p��hT69��t�����ulQ���� ��7=���e>:Q���:��+��N�`�`[��A!&�t�?�E%�Ϗ��Ud.8R�j��`�8������F���E��|"��L�=3�|�����WnY����e'�f�K�D���))�z����!ʾA��~m d��S��~|�S����f��FNg���Z�.e$֑���l{����������A*�!�L� _=��R>\�"U��Ż�-�*���7F@��O����;��c��m�6���v�P3빜V5Q�s�����φ�=.��jy�?���{�UjIy�<��z��mok�~%��&� R����M����2t�]jv���p�Ns��YN�V�X+b˜m����1=N}sd��S��8�u��^���Th!_&o�Ę��$� ��l���ź��F���;�aSMu,9���ei��g��MF\:���Ųf�]���Ft�6]��ّB�$���X��ye4���/dgJ�"�8��㳮���l�/���~$`Y�єy������?����S9D��$H&�9�e�.c�/VIG�=k{�>�V����U�6B��I"@9�Q����`�|"���� �iWS��0�YC5��k������iQ֡��6�r�Y�ֱ�~��V�L��U �Q҈�wI�kU�e�l4�b��^�8��S�����~���SQ>!��q���!9��&~��Y�l� ���{s�3���"|Q7����~�Ut�\&H�`�AŲk���@�u��C�~�IR?�Y��*���h!^+�%�9�k�3�'�#�G��o��P�eQo�����y%dqw��Wg�����~[��?��PVy�#�[���+���4+��Ҵ�V<?|��g�CY��?�s����.W[��s`�4�,�����I{�Y�Q;Lw ����T��ߌ��G#����U>���p�Ձ��b%_�RK ,(�O�X.6���Tx�Azޏکj�a���;�Zx/+��fI�� qMao]�_����Y��1��>�'�CU���>Ws��D��A~����oTt����O0k�<+��\C�$,*r����(�dތ7:!�ҏ���P�U�t(h����A�㧐e������n�i� b~�͖cb��ƻԋZ�w/ ��-pr���~�E�(�L���g���`�e���`�c�Y�X��crsD�� ;%ћ��be����,��v<�m#�d�Y��c��N+*�u��~������99�aZS(�����]0?����{<�,��q_m�^�K�g4��0雐Y��_] � ��'.ߋb_�&_*�{��'ۧ}��,�]�B�ݳ���;}��a���H|��|��Ӧ<��L'WA���l)� �ʃx���ԃ������Ç� ˣ#�!(���ڲh^4���f���n���Y����d��x8��N������E��2��LL�� �$i?���4<������!%�X�1��M��т]菁1ځ�Ysp7*�o��;o�����;m�W��hQ[$�х���k�1gq����2�nT般��7@����.�O��!@�z�5��#��d��t�3���QjUJ���w��6��kߡ%�%��" �P'�+b��n��WK��!���O>��<�����*4���KA%q�Ӥ���[�m�&����!'ns��\��kT�}��z�p�����2���ka�����2E�a�j����/(�'��M]u ���\���"�`O��lF�E�d�7�Տ��^ֲ4I_�?�� �� �rn�8��Y'�z�>��(��:Z���e�BD@��������e��'$+�f�4i$��q���� � ���!�!�s�#C��*K7y�D :=p�|A[~'Ւ皪O��y�"٬Lƅ��C*����h�p���]�I3�����$�Y#]�"�9�ms`~�wj{@�Z�ޱ_���JG� �hI*�,j����9�U��� Y������,�ܫd�d!-Ͼ�ǣ�*�1��e�� ��o���v��D�ha5�c(���]��F0�#�:��ؗ�Hq��Ê�`l��&�a�s��� E.���۴�[���Ck��V�2��4J�\���`TiQֵ����r7��Yc��Xtp�Z��I�����z�W3*����D�eC������q����,�,��dt<�R�0�zpg�^�f�:�@z�������O��X��\*��>�J?u ��Xk��d��\�Ժ��@Z�Jɢ�^�C�� �tB��qj�:�`:.]6 ��uT=���_-Īu�k��$;� A�oMj�V�K[Q�ʐ?��_�;�(_6���G+�)�q5��)dR�����ÆH��`Ϻjb��k{�5�M3�)� :'�z��E.�����?F�{��o�����#����% h��v��Qs�Ct�t�r7'�CJV����H�L܊+:I�����~�[�;Cs�-�}����.4�ʀs&>`���a���3����E@�p4�f��iB���_w&�CJ�oW�z���g���ꄜ/W}�-jH!�$[�8�����i��^�K&Z<<�W�X?��+��f3�}�$d� <�b��8�ZH]D0w��.�f:�����fW����I� ��M6I؉���f��6���#���c$A��5&�OB�oȐ�1����A�'Ss�6'��h{b�z���ϱ�,����|����gg�N���GDc��L�X��^Hܶu�3�=�9����9!5OXn>z��5�q�î��C��e�mDgmB����W��h��X�ݛ�~���yQ*�o�����[G ��%����u�������ʒ�x9 6��~W�#��>��T�������%�<�.5�������� / ���QY}GB�&LJ��ϩ�g�����f_��/�q�l���7i�� ���Ƿ��箢�Q7����蝶��������@�A�ZN�[�E����P��[�xy��"��HA�M���������2S�c����U\f�\2y��Zy,�Ρ{@a<�l!��W.�9��1���œE��=��kq=���r�o��� `� f-|(j�����Kg2_�h��a�l6Ŋ����)KX�d@8�E������cQ�ʥ2b �Rhɠ��5�6��A4�9K[r��ZU�3Q�'<��Kh`��"�ٌ�Lb�ʼn9���s��F��!���I��z�a���.c(зԂ��h��l[�=���D� 0���W�m���j-����V�R����)U�}�Ũ;2$���� ��U�����z�fe<�`֔�7���<���zC�?gm��������Ńc��sԋ^�ZP�W�2�\�V�S�Q�9��3$�ƞ���Tps5)�K!�B��`����j��T�,���+?N�4��}�I�lr�#��I�8���O���_!�4�:�Ǐ �p:pO�����a�S(E�L��e�oC�
Static task
static1
General
-
Target
WL SEM STRESS.exe
-
Size
5.8MB
-
MD5
45b15860479e2a876cd08155cdc56f21
-
SHA1
3081f6fc5b1818627489e1d57b829375aad5f6d3
-
SHA256
348070491b0c89caafbd96a924d6f3f16ab308dad4e2c7027c82dc358397afac
-
SHA512
b4c7775170f58d2abfed97611d02381fd05314f5b832be8c32a4eaca128550a403802d1e816e43586780a8ad497a97993c8a140a9bdc2bf7a3f1c3380a31389f
-
SSDEEP
98304:mQ2+DCaCQed4/3hDzxTHDVThmdz84aqCtY8Jdt9NQ1IpiMhZWaeNS6S:mQ2+GaCl4/DTjVTh0z8dNQuhZWa+XS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource WL SEM STRESS.exe
Files
-
WL SEM STRESS.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 404KB - Virtual size: 836KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 84KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.3MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 133KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 301KB - Virtual size: 14.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE