0¨��y1��78�uT��� +3.�F���0�9L�o�����+���� H�/��zl�H��n!XC�ߌS^u���N���;%|^�H��>��D$���9�S,����.d�Q������\�(�Mx��s�XY�7:ã�_�%iԔ���,�u�P������ �k��PSֹ/�D��+��� K5?�1���b��s��̎`�MjcY#�Զ����3�;d��1X(�"��G���K�XM^榋sh��IK� C� ܸx{ܛ 9FH|�/w��*%�X�=�sJ�ʣ&(����)��V�esU w�����]�����.�E��~' �d6<�2ѾMR�����_�f��b��W辟�k�]�m\�7B�`m��{�Xj���R�C�v��pe�|�Ev2����r> H���k��S��,�H̬Y����r9'�G��z��X�=Cn����J���g��"�b黭�T �C���Ʃ�-U�,�]d�^�������a5 J[��[��(yŃrB4����+?���t:��"1�$�e�i��^�.�e�cN���<�KAD��Ϫ;�[����00p��n����R�!\����稑E�(֚���V2��9� �W��]����-�E\�+�S��L������z�JFj�f}�a:ݮ��� ��sf"X��1� <)U�y9�� "����{:B �}f��a�A��|�$v�����V����(fy ��ڇZ��/���.=�b;�*��Ug!�ۂ�bT��Y���1�\N>'�n����.����%��;�;�X�{�]�|{��:���Y�W���#,QT���h��͂>~����[�h`9�w51�����-:�N��Z�����<�Yy�AR�;Ђ�_���5*�R�� ��c?�����vͱ�kn|��Ɲk-�b�_��S}q3��~>��5<�ǖ����_���Fk>�z��2|0�I.�\�p֊�<��~�hLm��v�j�j�_Pǒ�7ω��)J;�&S ��w�����76n-�=���k����46h�L�8�D��|��]yl{�&*��h�Ƣ�z�P������G�l�#��y#�Ѳ�~B�7�Yg�����4d�3�24�A���N�;&�/�8���(�#�R���X��`�AX��.f�@?�-:�s㝳{U���l�(B��n���u|kP]߸E�`r����k$�Q@��Tߤd�9�ѹFH����W�+ �Ct�\���6��� w��i�tՆ0�?�>�tl�C*((������/Z�At�����n�cP%Em�~HV�ꂈ�Q��3����s�����c��AK�u(��\��*�3tT���:���^I��"�tj�r^��oMk�\(~��>�mH����D�a ����v �S�b�ϜC�f���a�m�'�U��c�?�䑤��c����,D��`��� bD�F�ב� g�א}W]�����E&���n�$T���P��Ӕ�n7�������b����ڔ�c�L�����_����2�T�ӫ*vU�ɤ��|�7y�M�V�����XL��$t�k1����c�@��Mulvm��VUa�>8��d�S��d IN��1��hR���pvx^��-�!������O�B��g�� �0R} �Z�y��!���kѐvm�1{2M�6�d�Z���ԕ�9�%��z�?"��;?�?%�M� 5����U�'���8VZ����s���:w�pn5�g e�8�rz���2�>��}��/)�Y #���Ej���Hm�<��tѵc�Za0Vg���'��է������4��澨ɜ�XU���o7c��#�LHK�Ψ��Z�\��/qY���q$ơW��qĵy^S���orck3\�����O��ZH��{,W�J ����bk�@�b���q�\��/ż{}* ��.l�`�L�w7�ډ������1�������M����pD��ݦ�!���<��'�������b��9��le�����/��I���V�]G'k�y�tB��<΄�jh�ܸ��<(-M �3kȊ�LQ�C��H�@ս��,���1=)���l������W73}�YW�Jבd��7 ��)�S[���Y��ˠ��B�-*}�]9`������?��l}�� u�!��5��!Џ$oޡ�v������.4o;�OIX���b�h���f�-�C�mB m�ed�p��2������冀Q��3,2�^녚�7��i�.Z��C�����@D�4������D�[�+��ܓ&Gd6�zs r�`I���nE���v{� �i@8�f���(��zW���L�-�Y��������{3N�T�Ge�P0 ����\&��*s�=nG��ٛ���\�����}m;��������� /r�,�N���3s�a���ED�_��u.�Ĕ�'����,e��;��G��zi`�}+%�k��?2݆����T# �u�88�≴XAc��\y��.^��!�9R�9�̈́��������9V�\�Vv���[�z���NԋAK`JV�2(M,^Fh@�Q4n,�6�('e�t�vk��f�~�_�8[r��*Cq�a��\t�F��Gf�Xl�l�&��3uk3��+��;u���`�rm ���~{8��� x:�%9�ˮ�k'���Z�F�����D����<�����3�F�U�Κ��*s1;�ɬ�'�ν��!��7������ݹͻ�t�����c�Z�s� 5H�af@Bg���Ֆ��_����8�'�%�˅g8��W���1h,u%��/�H\\�#Bf��}�uw�h��=��۷8:uo�����2m�.������:5�1U�t́�n�$I�|^{ s|�\{�&Rw�� ��WL���?@ f�A���ς=�q��&���KՎBB����41@��I�,��h�e���Wf��} s2�� �s��-=���9�aI}@tFHl�����hᅄ��g��s�K]���s���8u#�m��:\͟��YN=��`����ҭ�>QC��/�.L� �ADGm�&����&IY��iV�$>������+���.v!9�5D|�Ʉ�U���u! Ӹt{��M;kjm�k�x�@�N �ur#��E֟���z3u�$� ̦l���Wt�>��Ь[�C� ��j�oV�y.����̅��.���U�3w��������xW�-4�h�涝�4�����ݏǶ.#�%�3ʨ���.ũLq��3���E���Q�w5��w���H�A��1��䖭q"@TM`�؉H<��a��sO6c56��'��wh�I�/�'=��Ҽ�K���v�g�!%*u5^X'�яQ���0�\��1y�m:(oBU�����������V�����J���=%���>`R �g��6F��Dͻ�C!�p��������|�<�d�«�L�72`
Static task
static1
Behavioral task
behavioral1
Sample
fc0412dca9987c1f82d92243e157e0d54a33ef1904ab32696d5cf686ed774d34.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fc0412dca9987c1f82d92243e157e0d54a33ef1904ab32696d5cf686ed774d34.exe
Resource
win10-20240404-en
General
-
Target
fc0412dca9987c1f82d92243e157e0d54a33ef1904ab32696d5cf686ed774d34
-
Size
3.1MB
-
MD5
bed702f6ec7bcc2aca5d64308c60b615
-
SHA1
6def58890b2242c13beb45bee56cb7e95b27b660
-
SHA256
fc0412dca9987c1f82d92243e157e0d54a33ef1904ab32696d5cf686ed774d34
-
SHA512
a2dbfc165bc3e9478bc332bdd95131504accb1b29a17d63c19bfef3e2bd413c2caf91e7cb6f8fa5ed976fbb5cd093bbe9f03b48243e6b1dca5a64e4bef0e6eb8
-
SSDEEP
49152:rlu95iIi7dJ97f/d96kk2uMnVIKpIjFaHQ+Isj2Pg6a1+36ROSIaWM4b/eN/:46V7nd96h2uOIKOhcQ+IxfaWDM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc0412dca9987c1f82d92243e157e0d54a33ef1904ab32696d5cf686ed774d34
Files
-
fc0412dca9987c1f82d92243e157e0d54a33ef1904ab32696d5cf686ed774d34.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 586KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE