r6��W@Ĵ��'u��� )~��˹���i�LΣ�dxz�l;橞��2(�C<�=��"A������!q?;�G`h?0]|�Bh�w0��;�r����P�5H���Z�o O��ޏ]�_��&�(��e��?>R�h�h�Q=�-���>a"�Љ��X���>`�H���km[�JB��3,W��Ak��6��Ԫ�d�� L_O�t%����zk��� ��&��0��>Q�t� W��,h�����Eb�����=V�X�2�"���>�����@��s�z>��|�"_kHq٨��:�hEW�=�~R��vt�����x��:������i�@m\����ˍ% ���ʐ��K�����+1�E�A�97e�%Dt@��z���M{�{�W{��T���߿��P��,�^s|}���JI7���܆�2`���BW2ȕߒ�6��H�Je�jG.����)>*���&�i�S8h�����K���)ʑf�ysb�v�G�8`�hE���w�}�$C���� a�h ���"�՟}��@s�ԥ�&��I�<��H���uu@���Z(�L�K S_�F�)5�������&o1�|���i�v�H�b� j����'�$��ٮ�G)5�>�ޕs� �-�� 7ڢ?cK��IǠ��px'�o͋lER`�w1��C����[L�χ���|8))y �P���� ��oF�JHN��g5�jʊ���^+b��ӎ�E{�K��v���UAI%wN�^��"���F���J:�q���6C¨�؏h N���~��~v���q�n.wrn���S}�x$�q������ǐfj�" ��O,p���;`�������3�����9���K/�fms��]%��4՛���ɐWc|iKk0�3dK��G��2�n��O Q� �F��4zo*y�w����Y��ۓȤ��D�u*S�?|�I�&�����be����/agTA��C(&{C�J��\jLzu��F<5 W��R�.�֧ne�ʪ��:�x4�����硽�jQ��n������.�*�������d������7$,�6���Bc��Y}eT��=2p0,��̺�C������D��i�����܋dk�0x����*pk ��A�"��� �mj�����N�7%_�1�1����|������eA�݄{p�Yus�q�M�/Z�북l 7�>�o��ߥ�D���oJU�-�mp:n��aѨ���-�o(���<k�s�f|�b���^^)[�?s���Mo�A������?V�0�_G���R��c�"\�� T����)v.Ȭ����ӯ<D_�\�p����ڗ_���C��Rm3,*R�w���IFo���!�[k� �LV4§���/����(�Q���p�f�KZZ r� �!TAt^��&�����צ��kϢ��$�������r¯���� �ֶ��}�[��&�`za��������R�X|]cWx_x�iw{N�Ȼ3�n>olg��M����W|f�& �>�2x �ű���_��������D9�6�_v�Ag�H!a�B��y!H�r�i�^��3PA�aK]T���h��� �f%���������;#'S����F�wF��fvv��xa��vU2��a�슍��$߮Pg��" �@cF����7F��FV�� ����3��/���y0�GS��a�[:+����N���r!4��� `��ɧ��7&C~&�zx�%D���U���~��B��H�p���� ���sA�.ll<�n�k.>Q�F���烚�q���^u'T�@�$�{�r�'��=9���gF}�~�m�y��Lq�g��?ڼ�(jvr�\�V!��Ae,R4��9�+�.P_��4$Y/|r'���$��P��K���D���|�� ���ʏ��;�퓅�ڢR7S����N�Q��݀��)���Ǭo���v諛���Ǫ#^~��h�����Y�b z�=����;@���� ����(ΧON�TH1�>E_�y�+ Wh�ϩB���HBQ��^�^�K�{��Iqί�A��Q��Yc��;oIc��d���6(�R���������+;����0�m�k���6�^0w�LAKc��QX����y+��}.��Ds�*@����{�=7jpH��U����f����=�pl�C=�z�0u dJ��+=Xc��l�rTv�1(E����Up��x�HW����61�٤�n_r7-^jOj��@|�� �`� ��;�m& ��i!Zt��֚*2t���"&�`|�.���):�|�3�?q��~h��KT�A��%��Ƚ��Z��q1A`}\dE�����c��?F;[�2��7ޚ�9 ��S!������a��u�����Ѵ>"���ݼm眜�����W3�>�;�u{P��*.l���� ]��T}�{=�Sm#����"ˀ���$�E�$�Njݑq�%�ȋ���g�Ҏ��%5��l���r�l((��k���9?��ZP��pe��e� �-�&�r�'��1�.K@�7��8 "4�G�L���g��QSlQ,���IM�����S���B����/���tV��dl���4�a�;��K#}�E,8�F��>�H�<l��0D ��BoX�5��A���X��"XF�Ώ�������ޠ3�\!�b'��W�Iȕj�LיG�߷��gߢ������I����=ɻ���aXūׄY^��(OX�'k��T�[��n�E�2S��������'��`_�X)0�k��*O�h._�-A&�L��h]N��ѽ;�he�o�㺪'��V�$�ڬ�0���P�h��m�\h�V\�o����xV%,W=�Qvhʧ��M�<֥lE��:ֵd7v�x���$Q@���������|�&��N����ӽkik��^A�̨?�G�4�O��������i�x�$���]��"a����dg�E��Ω��J9��#T�L�b�s V�;����bD�b�(�=��W�c4�}Nu^�5�T;\8{jw0.OQ��O!�Z�M٣j�?����6WĥJ����=Gn-긠����m���������Tɝ���w���ށ�����f�T�[������LG#,�����=z/|A�O����V�����ƱX�� �~�]4������u�6(LyIU��Gg1Ұ���~�(M���#}��H��� �� SRF��*jf/+Y?�v��E|��o1����]��"JǰQ�M��ߎ�ێن<4B�2��s������`#�� ����H�{��b[��
Static task
static1
Behavioral task
behavioral1
Sample
c2565d7c416a3a67c5e00c5974b973bb.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c2565d7c416a3a67c5e00c5974b973bb.exe
Resource
win10v2004-20240226-en
General
-
Target
c2565d7c416a3a67c5e00c5974b973bb
-
Size
2.3MB
-
MD5
c2565d7c416a3a67c5e00c5974b973bb
-
SHA1
5eb2114bf3279508bbc5f1422c373dc0b87853df
-
SHA256
f4cdddced7b61a87c1202f2acb99b46e839e409bbe2c1d1f7f3e621f9383fccd
-
SHA512
b7f072621d8dc8897da4bdeac2b2c4671aa88369d1401d5985f140854b1ec54686343659e6378d0f6470a09e4f1693e6a654292ccbb84d743b9dd33f31f2e662
-
SSDEEP
49152:MzmCA31HvsCd23LgggNXCR73gbp1gQLkcgVxSTWnk:M6P1PsC+LZgNyar1kcgHS9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2565d7c416a3a67c5e00c5974b973bb
Files
-
c2565d7c416a3a67c5e00c5974b973bb.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE