k�+�zQ.-������e��kVNa�v�N��q+�5R1A�E#�t�nt�4!�q9�Y�����N�+�� �]�=��ӹ��7�"0ky����2��F�����l���L^.���*<A���1Q�>�Yd�*y�o%�3�Q>���Dj)�R�t��$�Ӝ4D�������/���X��I*��|�4 �"{�{���&�V�Я�v��k6y��jմ4���"�0���s�M��[|9�m��;�c� �F�/�a=��������H L�h M��٤�(]��껧B8(���q�ѭN྿Su��2����?_�A8���i�쫦<hH�t�\\`m�u䪠������E��s�����s�&"E�61�=R��8���_���B�F�)�`דS�`��,�м�]!t�*��z�0E�ջ���5V5)�7��-�d����N=0ƀ#��o�ops(��?���D^�֖�.�ߨl��l�� ����"�gO�Ew\d�I��L�H� J(�k������k0߰5�w��/�G4`�'�����t-kI��AN��0��+*O?T��|�<2w����K��n�sRŊ�Z�Sg)`���=�f_��=rTI�_�C+�Q�uZ;����0 � �^)����5�}�|��Cu�Et?�`-��vEʗ@������.�������ɼď2w=��aH �K����\�` � ��x�df�sH�(��I%�`{<��SYڌ<����D$�� ����W���>�A��&���.� C���O��]����]����o�Z��B/�ݾ{VA�}�N �����u� ��c��9��+���G��VH�ů� �1+�r_��ɠ(.�C������F��W�; W�Y̴�r[0k�+�M,,K�S��y'8m�CV��������P�и@'���`��������a}X+EH/t�I���>f��4ʨ�d�bG���Y��~GIH"Q�����&w�H�������HYޚha������p��b�[�Ch��b�:ʁą���[�q��߉�qߢ`��&<�*^�v~4�L�.2�v.2���e�}����6��ɿ��@PĈ^]�3�32��7O%EC�T�\ᷛ��X�^��X��+u/�o���L��W�q�%�����M��ϯmd� ���aQ���9�����U�nB�8 ���KU�=W�$D�C����;p*��Χ�@m{ƛ��� ;՜�t��rDL�]�|�Cd0���;�W��`����;�o!�2���N��jπ�E�M:8�d3�)nK�yW ՐtxM'̬,R�S�`���0��3'��/<I~v�0'�leFV�WH�:�a���'�h_IC?�ѭ���6$�<��j;��8O,Z1���i|o��.���$���knf��G�,��u�i�~JշJ;Y�� Ic�� u̮ F�ch����ʞU堮i1��T.(7���14\+��S�1�"J�%�}::���*^ 3I��O�VQZ8C�s�ߝ�Q��. �6�no=s�:��[ZH�C���d�{���s��� o&��z�otA�T<-J"��%�g�M�d��}��s'l_*A�O���`]�tD�#���}���7�V��L������|έ��F]p c@�7i����(�.�M���)s±Ѭ��QK��.�,;*dp� �s�5����,�x��������L)�J㹘P�Um[O¶7Q,_PasA��\ݾ����{���O�����*u���U�yj{Lm�m���U�4�oȤ�ܾ�6���������C[d��Ϲ��G{����.OztV&p�d̟+:I,�.���[��=�ץWJ�ȟ#�f����jo����� ���.[8�8a����y�<1�G����vi"��M��;�.��$���/E�4��J�f�$�:.�ǣ���}p6*@R�%g~/`���3�]YCB�e;�,���q���y��h��8LO��M������e���/ī����pjs¨k��kDZ2�*�$� VC �i�p��8[e�� �+{�N�`��`�SN������ �����,J_�����bf^k"��� �ʬ�� ��vQ`vB~zX�LcyT�[IV~[!K�X:�)�hV-�7vK~2��%��݂�-!4����qS�@S���K�SR�a߁?�ȒӇ������q�}>�ߋ�vl>�\�%@��qy���F3M_ϰ���������v��V80Œ^@��r�A�̨�rsz7� V�b��4�tg�g�Kywɾy�dDD�E�&�8��ӏs�e��d�5�!�y\�)�S:�{�� o������e:9���ܢ�畚�m��%Tcs�t���J���]�3Q�� 5����P3�Th�y�+Gt�k���H��G��8���� ϫ�dז$иM���<ez��h|��,"�D$��y�+^SH�T�g��/n�S�/����[�|��C�1Xm�D�ON9sk���a��x�o:��!�,�������F^��-�4H���tU^q�Յ|G�a�+m��-6���V�����F�M��2����2#���Q��¡�2,���!��Z�\���<2ǚ��p����}Z���"��j����j��(�I��}��ۛ�̓f.�EEj:���݄fHfb����M�pB���ʒf����%��X��5��@��� ���-:�T��4�_�A>&�31���&ڈCoo�3���}���7���H����8��=d��vNX������dA-���i¦� D�/%��Q$V�n�+z�'���qaq�0�a3U���f�@t�+>���X�y�ʯ)��57�56�*D���=zkh��B�!��%��=P� ~Ds�GV�����b��BlU�E����9{9�*����.�B�(�)��%��.����m3k� �Fu�u/r�Ǫ���p�3���/6M���3}�u�MpI٫D��o;����V��ߒ��û�*)�,� $4h�v�WL����"�s����:u:��ە�n��Z��H�.S�DzpDd�g>5�����$x�V"��`�-r��ȟ={!�.���
Static task
static1
Behavioral task
behavioral1
Sample
2e713284123aa6cc17cd463c4adce8a34400fd05198ef7378895cf30f028349f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2e713284123aa6cc17cd463c4adce8a34400fd05198ef7378895cf30f028349f.exe
Resource
win10v2004-20240426-en
General
-
Target
2e713284123aa6cc17cd463c4adce8a34400fd05198ef7378895cf30f028349f
-
Size
664KB
-
MD5
0e2bb96afd19e99086c352d19efef2b4
-
SHA1
3628b25d1d026fdb0ff663f09588ef2bf0e5444d
-
SHA256
2e713284123aa6cc17cd463c4adce8a34400fd05198ef7378895cf30f028349f
-
SHA512
9adcd2644c1f9e88413196aefcc83575f473d550ec9b286d9aa523536552052e95eb2649ddcab7e301a53b2e35713e64eaccd06ef96352a7aeb0a85cf644a5e7
-
SSDEEP
12288:cTIag1qRFK1C5akyN46BB0//Sg5ljuvEtLszaEuNIBkJsKazNXuEBHnwJy7YpsD:cTXbdakY46BCXrTac6aR1Jy+EBHELCD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e713284123aa6cc17cd463c4adce8a34400fd05198ef7378895cf30f028349f
Files
-
2e713284123aa6cc17cd463c4adce8a34400fd05198ef7378895cf30f028349f.exe windows:5 windows x86 arch:x86
4df39a39cb346ba4ac5260da2a82a821
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord545
kernel32
GetModuleHandleA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
MessageBoxW
Exports
Exports
Sections
.text Size: - Virtual size: 311KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svtext0 Size: - Virtual size: 587KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svtext1 Size: 652KB - Virtual size: 650KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ