|��(�ۓ�7G���n���g�E��1�D�T�����������[T{�[���݅��8���p�$8 �QM(F��Y�9���qI� ��+�3��=՞W�k�2��� ���T��O� �s�ش�����ʈ�n�Ig;M/YDM����P��Ai(MG�E'@�15�y���$&���I���>�� �?��x����n�J�ݭ ���-T�i�;��F��:�n �o�d�����]HP��{2���A�g�',o�H���$����ؠv9u��&F�4J��q�`;0�qƸz��6����ɛ9�fN�m�����'z��p���8�}%-D6�ؚ!����;�7��I9�a���_7�J�-���!�TI�� !�2�8�V�=��ʱ���z�_�k��O~I��!�h��Ҽ�Z�?���+|�7���w~yV�.J��yjlQ����6�>�l��N�`^Ur ��A�����<O�� ��i���":�Dd;�L�����I���Z=�F�/�is���͊���&�M#Ԯ��"�S���X��z��A�[}a�u'��~ � ��6q5=�)>��'^ �M���} ���(���ɺ�'��u.Mp�UC�E�-�l��&~��27�������,���&C��c�8���]1#S�̰T��l�pN�����R9�y�2zĿl��� |":E�,�]_U�k@讙u.� !��0l|���*��U�1L��^�'�u���L� �!Z�;%% v�@�p���dL��$ge�_�m��Yw�X�0ke�� ��E/�d�JcK7cy�Q��I��W�����ع�^ҭ4�a�㱓��<�YM5���n��wR�t8������$\��$�k$0ᰚ���Z�?�`!10��{�Q�;��V�l��r]���?��}�=�G�5ŏ�����p���d)PF�����1�)�!�:�ww�u��}"�Fn�(m��J��h?�B��K�'�j� ����ɖ�U�y�b��Ėp��K��\�$ZR��/��bA)'��9�S�c<���df�>�d��5)/k��1�@���9)j�1�� 5�g��^b�Z#���u�Q��f2��nh$4�"�!�s��a��%}41�E�@��.g�M���'(� 6s=��Q��6X����-s���6��})�K�=�t�cjӺ�B-��e��(�D�oY��[As��ݢ�~�p�t3c�7,'���KF��aT���[�eW ���uި1��"I4�X ����a�1�ݨ)r��6�S$5]�,m�u��Ƌ��[��NOd��6�$�%�+��*U�>�'� ��&:�J S� ��mmiaa�'W����]�p.nBfX�ӆqpl��H*9%��b���be�^͟�]!�����f��T��Yk\���5����2`l��p�Ku�s�����|�w@�5q��;)�(jbG�s(��B2�.��;�M�9�NE ��L����ۆ�z���p�_�w��e�9�U��ms�y?�����U�F��x�w��?�ůQ�Y`�;�VO�L�|UV�E�1����da!SLK��Y����2�?l��<����oF#�|� ��7D���'��[�[�����p����s'�Q��, k�;/�V�3폔��'�R�\b����b�T��0�=O�:}����P��>�FM��a��;FO�-/w����jn����"+K8����&4i��X�6��xsX���Z�XǃA�2p5/�M�se���M�e:^k2�V���{ � ���̊��6ѧgD"勌���?��1HCd�Tl�����2�;C���)�+�T�{!Xxպw�˱���A��Tq9����v�G��q�92�P��._>���W�����X`$y�����4�"Ů�P�l٘�4��%R���P͠��Δ�@����An�;]n��hjv�����$�'Z lG��lp����[��I.�1�NWX��HXP���ٞ:`T�u[_���L9�c��>��W�\3/�l�U 6�k`���1 �~*7�or%�Ê\���y��X�()"#"[����i)>H��X]��-�2����&2�#��B��=vp�-*��y��.��� (��..Oj�5Kn�Ge���"Q�U��9��ѽ@RW_�����cLg'(�."�a]I=R�l;�ƌ���e�H�&I�����[��@s�]��Π��t9��� k¡�$����LӧNԌ4��N.�����-Z��T_I[�48�Ǜ��c3\^�R����K�I�~bq2Ʀ�J[Zp��e5����*���4Zj�!g�oC���6��Ș�w��% �'V����u�ɊkP?Q��,�7P�PJJd�P\�0����3����!�/1�n��i�V��l�'w�+zZ�C�d*��U9M�P�'A1���2�9�2�9F�?� I�F_��e�~����E�y+g��vKfx��^Ѫ��e�1�w+��` c1F �k�P�P���f�j�ȡjL�,rO�)�)6Dx��Í'�&�P�����0���ej#es�u���誉�e�"�������E떃���^��UF�L&�p]0L���u�"+���7M�Ϡ�H=yX�@^�Ք"�BB~�>ϧԿ.<!X��0e[ʢH�B ���̰�~�-�3M��*rss�ߎ�6�p8ӈG�$P $}n\� ��u�$��Y�PM�#������6.�`2^��F������c�y�����t��xx� �bt�2j�Jo� �q&Di�#X�Q��sW��5��O��.�/Nג�y7�{����*��ow�G�"��_��C���_zn�1a�=������\��uj�ዯXў/���#_S��J�o�;l�A՜�֍����!I*�if��KB�ȩ��F���_��������vF��+ZU ��V���N�֞W�� ���=�p�a3�n��b=���O�<����g]�aq����GGK����{�К� C�4�r[����gX����e�nL_�a����t������u�����A@ǘ�0�wl��\�B6��R�s��+��*D�BD�ߑ�o9W7~�rŲCe���sƔ4�cN�ؔ;���LI�lQ&WU���,8��rv����B�![��/7�{�^ =����~땯$�S �.�4:�S�@��I��%�ӫ���4�}�,�ʇ?�m�����b�� �t����P��O�ZFu\�w��\H?��+>U��y!�Yu�����e{�=nOnW"���[�g��3`��F H{�pN5.�o���,��)B��7Hi茡o;H{4���y�ݲ�y�2{�h�I=D�0�t�zN$t�p��S�!B��(i�3?"��i�¢5l�+e>��Pt'�8t;�_M�RPVN��S #9��x�̓YE���C�������ip�Cl�����r�=�U���斶��Eɱ庪/��`ˊ�V�[;絣%2� ]��L�iH���~Z���,�;��/ ��E*Mgr�O� �v_���J� ������}�D�5��*x�)3�nr�Բ�WEC��pw���������7�}ai`߁o��x�d�ѺbW{oN��E�9��*m�ꑃ��Y��6�������U=��E?�����ࣶ�a缳��U�����Z��".7$��@�Co&��y�O��ǵE>��C�m,��h�
Static task
static1
Behavioral task
behavioral1
Sample
Pink_1.2.2_2.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
Pink_1.2.2_2.exe
Resource
win10v2004-20240221-en
General
-
Target
Pink_1.2.2_2.exe
-
Size
4.4MB
-
MD5
196300abcdd329bca35aceb2e7ed1ee4
-
SHA1
b21f1a847a5a8f4a5cae7017a7e8edde16104fec
-
SHA256
935544e5484288a47e3a87114a103ddb846887d0fb09b5315fa35cb382a42403
-
SHA512
ff3abf5a1a9cc3e62364b2c1f5ab67b38700402f48e3f36ea54990af840e058db15a538aba872e9a5800c9491498ada40b9b6f0479271bc8a0845b16d3bf32e1
-
SSDEEP
98304:1z/LefeH07oBhSOn6+Za5jYhWA71BbGDz/bETNZhNfVx:1z/YeU7mSpSXWA71RGPTEBHNtx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Pink_1.2.2_2.exe
Files
-
Pink_1.2.2_2.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 78KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 164KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 181KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.3MB - Virtual size: 11.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE