�ϟ��D�'7�;4���ͬ(Ec�a�`��'���0�GBȜ�ݕn��)����I��И1�G��3{��B�������ذ#���Y��`�R�*�*sݧ����_�b[��<�����X�f�-��֨���p�UaA30�y�vR�8��iR�ID��s5 �`���K)_4@C)�l{-�ÔaN�H�&@�m�� ]�`��5C�'��Q��2q�l۟�S^���9ZZg�3&��\�����XРr?7S�Su��Yh�ҩF����.o8ӿJ��-� �����L�<�Zΰ�C��jm ��z�����`��>2�w�"*R��&�B�5�ϛWR���0"���wiR��V��F�[IP����j魮t��jb^RZ�'(n�T~�8=���M0+���qF-�!e�М@��vi���X�����}�+� ��u�Ŋ�_��4ك��J���۴}$���&��en���8��d�7����Z�iG6��jVv� Ĺ�y���O���M"{P��,�1LE&!����4����'1P�i��tx����'�reu*$`y�"�`6P"��E�� ٶ_��b������hL��%�M{�۽\@��s�i���p���H݂F�e�� w���Yv��ᴟU�H5�9�Q����K�6C�C��@�3��6t��8��$���mxT�t���?�ew�Ds�T��g^�՚n�qv|Pv�ᶹ�i�3J�(��پ����Q_�R3i4,O�����4����G���HC�����]����(|¡[�\|����� |���ؓ�<��?<b� I:�5����\��'�ݵ�\lJ��]�X7 =�ۉ��+�@���[���@�"��Y��nS�����ِu�`ӿM��i%�ǣk=��L�QYknt$�s$���wQ��$�7A�D�ʙf���ۄ2h��u�]sg�#n�a�A]c5|���Ǿ �`[��wԐmK�e�����M��$�E��я�G/7�Cn�#�p�vI�r�S��F�i�q��kjb�ȼɈZ�D2� �+�?����,�q�������PP!�0K�ݬ��p�kJ�%�aGg�!'�2�n4�����u�BB;k������#������b�����@����?�x�y��-�w����8%L�E��L$��@��(�TO�c3�j;m�LP®X�����1��>!ې.�^^M�gT8e�w�,�a!��t[s��%Z� V�t6yid%V�)�ի�����#h��� ���8D�� �� v(��5���`�� ��.�����b胆��9���(5�M�6�vW8�,�Lv��*�Ϻ�t���[2����}�J��\�����l�F,y����M]%L|����"|i�tvy�L\�XX�%����X}%����l�+՜ �4��?s�ܘ��aLf�<�P�c2�(���x�o�l3�Jz���1.�?�o[jI��ᖒ<�O9�b"��/v��(���gg�����uG����� ��$����}���Sk�n��g��D�$2�rL������w���l\��o�$��z�b�F����yE�`�"Ig��Z&����F�vy�<iy 8�\�߳�"��B�f�{#+g�և5��=�Ւ4�/����sU[rc�έ�ǂ��+9Pz�@.���-?�;kʦ���V��|۫,I�݃��H$�+��y1�������!%B��cu��S�F�����]t�U������X�æi��,�<^T�~aK&� ������xo��-%�9�j�Pp�M?G&z��L"�����ۇ��K̫ˏ�}1sB�>_�MkJtm�D# @�/~C���i�����'��gL�g���ܹx� ��� M�s �M۠QsZ#ܼ_��h~�kI�k�}]�u�W4D ��0ܐ�cH�!!�zҜs�ҵX��x�|MI�"������Y<�im����S�IVѰd��/ ���1��i�w�?�+>_4�x�>2�V�Z���")A�۪�1��W�y��/4}6�ų�T���vN�\M5�,��B�`���s�u�!��0�N�{!���L�<xh!�yo��>6l�@?�ž�F�ar<E��1��j��5] !a�c�����ϙ~%̈́���"�;���v�� �Ϟ��θD�d�IA���͖ԡ�������%Zf~�����}��G����[a��k5q(��6�}" �$��jhMs��Q���z����W�y��*���V8��C(�������ɚp%�s��(��|u c���Im�~�ˈ�f }��(�$�;�3�J�@�����Q�>c�?i��%-/�C�'�ս��RPEp.6�^ �8O�� 3'��Y��و������Y�ƌC*�$J�_>�|2�G/��� ���ˡ։tB/� ����c��(9��.��x�y5fA�"M�I_ݹK��r���ۅz.I�/WR�֭U��A����R���p&nf�%�=6DIH���t�O�<�Gy�R%s\�"��l�p�[��w�&,�1��ʥ�s#8�-�u@ӧ��7��I#hz1t��,��K��(y��3����7zD���j�oY�]�9U1�]��G�,�72rX��&��������W��Si3�j1�_ǧ�u/![�!��N�TP���Zf0�:1S�2��/���L� ����Ri{ۜݱ+E�n����tc�OU��3������i���R �:�*'��ft���.2�Q��B�g�k�g��L�~j J��RZ�N��8d˲�Gy�k�]���ۉ���O%�EA"t>���O�Кb�;\�� w�� ��|B�%�L]�m�%d`�!��7��1)�=� ���=�a~ �%�T�Q�"�lj����'PEY��Hݴo��I�V>�C��)|(QJ���dH��s�I��~u.���b=���a��(��̶�Ȧ%�bDz�Ѻ�jI���3����tِ����?%�~}N����P��27_�C-�������Ή�YU'�r��|�$aC�<��_GՓ��0��x��Q�Ż,�tJ!j��Xĕ�C�T���h��v�s3������6�ֶEي��px��N%̹��.�~�����!� 0ڝ_F8��� ��O=�i�l
Static task
static1
Behavioral task
behavioral1
Sample
4457ff554fab8f98267a2dfa59cb2d900a2b6ff7150bbfb8edf7d4b11df599dbN.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4457ff554fab8f98267a2dfa59cb2d900a2b6ff7150bbfb8edf7d4b11df599dbN.dll
Resource
win10v2004-20240802-en
General
-
Target
4457ff554fab8f98267a2dfa59cb2d900a2b6ff7150bbfb8edf7d4b11df599dbN
-
Size
556KB
-
MD5
fc68a9bc1967d711cdfe6da8caeef0d0
-
SHA1
267c2fe6c67a81c8348e2a1fe5e5303a40c6fecf
-
SHA256
4457ff554fab8f98267a2dfa59cb2d900a2b6ff7150bbfb8edf7d4b11df599db
-
SHA512
1a3f9c92a2209c934a25fd44907532572c8147128b7c5db84da83712435df94617d691446d6a495d3f21746ef4f32a743933280114c5ef9bb278edc90c0366b4
-
SSDEEP
12288:lK9x0WvuLqA+pJYav8bJL0OeaF01pwOafuxDPcHhoA:lKYOMUaRV01pwOamxGCA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4457ff554fab8f98267a2dfa59cb2d900a2b6ff7150bbfb8edf7d4b11df599dbN
Files
-
4457ff554fab8f98267a2dfa59cb2d900a2b6ff7150bbfb8edf7d4b11df599dbN.dll windows:4 windows x86 arch:x86
09bb01f113a44afe19094146fbbca77e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FreeEnvironmentStringsW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
SetTimer
Exports
Exports
Sections
.text Size: - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
1 Size: - Virtual size: 426KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 544KB - Virtual size: 542KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 300B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ