flG�V?��͡nQLܞ�5����W6(�A�>� ��ݪ��X�X��VL<����S|�?�)�Na�����4�J��/�O\��We{g�OHv�|���ځ�Eac�~���sa鹏�X"R}cd�ͣ��mnd�Z�y��G�@�ȿ��(�:�u��|C���>xs�9�q�X��ފ ����ד�c:�Í�č������R˃����V�������� �����Frz|�X�+cD;U���o'�� �UI�p��|Bw6N����;�/�l��Y��}R"ks�(�E�q-�I��O��x�T.�ȭ�7�c^�� ��@��)���ҹ' ى5��4>����<,�����+���=rX�M�J20���u�c��W�OKW)�*�?aX\ ����q�_�l�? ���o�6������k�2S�������%��Rѻ��A/�bI�^'�&J�x:���+����_Dg����sWB��!)�P�,E���.X��?uQh�`��/6W��L�1�����8��"齧UM��ư��Yi��<dV3`Mڧk��Z�f����>#j�.������6������DLm�t��^��ca���e(��)�y|��Do�Y�Ἥ�7��L�DEQ\�[�������W��bitO���NS��Z<)1�a[�6C���˜�=d\\��:�w&4]�$p�t���i��)��8y��?��X��Ph����i�N9�u�./-�,0L�=�Ձj��]�� Φ���k�||����ca�/GT=��co�on-��w�P��#�HkQJ%��^��]r��k�)�1nʄd"���v]d�� �tۇ����R�Y����b��)QUA5"� BT�̆� �ӎ�S��X�@)��GL�`��A��z%���ٸ��#it'�E����g��$c��}�?��3K.���p=���{A["/���A�,<�����4���_1i_X��bz�e���G &��f�+N% {ƺ�m�Ƥ�@��,��W@�ܔ�l`�H⍰c�����=ӱ�4S�G�3��uR,)ᦗ��U�g��G�S.�eT���HKm쿡�o����c���[��{> ��H p��Xb6�"�Љk�R���KX�q^�|ddhW��X�Ro�D��Sf�L�� t].�����<�c����c�%, �<�s�h�:�d�}���הz�mc��q ��&T f��� �#Pg����3��&�Ibj�h�jM�ZA,q��/U����'���X�d<��6�{���[�Iޱ���%7��*����g����eJ���B6j�)8�*�(�c[͝[���T ��>��{��~ꙗc�1ϖu��݈���~W�!�秸����Kx/\��N��,�Cd��a�@�K:I��'G�ǭ���[Ⱦ$�F��-G'��AͭS|�}\z:��E���^���ɉ�Y�e�@Qbך�3���-㎻C����f��BBE�� :lK�y�����H&%�Y���@��!w���3�)+!#-U,Y�pe��$�-����h���h"G����b�����+Irm1jQ���簠�?�4�%�3��?��+� _���M�2H�2�P�">����'!PxoXK�s�=j_,����a���J���0V �,s�<`O\�g��ۦ�' }{��c6��}.�^���mT` l7Ee�.a�9�!�}�g����������\" ���W4R.\m�O�=�y�@��IL�p>��.��HZՖIe� �&��+5�� �x��9ͮ���8:՟�&gD�����L��a�B�E_���$�1Ar˞ǽ������BN�g!9��ڍ�����XP��O�����1Ǣ�����j�Gf ���2�[<?Ϧn;����n�q�3)�lw���A���^?��W��{I�-� .P�Ҏ0�7�!�Z[��l"S��%�4�:XjG�pS� ���PXq}��K�GaM��r �����Eu$���>D�o�Ǣ�PpsۡjצE���:%��T����V:q��b-��QT�����@Ϫf2���b��J�5v�E��.�}Y����B�S,�� e>\ݵV[ ¦�3���0g��,�Cp��^��sU<� �$�3ڔ�� �<Fԣ3k�l羜gvh���E����Obf��lE�T��@fR t^~!U/.����E\�7�F7|��ڶ�(�9� X�?vʀ��g|wZN[�z2)���2�[iA��?�p^����j(�"1v��y�-Jyj[9xi=Cw����{��ۣЫ��&Te�²����a �N>��b:WX���� �P):x7�f���G��X��$�����'�0���k����p����ߦ�.7-�xe��ۿ�;��]��[���>��_��N�k��1�K�� �'&鳃����`m�%Y�%�d�3�0�d�uf��6�{��Ļ�+�3� ��рk���tH��(3G t(��l8@- >_����pϳqj�m�6�.C:_��e��g��y9 2o�Qr %�?��f~p��}:|���p�T�,��.�o����X��n����gJ�=�_z��࿀�� Pf��#p^�,�dp���̚�;����*a���d���m � �T�D�%>��8���,��37�- 4�Aw�> K���h«�0+�"RۿO��-�����(�5/i����5��8�1L�������V�[�9�B��7PL.e����5�ź�á*,�����Q�}���+M3�)�i�$?r1�����ߚ�9� ��7��N�龠^��u��dzز-�N�;�ʼnJq� �t�'�V��W�mܾs�z�J!��05��!��'�������C�np�� �T�� ^�|�H8'�s+�O�^�]�F���G���՛���t���,��W�G�C����yT����.�Zw�����'ƣ���$����- �g�|n��]='�̀-?�왹*�S�gΞ��a���1=��������F�.�-����)�8����.���F�4\�#�nIt����+���������Ǥ�� ��E����=��y�WR��D;a`}P�*L�ѧ&�
Static task
static1
Behavioral task
behavioral1
Sample
succ2Col_2.exe
Resource
win7-20231129-en
General
-
Target
succ2Col_2.exe
-
Size
3.3MB
-
MD5
ece22d2c8d0c4d774e60a4edd789081e
-
SHA1
143b6baad943ec801550b9c78a8b8474e13238e6
-
SHA256
f7004b351e5ba6eb191f914af7d2d0a552ec8e71c16622a519460cbe4268c745
-
SHA512
441fdc88ef8b27e9b847709d766170728f84e9c0f5636655aaafa5c7fbe2e4947967e2dbed912237894cbacfac93cf1e371fd849f82bd4a601ba10d6595742ce
-
SSDEEP
49152:oR68sIHu8e3JShsbpiNrUYzX/qgpkbdM+S9TagKS4zPm8ErLAQ:+68sF8ekhKAZUqvzpoM+S9Tagsr/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource succ2Col_2.exe
Files
-
succ2Col_2.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 215KB - Virtual size: 448KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 272KB - Virtual size: 11.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.7MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE