b|��g0��Vn ��W�4��������okL� ψ�P��BM��H {���4�� ��֙��XΈ��.V�FoۦLd+���*Nx�DE��n�<1m^���@����z@o�Z1����ǿ^9�Y�FZ �st�B�yqZ��0!ؓ�iA�@��X<��<_�7�|W�W=so�b�_�ځ�M˅Ak�Y���f�� D4�u1����8Ur���h�y�����n$a � ]���2�ډ�����%����T��'�����ZF$���m�g�W:� 0\xjO�_����W�֎)�p;X���Z�+tNꏷ��I�"��#���^��h̷�#�#hœ!��� de���� ��[���w�aJ �`X1i��>�k���)�֑��RayO_��5{]���qcQ��d�?��"��Z߃�K~xvIR]��XH7$��m�x���d�2MP��z=�bk�����e�zR 7Ð���(�-D�%�|a�Q�ù�?�~ ;�����^�=��Lu�>*ۡaW�� +������J)�������Ni8ez4� 90��W� �6��T)�g�@�o]����G. �PW��ZK?�&���&��Z�!���nϺ��/�w��'�a(;� �Ic��P�@.$v�;B*��-��/O���M��-�F8I���_�b��}�fW�nX]���^kĿ��ʉT�C���9Ce,��e��bӄ�4��� gZ{�s�;����@�G���؉�}�ȠUJX `�&o��ۊn�dpc��f�������/�����HM�(��|O�ñ�J�$NX��)��'�)oV7 ~������}F-��,�Y7(�����))���9O��:����,�{�X���K������u���ŜK���N!�wi?��K)�El���nB�Nńv���A��uڰ8!�s�7v��y7\�=�qO$���h�d�dXJ:��9K\�j��ɴ��3��ܶ2p���l�V�E�� ��?��)������*Vj�%8���\�4��� ��S�Y8l�1�� �Ԧ�*k�� W��7���>n�F��P4gO@�F$i�UX��W_��L9�{5�x&`�jx��d&� �������P��h�߷������\��r�������VHg�l�I�JU�'�. ��������Wj���(�o�H�VCU�� ���Q7��h�n����l��a��:��Wx�=�ـ�E��yLZH}U�.Z}|Re���#�l���>�N����]�-F���T��.�`�{g�Æ]�<GX�������<�LF�0�Jir����y 7n�� ijf��t�S���tb.-�v>�5�G����n=� gf͋D��kN��@"ߕK��=,O�S��HM�jn�Sa+�̳̖z����\P�v�{+q���Q��iK�9������#paQ��2�Q�e���{�.��I��#؝9�7�Gܦ� 8�l��ˏ�t�T�[��P���9�UaV��س�_8�1$ϒ���k�/���ol�� �=!�'z�F�G�b���mDR*�c�����t���s������~E�⦔wG�Rܒ�F�P0��ܤdM� �\e�_P'_I�J(��?�d�T=:�"����1%n�1b�( y���ZF|B�����)��gz���3с��wI$B���!͇�$s ���%b����)Q��d�"+�S��(@K��4o��A����$r��<M�yE�ltlE�Kҹ8ǻi��^����l�_��� -_<����Q|�U�k���lV�+�2�lq�x����{y<���*�Q����8�����Jq��vr�n�ښ��fݐ��nn��j9y��<����]X<չ�2m��W�3m�\�R��Fm �` ����!�ydz�����#<����vK�m~��5�]���ЛNT���ni����M���:�{?=���'��XXl��o[��J�K)��i��^�J�,`S%��8���A�~�hG�zW�NpV{/rM��wx����q�)�5O$��B�2���w]rԪ�w� awPb��E�0�k� ��74sC�uK�t䉜�,?>$�)�����X��6�0�FyL�?�mR��P��ַ����/.�7����B�տ*"E��.ɜ=��R��U*}j�`�/D95���]��z�ϕ���+��Z� ��@Tx)����k�e�o[ג����.�n���h��9A���62�Ur�-)���ڳ�4>�=�w~��)�D�M�g�������'x��3�H�~�9I� �χ<���8��F��2�٩�(pLS(l��V”�Wc��v��L���һ"�>�.���r�V�f3cDb�7��l(�a�Т�Z|;�`�e�G�C�#�����Y!]�F�*�7(������-`���;g� %4,�@%WǢC���ukf��� ��}�D�w�h.������P��� ��%L��nX���u��[r-�I�=�R��/�T�ԡ�:N],�'�=��l�j����5|EF�b�L�X_i���!�9t먃�b�w���\5�r��Z�\���'Ko���L�ݎ���C��F9#V�*7�[!Q�]�74���*�kP�X^��x�[|�r�����pm�o��b��b��UսSY�)��nL@S�<�a��q +�=c߷:V�w�k�&�f��S�h��S�`Ⱦ���l$��� kR>T�F4�X^������F:<9������G�?�&��$�U�wv]�:i���d��$��>B��*{ZgM������sBҁ'9�J�턂۟��pC��h/��gtP�C������G*����jdU<�F��/����i�Q��[Z@c����xmĪJB��#.? C�Nz���jV��F����*�j�(�{��r��MR�锲;�P�rf>�ߢ���(�� ��s���~�&�����.���*I;5 �S�&����@��capX����fuk��� �p6^P�a9~W�H^k���_e��Œ;�1CMA{$��}H?��P���g�s���oÉyt�zg���:~�s!�.���於E:��kK���/Ż�]NMF�J*H2�O9&��~ȗ��lhY��0UӍ�R*5�#�#<>�����ff� Q;�o��X�P)M���S���܁���c����++dj�ۦH#�%kң;���.Yx����KJΔSI�ʈ��+V~�G�^⡖u��9_8�>��)��k2V��rW�N�_8���_�$�
Static task
static1
Behavioral task
behavioral1
Sample
23b3f0222f5fa1dcc337d57deb9d7130deee62fda239307643c38defc9b6ec66.exe
Resource
win7-20240221-en
General
-
Target
23b3f0222f5fa1dcc337d57deb9d7130deee62fda239307643c38defc9b6ec66
-
Size
3.1MB
-
MD5
1ac7e474f2025f71cc3e76d150eeb6d2
-
SHA1
1d57dc2441e30abb43e1c32c721972814cf715d0
-
SHA256
23b3f0222f5fa1dcc337d57deb9d7130deee62fda239307643c38defc9b6ec66
-
SHA512
f77ec02607eb18ae1d35b637c69389c77dc2333a09d453e73676c9ddb67654f583b75c6a986f2edb0c5888351747f8277eddce6d813e1283aecb3042eb85bc34
-
SSDEEP
98304:+Nvnw5R5e4G3O8JTV3wxlX3xm8rn2ThcL:+NvwM4Q1doV3xLr2q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23b3f0222f5fa1dcc337d57deb9d7130deee62fda239307643c38defc9b6ec66
Files
-
23b3f0222f5fa1dcc337d57deb9d7130deee62fda239307643c38defc9b6ec66.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE