�?�x�N�U�Z��6�=�!�R'T�c0G��s1��G�Ek'Sb̧�I�/0�E�s:�m{��>�b�z�f@�O� @;Q���`W��<V8ꅯF���������2`gq�Ǟ̟N�qW؝�0���t�l�N��߉X�����'$�S�*2��1�%����a<�e=ʯ�4�kjS�����m:E�J�������:n�{�?2� ��sAZN&��|N� �o��(�~�j5ٔ�2b���4{m�Ϋ`�ijUW�98��%�6�Ƨ�U��`�-��_�t�(���c��0s>��'W��ئ�p���j��`��^^����r��H�Y���Գa�7�C����xO�A&��M�^�Ќ�kn���I �z'��g�i����`GEN�_�[��)���؞?{Z��4tW�b�H�'�2���;��,�`x��<$�q�pCoM�*4Ζ���n_���2$�ϷrZ�O�i�Y��n�1�Қ��Z�~���P��*��xTI�"t��k��Z�f��>%�����P0��]8��돉z8ZFNwD��Ո]UU��\�e�����9yɫb�:�U��7����b3�>� ��gR_>��C�^�(�t�� K���a��SI����A�DZ��%k~�y�F�`��B��TZI[��ϱ�����} �u��S����D��Lk��/�*Q��B��t���?=A��� $�eU��@���e��S/�^bmZ�tGK��LƱɗ���!Q��y)��#ʬ G�ɬ&2����c|>rF:�f��w�M`0ݕ�'�T�U�RR6u�`=G�U,���+�'��L�9]���dfRdj0+�xaͶ�J����%EGxxr6�z��C]Ϣ�?4���V�.z���2�>�k��,a�Oc�(%�m�Q�Ae���Y����-��ɩ[������z�;P��K�j��v��aBs�`])ǟ2�"�D&e�z)����:� �^@�&��J���bq�l�Nu�W,2��>^s���k7�ub�uL���� ��k���F���K����T��=�]�Җ.�|}��r:5 9�.Ԗ��VU�&~L?�d�SR�%�g�5���"|��n�KK��v��%��A�^�Z3�"�����i��ӆ��x{O��Ţt�H�7�I]AG�Տ����o���j� ?q�gh �Pi���7��';l��_>q�5^n!KH�ČS�-g����y���[���/0�����~���j2˚�e��8���f���OF�%���G��o��zBcq#�]��dkm�됆�Xo=7�c��9��/���M�Y�5c<�O�V2 o04ke0¢E������j����.�[uݥ.���pJz y1D�z�?�ll�DG[����D�TNj���xx�6օ���8��m�T�IKo���o���mP�H�V �:`!�= �H&�|@+j��'riH�nK���h���JJqA9���[�[oD�˜иcf���r�·p�y9A��=��������u�N��&�5x��+���t=� ����Y~��w�"!�$^}����Tp���Z��t�|,���7�~U��A)I�j�K�8aNi���Ρ�ԧ��TK�]�f��H��˜�>\���8�g��t�kG�E��Z ����_7��i����G�C䥩���Ncf<���#f����e}�h�Z.]4�^�s��|#��}{�Co�&'6 �/{��E�#�!~��:i���(0~�ۺ���v>�������Yz�Z(�>Ѽkp�t��(��6�����܉�l�\�s�J|o|���"���R���+�d�T��% �D���%��&��Mv,��{��iR 7�?1��S-#���}��;�N&qZ��.�27i�cp�<=�Sw�c�4�fCO��ܸ��u+�) ������MM$ ���{к ����M��IN�����O�V={<g����RO����!��ϝ�Q��/��ו��Ƞ� ;ࠦw�7���9�����P��k8�)skha=�zS!�_ ٣��(���m&R���ۍ� �Ef������5����i>�ɈWxp� �$-xHBO��75�R@-54�����I�I�2 \{$ �~��C��)�з��� w ��r!UE��P�����I�5�B������]�.E��$ş��,�S�|W�3�쒃�OL��qMk<n� �/E?�#y;w=�7Ξ�RU�.i�Q�塓��[�g�yDh=���Y��HX82�k�U�<�ЧG���x5f�:��ɬ�{������ˠp=ZTZYp~9��<�`���x)�R5x���s2�J]�x��E2Y��Ӈ��Bi�n���>&�I'9ח��֬m���B��;�d���;� e�m�O\,�ֱ�PЧWE)���6i`X�c���٧�s2�_�e��ս�����x�!`Q�gH�`r��3���FyK�NX���1]8��M�-�w������Ur���Wo��K��ܒ���Hr���� �ڱ_ ov���l�(���n����w�4pوM$�K�r�$]3u����+%2@����`���O'��Y����;l�&|�o��n�2����+�LS<53ݦ��&��Y���J�3���y�6�E G�� ���y�vKt�T';�͋ ۥĔ�VfZ�B�� ��D�����3�G�C��ij�~+Hh*�`B��f���ٸD��{ޖ��qZ!�D@�9g���P��[�BP24~k*�h. 1F����%1�Ʊ#�붖 M-ʠ�܀_��HW��t���r�D�P&�l&q�`jkp���{������.�]+5��SO���D�h��<����K|��j���T8�8����s���M��j{v'��Q����8�hv@*$�ocu�(T���U9d�����B�.�5�䷢Y�30� B�4 ofcX&Ԕ��!�J�V+�j���Fd�_;>f���=ɯVz�cs��J����]:)�aa��ݺӃ{���"XDk���$�^�3�£�CƐ��N�ng���<5�sM�u+b:�z���V���0F]˩�;#������Q���rN~��,*������o ��ӌ{ ��r�����o�D͵�֬<`� $���6����N�� ?�T���+�O�����P�k�2�!Zi�^!R�S`���Zq&L������U�Y�k�NT��*x���k)q$8�������á�8 j�����K~yKc��*لoʻ�����¾���5٫�!���U)j��|I"����|߄1K���u-���~��1�'���8�������a�v���0-g ȱ�e��}��s8�ɻ�$�w�9�&��1�Ă��!������ L=.;_:��,�۷14X7={��N4io�.�#(��h����/P@��KM�H}\���6J�Nx�^D9|.���x�A ���Է��s�"hxN�ѣ��N���"�w�D���R���J"�C�|R6�����Y�l�i��z���Ə����đ!C��f�2�=�U�Xj�a?����#c�y��ۏ� (�9���|�=��˽�Ǜ�Aea����U��aaza�(z£ r[ʔ� 6?/�G���h�>e���m���M���L�$Q1l��ܕ��+b`�CoD�������̝;"\�(g�i�������a�H�� /+$�D��Y����)�7c~�%��1#����%�
Static task
static1
Behavioral task
behavioral1
Sample
526b2bf9f7bae66ba1d5521f5cc120a8b39f1bce008f6e45c722f70f15e9b6f7.exe
Resource
win7-20240221-en
General
-
Target
526b2bf9f7bae66ba1d5521f5cc120a8b39f1bce008f6e45c722f70f15e9b6f7
-
Size
3.0MB
-
MD5
d8bc2710920abd1abc20f9b1200fafbc
-
SHA1
acefedeca5ccc1ec77339c67ddfb9a9a6f22223e
-
SHA256
526b2bf9f7bae66ba1d5521f5cc120a8b39f1bce008f6e45c722f70f15e9b6f7
-
SHA512
87e30644a013a8e2758b7a3995f489ef20dc0d3a12ee11b8de3d8883914aa0aadcbd70771832a6a024f255b47d7d2077298562562b48355cd543cb85e50185df
-
SSDEEP
98304:oz0UK8DrrsgYwgwdp5hj1gGUSj5vFnfn:o4R8/oqpbp845vFn/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 526b2bf9f7bae66ba1d5521f5cc120a8b39f1bce008f6e45c722f70f15e9b6f7
Files
-
526b2bf9f7bae66ba1d5521f5cc120a8b39f1bce008f6e45c722f70f15e9b6f7.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE