�{����`�QܙR�F<hz���S�ȸ�p��+'�����6�SQ�\I �7�J�E��d�0'������y5^V-��qmlD�*��v�oe�$F�}{C��!��Ο��L;�G8���Q�Eh́ j�yz��UQ7d�][����,��~[�E�m3혙.'��E��%W�T� 12yC�X���S����Abؖ�����4mg �"�p��|Fi��5-Դ���.���i�]+���2�_?&��;9�8@�C/\�m����7��|���Z��m����2c��8��S{�H��� I�j˂"�!�d����,�J�Stb��?�h,5Ǔr�(��'9�J�i>�f�:[X��лNxk*Ĵ�2zN�e3�t������yӻ�D=�K<Q�a����J.��tm��~�&������cl��5��2�j���p��>�J�n�I�\�s��|9<�����э^�����lZ��=3�'��=8XBw)e�8��Ī^��������k<�w��`P*`�h��s�� %�,����d�Ơ�T�`��Te��~�������Ho��^�t�k��:lKJ�Z���22I*1�}��_� �ޅ�����0���� Wl��ݠ�*z �-��J���{�� �DY�dC��7�y�����56��γ|QG3Taw���q���� �h��k=��j)����NUm��*6@�����ȖN����Qi`>�﨤�G�����F�8^'��� ��on�˹H�N5p�%Q�W��ͦ���?���g��G�i�ƥ##�LAm��EW�!�B`H��+��s$�~dI�E¿�;X��AH����3��-b;9�AT��y"TCFMd�Y���� �;�c�o\�ą�q�� +coYJW���7�B�CQ�^�zZ1ˣv3�B�����Ь����q���*��� �o0��H�[���QIK�f����h������$u�"�:}�6��,K;W8�0���(h��ጛ���W%M�^���0�Ms�5���݁%��5���#�b "��hVL�˅`�]�f��I��V�͜�78��[ō�f�SI��i����_�V�=}4�~���k!k;�et}�4�T����.8��ׇ e�1:�b�R@�C���ߚ���r���Xo_�µ< ��͗�W�I�7�]Z#0�֧�F~А���'�-C�ۏ��[Y,����2��?�d� �У>��ns�0Da�Jw��o����1=��l�7v�y$�ؿS����*I� ���Gv����A�P�)n���~P�j,�N@c��c]u����kp��Z�����$#��� f�@z��Tv��b�͠�o�%K��x�3�ϘN�� �h�(���t�� k�@�Hd�֩F9�� �%p��h� `�N��9̉�����V���ϛ�� ˁ�9��y����/Ap��TA�?�8�4���.�Rj�Zb4�t�I��I���9��aֺ����(��N�a�|�C������[y&o� �k�%2�� �"E*��g�{u�W8��P��Y�[rh-F���{��W,��_���C�wk�uL�7����Z��ȗZ�e2�V}־?kI[҆�;ltEf<1�c�y2����B�%�wN�>����}���VQE���>~ɧ�j�8�آp�ˣ�+T��NM���v)&�P��،)��y���Zȑ?���4���&)�W<�<z{�} @�p�e���9�S�~�O.�W��\������'U����Q߂ю "�{-�*U��6���k3��r�����q�N�G��g4dI����+e!ՠ�lM�a�(Q���4�P3��r�0i�r��6�� fߩ���$����Yz�þ����4���'��M=]�#�����w���m�u���)y&�=����'5�U�5&q�0�Ġ�s��$�Hj�u�P�n����0\VȦ ��2.��m2�`=��j�Ș�]���Y��b�G�� �#DЫ�)+����)�=�M� �����nu?���I|eV�rC:D�k�E4��|����8I�?�[m�I�8��G��?��ڎU[�R(~͢XY��`�����g@@^^;�EY��"� �^"�G�sq��Նf��g(�z]L;��ľ'�L�:mR��{2��6�Y{~ҡ�,��W_��I�Y�U���%K�v �����Z�i[�� q� T���y�l6`�j��w�*��#�L{Н��r���y;���δN�Ё4@0(��7ʺ�|��KX��m79�>��ئ��u��p@��3 ���@g[����~�#�����@�4;~��{��Vm��<'�������) M�a�Lۭ�8�.5��h���AH����%m⏄'��@DX���P� B4r=wf[j��{ՖJE��������a����@)^UR���O�X,����*����@L��Ib��1��i���7w�/��;��"*��u J����u��#U�PP�o��cY���̐�������'-w�w'=��BB��r:��t}<���~ �"H�VSrED��.���}K�{#��oN�nl�����Q5�+�,Ѵ�%5Vj`�K���o_�� �%,��JqF�B���vg���]� z���Oi��6��fT���0�������k�IXm|�,?'ڛ�c�/Xˁd4��z�W3�� ��ń>8[g �����ٸ��7�N�س�|�x����/NR��q�I��6W1�5>�����9�Ccu@�2�J�@x]%�ʔ��e��9E��Q)�9�f+�A}L9�V�_�@|��T�k����mŏ-&�0��A�A���ھqX����yoذ"</2����@>sh���xFI����T�M�KWHw�� 5��Њ���*�T�u���d�B�����1�$�֑�eYS��0�/!���M���$u����!2ށ�x�%�y���`S�/vC�){����z�f1�&�Nq߾�+������1 �P8�^���̟9��.�� Y����� \Ջ���� P%I�Hި-����YD����g��Tj��טV�]wT�vN��!�~�faf�̮�� Yp�Ɣ��A/�O�)D}��&��?]�Dn��!�O{�El$~H��� ��
Static task
static1
Behavioral task
behavioral1
Sample
25f3c969128ecce76e4dafba9b47a7a50952d549e24b0e5232577ccfaa18bb14.exe
Resource
win7-20240221-en
General
-
Target
25f3c969128ecce76e4dafba9b47a7a50952d549e24b0e5232577ccfaa18bb14
-
Size
3.2MB
-
MD5
e5300666ec4d6ec4bc72d4d459df03b5
-
SHA1
1e88bc076b027e796b6052d117cd0e83ca6649cb
-
SHA256
25f3c969128ecce76e4dafba9b47a7a50952d549e24b0e5232577ccfaa18bb14
-
SHA512
3dc0425d0074da8d07dc4a660ca0c90b41db221e484b00cf4350bbfbc3b14cc109c0dc68461d55b04f9129cbfb72e8cb5103e87bcd3bc3b0fd7c40ba4d29310d
-
SSDEEP
49152:sdpiQSLAe3ixPWhp4NqWmJCxrxYtHJmfJJ4YrhjtOJhUk9Rtqgph7GBfWhg:ygrVixPxNqWnBxzfL4YlKNJJ77GBfWC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25f3c969128ecce76e4dafba9b47a7a50952d549e24b0e5232577ccfaa18bb14
Files
-
25f3c969128ecce76e4dafba9b47a7a50952d549e24b0e5232577ccfaa18bb14.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 14KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE