Ml}d\�U��\��[j}=�I�+a2ĭ����xMZ�&ߜ��݀!_L�Z��J>�Y����������.�^��}EԼ�#ʰs�!X�H)<Q�ȁu�B��=ORõ�i�ܾ������ԩ-!����o�Y2���@��u���l��� o���\Uy�-����,+���\���Fс���j���L��;�<�ɗR��.tG�M�Ԁ�O>�VFn�7�� 9-��ȯ���iK~k�6e������?�$�{��@�a�"��!������:?-.�+l����z���9#,�h��\�,"��|6 _3���9}�,Ϥv,�'S;�5EVs�Xb7�c�]^Q��.$�6�:�\�m��.?�=���<d�����;��Cx�� ï�p��A�+�=ao�X;>#���*0�H���@������o(��Hu5eͽ֕�H�aJ� �-��y�D�g7%�K�� `�K�h��e4�A[�^0@_9��,̴��B�b� Y �|�����r�������a�N����a��_ܷ!�׀T�[�ݷ�����RY��t��h��-BhQ9ď$�+�N����p"仓�~ʛ��p���+}�1X[���쭐�Ʊ����a��X]/R�E���!�m��s/k&��� ������ҟ����0s���35�)h�0�� 55�)[��"���.��c�����+�|���������"yT�x�4���k�/vZ^���a����8��X������i_� � N�8Q3C�� �=`�Ȗ�U���: q�w}����^6:���/�Ba����"�s_[g�>�'�E>��6Nд��Xh��q�v)����5m�����]d�df�����Z��o�G��a����^G��Ֆܧ����JH��ǧZ�-ړ̺��[?��'�T�����m)AY]�T�dJ�����JmF��q���$�:N������w����v��r�f��~6�嶭�;�G��� � �&"@����K���}ɷ����3$���^|�y?�J-"Ә;#`������Ts�����w�Z���۵�� [g��M6��~�xx��/>��4(IZ����r$)b��x�\�;d,!��r�-���u��m��2o�=�t>�&�Tأ��b� vh�䟴\�#�.f:���o|�q�@<��ɍ�Ʉ� �uL����%��C�h�]@^~I�`ҕ��4���b<�~5��2�[20���)U��M��/V� $�e���݈\Iy|蹗��H�,�!~dW��"~�XJ��,q�l�r(�����.C�~����u릌����;�!�׳6P������NSq�;+��{��s!qRL��l�e0���5���)�s��0�@�����ڙ�YE4��ȫ��8:�j�\�5��]����C��X�;�e��i�h�2:�Ѥ�S��v���|B5���7�Cmύ�42f�g!+������?���1��}�3�A�g���뷃w�E�-zʏ�& Fu�`'W�w:H�b�#��S.C��0���O�/{��Iv���tk��#�v���u�� G�k�@�����A��>�! ������5YW��=�O�a�lYK͗��a��2��sљFFK�� 1�z���)�7N��G�v�bQ�~�v�7�ҿ( <a��_i���o�����\�[<L�ږY��d;$nvH�<L�U����$$<��E&�A� �[MT��v��)�ѫ�<{��������*2Թ�}d������a���7�+��ԏ(:���% �a �o�(��z?�k}�#������'U\z�E�� A��V~n���F�C�3$�� �0]�kꓨ��QE�lk���* �r����2��#3Y�\*iZ<��r�Z��$2;+} ^��cP�k���1;�'tl.��_�i���@��x�|� pf�M�I�]*���^�Y��������W�)~�;�U`�ہ�XӉUyIr�� F�F��U����f�ކ:����gE���!�K�k+�:*�7��)�Z���c�r�����Xe��:C5��_c\��CBn`�+a���Kw\{M$�|H�h��,_��QT'��3�������6q>�s{2�~`y���'X���OJ��}�p_ ��h�~��6F�NRg�w��m����t��ė����@���ӵ�Ǫ���k2k5ri��d|��Ѿo_������A+�+�@yVdF�lW�D�1������o��V�=���*wp��/�}r4uL� �ʰ���%�s�K ��z��қ� ����V��i��~�W*�2̉7�%_�RR�P��ry�+2h�쇬,F戡e� {E�7�)G�6n��]��o��+;~x��Њ�h}���W��(��TZ-��]�F��m��`[�����7�nU���a7+S�99�/8Ϋ��_��JGөZ�mF�Ԫ$���v��o �.���l7���SȧXn�[�"-�k��T��v����g�kh3 C�P2pY(��ht]nAaK &��8lUvGg�~r�zv�ށ�\*ڧ���uV3��jc��t��)�5<�P�en��X��K\4+�=~��*���C6�ġk"����K��������������rIEh�8��o> ?�S �h�dz^��h�"�H�+�_ �f'ё��`�����h)m3>z����{�܃z���9��͓#���{[�����=�Տ%��j��ؐ,����Ja�\Ze�R�4�� F!6\Q�W���~�z��/��醁-{�2F���!;��]";��V��]�ʿD��ߔGoAg�ŜI9>�J�%�g=���n�~}-� cs��l?{��ݻ�� S��k.�#2J�{|�{�V�X�H���(`x�(2�P�Lz������ +"�����E���T�(E�;�$�0 z����H���*ܛ��ѳ�!���[�� n#VKZ:�� �N3��8 ����= i����,n��:-DU����]Fe�栞�Z���]o���a,���IJu��A�ъnFA�`øv�K��� (���u��c�d�"��R|;Zb)��+�&o(�nI�S>��yz
Static task
static1
Behavioral task
behavioral1
Sample
dc3fe192634b57a9b8265c2ac92d1d6d964c399ae66701d7cbf9ae8794b10c0a.exe
Resource
win7-20240419-en
General
-
Target
dc3fe192634b57a9b8265c2ac92d1d6d964c399ae66701d7cbf9ae8794b10c0a
-
Size
3.0MB
-
MD5
96234da66b59b295032b41276f6585ff
-
SHA1
8915a3928bb369654baadd234168a2101a9b20e1
-
SHA256
dc3fe192634b57a9b8265c2ac92d1d6d964c399ae66701d7cbf9ae8794b10c0a
-
SHA512
4dcfe9f8dcb0b187e37b0eea217037829ab72f29e0e7e3adb0c1ccd3fdb61a24cd2943c4e87a444c88b5cfcd057ca21c24dec5aa941677cfc627b1a025ef3cbe
-
SSDEEP
49152:XmRmM5f7+2SX/k3Fy5Ap2Nn1ukli1snNHHBRU+hVXVXriHV1o9Un5oQ/:XmR0w16Ap2NnI38VHBfFiH49Un5oA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc3fe192634b57a9b8265c2ac92d1d6d964c399ae66701d7cbf9ae8794b10c0a
Files
-
dc3fe192634b57a9b8265c2ac92d1d6d964c399ae66701d7cbf9ae8794b10c0a.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE