��g-=&�N^���K���V���O�8h��Rܑ�N�#� ���- ˶�b�oIzT7%K��˥�.=�ko��4o���Y m,>��>:���q} ��S�lzj$�o���2q�e��~-u��%�2���Arv}��p�Jg��cp����x���A9��,j�l�qMB �4a�a-}��a��~|�0� �>߇5,<VbyeW:�F�Ͱ���"g|(tn�)��S^�,�S%��s$& Κ��t|�K��e(�ztmQ6�(��otE�W�~�P(�/�r*��dlަ@QY\H��[�މ����7����H3-�^iVQ6���m�sHӘOF�K��1�%��=9���_w��5P�xs��E��_��!���DcW�?]ݹIo�99��!����qO?��ox��gLrB7����L �G��Dj+H� �^�$Jª[��y1���!�#�^�����+$�>J;vG��=��u�9�RÇ �De��SP����_p����J +���Yn#��d��Y}Y���((zd9���|��f����3܉ cwӫ:�#:s姃��"?�X�cu��X֖���)t� ����"餰8(���͢��)I�$�`S��ݬI�+w [V��Eb�b�\H(�Sb��:y��׀��uYb�ҋ:}��Q �df��k�4��$��۽�NDV�!:����U�uNaz��<�������c���wm��1J& ��`u_��Q�Y��)"2A,G��h��x6���2��X�v��l � h.kd�ۑ�`L��9L0�S�j��6"'s�9��;i��\%�־ݾM/���C��(���U'Y;y��^���|��k�'�xr���68�Bg�5�]���z�=Cy[�OKc��TJ�kf����k��n'eI�B}���m\@�:��f� �kx�˴��c��X"�BNh�@�:3?��}g�/+S?*�2�0��N�������y�� ��$��PX���=KE�l�+�k�"Y�!����H�H������vu%%�`��B���aʘY�Z�ϯh2�j&�*:г/����KgF�s���===,4���Wܔ �ү���p�~D�v��զ��b_�����ͫ�g�j��s���v�/Oe���/�s昧��`�9l�����Y�u�/�yI��<�!>���d_~�>�aiZ��v�2?����"�0_�z�C��J�^̉bbQ�+����������n6Voy�(7�o툌E�\�1�>m{�@���B�_�ώ8K>�q��;=tgw���9a:)�ēW��jڒ@.����-�)`�[��T9��l�[�q.�K��N��jӅ��0��H��gy��F�D�g�O}A(mD��ER�h�%��c8c7|zIn�FH�Swo��u5�RѤMmĞL��&V���W��RW ��f Yrױ�[m�I���<��>A#���u��/����_lK��jqy�V��\��c���:Mo�۟`�MCP�����hǟi )q�3���"}��AAl�~� �����zD�V�xY �4��`C�S�������(��y�Zq~�R��ۺ �������(��iO�k1�&� _�釭:��s�[�^fS4�8r"���Ը-��LŃw&K}��3?�f�_ �T� W��%���#��\X�1�V�vs+�J'�B����M��k��v�k���ߛ��cF�n���S��0�����$���&4��]# 0��FG����F�x�^SA���$����}�ܽ��$�&Z��'w͎R�C�Ī�*�D�G����:Ta�1�q�����h"�!�p��z��}Mhc>�ᷓ���9�&}KJw@���\;ɀb����n,�2z-N���v���[b�6�1��G?���AR4���y<����:6_���$G�u eo�A�$��͟z�RO*�7�=S��?��A�H\j8�VK�^��A�t&�<���|$,�8���t����AMz+���~�[��#z�̖(���$����b{�m����g��)��; �J�jA�O��L�4A{�#̇mjV�|ơ�m}+Ғ��z�ʫj���b��j������$��EP�?�f��\9,tA����IHO�QD��N�.���F ���K�ŕ�P%����J@U\<��0�qr���пU�Ե��HVS�ޓ��u��l����{��Ts&��夀 o�udO�Ʋ#��~'�����&�D|oL��+ 3��u�����*���z|e���EԞ"�Z����1�v3�d�r�g�}�CE�C<�&���3��~6X��+zYg>{� ��nn�Q��Άꈗ�AG�k��@�[mQ��}j$|M���;�z��G� W8�O���:2�����+ ��Z�V��m���S�(��+ɊP:1�k�9]�!�\�>�Pϊ/��l.8�3U �ǭ}�Vi-m��g���8l��Yu����;��ϘN��@��,��S�����)���m!�S{lO�B^k��y���>�@�� ���4�����X�\�n��N�vn���W�؟F��)�T��V�V3�� �>�Wno��Ҹ*k�4Oo<_�kO���Q��"�Z�g���6��5狽�m������$���}|���tw���h�-�Km�B��F����j���4b|1 �q?Q�+m��.\1� ?e���5��[#�T�Z�.�Q(�B�U^��,�� ��'����������q�-᪃��*�{���DP����7b<./p╆R!��!k���[2�x�)&t��c�n�,�����p?��1^!����G��AM\�-�ƕ([î*z`��ۃ��,E���Up�?%T������,D[@��|y��U;㑹��|������1x;�LC3I��� �|h0�37X��ٳL�%�mU �0��T�J��q�1����� t �|�?#f��д*U?~e�A|���Oe���Y�������R�i��V�D)���I�P��b}����t�Uʟp�W �7��ʍ`w\<Ȍ|Ҩd�'oŹuS������3bt�͇djC0��*��ץ2b���.n�ܺ����F�7��I��l���Բ���zJ��p7�\^�,ͼ�h����uc����̄d���|h�Aj���7�e:��x�j#�dwd6�v\}�t��ۡ�^`�ŷdܝ�yaᙍ�)��ERj�@9�X+*�~��R�h�+����f/e Z��ì���ގ�G����N���C:�a���r�$�b�tS��K��Z����~�M��t������R,=Q�D�S�s-'S�m)�T&��Q`�|Y�O��h����: ������g��l$? v(�"���8���d��nk���B�9��'��M�i����h^(�J y�EQ��ȆW�����Ng����y u� � o�Z+3^����"�QU�S�30��Iu�00��w�����D�4p;9O���Gm�����䊝�]N"���F�g���mjr����V/|�5����q���f���fn�P��^�\��m�E�����.�@t8�m����i2��ĚSg�"�"��z��&�z�!���0�G#Á���\%u���6�{��g��
Static task
static1
Behavioral task
behavioral1
Sample
254005323ac6e401bddf283e17a6cb7b.exe
Resource
win7-20240221-en
General
-
Target
254005323ac6e401bddf283e17a6cb7b.exe
-
Size
2.9MB
-
MD5
254005323ac6e401bddf283e17a6cb7b
-
SHA1
2f6aee45f508fa5c96682e8a93f9201f8611bb25
-
SHA256
e8cbafcf196bb80ccb2249e8f6a18c02d8d67926a298165592c4ec742851749f
-
SHA512
21fa26a1a2df2d43661eca7fb854d8afd98d318da6433d157190a0bc2ee79490e5c249855017eef36bcce857882c3ae96fcd24eab0ae8209663703e9ed56c666
-
SSDEEP
49152:zHR5sQ4fSAn8bmnf7N1GkIkDtjuk+PPDTT9XJhTgI/tOc/X1nsg9oZkozdFT:D2fSpbmnfIk3QPDTZXbkSCg9ElxF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 254005323ac6e401bddf283e17a6cb7b.exe
Files
-
254005323ac6e401bddf283e17a6cb7b.exe.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 461KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE