M���s�3� �X]�,ё����0S����븾~,`ϋ��7}�U`�wҕ��s���˅������!-p���F�治VRHr/?>�d�LкoG�`A�$��&��>1g�2��b����+��V���� �Y����pM+��Y[�gE�~��j٥����z�io��)��Ž�E�}}�B��Ϳ6�����)�S�&��+�,r����Ґ��R�u�I��'8A��f�R��_DM�n e�8�W@w���d)CA����Ů�E�� Z�m_q���^sz�����[㿔H�dK�������9���u9�k�����2?r�/���(�L�wu� P2�����ʡ.�ԟ����ɽ���J4'.`��=��vkV�����$��-������J�Þ���TV,� ��ij8A��J:D0�X�rq����!&+�7��}���'�;�%��ѳ��:T9��YB{9/;"�H?˂��u��� H�w2N�@D�dG���&=��k��"�x�r�sF�Y����}��V ���ԍͥ*X�����_��o��a:�/���1Z�P�Ʒ�A�<m�v����S��!�Q8K�* @�UW���P�����4ӀĞX���a8'# Ύ7MK��Xmbȕ�'�"ŝ�A|����������g(\g���b�MAj"ף��.m��)��3���9����{l����y�r�硝AJ;I����Tk���B]����J�7�A誢Fj�Dʆj s]�����N]7����I.��+F�c�;$�g:m͖�گGF���a��N���;c�f�� \����+$���̀80�^�9`\=��8��W�ْ��B{�`�w8~�tm5�%�(A�X�#��M�������Ǫ�)0��X[�{V�����.vl��(V�TH7xя�0C �'���u�Q���[P�p�X�|E���6r������r{��ʱ$�Z�ea�c`b�ֺ� F����?BC*�a��m��|M�/�#5�JƗ�P���C����fB2���Qu�ۜ���^bZ��-/��&�z�� �X�D��d�^�x=ѨO"�9��՞�A��%մ��N�C\N��bz��2� ��ͲXDЭ;�w²|���y������h|U��ԝ�ֺ���`D�xH� M�n։8N�Cg�6�6y�����v�XT�LK���v��1�槊�� �k���#9B1;�����9�4(�F0��t�O���ٱ��2[�z1+�x���Dvd1ח}��?�+lQf5�IqV�*/[3X9iX�¢]\#D�%����a�sU*F�#�Ts�*�n�u�J��6���'�+�MT�'6�����/�=b���e1��T��L�h�`È��D@/���~�P�D��V�O�B$��i����t����굱o�lՊ3�@���H�R�Ը�f��;�Ek����G��5�7��t$ߟ)�U�9"m�s���<vK��f!��މ�]�SB�� ���z����!���������b䢖��p�{��w^p� ��G�l�����.T1�y��ӑY�K���I�D�)�%��O<�|)`Ѽu�K���Ii��f3���7���b܊�5���8�N�U�^֜ ���Q�s����km��W�����,��'�����֓)E"� ���@X���)�5d���=��W=��������acB��h+w���9ڒ�n��x�r���F���]�y S�5�X9^*{����[$�R ��y;���V�S�L�7 � ?�i����g.01�-+���a��?�1~.����A1�ʺBX��' �����4�|lw�J;wd� B�>����)������)� ���t䌭ֶ9E�1���,p�Tk<{K֔��l"��'��Ed��a����i|l�&��=�R:T��+�� ό���f�k��lG�$-mLJ1�2��/Ȥ/�g'L�}�L�:JoDv�۩�l${_���[D``�*�=�ӏ�hL�\8�����/�Ƿ5T��?���W�w�4(@�4��MN: d�n��ϵ��J�� ����ö&�{�eY�\k��B��]X�-���7�J�j��{��j�ٔd���H���Z��g���u�֠�Q�ۯ�l&��y�L��gF��������*�=��FH���<�j��\S'wia�n^���2h�N2/�4OU��%{@̊%F�\E��xϰK����'�%V��\���䞃��]z4��;nV�l�3�C��6S�ظR��3b��1 #�"�o�0���.$zW&�R ���q��\ԹP�(Y,�t8F�S��������t��2�ۗ>�TKz0�C٪u���$����U�{y�� �|��K���5$�X4����\ 9�N� ��Z˱N�r�a����` 0[�fo�t����1��OOOԽ�8���[��*}df��o�tJ�G�D���b���!�I�ټ���ؙ��^˴��.���%(Z�����TYrk��U��5�֛�`.�o�����{-5l�j�'�am�9��������7���v@�k���ye\��?�Q�Gż�`P�~;M2�\�X�-m1�σ����%V���.F��(C�\�9�b}!��M���p�������Y ��V��\�"�� ԛ-*���C�?��;�9b�������Wm�b�gG��o���"��.����l��Q+OO�<_R��`�Qٔ�Gy|����z��i6яm=5,�����%�6�+[ޒ*���3kh���9F�|)&��)@��YS��G>;�����-G��~�8^c��G�0�*��GQ��UR��<�Ѽ�ABs K�+����`����u=�{C���X>%�zt���q�I�6��[ڴ�J-V�v��"�ɹD�uA����A���1�[�o4R����Lb��P���U9�'���D������~��q�t6o*H4��$�{�0��*���kp��O�S��ܑ8җ�CN!��5�Y�@^��L.�ʣgЈM�� �"�w�i��)_đPc�!��+g2�nqˤ�!4�t��!�}�9U#F�Q�� �9�e��c{Ր��H���"��d3L �'��;��xA�#&ʝ�w����"�NLKˠ��F��T�.�Zʤ_����=����T>��;;���k�C�N�� ����=qv~��Q���k�q�� 1��.�mg���p.���Y!��� ]��}�tV�y��fv���4����lȖ�5�H�mL@���_I0%�*�!�}����VH^�&G4yc!���M�� ����!�t��:����t Ku��!��|y��3@Fz�s�<�a�j�ڴKk%�h<�1�e6��Z�)q^����K����Eq��VvgT�H�U����n�B��]~<��2y�y���ܻ��Unz�H�������g�`H���Tp2�̕�3C�~9����T�x��Y*��_˔�Q�)��a��?��G��)j�������33=_�͈�,�P8d/�c�Fl�!�fC�CJ�v�K�Ͻ������K���������'B�����j7��=6���K\��U�@*I�ّ ���q����xmg�@&��B'�K���on������F��:ڿn��H�5�Wif)�2M�E�3%��S�D����">���Z�z(��l���쳇��2�uҌ��(��ON�h�����]p�R��{��Qy�A�]V��:g:����!<g�E�����J��v��-���q�DG89S_ "$L>.�
Static task
static1
Behavioral task
behavioral1
Sample
53b3fd8aff7c2b7fa9a8fd4321e8e951c720166d6b7b600159ef148202d33ea3.exe
Resource
win10v2004-20240226-en
General
-
Target
53b3fd8aff7c2b7fa9a8fd4321e8e951c720166d6b7b600159ef148202d33ea3
-
Size
2.4MB
-
MD5
05df0597156e90d39dd9611098d1194e
-
SHA1
dabe236ddc951307886e4082ed9f08145a351903
-
SHA256
53b3fd8aff7c2b7fa9a8fd4321e8e951c720166d6b7b600159ef148202d33ea3
-
SHA512
ff3fcfb644140c47a347ece4cf71f6561360fb4386acbd1f785f4b39056129e824bf902a0945ce8fb9786b85e12aad899c40258336312c6f2d42120efe87647e
-
SSDEEP
49152:wnv7AL2TGMGIy18UW7oPHT89GUTLt87jXXQeGC8g+5RUSwA:wnv7AL2TDm1dW7oPohmjXgxg+s5A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53b3fd8aff7c2b7fa9a8fd4321e8e951c720166d6b7b600159ef148202d33ea3
Files
-
53b3fd8aff7c2b7fa9a8fd4321e8e951c720166d6b7b600159ef148202d33ea3.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE