7��Y��ϡ��&���d�w\�K͘�qj�H�����S�}��:��Zr�T��:M�v $q�R.N�����eK�O��_���(�8 Y!��b�ؿ�{�i#⌸��.�������xP9;B��:3��U�5y����V2��؏��� -���e�dɲÑfJ��.�i<��4��}�I��{����d�dj�F�vRag�DG��:l��HΊ��E���x8�=���h�����hp=�:��d���-}��?Y�&U/[gxg);e��~3��x�)�Y>dN�z)��30��4Q#�%�����1����ڬr��P��t+��.cC��3Hc���Lՠ�����TZ'3������SL�^�2-��G��٧h��UX��R�ln��P@�܉��M�a-��r9C�{^�U��M���p��'������oŁ��1�.s�����1�b��5�E�=�S&w��ǝ��D��N�Z��;�5Ƅy��v&ܾ�uP �e5��B����ť$}Q�!hH9��k�,��n5z~;}�K�m9����}�ڙ����O��N�c� �� �6/��8���I�EJ��K)�_`�s$?����ڣI���ѡ&�Q 9bEX̾�-�̧�y�Es���D 2O�aH�5��HG�Y��Ϳ����Q��̫��.�U 4"�GHA�!a������>�i�����h�ߏq��x�N� ��d�jG/��Y9~N�C��!p��I��g¥$�.�b��qw��1g�f��V�E���=^nЭ��u|9%�ѿsJ���r�8�t���m�H¦�c�_ �<W���pr��϶�F�]�p��ʕ�@��"���A��X��,~U7_�Z���>�<�E��K���� ������Љ x�%����Q��vw����D��uNW��㰞=Y~�65q�Bq��]3w�6k��IIi���C�jذ�s�O����0>X��i����"�C� wG�1&Ղ�"�{Z[����]XK�;������1U��ܠ�@�h}þ·BP���Pl�"�����7���40o� #���,TX��� )Z�6�^ţsN���4����N�cŪ����#�g��|˱��wʎj?�$�$�67�9�(�Xa�'۔fp��~��c�"��;�09�0����-0m�(���f��͢պ�y+��N왧}�^hA����{�{u�� �x�Y3M�;ac7mf�dW��[�����<�a�M��Va��,i銢���d�9Q-C,�l�7�p?R E����w{p��{ y�LwO�^^���WY��&�ǘh����Bj��D�/a�";\�8e����s��r��6�0��Gs�\G8��[�_p�7jZy�2�G�;����@5� @�����KsT��u��d�� ����|���$�4s[��S�#?�`��Y����$o(�['0���w��e���,�r@�_����g8�a5�"z�y�e��FQL�T���8��c:������)hf68���eT:õk��r�Y$�d�T�&S���|6%L_L�u�Cq�X��O��D8�6�>���/�I�:�h=�6�����V��y��lf�'�����N@&�"�k�������aQ����&V.eV�@�ˊL'�5�ӹy�� �oHB�;=p�h�����m[O�{��=�7�y��DN���'�3[}"��X ��Zc�JƤ�S�Xkb���q�����Ta�ro�{��|V�H�*�]�D�&z���6�J�fX����@d�7�$�5,��Eʜ��X|n��`' O?y�d�K-�O��E�Q�kň�/��SЗS��o �W�C5E��Y�I��y�A?#�rN��??���� /[�G��yU�,Nz���GC�]���E�x5���z���2�B ��a��̈��!�M������umI\�����/��Йn�4N��s� ���O����.l~��ʩ;���m(+?K6�r�[��������v��\��5�}w�nH�a��V[�����LX�\�H���3ň""��t�F��CϕlLD�מ~�N�[�Aa>+-+i��Ȣ�";�W=U{-v��Q.�A��)!'å�_�83��~@����34hƘ8��m�Q�ރ��%���n<�>n������K�I9�}�G�#�Wт����c�� �AR�=�c|�z|�M�5��m�I��v����yh3�\���2��a�<�U\=��N>�I�St��odHX_Yo�lP1_`^��ި��&M�^N�-������ �K>�E Gʆ$�-��`���I�tm�|Zdq�Y�-���ńߑ��4^�_3w�!�y1c���N��j����\���P���%�'�2�}� �/]�`f���e%��S��v7�A���?8ǜ�9�һ+��o�b����.h5��3ar3J�)�Yl�ܰ����P�S�C�B���'�����C��:��ck����$��Y�CM�N7OSb*n�H�Ī����xO���ȶ �X���X��#i�Z�Y0)�5� ��_�¿'o��g6��R��g8�2�xCd����vd M�R�C��W��HW��L���w=�S��=stˢ���4Q}_`ɣ �n9�D��qC� z�UY)mژ��0�����Bk�����m��UIf�f�(I�қ�7F+�l�䔦�ǡ4�����Ҵ�ȳL�.Bs�#����`!x���ocb�B��������崙�0�x5��L��IWs�W�]�<�1ZSN���C��YT�!�y��;�`�q�XW�/4�.6�fm��O7^��ڍbOB�/��q�e1P�M��yv�d3�x�7�g����U|������bd-��f᧔��" _�5o�1W*����e��Eb�.'�~�4�"0glԤ��W��[�$�s�y��*|�nv��H�e�X����j�}�>�;��$�>��;<ϩ�3#aфM5��ca3wl���|l[�h��C�Oj�O "����������C6�,��`]\�g/B#�UI@��rN��7z���#����9P�F�����6�Ҫ�#p�!�*}��я�ǸQ?�g>�o|uk�n`Q�?��9 �@�砩�
Static task
static1
Behavioral task
behavioral1
Sample
57e2a33d26470fdf8698014b2ced07b9086df444b7ca5939595711796d15009a.exe
Resource
win7-20231215-en
General
-
Target
57e2a33d26470fdf8698014b2ced07b9086df444b7ca5939595711796d15009a
-
Size
3.0MB
-
MD5
199176a6c3e5648bf954ff76ef3f1b33
-
SHA1
e6d42c7b3efefd8c26e668528a8568c2854086e1
-
SHA256
57e2a33d26470fdf8698014b2ced07b9086df444b7ca5939595711796d15009a
-
SHA512
209603e671a8a01fc9bf29c5faced5de46eeaa578b4609869f1d5af3c970f717d7acbfaaaf14b0f63788777d335faf5b87c01a42b39f22b66a21e0ee11bcfd3e
-
SSDEEP
49152:qsX/D2dFD38MSPwkxX7z7vw0CAbBMgfcV4DL8YBIUXRgmAO4MYtzS1RIZEk:qKAFD3tSPPxX7Xvw0D11H3XRnAO4MYAw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 57e2a33d26470fdf8698014b2ced07b9086df444b7ca5939595711796d15009a
Files
-
57e2a33d26470fdf8698014b2ced07b9086df444b7ca5939595711796d15009a.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 461KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE