q�OZo"�,�!�`%ٶ����o��yX�j���ٛVsPK�ǭ��x�/-n'�^F�`��$�p`Kޞ��� {�=������9U�K�.A$�����gn�����^��kB��RtQ+�T�����T��¢����1+*:��ZUH{ļ�)�� �� ���U�f뗍���2eܠ����eU�g��*ǜ�bv��J.�Q>�+��~t���}x�s���W��� ���G��h˽��Ps2q���� .4s(�#�q�G���*Ŀ�z$��:��-�3� ���Yk ��.h��[��g( �gC3{o�S|��z�Z��ڬ�N`sÁ*0O���q��^M����e1�1�X�c7�b� Ju��%1��G ٝ���@����;�;�4=�#y-ڴic�*bՒ�ߕ��Æ��M��j��yj� �����S�N������.`��ޠ��'�UP։���Q���~��pyH{{\8��*��тV++a":�8�|�Nǯ�t��{44]�@�#e%�UŇ��E��P�k��h!�\k`���I�K�Ύ�+�<�E�~�=�F����z��& ����)^��������,<�ܝz��UV��s����d�ii�C<XF�����21���1_Sot��=:��Ȫ�.X������Vz k_�G�� �zmd�^�s��6"h�#Ő�ŋ3�_����ԇi�=�&�&�"qVP�>�QAf�~b�:aM��d�`-��|��X �!T�Mj��L�sVo8���$,�h%3E�ۂ��:]����iZ 4��=ݿ7�"@���K�UN�f�'%�gc�vh�P���rS��p0g�ð�k��2x���TH�0�uEo�`����x������&ߤ~"_uS�f�6�����5�(3{�4K��P�Yt���%��|����Cbi%8k(B�n�i�A�/(ő��X")~?��P�n��Y`��b�#�G,5DI"��Y��������'�MhdV�9�#�58p�R������g$��a��E�Piv� �2��A`H����}����+8�=w�q�6׃*�N����������Vy�{N��?R�����^\��焌���{��M�}Ҿ�Bk Z�u��+�2�����C�8�8�mͿ���_좴f�<C$w$�U��)j�v��h���m����C8�&�e�dUb�deU�Ǥf##�\YZ:�H,:AЧ��R^�7գB�"4��u N�������a�u'��|*�A��fkGGj�Y,���w1�Bf�鎙S���H`3�Żޅ@ˣ+@(+V��{��:,�sp"��N�>#���z�)��2&:�a2��WBh�X�G�+"-w*G�Y����}��5�]U"��?� �˧_���6s}� 2OS��>ߖ@+_昔Avaw�;P�2��Jv�Ab�e.�����%��vp9����n�}�cu����39�FĿ_[���2��^+P^F��k���z�J�/E�u�5������J�n�j�:]k�X�E��U�3(�P"`���R�N�&̜R�F��P��6ޞ>2E��C�S���ަh`MD�%�,�`�&�o`��� V�DO�D�<�s L��ؔ^E���s�xKI���������ptӤ�QZ���~��<2{;���[C�r��("i����<�i O��S�8�%�Z�+����}3�L����"���/������2��gq����vFqw��K���#��p�_vǫ�;�I�� &�����V�kBglm" �g���W��{Q'�QT�Х��(-������>U�J��*N����ԲO}�����A�Q�&��5J;������g&���H�#A�9:J0;��\>���Ɓ�ө��Q�2�7�1�c�ySsu��u��7���>�������8�*1�dN�����i գ�9�?�a+�i~��n�/_B�1�i>�z?�/���˒�d���&#�=�5��6)�-�=g�<�)�� �ߎ�Z�����N�tWM`o9T#q$�d[����0/�3G�j�8�jV����̼@_��L��X�S�����zV�p�^(پ�y���r��/�,��a:����>ꆫ�<-�.��g���&���<��?�p�Q�i�d�O&Q`�t�����I��bV�x�RF�?ɒ4���������i)q��=�-�BJ���7\��,]<&����Kުwй�MT��lӜ�~UHo��C��m����.�f8�����2�|�'��6����pEճ�ORt���J��#M�u��]����ʂ��**�z������_ڣY��T|u�P�dzE����٤d~�� `��T ��d�$��jq�[�<a�(�`�'�����q��P����~R!�x�!(�R�"^E�X�4��,����a�@��F"t�U��ٍLC��5p=0�K��w0rW� ��+<��ъ�5�>���w`�{�x�� 0'�R\e�0� ���"��L�c�Swu}���{V�*A�{4�iu��ꐁ�*�@G�S�\���G@g�c%M��X�n��ı�� �-Z���Aq1u��3��O�2�S �Sq���������%���y����m� �6�:V �YHn�[_�9��f�����Cۂۖ��c�ldB�=ۆj�.>Z��I��`�o�j�1��]�$9�-V�ϔ�-�F{;Q���H� �!������Z\�Pz&�)CF���nϘ���@jRSun�@�+'�����9�A.w��/�ȵ�$�����6�h��!L����0@<3<_7�1�Mj�q�u2կ� �t(���h3��*m �|������AA�H� ��ˈuᏡ@D��������'����t����Q��0`Տ^/|��D��G���&�Q�u��K��T1m�z��"����W�=�pw���hA͖��;���V�Ah�ye|�K�������U��X�ÍiyP�ϡ�c»����6�:��Kt6܉���<u��8���f7����Ic�Ž��˨t�|��f�~��*���Yr����M=���PJ(�0�'1�2�Q����2��>�f�A��[�&���(*����f�Ax�~��#��^1U�;:b���7jL���˭�) y�����ҩ���j�a,g���4~���*��}��8���@D�3xBR�ч��y!���*����L��֜V�o�F:�X��PN�V���`��0����vO�b\h���4n!:���-�ՠVR���8z�F�~� &wnk;��}qdp��B��� #h��?���$&���4����@�1�=�n�;��~�|,�.vZؚ�`�\#����;�d\0v$M%�[���D����[��D}��!'�J�Wu�Ec5����F�b9b���T8j�죣���>Kc'�B�,.��a�<�7t_;^�s|Rp�n�!���1��e�UoX�Վ���/T}k��-(��m��{���F%-���=�-���oo୳ζ[��n����?0x5�����S`�u���)z7�c�a�T�ZNJ�6�46��t&_�'��( �A�Ϡ�QA:����0V���{�v1��fC��t2O�i����\+~��-�x�2���/�!$2�p_�=;����J:���$hc� �0J�)��</�a��T�[�X�_���х~�<!T����P��Uw�ǡ0��kN�#�B4���6Q��*��Q�I�C�SY���,9��QNʹ�~g�� ��@a"uv=��(�h�?��m�ʂg#R����n�٥�]�oKû�1��hp���24�
Static task
static1
Behavioral task
behavioral1
Sample
213fd4663373fa3094c6846007a674eee71509ca8c6e3bae1b51742dbb727208.exe
Resource
win7-20240221-en
General
-
Target
213fd4663373fa3094c6846007a674eee71509ca8c6e3bae1b51742dbb727208
-
Size
2.9MB
-
MD5
fd81c6123b3cf8884fa5e51f0ade013d
-
SHA1
7e84ce42fc8d52cf6e3396d8219642767d011c9a
-
SHA256
213fd4663373fa3094c6846007a674eee71509ca8c6e3bae1b51742dbb727208
-
SHA512
0ef745626971e903203ca99d1670052a9687b56e9b37f389d55f8300dfa6598339de243f87278cf7b85def837be2f8c5c283afa602e4ef4bc3e2f2a5d7f6bd37
-
SSDEEP
49152:R9pLSRlETV9g5uBakVepoONkmMSk46QFWIG2cxK/uorj58D2UmMOLtOQjniuHFyi:R9pLlTVqOakVcc52WIG8uofA2UmMKJFz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 213fd4663373fa3094c6846007a674eee71509ca8c6e3bae1b51742dbb727208
Files
-
213fd4663373fa3094c6846007a674eee71509ca8c6e3bae1b51742dbb727208.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 461KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE