<��D}�>��j���H"=�l�����4����U4\�ee8��EL[v������ٙ�>*l�n,�=!�?��[mC;�d&���q�79!�(lK ��(��̄��:���Q^��Q���+�,���QQ([�?���mĊ3Y�� K �S�������_J����� ����eh�� �Uq�Ghȗ�Ŋ�ʄ�B�4�e�S���[��_��i߁��Ȇ;��=�wFP�A㩘 �.6bC�+Ѝ���u�ڵ�����h�խ��]0u��Nܠ��5< �����J`c���k������/��w�̓�z��1�,�L��;G��@*���m�J)�{CQ"�� ��1'`tl�r9��M`� Ɓ�!�}8����{ �R� �}`Ua�G)�X��T��Xv�˼�Ε8qU����C�U�v�ѡ�_UaU���qO+������` ��!:���l���6�C2�\�~��`�&lO��?�J������NmQBTZTW$���@��c�j<�q�6K���$z���_�K��ҏ5�_��־�BT��t���Sͣ�����_2��C���&�����e��ۻ���?Ygf�"(�~��1�t�o��ix���b��fC!tϻ�j�ѩ������@|�tt�U�'�l{��~�kgD�'�Mιi���Ɖ��3�hIă_q����X�=�hO��.=���I/T�� r}%ij��#��8��}��k�.���^���[R��Q�%��وP��iDj�z0ُG�����/��7@"/L��v N�a^���O���#[��y����I>�5F�,]{"p���3����`�&�/��yo�6�Di���H��V���:,�� k���Yg��u9�iPj�t��[)NZXbڰ ��4j�Q1%�UD��v��c����3��t+�G��� �&� ��Ѯ!;����.Y8R��B�?���]��D֟������$�f�bp�Lm�1e�0ܨ�K���:�ԏ�W���D�i�揯����@���z��<��wć���(�e;XK`��EH�9]5q�ׄgLOY(㞋���d2����|���}�d�7E��d<8]j����E,9�d��_�R�� ���FA�*r�k�F��j�IQ��r�I�8C��q8]���3��������?�U.%8�� �T2�Jhꜘm��E�1-r�8AJ) �/:�&�f�w�{0��M|�����l����Nd��vT������ �4g6��N�u9�>.�]���W33ی!���x��L�S���}U�z,��cZ�#&�>���fp�Z/��t�|mO�i�V��m��9|��e4J�s��,v�6m���c���*�zS?a�L���� Q�3(&!�ˠ��}��㊱�g���m��������nG5�� K}wp5�y�R�RJ��0�J��ir����l��ZP��v�56����ƥT'Jr<G��o�n��G}�Y:�� �{y�oz���k&��cԥb��v]��yJ�R��g�n������lG��Y�F��JK��f�em��E" z�x�� WQ}"N�ʨw9~�f����d�d��=�m�f/j�%�������8�-��^&�sQx5{��#<��;���O��PF�aJ繠��e���?df�3U�<^�t��f;�V�(ͥ1��~��1���%������������I�Ӧ��A��zWĎ7\'�k~~��F=��+a]�tݧGO�F}�˺�#���O��5�.��_+��Ć��� �3V.�ǜqs���y�o��8,G\���gӯߒ�NVY���ׂ�b''��D�^Mߕf�Ǡq�xK�T�9�%Sj�ل>��{����˥������t㯷�c�w�~ы`�%4O=���V�ꯇT�����G}�c���l��x�J�����2����'bw�Z�ǻ��Bb�ҡ}��W! �V������z�}�&�-���@"^M\�H�BdVl(�U'I�x� �}�)��cH��I{t�ܩ�R��v�m�L������ )_�M��@W<��͠g�9х��[���L�6�^!��W���:� �IӬ(c���+�('���#��G�A�6��,�rD�I���Ӻ ���b�`�04(����0��hi��J�jȄ^����;����w����`�lJ�LƞkR�:8�����#�F!�y��L��=o��J͑�;�h��@հ��9p�<&��I�?������A��|�uZS��'�6̌��|��(36j������<�{��G�b�!���Q?'���n��)C�a�&�S�2�V�V�}��[k��XX�Oؒ�}��lJ���� w>�cfS�z� �Q�y�̘�T�z��{�%v� �6{G;"���̦���x&���ư|��>EԿ�v`���A�=��M��i�Z�i� ����{k������}���8�4�&E�ݿ�K.�;����I��q�Xi��b�h�۷��� ��Qxt��"D��(V�K��,�r*c":^����\�V�����7csy-�,~ �p��YLI�L��(G6��A�t�b撕�_��=3v̾�Ae��H+h*ʀ=G�jK���z���[]��#�ōp���F�0۷<�!:�7ՃO�����b��̕���|�,� apM�;�� �AD��v�p�j��%}��kS�S+��\�^�skȒL��~�r�S����n4�Y��ȶ��e��S��iO�<|��α�����`��PϿu��~��a�L�� ~������x����QW�;�+��zǞ"(�$"�� �+�'��kA��eD�/h|B�ק�֝߸f7�7��3�(��O�g,G({�LM6Zg ߄��KБ( u�6d�ƫ�U��ڈV��!zr�c�^ST��YK���7���dM��-�ȕ�E����f��s��@/�_6���<�7�l�N� P;�P՛�6b��w|V��;{UP�_�oF�vQ��Mf��U%Fe(�M��>�~eO�m3���:��yX-h���_�;.���B2 �9�h�2(�'L���TC9w����wz�D�?U��!�{�j�>4��RvH�E�H;����ς���*�0��h*�:�A�Z���t�]�Or��Rܥ�b��y@�d�X���[�U27^[��ORԦ��`Z14�J($n��m���源����;4�s��k+��ɑ|� �&�0�����"0���L��ME�#�i��ޝ� 3F�����}[��d�z�<ߕ0V��֏���ӜӠ�=>L�� 7�偊xIP�O]��y����\�`r���m�vcc�1Q�h��,/:��p�#+Q�T��C_/�M|?���7�l���6�cz.������}ygAz��O�GZ��E�V�V�,��B�#c�ָ���B��.:�UE�ו��� ͌~�X���5.k����#�\�;C��7�ڑEC�T��F��FI�ݮU�*��)A��ge��zD�,�:�a�w��^��Rq���y�1f7(��F�=N��mj��u�& JS��fE;�4I8��d*��+G��h���삑?
Static task
static1
Behavioral task
behavioral1
Sample
5224059ba745da23fb96e60974484f4f2fd1923f3cd046ac307ad0230d4fc13d.exe
Resource
win7-20240221-en
General
-
Target
5224059ba745da23fb96e60974484f4f2fd1923f3cd046ac307ad0230d4fc13d
-
Size
3.0MB
-
MD5
46ec09b654d92dd44e74561edbe13fa6
-
SHA1
57e16c861b6f461d6fb69517edae022d1e57afed
-
SHA256
5224059ba745da23fb96e60974484f4f2fd1923f3cd046ac307ad0230d4fc13d
-
SHA512
bb1248ed7388b6cc011b4cd64cb879bb995bd864aac431478fd6e6428c640a2e136f8ef8d99d4bfdbead2e2b49e5576269a5182b6f31592a7d9073795ad80074
-
SSDEEP
49152:7zlCrfdPPReLJqRFREWU4xbQYumD7E/Tz9E+ks3SoPk/9m6KvYlBqGES50TLQu/:Plc1PP8VWE++WDA//SHs3SoPtYl+Sa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5224059ba745da23fb96e60974484f4f2fd1923f3cd046ac307ad0230d4fc13d
Files
-
5224059ba745da23fb96e60974484f4f2fd1923f3cd046ac307ad0230d4fc13d.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE