[?|��܄����@䮛3\uO��v�g���d��b�E`;��[��.����7[���"���E��'Ĝ�Xf�v^��<�ȵ�x�l*�ǻc�գ�g}��(4�)��:F�_��гFM�@h����+'г���a������?<�1�9�G�a�>�d1&�,�qf����!�^���p���y4̗|��i���V���@j���n,���'��ɲA�JZr��KM˃��l�����S�]AΡ�vd�r�3)�o�O�M�SQr�2�X-[7d��� cحE_G�ħ�-��1J5#�D�]��~ߝ�X�� 5-3��;�0p�r�+s�g3�~i�E���i�=��i uw"�/� ~T�Q����6'�2�չ�v&��_�ۙ���>i��5W����s����R��ͮ��|�`D��� ��D�ƢL��D˨л� :�������r�.R��<�I{;pu O�sd�dc��1'+M�����6�X��i0K]Ǒ�UՍ�ne�)]��6�%2;1:T��8,RB@D�H� ��q��m:� �\�1��w+g_� �Y���*`��8� ��*�?-������������n'���睹,[������N�Q%>��h���ە��:�2�2h�ɺ{�����X ՚�<�� %Z���#+��J�ˇ�>�MpH��q�����*2Q��ɦ7,I8H��:ݍ���ЇtQ�j����z�iȐ��s��!����JNQfj W)�u�:�ԩ����!Ƅ��8.8cm�j �Åծ, U6S �=� ��4V�� ��rR-0hl�G��߉��������k}��-P�Jϸ���(�6�� ��48Z*�%��>���<��i L �_�iz�T�=\�^FE��ÉI�������"]_M�mғ�zid�V�����Y{>����^��R�d�%;5��/�����ϯ��v�O��������ʼn����B��s�l/�h�/!]ǩu�VC�\�<��V(�n��Y1:\���Uӊ�+��6�\���ם�w�1����˾��_D���8���^��m�� ���>��@�-i��ǥQυ���/䩧:;�aax;��sY�����6� n��dz�(I�N}3�PZ�˿9�)�q%�+���Nn��Պ���E����C2���i(m�{��ү�{&�g�=Q��,��x'eR��}��g�7�뤊O�x29Y`���&�`���#��:'�-ʒբ�|â7ǟ�Ҩ�~�]u�Rx,EMV�K��G��#;ѓ�����I�wIM {)m,�����Z��c6<Z�H� Y��{��_�9�c]�Hn�aaژZ��N��$���@�{�G|��ǯ���8π���ѭr]/<cR�P�����/���17��5������b��}f��Z�U.px"\�J��a|��F2�"C0�ZT���� ,�����H���#ՙ�:y,� �%�ig�w͒�ШR~�xGK�;&��#�l���s��2�A����囐"�.������b���&�����S�]�Z����黭�k�����u�2�\l9=�)$B�cr�� �U�U�<)t�W�v���Ak H��N���z��-֘U�*�^�I���9N�^쒛8"b�6-?x\'�b�{g7��t-�Y�0���>zՇ����B����]2��t����!�(�9+ Zh�-��;��X�Q���"n��{��@˰d Z��FO@G��T���zu¡��I�M?��"���;� �ZsK4�/��G�QXk�*�1������w�.j��V�����d {���l$ �m�h�������&�,Ur:��0��2�h�����D1��&���ق���1N���ܨ�\p� ����U� 1��,�X ��Ȧ�<^��F��M2��Nw�) �Ͳ�G��9LX�"��@��V�����f$��E�����XZ_��}P�"jSF�������Њ�d+ד@�~�q��* .Lx����m������E��6y@cW��ku�}�K��y�@f5�l�[Jv�TY�'�Ey��q�F�����C7홚��C0���*�sÒ�8�%zQڱ$V��Q���o���!ǹ��Ɖ��d�j���MeA�ܕJiY��7�\��I@e�-kqfL�%����+���XX��}��i�����/)��qm�џ�K�{����u�� q~2�Y\6��b )ߦbo���x�E{���,�$@A�,:�M6�S��&�Fm��oI?��NR;h�Ns�2zqlt,C������ gTR5A{P��g�*c���Ʀ��IM5���s�A�{De�>����̝�٢3N͗�?k>"�>c��a"�8�G���K-~i�<��_��\5���,Y����+JHIx��8�n�g�9[�BS]y�-��{|&���?�lH�x5�D��������i�4��V٦��K���e]�.��u<@���w}��<�m"׀���I�k�\�zD�i~���<C��AR-'��!Ć�@0�k]�a��]�mW�;NV�2�k�6g��2�&Nڬ#����H���D ���?��J��^9HΨ����*x�{����U�N���e%�����ǺAb��]Gd�j-jp����l��b��u5\6��6�����i�����?8hk�!;{����t�,Ql���.1@�b�)p�)4�U�IP�ϥh�k:��[9����n�WX=U���.���\VF�����H��E����,�c�e5,dZ�׃�Wr�����s�,�E�cK��� )�R��cK4��dcяG_;ڴy-�>v�h�pQ&'�"�p5�sk��}�އ�ѓ�(t۾T����C�vC��3�ˉ��J���V��n��_mQ ,�� tY��R�^MK��ĺI����=4ǰ��j���⎳����e�ot1tN�~Mqf{���������3R�b@K�U\���hʂ���(p�_L��"�>f �X��VANdF`�Y�Փ�ݟ7�/�͐�O�v��?ՒaJ)x��Ax֡��2[��l@�]`"�ӑHC��/���������Y��@�99���G�����*�+I��u�� �ǰ��ǟ��0���!�vu02��3%]�fJ��'�����L0���`��9;_��>/��7�&���8Q���D-[`�]�1L��@_�%��O�~I�Z�]��hL��p�'�ܷܫ��0��Qb�D;%pg�D-�Aָ�����E�� ���"��H�1~�2��i�x�w��P��Ό@-�)�0Z�����ua��w0'+1a���j7 $ǃ������{8�a���H�"d5����V�)Vv�������Cdҳ�X�. �� ;��G c��k'���b+��?�Mf��;����a>���\�]��E�gI���DZij��B%�o2 |~Te�ۏeYʶ�����],���uG��=b�����a�n7>@�f�/���,XZ�,�A�R?�M�T]Ēe�|��|����yɅe��4s�� �ݱ� �&D���Js�����PJ7�a�V�������xH��BU7�6陒�B�����F��o�jT���Kl{\�s�F���]�1|�<��3xd&�`[��;G�;gACkz�D9lMI��4�|�@�G�H�x�E�`�;�wE`��/� UZ݈RO�)'�.���6ub��_�������0�O�����M��c�QJ�Y����+b�N&-v�`�}�������K"�M����;�sƚ�g��*oc@@������#��,�b��JRtN�}/TL6� ����g �e�����Q�
Static task
static1
Behavioral task
behavioral1
Sample
c3c4075074cece43a9571a3a595b0a22346af7b739c0a4c7db453be92e8dc9ad.exe
Resource
win7-20240221-en
General
-
Target
c3c4075074cece43a9571a3a595b0a22346af7b739c0a4c7db453be92e8dc9ad
-
Size
3.0MB
-
MD5
4b3fc548d8a56bc5ba9b915b1c712a71
-
SHA1
5a311516237b182f7bb56a03df30a054ed0f9836
-
SHA256
c3c4075074cece43a9571a3a595b0a22346af7b739c0a4c7db453be92e8dc9ad
-
SHA512
93812f79d6f7bb9f23fce1c6c2a231d6d51b256012e5758498e819c4f4bbaf8806ef2f8181ec586d6d4683ba7a6e497ebc83279fd6593747eccb7adae4b9d9fa
-
SSDEEP
49152:7zF/OPVlAVPDBnXMPPkujPk0wN9+vwCEkDJF1Rv79R+ryCIhXWb7VfkQ5r:7zF2PPmB8PPXUooBkn1RvhR3hXu5Mq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c3c4075074cece43a9571a3a595b0a22346af7b739c0a4c7db453be92e8dc9ad
Files
-
c3c4075074cece43a9571a3a595b0a22346af7b739c0a4c7db453be92e8dc9ad.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 586KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE