]+��`.f���/Oa4Zb�#t�)�Sɤq|W�@ �e�r�ӕ��D-���|^���2���*B� �뢚.�!"�i�*w�:���Q�C�����R�������Ne�C>�h�4>e,����#oE x08t�z����aL�k�8��L b����Ȯ���X� \�$�4�D�{�e���D,���N���6��J�F/��(ps ���ƞN�c�}����'�+f#��Q����冺�8���(��e�?�Bg��:��B��&�,B�xGKU;0m���<gI�K5�uܧ�'NO���u���e{�2�/���j�ޯ{{����k�.��V�w��d���]-ct�.F���V���w<����IcP�!w̑^���G'����_ ����Oܬ�:_pT��_�@��?�YW"�P#>�pFaVu�w}��^���ɀz"m������Eؔ���pd���M�Ŋ�0 TkΕa��9��b��C��T �e����p�u����♿\�����1�5�6����[�D���KkZ��E9hMg�+ሊ�(!�^��,@ νh�Ȁ���0m������gx�L�� ��뤃��O%� ��������4�3Q�H�/�e�G>b�In~���3w��Qs��5����B6%k���I��̯��h�����(#f���d�#�#>����N[DL���M��s�֫E���� ���:��㦣�4��ܶp������8A��{z��^j�A�\�ҀP���>���*���Q�����)5̬�S�\�JJKE��Wg�G��z �3X�`�b�g�� �Y�;,E&��<L��Ž���R�^��r��,&~���y�lt.:%^Ρ<�&|S�1�5І�(k�C�q�jت��N�;WU�»��d�����U��)�G�A:٤x�.]e��a�;Ԃ?7 -�h�F�A�x>�S~��� ��d�� ��\l��AHĪ��*bE����nH� �I��L��/[%�ٌ���#���'N���s4�k�T�}�7����R��c���ռ�d��{[�l��{}���2%��jg��26ַ+�C�wn�z�p�+��~o�Qwx�K� ����8��<����x�V����L��a�b���_yf���y0e�8�z#�س(��=P�[��gvUgd���tJs9���#�+/��6��B3XzC�T��/�K�������fM���XryJ�j<�Df���"���6f�1�-�lN�BP,Nٳn�k���Dg �:%��}W����L��� S]A��nU]4�ĕ���:J��;$�v�9���y�h�\sW�4wèPJ0$�$���(�c���1��]��"�\&+_?�`9qY�������u۽���;�X��p�p }�*��fTp��.��(Iu�����,�ן6��{�OqԋQF��`Ӿ@?<��ϗ�"�����ei&��.�yH7��-����Ch�}�p�������B��a��,{8������^F���,J�U07�Y�ػh�:�z����Y����p?���5���8����*L*�� � b3�QA ��V������\�su�k�$Ww��~����t�)AI➛��E�J�v�нQB�1��Y-�]�,���.�n���Р�8�����:����O��-Y�N����}D�7�c����| ަz���`���~5�� �'&�l��S�+�@�@T1���ҽ�=#��Q�A�dh����,�fjl٩fq$�L��|���T�,��;�cڑ�i½�U>�@�M�Ju�|;匝���Y��g���P�?�伂�d���hS:�}��_3��Šo?�x{�;�.�=L��h_ڌ�4&��+��w���� ��<�~ˎ����C���|�: )����G������g"#�Q����f��S,����N�,B64����ͅɎ ;d��vpiϤ��5b�3��%53�-�,�y���1a���U�]%=v���Ji� 3�J���������P�����{}��܃����d�?xı9@?]���v�.� 9 `��-�w����;�i�d� ��`0��Q����B�H[�╎����?<��ԓ�����88|��{got�@����{�:�?l ���O�e{�&/�"������V�`J��2�6��*��{`�E*�+k��6�5�D�ݩ�'��˩x��}�A�>$ld���X��X��a�L�3,��.�� :����/���vP�e������2ka�� Ll����k�qx5�fE��EC:2\:��i�Iy�c~��_���(��� ��U��M*����D Ѕ���sJV�_Z��܁FaL᱁�c@�ܡLC�`Z2/�B���������g����i�V�` �/���e��ܻ�S��|G�W���W?�[�L1�L�pXZ9�"������5��K%0�� -D�J�SWle������nq)���@w�3^3��Vj����䬨�`���;&�-�9',()$�$l��D+�`�ĥ��4�Bj�v0����Q,����,��l�Z���^�!���j�:p>E�T�g����ߟ-O�H�/��Kp���t�-q͢��ͳf{D�%�5�n#J���.���p��ҙ�v�z����ަ}ȶ��C����n�D,���*�z��D�H�Q[��ۍ��t���S�Ӥ~�_�y�n�2��> 2:�ې�^̌������?W��ox��y�1�����y}-Vߊ�dǷ��e�P9͵ �`�ev�fwŢ��')�n��k����VN���D�H�"O�A��2�ql�1]�J Ut�#�����r�����@��x���SSӠdn�ϋ��b��X�4n��}~�T{��&� �-���W�Y�$�/��MಫCd|O���84�ܣ�IG ��[ؔ�0:�-��w#�?���!zfԫgk�NL�A��$q�/$2 �#���XBu��徆�3��1�؉��T�� �_7������/���H��LQ�##���`��N1i�A�Ve�v��6��t��?v��Ƽ���1����i��vh� �*�jK`���� 79���0r�m���X�� ˼c�]�=��ӿqfRZ1SD�@��9s�@��l*��l1u�7Ҳ: y�|u�$�I,��M�oA��,���`v�ˢ�\E�1�U� Y��k�B��L��{�`ۍ�X.����7xP4�[5�F�*\��o�G��|ɡ��������/R��=ʺ���#�]zf�����6I�R��͌���<�+U-p�� ��ŋ44#xr��xR����f7G��8�}�����z���8^t��EW���+-9��瀴)߰�%]f������/��-=_e���#O��Y�⫂˸灝�'~=P$��{�~iQ���/���=233�g�$tD4�������c#6���
Static task
static1
Behavioral task
behavioral1
Sample
67eec276cdc4479de1f3b433bbf068b7b24d34b98499980b20a6c1abb5cd4008.exe
Resource
win7-20240221-en
General
-
Target
67eec276cdc4479de1f3b433bbf068b7b24d34b98499980b20a6c1abb5cd4008
-
Size
2.9MB
-
MD5
890dee1ecaabc5346d145aa11f81ccab
-
SHA1
d1eeac08a04fb1a1c04e8d91b62c1482e8a54c93
-
SHA256
67eec276cdc4479de1f3b433bbf068b7b24d34b98499980b20a6c1abb5cd4008
-
SHA512
0bd16d7ee788b86df201e1f9f3646d022ee1c8373702a8ca3b9ec298cf2a082ea3b4a8ca63d838a8e5f812a2d68d4187dcf9d6d0fd914451aa224830fa4747ab
-
SSDEEP
49152:ymse2CbhO7ZNZyHYmveYbjAaGC1uGsCQBHqrNX0uIQK0yyqIaIu54nf69WA02Yr5:ymse2CbhgABFjAr8jQS51GIaI+E69WA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67eec276cdc4479de1f3b433bbf068b7b24d34b98499980b20a6c1abb5cd4008
Files
-
67eec276cdc4479de1f3b433bbf068b7b24d34b98499980b20a6c1abb5cd4008.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 461KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE