iuD�|:ۿ����-[�&���R��:|�F�x�ף�mw�����N����:|�I�u�����_�7cmn�Fw �P���q�P�îpM�����z*ϊ�E1W|�m`q�9��*�+����v�IX�k�n�Spb�@~!0���<�!mhm���. �����潧-�W�����8�#1R(0vx��%�4�[[���/w��T�����{����ep�m-�Bz�|��A����7��PF�85N�:���A�C@�G̫�Y"�T�N�T��G��F����6��ciH_�B�?!k�;����Yqz�C�4l�[oqT����_Ì}�s��#��lT��' Y����Eߍ`|v���m�_3*N��� ��Ջ+2���m�;o�p��BiM�p �y�ɒ� 2:_�7P�)cC�H'����ml�Fͺp(7g�[^��/H~�����8;��A�t��iL�-�Ɉ��]A]�h�o�Uy"U}��Z3]+8q�3�|�;B�oꘝU�@�PM��5�Ō�Ǿ�Ҟ��Y3=����Rؘ��H(h@ף!����y�?~M���$Qx@ �]���p,�6����@�r\�F��md��e-� dI� ��||Lx�qTBy�N�)��IR��)��� ã�wva��"��8��"K2c�F�DoQ��JB(q��%b����ht��G�ILe9o���ѝñ�s��ч2��M̮�@�'�-V0����u�L��l�}����*�\����2着"I:JD��ɎjO��j��$�)���b�\_j�h��ʯ�(AF��N c�44؏7wE�i� B�Ĩz��Fe�DBP%��2���xJ 6,/����S�2q��0�]钣���(z87!�R�̆yw�ѭ������.��#��0�rג�<�'��~���,� {�����4 _�Z(8�>}��.��_ �4���8ǖp��g?��eK%]�4��C@��mRUjv����� H"�#k ��� ��3�Sk���M[u�~�0A��9��=?����|�S�A�����L~N�i�N'���S'�+9ΈqY4��GD��������M2" ��g眯���Ƀ�c��P>T~���b���ӈ�;��M=��I���5�ߴ(k��?f���ujUqS�������H;_�˛�B<Ԫ��F<^�9~�} %B)�����kG���܄ �!{Wf�\H8��dOА.�����g��[*�@x
Static task
static1
Behavioral task
behavioral1
Sample
367e2a28551854c22c7ef9760e4473890cb46383c6a0f21a8efc20173683cec0.exe
Resource
win7-20231215-en
General
-
Target
367e2a28551854c22c7ef9760e4473890cb46383c6a0f21a8efc20173683cec0
-
Size
3.0MB
-
MD5
3036da7763278abd19b9871a9282950c
-
SHA1
50ab7216ea95de186751e447c681a6859db1eab9
-
SHA256
367e2a28551854c22c7ef9760e4473890cb46383c6a0f21a8efc20173683cec0
-
SHA512
dbe76dc4ab7667ad922c3358667f3a2dd42981f23028d4b9957ff1472a8bb9378902d2fe5d35de0cd50fe5b1a8dfcb2e33f6507d8c5788581bbbdde0854f245b
-
SSDEEP
49152:UwyLWKXhv6fHQY4oSDVGvflfRFPtl/ftioYPvYeRlo1FYxV7nKAwyc/i/ijMYdT:YBVyAJDV0B/XtioyAeRlo1SfutyBYd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 367e2a28551854c22c7ef9760e4473890cb46383c6a0f21a8efc20173683cec0
Files
-
367e2a28551854c22c7ef9760e4473890cb46383c6a0f21a8efc20173683cec0.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 461KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE