���d$'����K8H��-T�ͨ�BiY� _la��*<)�xɍDѼ6#l������6�g1��(�����yO��=S��u��&��:O0��� �"�Ux��/AC$ /�E##yeUqv�j�{�rp�]�;j�J�aG�3�-�CS��u�AQe[��6ᯠ���d�8�Q�x .�;S����PZ��A�S7���ڶE��u.���� ���R^0̘� û]7�tc�5G,j�(�yiC�Tb@Y��0���ihB�9�b]�R�n|_��d麆�NIga�?�B�`]���+K�3��泯쨷T��LHZ#��0��5���w�����z����=�X��ެ��]Hȧ��=�u��g�*"x�_#i]�n�41��z,n���N�13#�*ew���O�qA���^-ƯXOm�h�Ɲ9�� x����^� ��=!�!�M ���� �lb�D��*j�и%�SM�tG�l���v�Z"Uy����|�L��{q*č�� j���?GIR �����ØW�#F$J��3��jC�r�}TY��m��H8�F��8�����,��a���)y����a$��(ނ��i_���ǩ�7v���h�7���W@<��bW2--:���R������lI�����Ľٗ��������Zw�M��-r�{ܳo "L�*�)����ٺ�W�)m6|�h�1⎼�f%`O�ә�#UJ��X;B��r'j%ׂ ==1�v� �_{Cr�]���Z�Cc^����!.��j'1��:���-["�LD�N�i-�us "�i�mx��EѥzDH#R����E��iܐ�=2��Z�k�վ�ɹ�a��|Z�e�)r��e�E�2z�������(�t��|X���>_C@�Y(ka4��W��ŏh6�ެ����F0D�BzOA�#_\��#ޭlȝA�0*�ka���MVsp9��V�f]iBS���.*��[;�9U�����a�Eu(.���o(�e T��m�|�����S�((��m�^�qdD ���)�ɷGė��s�$� W��+���0V�:1|�f��w�O��_�Y@5]�O�ᾖQ"5�����6�ؙ�Jl�~|���&I����L� g���6�a�h�mϞ�;&��g�ט�5�feE��pP|Y���zR�I��u�~����k�sB��όT�Ǥ��B�_��/�-<�\�?�U�ׯ:-�F��~R�D�:ӂ���,j.�h�4>D����1\�<�p�Q8���{�L~[S4�� I� �q+l6��8n5G��j��8\r�S�/jR� �n�{E��>��+L*�I����,UN��B? �皴1Q��hb_�i�������C������ִ(�@�e���~c"Ad�g�����!�B�+�������X�Q�\�<�̱���-2_=�U�`j�ĢzB9�I#�����^�"[�7i����%���h��(.���tM��ɳ��%�8ы�'��Z(~�{�Ɂ��$���7� ���諍��i��Z�`f#LWg�Gb 8h���0�B+CA�^�����&A*��m�MO��'H�06�}��t5��}��D����`�&�م"ڣN�������@�`k��sF�3�������Q��k��$�|���oF�{O-)�.��M���K(��������p�����S7`�z6%�i�T�,�ef����=�5۽S����98.��N��_f�A�X,o�{�$p0c��>�7D���ʏjƑG��Rڳo�V�nOps{���a���r��6,�)՟�}�X]Ԛ��i��\�<����D���?���x�]��$�&��l5j������`���7�^ *d������I��P�h@fΗO�~*Q�wL�`�Ny�(�������Ss~������땸S�J�� b�F_>����.l��m$��7� ��)|��k�L��a��Nc��z��K��㭏'u�h�}g�f��^�r������5G�˭N�{=��,2�s~+9zMbO4G�(�ch� ��<y�l;?������!1�Q��GS��,).�1��Y��_����x^��Ќ���I� w)��T�y5g���sz(ǩ/��k� �d�]��j�w_�]�s���I٪���� B�f�5�0� X�@��k��?���Cj��D�n��oFyǰ�M�I�MWH^{OWඁ��ٕA���,ހ9�j9da�A |4�+5��U�E�WQ�&p��h`�w;OR�6[�M'�%��w͍(����7��ZKfǂg�2�5� |����"̗���VՓh�$�+�ݜQc����L��xӌ4Ii�G�!�;æ��I�8'�a�O����m8�/Jn8F����dg^�/���/��jcW�� �xnG��`l��o�5Z����\�y�D���ل��h��n�*ID��)�$�ȍ��)06T�� 4] ��H$>UNWjdh �o3��Ql�>T��T�^�g�i@���q�G��됦k[�����������*�(�C� ]j�_9=k�M������4h�A�oĆ�9�*�����h[�$�R��0�@87p,c���J��>��J���oD��08E�]�P����l}Fxhӿ1��i%�������H�s�<ޕɢo� |���-y�3{O�Q�狽C�R��\4,>��#���G� �ll�W��8�p|����'���+�����(E:����l��L��`{�b�@��,���$u_�e(Z� ��|������0Gu�;r���ܹA�X���D6'[L�DL�D�\�|eL�[S|��'$�k��s��a�P�+�����Pʨ����*2�б=�/��Q�Ar�ȁX.F��矲�T-FK����C~& ռ��� i���� ��U���=58�5?o����5%UQ>)��$ ��j'o�XT �� R��}��+OQKpsd��ƔCF��������~���]YM:=������JV��G�,�Ŭ�Ɔ1DС�(������:/}.]� M��槹�+I��X-Z"{��л��K�N���Q�My�t�p�Va�U��0 ;݊VӷKAQ���v��=�P�0�z��2���.ψ��(���"�Gzr��v��F�k��F7� Y!E-<� �&��1?��}(ߏe���E�k��GX]U_o��$;4e=� �"�J�����g�i�j�2�Q�~O>����qE����Ӵ��OF����KH^^Z�s/���z���ɇfu
Static task
static1
Behavioral task
behavioral1
Sample
753c54477705a387e4a0dee1f54529fa309172175cf22baea4dae67b0005c1dd.exe
Resource
win7-20240215-en
General
-
Target
8a5ac55fce35d8a033ded9e56940152a.bin
-
Size
3.0MB
-
MD5
83e37be568c9df00b2e76180866a7da1
-
SHA1
3c108d8f1204f756c92575a3c9bffa58737a811d
-
SHA256
01bf8b507bf3ca8195a834a13374a42d1ef9be5465d42751a9625df39c0af788
-
SHA512
46f89fdef7bfd5a4648a0e81718555106ba30f7685ffc3ca7242c6c29b6f7864f89f8659a287a372120280e0400ab132ba11a82639591381cc6b1fb9220fa523
-
SSDEEP
49152:dCmEZFxEUO8R/EkvsVV9yDVwFfMI7G84ISHfKrXL71Ulg/omCyLxKwaMPegmf3wl:KEUOcEkcVcDOfMI7d4sL7mlg/om/LIYR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/753c54477705a387e4a0dee1f54529fa309172175cf22baea4dae67b0005c1dd.exe
Files
-
8a5ac55fce35d8a033ded9e56940152a.bin.zip
Password: infected
-
753c54477705a387e4a0dee1f54529fa309172175cf22baea4dae67b0005c1dd.exe.exe windows:6 windows x86 arch:x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 586KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE