��r�~�~�0dw��as�����DFC�xB�j=�F�2w���)�j����72' p� ��!d��l`�Ù��pp)#��u#�{y��4g�� nq��v�aT)��ݴ�_S��Ȏ�ThLQ����5�MX O�@;K~j�g���H��]�Y!�{�؊���F�����Lh��T������|�8E�5$�c�\-�F�B����H�륔��xdS�'Ө�O-ze�/C�V�^��6R�Թ���+ώ� a�����;�[/�q�;d_0;��w�Bɾ�*�^�B7��rn���Q����+ک�)g������y�O_D5k62��G��0Bة����̶V%ShZ�U�k��)���M|�۠�T��d���~%&�T���V��nE�� �"\��)�gI�i������[� ��@��q5wI�϶��T�uȇ2�uϡ����K+\tՠ �b6@v��w���S����y�����b�L��l7 �j�3�1Z ����+���'����Vc,��r7>b=ӤɁ���9�a �n�j�������,6��1��dq������f^y�i�]��S 8�_K.�����]J�g�_g@j^ �\�Y��i�E���4���߈M�����+f���q�R�7��Μ?G��Uu�C���ly$�n/�9�ED�p�Q�P���+Ͻ��/��X��"��BE��3��@r��/���D�@�4B�Wc �%>f������b���ެC��?K}R)zFпb9���k�[9�i���E\x� <���ԍ� i�Uƫ��N��Z�%~z�J����%����\��Ж��j�5�^nL�:��:��|�,�R�#�R�eC�M�� gA�;�����&�P[����G.zYp��UL"m �խ|y�W���O����jẐ��^�����!o��\����P;��k�sǨ���V�3��j��ML飼������͠� � �z�U�5�iXR����o�@P�r��"֏U?��s�v:+�,=~�� ��ᆆxX]�bĸ���6!H<~�\���D�%�fߖ���U1'�nV�b80� �qG]���7�i|�O�&dfpd�SJe ���[�,�>|�Q��s�J𝍖<ޛ�BQ?�e�|A^dK.�BSL�7�"c��n�$'�4���|��xA���s�5):ld?��֜R�+�����'Jҵ3L�@�T��Qn��+��{@�|&��n���:ۥ���:ޢ��pĿq���|`��*�37�O=�݃�o��LH�$� r���L�Y���#��Ʈ�B�?M��3Ѳ�L/�lJ��9x��Y���21�M���`�%��;2���y:*�͕��sIU(y���"��E���q�d���|�T�!�xdv�\�B<��I������W9>�����G��[�_��'�v�'m+S>�9p�;�ѕ9h��/������kI̾�94w�Af��Ѧ{o|,���"�2��t�ﭚ��cK�u�E�c�����Ú�XzIf�kx����ċ�9h������4Gm�k1�"av��2���aa�6���� ��(� N��-��{�4����r@SnN��#�SN�"0�˞Vް���J� ��$��'��3R�SjD��H��IJu���A@���` �ӬK�ټE��Us�[Iy�+�ȷp��>*�7�?�����Ơ{;��w,I�V��{*�����f S_^��0������U� ��}���L�z�u��M�5h�x�L���XƊWL��I�='�L]:�=��EG?I���ˇ`w�h�ȼ"�T�����o���"$�����k��F} �ܘ�M��_̎Puȩ��Ň��)��TP(�?���zT�l0�?����������s�r;8�-���z`4f Pޱ�i�Ҥ~��EY����χ�y'�`���N[�N��](���YQ�m ��n�Ք֟����:�\��tA�(�*��������p��r�ia� t������(��*�, ���"��T�&��F��R�tK?� �8\[8<סS��ܛ�<������G���&G���m�GK��n�ѐ�`�:��+�VrAdd�`�-��b9����6��b��1 �?�:e�����y�r`��#��YY������ա�gR���1�IG9�p%wV%o�m�1�4�S?�d�/� j>% ��C!�J.�8]���\3��:z�/Enr�=ല*��1���&�����/��\Q�z��e`<�O6������e�,�,��Ń �_�C���h��b�,������Ͼz�c���d��&9^�Ot#����VİB ��K��{[𢠀~�3NG�Os��݁Z����$��.\�����w`T.F ��ymd��>Ĭ�!S�1��ZBz(�G?O��F��e�mHY�י�r��#!�������Qj5�,�T�\���N��ce��If(W���byZa�n��MY��i�#��|�/<|�x.��`]�'f�U�N�zBiCSp��~K����R�x����T�/��H\��!���{��gќ����ˈ�`_[.5��dy�Dв`����8\��}B�������sKV�`�^�|�%)lv�{�{���e�p┲� ��"v���܍�W�}5b0%�"����\z� ��܃�(�������;��q�%�)� >@��0�oq��Az�d?� K��t1|e��E����J7@�ү�lN r��r�r^TԦV�+�=�w��ڵ����R���8>!��^WE\���(c=@s�2g50�:������(���$Ū�����'] �cVPx��y���/y?ר��t-����Cl�H��7<N���S�Z����>�Y���cK���u�]Q�wS:��#� ���q3CF�Y���l���qH�A'I�t��i�<oȟ a�5#���Sy�U�cܮJw]��,6)�A��XӐ���e�;��9� �2P@N+�m�{��w�{k%������M;���������VߖY�ʦ1f b�H*���5 ޫ�2�it��&�+P���F�Cgqq�M4�uq�wpg�A�0>�-�d{�+�G�%����_~7g�����xZ�����k� -Kj
Static task
static1
Behavioral task
behavioral1
Sample
5495f04f5745f1f375103be4634f3b4d8fa78ce7b1941cd75d78b79a105c7a09.exe
Resource
win7-20240220-en
General
-
Target
5495f04f5745f1f375103be4634f3b4d8fa78ce7b1941cd75d78b79a105c7a09
-
Size
3.0MB
-
MD5
6a08322fba9a09ca6a830a46aedaade4
-
SHA1
eca03ba12b6a10faf46bc2c3d4650fea3439f143
-
SHA256
5495f04f5745f1f375103be4634f3b4d8fa78ce7b1941cd75d78b79a105c7a09
-
SHA512
de3e916a59492b60ff910e3e9a2a40924aa0559bc686813a207d64544e5a118f86c46c9fccebe4e2c9130c5978e21a77543c2baf51625a9f881ae413e97a6739
-
SSDEEP
98304:J/SwE8yA/fU971xTz/ZxkfShoFUbDine:xSCyA/A71x3fAaie
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5495f04f5745f1f375103be4634f3b4d8fa78ce7b1941cd75d78b79a105c7a09
Files
-
5495f04f5745f1f375103be4634f3b4d8fa78ce7b1941cd75d78b79a105c7a09.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE