�:܁Uʓ0�L�2�V3��'����$=�A�/���6D��g�~��F��������d���T�{I��Z.�5=Ӝ�t�Y��P�����O`>g)�Q5������uE}�y�Q[���,�Q.GlE��<I��l� �\-i���ݓ�x�G���l��6��� &0��1�,�p7 �$8̣�զ��2�؇��� -�������Iu���T���n�/���5}N����7s��[���^����|�.Phue�Xdh�ɹ�\�5�����Kj�_#=���db��]Q���;j�sp��K�XG��5|�������2�CS�D��oܿ�k����{� m� i�+5dFCD\�F舀y���)��;Jʲvq�#mI��t��h�n2�UDMFb�lx�ܩ�~F���M��a!�Diu�,�tz=��G�s��@+X lHjbg����4*�V��u�iJ�~��/f� �CRx3_<�^��:ǡK����W�@n�� �E��mx*ي7�Msf�+��W��~Zv��|1�� z���[f����Iu�P���<ŊKoY�F���G.)��W�1}g����vw���Bp6\ԽgB�ݵ��FO/ ������%~���������8�Ln�H��P#����f�Q������Gr�a>��s�!+�B��T��ހ�~�߭� L`�C��7[5U◮;Y.1�РY�`����($�ޔ*]We2��Wsc�VxT�qL����*[��F���I�LhZEˠ�qʠ?�<}�gK��j>���Q����Rh8�[˕�� �1<�s�l�ۏ�����6ι&"O�d���!��BȄ��`��� ���c�C9Ky�aV�l[\���f��0�1ʂA����fm�s�c��g������! �=�����DU��nG����PTa�x��p?~�l��ࠂ�M��wx?�T���a�/=}I�Mw�ţ�dV�R��O{�TM��L��u:� X�)1)��Q��q��uҺeA6������/����{��̐&�z���N�R�/��|�g�}F3����1/;M�k��%��lGQ_:[�pF�>/���,'��8�xJi��D�����$>���:�g �ωc����y,��6�P�{뻌./4�M��ʵr�.M�ʁ��@�h�h�A�eLa��L��;0ՠ�ڞ�i��ܽ �{��y幥�����$j �����"{!����OV�d���d��g�@�ގ�$O��ڼP��j��)тS�"��a����:4��5�d�*�b\�h���>�XK�P�#� ��?W{�����'̺:�X6?�J�^h���4�v�$�~��)TjD>n�C͚���.��P;#�oN��fju}���?d��|XF9�kvN.ʛ���J.==3���_[����D����tݤԢZ!;��O^zW���'�/�H3��:�6Iq4y|[kN<�'����u�������E�0����A��[T5�$�� �!@�a��]1�:(�f+�+@� ��_U��aZ�8:� {�cu�d���F|���9�R�bӅ���9�"��ZY���s���M��:pc��}/��Ȭk�#G(��u��4��=a+ �K���eK�|���IxW�^D���^R�������6m�p��M͵G��`�8�����0�_q��M�S�Q���]�AVc�E{p�_E��α�g|�6��~����Y�ͭ�)�RgB�,J�2�+J���Stdj�}ן�r)�X����N"\4���#v��*�[��zvS8�˽P�X�����?�Q�G��=Q�`II3��J�I�m�����3tb2���U'3{ ���\�4R��1�؍�,�!k�_��oAT�WlV_����?ް��!>���}�++q�Ƌj\a�אV��[l�M�.I�O�\O���GP��j�6/�1�6�I��� �EXMC\���p�zf�S}��>>���4^���a�,��8&�MU�ԁY����m�x��-�W����Os��:��U� ���k� ��6աf�N�� z�z{�4��� `/�2��/uK��ż9��ǡ�b��X�W5�r��D��k;�-�V�C7J��+���gYZ}�|�M�g���--�t��fT��3Y��\ �E�g ��L��2HJ~�T7Ml� ��y��^����s��wFۨ��R>F�!�MH;�"=В�F�YBHL�4QDQ���;L��f 0 �& �<e۟�/�%��b9����v�X=t�۵& P�QڎBʼnǤ,�VPJ�r��KZVņ���Ĥ�<�i@�9{nb�f�.8�������y�ëe�s��������@{��*~�$n`T�:lL�I]���W0)�q��ٓ!�b�����ۣW[�� U6��w�! ϛIտ'��m��z�"!��âg H��2%b�Je�^���e�~��*��1��fV: �^Q�{;s�U�����{���Ay*ի��%�{���':����_M����)���c��}�_cj� ���^�PMY��ҝ2 )i�ߗR�ϟE�FG0��CO���a�����"���ʤ=�]��Q��:p�����zi���l��Z��ϴU��Q�h�v� 9�W��B-e82�-��W�O}u�."'sKW��Ha���{���}P�K�O�\�"���r�ه��&c�P��)p�L��(���wxQ��^�^l�=�vau{nl�BFXE�P��^V�ZМ�����SM8�0\�"W��9��ϛb�����z�b0V�v1���E�\k)�.�W�a7��������G4'�y�fPb\��«����M�|���x�8����&����%�,�I������\�JfM���oqdڹ�MŪ�����d�6�QF�q�5�(��^�`�I����@Z>�j��+�!�l�]�;Οd��_������ \%<���/�cȿǭ/���܄2+;�(�i٦�_uߧf�|2�Eq�:!Du]��U7��L��E��U�x��G"�ݼv��%Ր�V�1����G��7�56�i�D�1�R֝���#@�Ө�������@�/�� �ظl���7�qp�|�I�����Q��cōv,��z��Y�e~L���l fB���J.S8��S��B(�F�οf��;C��| 5�+��S"'�x�$,�BL���GӺD`���s���A�)C�,ߎh����Ҋ�|Ô�]B��^>~j���d;�]B\@��h�?�:Д�Pmfi<����ā���pWuff`y���O�Щ�7��^�"q�CZ_�M�(e �-�6�/8��)��B�j�e���Z����Q/��I�H,qʳ�R ^��<*B�9�O�Q�����g�lm����yߡ���zb+��A2-���y�^�=7�[���g:��K��m!��,��&3�I�_�NΕyq��\���XM톝q��}5tD=
Static task
static1
Behavioral task
behavioral1
Sample
d05267b46695fe44c40f960f2e041204804fe457ee906165fa6481918a581dc5.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d05267b46695fe44c40f960f2e041204804fe457ee906165fa6481918a581dc5.exe
Resource
win10v2004-20240226-en
General
-
Target
d05267b46695fe44c40f960f2e041204804fe457ee906165fa6481918a581dc5
-
Size
2.6MB
-
MD5
f7581372a9e2c545d0248b9a3fbc0ff9
-
SHA1
4690eb614cf72b593d9888d3eb64dc5dc69ec397
-
SHA256
d05267b46695fe44c40f960f2e041204804fe457ee906165fa6481918a581dc5
-
SHA512
a147d2c0f0502d9ec47fbcda6ecc59d7041464aa4104b89ff317ea949d53a3e10e73d1d1628b00a06e3baf4769e0bbbe5452ec003a0d0808c99b1b8ba272c2ce
-
SSDEEP
49152:910YlQ53ym0/QnMn2PrSNtwIIBN31DyP2P4Yah/xBmJBsm8QSjVsr884ci+V67D4:96xMQnM2DSNKIuFDWS41h/xcpSjVsr8k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d05267b46695fe44c40f960f2e041204804fe457ee906165fa6481918a581dc5
Files
-
d05267b46695fe44c40f960f2e041204804fe457ee906165fa6481918a581dc5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 12.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE