Rȟ�Y��,3TS�? Զ2 >�X�W�1S�h�W#H�����R��{��*KkW�8�#�1=.�W�su;����ӎ!��1m�0Cz��M�;as� ��U\'^� � �9��o�iW�y�������Ҋ����2K?)����_g�*q=`|�x~� ���Se��n1�a����x俇��{����YW����܁��� B-*'%LBp�$ �Pv��Ǘݒ<pt�L�H��:�KU���&�gG'��,L��y��a����S|3���(Zֵ�=�ɫ ��w * ?�k���!�ʾ0���Fc�nI���C?t�mh���og��W�u�ɥl5�s��謸L$�Mm���ô����T�;�T�g�9i �,K�"�R����s�nK�dG�TM��p(�w�����Q�3jPkKU5G[d��� ��0 ��/�)bp7A��i��O7d*|=�\;�C*C*���7�:WO1���q� A�6*�`Γ!�o0%��`+@ɼx�#Gz�ũ� K XDXٙ �.Q���]�F��\ :���q��l窧�|�Sr��� �P� ���W �l`M�C�KKYN�0�e��<՜�*D��Z��s/�O��C�ވ��I�p��#U�:6����{[Р֏NQ��ΛB�tFn�Xe-eZu+���\m=�"=@�S=��=R�����y佞�xM�Q.Z���$c�aﵣ��Q>���Ȱ(�a�~BE�H>i�y�V�ě�=�T���0v� ���Bߦ(h��Y|�"�܅��_7r �XI&�t�0l�fl�e��;���k�\�C��:7Xx��X%,��){��0���ݷ4K��蕪��VS�g{��c���2�J{�������O��=�i���+)�M����^�G�|�����>��d��Q�Ϥ�o�̄�Q�pwņm�z��b��;�.=�T�a�y+�~A�fs�ͼ��-FuKd���� #?X�G.c�(+=�S�]�c�y�Hi�Ó�X�<Ǫt��K�;/�M�ÄUۘ�S6+��0����$hZ�tȢ1^��y�/?�Z��E�\�rn��]�5KA��ȻEh%�4���]rg ����_�B���� !�������#�T�L\<��y���^��`A�ڄ>���%ߨ����� �n�ʽ�I�V�>p�Md��q� ��B�Cp/��:���E��� ���d�jR<p|�J�)@&�����"��ӯ�Y����Re���_3��M7I��%��$��r�ӆc���Z���f%1�/ˋ�v�� RN���_�k�d,��!]��9�<O7$HpeS�?�YN4n9���M�ܤ� T� ��a�߸��r�و�+7;;�7�!�m�p�f���֣QY�;�"0�^�P���G�R�,��eZ��;��7mܰ;�h�6G�۱�2m���g*�Ũ��d�}A�Ъm������C���~Ֆɗ��i�5Z�4/�� ���{Y�th��QV���0���n"�E��SA��s�����פ��B�5nяw�j�S{^��@-�9�o` "����!\p8������:RĎI4��/ž����������@Tqx@�/Cʚ�"Y���h�Eɦ̐�8����L��6�=Ҍ��@h=�o�VSz!2�V���L���F?�T6@ �����[5�+����V� $�i����6���V"^Wr ���� ��q}7TWy �s�LPZ1�Pp_*�ĩnS��������2q|�U��˳��4�m�D���T���{�}��i�h"�����R' ~z)R�����T�f��7W����`�}���p�~Ө>�r���I�L���w��BY`��f"�����"Ƌ�i����2��xP̺�Ӱ�q���N�y+�Z�A���-h��.X�c�i0���p�(���!��a���{I��b�[jA�n"8��_��bV;�ԱQ�w�/rK�����jV ���1���ՠ� �ic��y1l �/������#�.6���Ϟï��"�d\rؖ�w�foj�t���{$�m��J���kZ��Xr��>��W���9"�샤Į��}N�=sDҴ�ˋpL%��Y΅?Z��<ȯwHM��O5��I�(���Y6��A`[�*�"��'(�\7^��!�RY9Тz���$2�?'��`婽�Ā�x'�\��h����r]����Q��dQ��҉�����a��3���;2��@� _!���/��Povc�DY�5`MG�:M�8�����?���?բ�醑�\�S��A�eJ�g��Ny4f ay�~�[��$�B~R�4�p;!�hjbjz<$(��+�Ҹ[M,��yG�(�u��ngÏL�Dz~�Tk��WO����������<��I��4���v@p9BZ��'�e�F��|�*�G�~�L��J����E�ա^Wެ��P���n������էC]��I��i���;�}�-�;�Y�V���ߗA�Gv5�%���єxkaR�/�V��- �Ep�-Y�rc���,Ci��/~L�^�������п�Q�P�ގHP����B��2�[qĕ�k�� ߾�`Ka�����QD�S]A����PVѬ�0{·[j:̉g��Ƹ�ً�:�LWՌ�E�F��IR�)zb�D�\hԘ_�#�ۿ�j��,��ıid3�<��A��f\��\�q{�#�b1'�E���� + ��^�h��p}y͐��ҹ*�Q�-�%���d���$R�&�>N8�%�A�H;%8���zt`�\���$��S(���Gӥ^[�i��iؗ�Scb������!�谶�b��(K�^���V�Y�����`���� ��#���C�X6��@H�A��N�)��Å3��th�f��/����HF��p5�E}mNMD�-��N�V��˜��t������_-b?�|���K��hj�������?��L�,+�u�$�J2Jh@���Y��<�ErX�'��^��'�C/Y|�hKuZI3��ε��]�]�$3B�¨��3 �2�Wm���Vd\���ߕs�h�m�`/��(g~� �=I�]�2Aa�>�+I��G�'��l%6p���ۙC)��A�MQ#���]���ވ�)c�^d;m���,�|�'���̝��q�~ʊ%۲ 39[m��1^�¶7����h�z������3�˯a��c������5��K��Ni��&?h^M����b�.}�l��������?^����w�7���r����^w /�M���3̗������v��|�8GLf��`,g�Y�����b��/��#��ʊ��rq������G��v�;�=*!��v�%���B����� =�G�@'&"��f;�xXyo�U���"�(�?�&�Oĺ�*-a>]XPf��w� ��#���slѨc(����юBy�\��$�P9s.���E��"��4������T�Q3>���J��R�M����}ã;&���W`Vx�oc�][AK<�э2 &xL�:{:OZĠ���<4�8ٵ�3���w��Q�`��B��1�M�9�4��5)�f<�i��'I�8%�F��#Rl��w�]��R�Q��o�Bz����z3�V�A�F�����'��V��j�d�V��ȮU�ؼd,h^�tG�:$�a2'E�w&���� ��o�(�A��b��J���S�[6�c���O�ҩ��;�
Static task
static1
Behavioral task
behavioral1
Sample
833f67dd601e34be297b3e221b874f7e6d3fd6f83c47de75707170ccc0c6a67a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
833f67dd601e34be297b3e221b874f7e6d3fd6f83c47de75707170ccc0c6a67a.exe
Resource
win10v2004-20240226-en
General
-
Target
833f67dd601e34be297b3e221b874f7e6d3fd6f83c47de75707170ccc0c6a67a
-
Size
2.4MB
-
MD5
61ce7cf45691b16f00422de1ddb05887
-
SHA1
c93be129f4d923e5a22ca4f5cd3666f35a366de3
-
SHA256
833f67dd601e34be297b3e221b874f7e6d3fd6f83c47de75707170ccc0c6a67a
-
SHA512
b141aad7382888c6c524d77695b825e9b495e7dee942442776028df18e190fbec1551c9392639a20527059fc7ed5ee9634b05d2e740b9296a21370dba85910e5
-
SSDEEP
49152:4UncbQj5aY5Fg4vCWJWnftEhyi59oSllZ3jtUph8VyMkFgsRbfg1g:jco5aQF2nnm/ZRCWsR01g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 833f67dd601e34be297b3e221b874f7e6d3fd6f83c47de75707170ccc0c6a67a
Files
-
833f67dd601e34be297b3e221b874f7e6d3fd6f83c47de75707170ccc0c6a67a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE