��¸-�`�Lb���/�V!���Ƚ�������3���E�:J�����|S���*L2(bޫ�+� �1:[�1啁{5!� ��Ҭ�沮22�C���1&!]T����H!~���>�~����d2��F�y,�j�@�=C��T?��et��G��q7-���X��� ��s`y"�/fX4�[?�l��� �d��h��d�X��fY��]�|��k�>�⳽.?�X�9��xyB�-�bP��qt���,��S=�Ș���n���H@^H�g8���_j��W���^Fwc�>rKiR�#�|�g�5w��t�@��Y`1� 5*�wu�0qQ����`�xU �M[M'����`_GW�eT�5Nb��#%�Z�=v:�����B�>�@L���]L"�����f��&�� �~4v vS��eB}+!�Z��T��l�N��r������J�@T;�8T�fiP���Pv�I�1�/)�Dn)DOH`o�ݟ�uOx�fמ~�� ��wؙr��q�Ox��:���m�Ϲv��){�b���Խ��؛��B��&�o1s�享*��S{�����.7���ND��Z�f���d_���m��|��ը��j���a���3�Q�(C�{�Y�|EI��<��\gkָp��]���㩁튢|����V ˡ���P����ܕ�"�{N�����vZJ����1�9����)�#b*�H�M\���i���ۂ���_� 8,�nb�bm�I���N�Do}����w~A�L��)[� �DYA��]�;��.�*Ǡ���Z�|[%e��A���a3�%��dÍkˁA|�_C��M厶��#������&�v������9��p�E'`W>��h�,S���<|V�)��=�Tow�����MU��r�_7��t������Tv:�I���"�A�ԕ�r�㾸rT�^�=�9rqN�3�E{�@��J����6%R@�ؐ�*D�g~�����w� �/G��ם��r���a۷}@h�-�r�]�aF�Q5��$���`�>L8�|�3��7����/���+�J��R*s��s��$��6F�s�� �!iXa_q�eQ��ҷ��U��� ���-t7�>G�L9^!���v�T ( �("�k�x�>I+��߄B��ĭ����i��g�7��f���s�����6.-O�2�q�Џ�����dF���(�� eE�M����m�2���a+���<��T�P���W��~�Ž�M���JhQ�9���֔K6�|5yL�1��_ _��N�o�%ޕ����k6B�r����}�|�'=P�+�kk����w�!�u!%�5�|�#�2���j�<��@������[����h��a��c"]fD���Lwa�v�I��)L�y;�1���s,oV����9�8�7m�$�`��D����j�����O�>����4�R����qgB<͛�&����֗u�IK[p"{���;�.{`7l� &����h�=.b��x�f涖���l)8j1-!&���"�����x�)`�+i����.k����ݼ�1*��?Y^̧��#@�*�X� '>���V����#���ύ�_��fv������&r��B/ :���y���/N�U>��T�GW@)���Y�[ �v����u�=f<R���]��s��a�7�X8,s���C�b�O #�A`d���@�#w�9�X�mZ.�J�+<��瑱s�ɫS�Pu�ր#_*'��Ԧ[��P�J2�y)�e�����@DU��uD M�R�W?�U�a=TY���������Gh��ɛS��FF��� �-L<\VK^���&ǥ�HA��X2t���Ӄ@����u�I��o��oP��8��:���,Z��ae�[]�����"I�m����c�&K�!Н�NfۓV�e���&H#�Qc�R�ŋ��P�ţ?�7J�kU��Y u�Xx�E4�ZM̥��1�hVs�r2.�HB�����5%~�YJJ�&m�Q�ňB�$o�jj�$�8q��� �0���k���P�NM]�TaZ�`N���$寰��O����,5�z��>:[�ue¾1~�n���I���,���yn����6����P�j�?GR��6P��_�z��D�~��Y���Q{��=�� �nZȪ��t<?�>��ji�/vl.��1��`��"�f�����џd�Y�,�Ƚ.���vq�@�g�}%3:>�(�u�M�e?���d���1V.�x�#ъG��\g��l�M�s� s�]�q�f�!���h���W�Oo��X @{���\s��Qن���$��w�� �/X�I�[� �ʙ����,�7���~:���]�B�d�!|�*Y/��3�Ƭ��� �%9��1!��Y\�gFk��M+�E���U��~𡍺��ҍc\��&}<�z�X����Sr��S����=@���N���c��w4�y�=�g�(~��`���,�h�h��Q������&����p��S��3�yv4a�As�Ӓ�Q���<35w>�N���C]h緣���`K͕�z�;la>�s�k,<4�He��`b�H����p\e{�N���Y����{}�8�1"���25u'�[r�%��fy��ci�j���WLP�GdM�w�I&Ꙭ��_�'��&��O�Z�2���'w��PG�c�,ՓV���1����7�p#b�g�2>� ��R���7-��ZyȐ�"%�En��d�4�t��wg��e;�`t���������%9k��b%L�O�����@�)�(M�2�hƽ���Tr�F"��-����Ϙ�I�o29D>��7ԍP���J���N��H��� �0�5_B�����nܰ��n��#�Q˙3頋�qCLma��[�����iDXE�B¡��J��|���Ք�z�)�X�!/O�TJ�o �I���A���3fzu�ˀ�`�NC�i�@Pz��1h� c�.�G��DI�W��+���|�+�B��+�鸋�P��V�r7�H���#~A�i��ϾY���:���;l��v��8���n=0툳%�B�t.��&]/��l����k�:������na�v������}�_�D^̵�c��]h�,���
Static task
static1
Behavioral task
behavioral1
Sample
46dac8e71fd31a0d8c0db97b79a860139f7871971bdcfabf308f4002dee61793.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
46dac8e71fd31a0d8c0db97b79a860139f7871971bdcfabf308f4002dee61793.dll
Resource
win10v2004-20240226-en
General
-
Target
46dac8e71fd31a0d8c0db97b79a860139f7871971bdcfabf308f4002dee61793
-
Size
2.5MB
-
MD5
92e91dad6b521c676f2eeedab781538d
-
SHA1
3650975355d3cba35bdf135654ca8ca48f799f87
-
SHA256
46dac8e71fd31a0d8c0db97b79a860139f7871971bdcfabf308f4002dee61793
-
SHA512
4112f9686a6ea230bd32c6444bc26b75d642f22b033b56e07860dc366da11da23d233d1dc037feb39cc5173800702103d0884064ce674ad1c77d150d17c3bac8
-
SSDEEP
49152:whU0jERExJbwL9Htn45BnfsO++6YBMMxXpPQgE0VcmHz:CU0jCYhm9Htni0O56pMxXpIgE0Vz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46dac8e71fd31a0d8c0db97b79a860139f7871971bdcfabf308f4002dee61793
Files
-
46dac8e71fd31a0d8c0db97b79a860139f7871971bdcfabf308f4002dee61793.dll windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
Size: 43KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE