$`ޢ v��w�'9y|_ɻ �1 YԿr2S����G�y3~g^���a�g��y�Z�x��P����S�0��9�i�{�$D@�S��e1-�(ؖK���T����E��.3�u��@g��\O]��Ҕ� ,-Xz�;^�#h��^6���h���<&0e�}jf*�&���`w,��D���/ϖ?\�!��t0:*��V<�i��.��E�xT��܆���H��Ik�*��f�3nBTޒ4}����I[���╸��#�*�2�8�F�d��sQ��>���%�~;�T���v����;Vp�f$����K"�n��ll���@|�6� <v� =�\tfÃ��D}�K�@W,!��mr~TW7��������} �?�-��=��.�v���H;���-,t?�d�Uh���B7nl�L����q���K9��EW;^hM\L��v�\̟�Y)��JԠXq�e�:'��3�x�����TnIUcV7\��$~U#}�J��1Q�K8��la�_$�dvdB�����������������~+�9Z_~p;Ij�a�R�(�c���3w)���E��s Q\;H�����2�Lqҧ��,��V����c�[K0�������ߔ�D�6�]K���������c���#C�9�W��|��%�)�p�;�Y���\�� Z��!)QO�)�-$����5$���5P����"�_1����'Ae���<�0�|ԕ�ޛ���s#s���eؽ%&g|�X�F)䷙��O�sJߎ��^P�Z�N���Q�۰( d���"+Z�m�|Ғ,r5�g7��L����U�tY܂��&����0*��p�Q��H+�� ?�-���(Xع�����-�u-�(3kˏ� ���M`��:���q�F�6�'ķ�Q�����(��s�m2?J�;ĺ+��m%�k��F�|}���&c[�����V���ɭ�qN�� {��Z1�y��>�A��y�IGe��������ܠ��vn��W�o곤P�$[�K���@+�����-\*��'=�C�p�s@����A�G6K��/k��>��ܭ�\Y����,=�/�Qa��V�SF)�������9�ɬS���z���9�\l-��w��C��-{��Da�LSL)ق�}�s�f ��j��l�,J1C�k@Z`ۃ��jr��ѷofTǢ���m?�o�a���13Ν�����q��>��81��,���^� ������P[_c�|3�#��|�~tSB�X����<7��p&����R�[��? �\]n�c�ٌ�nomZ��h9� ���X�^���$��/lJ(,���Q��XH� -D3��=�n�>I��Ġ�e���$g9�Ms:6��N����$�њ0��{F|�*���D�|���+�`�֕��r.����?��{�<��%����xT"�a�<4��6�k�z k)K���%]J!�\�oD*>��R����_~[�h#'��C����Ȇ|�RmL^Ьy�'B��pe7�����Kur" ��Ơ�<�W�f}f�����X_��K�{��0�\�a�b�P+�t:�8�;�Q�A����S�%�Ӓl�1���:��l��h���ε���D�2$W�@9��5�Wt+���>�b`Z��B���gt�w���i�Hսʄuhg�����gz�COS5�]�2�����9�k��1��$w�R *^ھ0�8ͤ�� L&�.s¼{T�|����Z�48;�|���d��ʹ*D]C��CI��r��g+F�����<�AT�.��@R��M٨UyO���>��聄��OCq��Hq�ë7���2�6 ��3J�Uӿ��J�"�ۑ���YY��6��@~���YB���߇#+6�{25j��������k��<�YP��ҥ(0���`J}�:!D����~f��N��|�Z�h����|=��N_�H����b?����@)c�b;B \�x%��EZ �%�� �{pg��b���mz(���Z����K�1����l��Xu�}���k���_�ŐY��%RV��d�yJd�`L��_��<C<����YtM$���^�F�GUU��f��61���Ԋ��=�����F)��@�@�_dE�>wVL����轪p�EW%CL�*���m��������DU1�O#�o�h����K�$���%w�6 ��j��oP�` �5��W��c���*}��_lݫ)<��:y���ؗ�!��&BŰ9�H�t۔�2��u �8�a��h�v�8ŷUTXXt�ׅK���jt���d��՛r���D�����F��$�m����7h�vW�� �F0a����h�瘦m�mKƹ�������#�!�1)��<�ɼ>��RL˄'�ݰ�r�a�t�HU�$�����G���@*_�ytf�p����'��m�RΘ,�i�IQ�+�F�c/}��,Ѓ�֞�����N���F��#�zcg�E'�CC탠�u�@?�U�����*.��^��:X��X-3M�~���j ެ8�:>"a������.������c��g+��0p����f':�&6��?Ce�ke��f��<�v�*��WE�s�� 6p��σ�e��ĕ��¨JOaQ��,T��f��F���*ayO����^c7�C*`��Uv�U��n��I*)L�uJ�9Q,��_���qȑY�"0��^^;�kԫ4���!҂�/�X!j�*���>�6��(N�꫱�]Xr���%h���+T��q-���'�t,>�|����@[����a%���2�v�<+�aQx���,�ؕ`p���lFa�'l��6�Ӷ'GX@U���_�Q cj<��c�f��@ P�ŕ ����1X:+~@XyR��v�wGӦ��{�@ �\tx�o`NQ��]OS �,],���s�ܕ��] G�����Qח��y��H7�7���b�HZ��������s$З������̙���F�bF��'�H�xOp��"��aʡ�{֧L�-���������B[��ss�����Ә{{`��h0�� ���t!��2[�!%[7Z����t��q��4�j���b��F���� _�]^����X�m�p�}���^��s���K3�r�}��Ϙ�P�5��Χ��8-�H= ����R3��$U��&(��,������������P��kzy�֩��5�X��6k�x,��+�<RVl7H�ĆZ
Static task
static1
Behavioral task
behavioral1
Sample
a57c2f2514937b34036796bde4e350dbec48e04fe8b76a36fc8d7b2001e14d73.exe
Resource
win7-20240221-en
General
-
Target
a57c2f2514937b34036796bde4e350dbec48e04fe8b76a36fc8d7b2001e14d73
-
Size
2.9MB
-
MD5
9217eec50915ebee75a039176fc463ab
-
SHA1
8fe64508791b3cd233345bf1cfed890c7d882582
-
SHA256
a57c2f2514937b34036796bde4e350dbec48e04fe8b76a36fc8d7b2001e14d73
-
SHA512
fdb7f2fbc01bf5f9846d7a6025275d78a78f7846d16daac626c7b07f325fa99b969ee18401e05d336151fdd76a36318695403f3aa02fadcce4413e6fc561eed6
-
SSDEEP
49152:Ju3WILoTLP/u0N1aV/WsPVtFidXSx1/zwG9wGYF3Nl3RnfSUSO9D5vD2Fa:Q9eKAE1WsPVtAELbwG9Q9lBn0O9DJ2F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a57c2f2514937b34036796bde4e350dbec48e04fe8b76a36fc8d7b2001e14d73
Files
-
a57c2f2514937b34036796bde4e350dbec48e04fe8b76a36fc8d7b2001e14d73.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 461KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE