X�X��ѝ,W�@?��0P�|퍵5��%c����g�����+f��Oh�A�QbuÙ�ٸ�i�pg�:Ъ�^��=��p�Kb\��mB�5<r���ߠ4��[A�J����x#A�]{'!o���4-��_�X�x�g��!�ޜ��%�&R8%�ȏ���4�-�+�v�KH��1����89q �oV�Anc�v<_-�6F{#�Qq�������Z�4�>� x��:c�aM�(���,R!� it�Zs��b�� ���_��GS�G}�X!���N~����!��NE�ꌂ�5�d�7+�T��d"����'�T2�u�`� 1V�>�����.���X��$�њ����Z.����"�J���s)5��og��y|�^(t8��cU�wgf��\��5Ī���eʓ��UN,[�w8�_���P��k�i9���`�Y^>,�������x<|�� ��ӾU�?��{nv��2��ƍ-�+��.J�Ɇ�T�����V~�Al) ;�tNg�~ �8��'�w�s��fc2�2����&g�kD���X��+$ ���ie�B�zcEly.)��X��y�I��{�*�5�����\ ٿ=�]��#0�����_�ꜭ�N&�FH��������iO���8]�Z�H�9r�;t�; �X7:�Q�(� J-+��y7:Q��CN:�!T���ʤ*��h�������f�l�X���^Q�7f�� ��u\i{Ixɢ)Ћ���V=�Y-Ҭ7�R�5I����v�A,CD�ɝ�T{j��R��"��1y���``%��X.��?�,?cdC���C^���pW���:��j)C��� �.���M����G+|ЧP���x3���xV��` O��a����,��9+ܭ?]R�adڰ �X��n�����E�^�J��w]ZQ���2d�Nu�?>�W����C�������&���3��S�;�3w�<�.�UJ!��������O���Brg8Y�}̅v��<�����,���w�}�ۖ4f��h L����I��*V)}�x(�W����*��nW�Q�h6 �'�F�ʄt��KP�G7|毘+�o��ƍ��g`�/]K ���Lmc���T���~p�@_�4��/��b�]9;�wKJ�H��~A��l���69P8��]En�MY�ζF�j}�����J%��gs��YwM�'�m�����h(Ś�Ē趎�D�i�)��<�wC�l���6i����zKO�4(�;���9�}��^�$k�E�~1��G)�E��Tr�nq�EhID����?<�M����`���׳{��-�/]���!��!]s`d{��tWm3_����a���p��@CNy^�5tD>5a�`����B���}��H�+|_!,�Bb���������a���Aԥ��AC?Q��Ѫ�[����]e��< ���TLZI8��D_רt�z���<�W�6��4SC���D�=�� F���I�\�o����VP������ �tHeYn�J��do!]z]����G��.刭����Zy�?ْ�d���la;n65C]=��%�����vBN��q����>�Ap/���� ��X���\����=���T)�����u������ ;�@���|��c�a�(������T�2-�a�=!J=�)����֒d#�J0��F^V��&�9�^z��&�+(���1f�H��������V;�8^ G3��]E��1����{��+<���A�,����M����TcM(���*���\�����ʲ�ԝ��|]�����f`�Mκp���!9���Ac�����V���"[t�t������ә�l�(V�}�q�����[Yg���ҽ��TN��o�o�5.r6��'�[����Վc���y �� �C�'B��M���$5�3�c�������+��%4,�����탭�6��(��s#L1���h�w0�d���P�2�"d����ɞ&��Wț�뎄;��q���W(2�������f� Qgr;B���Fr��C�{��T��2��Ge���,a�~�� ��~��p��'�����X|̎��} ���L���\j)]>�j{4H�+�����]�ɶq�E9gl5���xj}F�-�1X���w��X��>�e�z^��z8x�E�C�K '}w$r�`<\ֽ�F�uA���m[Y����r�+y�g̫|��8�L���v���I!|k�B!��.�>�p�yoR�79��#\I}�?�U�*�A�{����A��m�Bs�+9mE �c)�(�P���_ VWRؽ������脷GC�aƢK'������ܛʐ� �0��e|��M�ވ�"I�T�Ws���N�%�7��Ɏ��B���H�kS�b�~㏁��j�ұ� i�0�s��^��b��y���$,Nbۊ��v���� `��>���^<|���gw�1U��{�zƕH�P��'ul;�Q�b9\����A��e�7UD�;�J��� ������r�R�>�&\�� %���E1�����]�T'q>����w�1e�� �8ìo��y�N� �kr��̤��|mx�����7��-2qH�sN���[D%� ��*�^�+N���u�iw�c(Wd4-` ����a_f�[��H�@綯n�C�{���0^9��|4 ���݁B�8�f\?+���a��ɚ�\]�h����i�}��47�G-D<c k��>�Rv ;S1�A]��~������_K'ٵ�VGo��[B6�>����k��2����c�����}w�A9�Pp�w;��T4�C��7.�G$d�(���W7Yz���<6�}>&T��Nw������q>x1ä�;�ie�?2*D 'kH�H����N3��\���j� B0����ǯA`Cr!�-�ٳ��Olg�f�1�ڧ�&� n�L����{��B��� �Aٔ����E&�r@2u$�&�I�6�T�: R��8�0��Eg�:���<Gh�&�TH����͕OR=DY-��*����3����X�YC�L���Z�=�2�$������.�6�r�N�(�N�q�A>�8�t�3V�.�\�Od0���G�\�cF�&S5�v����~�ܥL#Id���:�B�ͯ��*���x�@���[A�l���r��k�lU���6�m��ت�����ED���Klzf�Hk�%~��q��\���3'+⮫=����XOI�G����C.���m9�ٯF���d�l �H���* />�cq*� z^oQ|�^?���%�ʹ�-�+V���Qo7�Ґ�gձ�m�!��acy���s3 �=���m�B.3�?s/|��?(�F��V2��*Z��$�g� ��P%�`Q�Rk���{��ڷ ƨj��:|�Ѿ'�+>������#"��h�1�$YG�G'�5�|�ᮢ�<eP<�h�-�?�1���:�x(|X��� ����|;��Α5�� 2����y����ڛmO|�4=PaO�q�� ��������&�#R�uGO+�o�� ��8!�'.iӶ���+��v�&��I�A��,_�Š��|�N����nhZD�5v���ϼ9C8ͩ�d�=�~��vy#9�5Q��g�?4�ݲp�Ce�tb��-.��J���Ĩ�ҭ�+�}�7^#l��-�<��0n��zO�Y�?h����WĞ7�4��
Static task
static1
Behavioral task
behavioral1
Sample
2e1662bc8b93a8cea652f916afa628ce5646e3b62d15cf584188f7df066dca73.exe
Resource
win7-20231129-en
General
-
Target
2e1662bc8b93a8cea652f916afa628ce5646e3b62d15cf584188f7df066dca73.exe
-
Size
2.4MB
-
MD5
26a77a61fb964d82c815da952ebedb23
-
SHA1
8d9100fcc2e55df7c20954d459c1a6c5861228a1
-
SHA256
2e1662bc8b93a8cea652f916afa628ce5646e3b62d15cf584188f7df066dca73
-
SHA512
793a6dcd9d3eae88b25a24895f0cf2b23060e8b59788b0bbf357a8fd7df0f536301912dcdd8c2ccf08313f89322a350c5bbc0bdce08a44bedd862cf8d421ab9a
-
SSDEEP
49152:6ia4dCxGEzut9XYlu2fFNwLTxiYumd7Q/BFEUS2NbUd2Tb1:fKEEze9Uu2f8/cLmdcPSqbUdch
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e1662bc8b93a8cea652f916afa628ce5646e3b62d15cf584188f7df066dca73.exe
Files
-
2e1662bc8b93a8cea652f916afa628ce5646e3b62d15cf584188f7df066dca73.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE