��c�X�P[���B��U��D��~S���.� 4���oO�86_��F���.�T�9�� ����Z�R\��m��({�T����Ř��n���5���x���hlyIm���^Å�s^�[i�S ���8���}U��)��a��Gj3���UJ��ЗߊV.�7��t����A�63���(��-`����܌S��cV���ӂ�d/�����v*q�,��@�( d� �&ʉn�bͽv����P��;��\xs�����q�� �G�?>�3BG�E����� /�N6�@�3�fǔ�s��<�5�ٍ�x�m�x�����tV%��YO�9gUpm�0��v����ଔ�q����/w�'&����@E��u�[a2'g���$��vn[��8���j�8{ ��O�<��Bj����ĢD��"&M��X��n�(�z,!H��b� *I)��+���,�z�*lV~6������ٜ�6��a~!I�JE2-#�9������* ����>��|��f�S����W߁=�=�<����,�!�n�(�g�����W^#<��!I-�G�Z� ��u�>9�4�]S�Zh�]�&m�2�ff-��m5���P�k ��!�Y�j�`���2�c%OK3���K��Sț�W*Zw0��f2��Rhg?W�i���K�v2�N���㯓�]D?�P���μ'�"b�2 U ̜�7�ԋɮ�)�ry'�\�����;��/*�[�k�^�� �w���������X�;�BT稉�I�Ё��"���ݯ���e����×�a�7vm�浧껽�̦��Z�#cW-��J���!� ɰ�X����ȹ�(�~��]��� "�SDq�RΛJhzCI>0��w�<�)����=��2��gҹ�Ž�#��My^04aH�?�*��CX_��_� L��S%�����=~pͫ�����FQ���+8?̧�U����.Dե�h9�O��P/��=����2�҈�ϗ��#��C�$����#���5�� �1�oa�l�Ɯ%צ���$|ܔ�>��n�V��7�à�2za���P4��=�r����q:���� ���+c(r?Q��SALQ*P=����d��۶ �����qf^nrz�YP�6k���ɵ��f����� �!��lj�fan�����C�:�ԛ%^�OJD�HhZ�wF6c�Y�EU,vP�кt��ՕjK�V�*]q��-=I���UBd�~�x��Ax��������Mi�ox���1O���d�Ѧ�#ྍ�~)���ػN���Ǥ�N(���%+_����T�s�w�5oI���W��R&3\MN��VT��ӊ�����J�pG����q�z�r���u|Q}VPX�op�<�>0$k�t�3gW����E�h����ZT�Μ��e�y1��fYg=5���3H��JoE ��=��bv�����,R��X6W���;^Կ�Z���;Kx��m&rg�u�}�W�����oK'�UE����B�����[Q;O�h \��ޚ��c"D�cԁ�"B ����a���Nگd�яC�B|�㨇�u������Ī� �R'�^*&�0҉���tL��"inDW��w�Qv�����Pſp�^���A���p�X�9��y����iX,�ѣsPK�x�d��)�Pv����C|pwenDS}{l#��ʘ�nr1�M�ָN�R�N����QK��b͋�v���/�9<���%ɤ� WX�� ��C��wai�n1q_�f9����]�U��G�П��a�1��d�E~V`%�Q$-�bĜ�#.�����&,tX���ge��{b���e�_�����QL֖�Ka��w�-��8�7�hk![G)MϘ�9wc����rܯ8��^'��~���x�ǣ[�0 ;ڎ_�7U�R���q���7R÷'F��E莡vЪ���b��q��aW�n�&uJ�60t��4 c��O�צ�����]J@�sh�/^�F��N�%���`Gw�M"��x-qT` �Ǯ �<�̂���2�R�����@L����X���<�,���*���A1��gOo� �k��ǰy�o��*T���=��2�s����j�19}���� [�~ă���ܿ� q�7z���F�{�I��x��3 �:����d��n��K���n�oDŽ#a��J%h66e���>$��ij�)�6��(�N`M7F��N}'U����.��R�-����$��F3W�u]��S������9w2�?K�[�k��y|�bu8M��3�q0ތ�j)=��=/��j(����?��`�g.�ˮ�`���&[�/@���B�������l4HN'j"Q�S�PY1_9��f%�ڳ ��~>��}�s�ϖBW�3�2���gD`���d���{�A��`��X����}���mT�X��a ����X:��������*��u��OO�����7ΰ�Q�����wdv;bRi?��=ѷ�?fl u��(�����Ͷ��9���I둜#��=DJ@K������A$�hB�����\��3"3$"���{��H�� �?T+E��UV�x]`����g��F��#���)���?E�/(Zk]��-{c�i��W2I��u)���|"����6��ﳥ�U Kp�T�]�� ���N�7�LXuNJ-���wI��E1=�H��]��i�i�]�c߱�TՍ$��n;i��Ŕ����2��hW�%e�����N �>EŴ����h�����+D�c�v���V�����f}�<b2O>����e"}ϧ�:���z?�|�ՙ}SH9���:�}�s0�����q}.�m'f!��,�!8�T�-�ڊ��]��&ku��[,/~��Q���Q�i�'wg�C���6@iI���*��X�{� ,�u�Qt_�^XՕ�h,��2�`F^��d,",�N �<� <��C��N PX)I���� ����]/iV�����Q߫|+�=�o� �%<��p})*�T9�����u�7?4��;� rDp���XFE�H�jђ�uWY b6�O�}��ɾ����s�f ��N�K�-C����-���t�������wI\�8d��x)�����9�B ���i<�.�\�Kn�A�K:�X�&�V� %�b����j�.�P����V�����P��������V�>���*�+V���������{�z�Y��s���}Ԟϡd\�@)���~'�]D�Z�c�0 T~������[��DE�C��RF;$�㛫��C:Ŷ�p�h����~��C�ʒ��{'7��@s������o��"��g���AT��7��m�����nTM7C��aeGoȻ�����kߌ�p�][kÕ�\Cr5�{''��<���]A�����|U,�Pu��_�hj<M��P �&�h˰Ͳ�:9kl>�=h�.U]���=��4�rB�����17J�}_�A6��!e��aY��~�g'X���C���u|%Y����i7.[��p ��e�W���Z���C[E@˸V�1��i����wے��e�]vQ�tM���s2��zu��.���b�-z�%��� ��("`'aV%qv�T��*`t�;q�.Q?�i`Ta��rI)<-��ȥ�F�R��n詯���
Static task
static1
Behavioral task
behavioral1
Sample
275817dad4ecf52069db0bf56c8ab8e3ed28f9c9fe6b723a125724db89afcf03.exe
Resource
win7-20240215-en
General
-
Target
275817dad4ecf52069db0bf56c8ab8e3ed28f9c9fe6b723a125724db89afcf03
-
Size
3.0MB
-
MD5
19dfd5b4bfe3d47de322f69a68f5f69f
-
SHA1
6381f754706174e3f7d303cf9c1aa186f70bc4b3
-
SHA256
275817dad4ecf52069db0bf56c8ab8e3ed28f9c9fe6b723a125724db89afcf03
-
SHA512
f350a4042694a2ec46801e074fd8165f5ec8ccc982753f8c5c17927b70f9f586f604d34a68657d7c7805e240fc8665f8453306367c1576ddfbb56ae3bd0f8314
-
SSDEEP
98304:RWbwor5H2hKLgjt+pGIY+fjYmyU2fNqdjPc/pJXJS:Mdr5WhKFRYqj6h8dbSphJS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 275817dad4ecf52069db0bf56c8ab8e3ed28f9c9fe6b723a125724db89afcf03
Files
-
275817dad4ecf52069db0bf56c8ab8e3ed28f9c9fe6b723a125724db89afcf03.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 585KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE