�!A��(�����n(�҃#��TY*�Kl�t�H��̯CA�m6�e�KL�D&v-V��m�'�r�$�-�,��Y������qU��`�����HN��&�O<$�X%Z��#�Z�Nj��nl���b�!;�A7!&^p�`�Kbs_7�%��[�F|OQ8�+��;�=�^�m��ۑ|}���X_�EX�_C���et3irg���Tv�;~ ߤ���P�u`�[��3N�LH�h)?��-���s��U�7�kg k� �\�B�gpA���~M�e&�z�l��q���n%h-+Z/���ڛW���6d��xV��*�"�0~Y;� Aݽ;�5���%u$��}��:͡�3S��|��� JR�YOn��[h�K�A�뀘�7���ɺ}�M�����Eҥ΅M��r�rCBe�_�-�6�YoF�d���>�]��!�����b�9`Z� �1d��$:A�)��gz9�a�f�C�7� JGX�F�+Rn�����A5�/F`K̰�VE$��E��]�G��[R4�Y:���J�� ܥ01D����z7�m����P��Ti�k� �����E��b�h8�S�!Fl�� �����T�v��ؐpq @��Ƈ ���3P��5XU6�$��Y�H�uiw�ES{R�*� IH�,����2�vI >��� ���!��L�v�W�09�#g��r��������w_e.D�Gau�t ��;Sᴱ�����*|��5@�ӥvݛ���M�j{H������>&�?zS6c���d=��%�漢�0��g����%5q|������;{H[�-V_�-/��� �����Q��_zLy�I��Q�^�l���%��� '�1�ly�Qf��Iˤh��A ��.���*ǥ�=G�v�j�u r]�B�T�$��3�y�!��e�l�F�r�I�tv�n#Β�y�����ش��]� -/�wn��}{<� ���dT��y1R/���.�&8��`K@�?)�Dnd�R�|ɳ��^5�D�ؘnɛ�2nđ�j.��P wc�v�1?��{j�2��&?$/K��7�tH��F�JtYr�H��X9�O��. �bV�[�ΈI��ĥT+lh)�'`�[���ێCږ�-�wLߖX<\b(��xT�g7rmV���y�?���9R�A1���y���<���}�5�h�ҭ��_�b�+�F��9�k�v�4s���D)����,R���^�����@I��w%&�8[o�@��j���_ $Cf~;���#B�I��[J�ߚ�<ol�����7iǺ�"*F��ϾS%�)��� =�'�0W��TU�t��#)����L}�=��}��.Ws|�J�Ȑ���[��/ǿ��R������hs�BGF���%��Yw�hC2�E%#,*����-��.��&\to%C1�!Xh���vJ>�8pY����.����������dA~9�-���ޚj^�}�T�O�Zg����B�k/-�˦7H-f8�0��� ��*����6������LTY0 �ݘ�� ���Y��,b)��t��@��8E~.�O�3��a�$u3(��h�zn���J�~ |�q�N'�&lZ�L��(�sSٽb��=M�vRXt�3l[To����:kd�R�}�"���K2ʻ�9����IH�E`\�"d4�Z�����$��~OgN�%p�ӈ����9*��gSoG��~�u�Zf�Z%�ɎE�Pg�c��<x��O�T�rU��4� 3�j��V�%���Uhgh}��Vb�Ga4M� �"�Xtn] ����ˢjN@��T�-�V�l�fb�����[f,�2�?�� 12[E��y�}�XJ@���R ̓>KD"݉#���J$�U� �s��U}�11k(���n��I L�(��S*c�-d����MK�t���65y�A��hq9�XJ�P;ӈ�iB�bXe�D8��dz�����=�F~$�L���Q�uS�(��%�ts��܌E��.��g�.�>���uVt�d���������J�ލ�I3�~�N�6��8�:5���5k�suL;���.��$�{�5��eb���CɧX��p���q �}�oj_����tbW|�)%��t#�=�ɐUE8���_����[mٴ�[C�~�Q��7��9�=+�S�\o9h9���B���jn�^ 7�f���l�çmb�Go2��������n����[W��#�-Ð���V2�Ǝ0Z�����JE�R*xaz�:./�;B�bk4����N��̋�y���&�?$��N���+x+�)��u�1z8��N�<ޓ�+bR� ��EJ���Ty��tD�%y��+՟�"?��-�n��[�+��mmf�5���)����,�! cα欚�]� g��-��ƁW�WA*��-w�u�]Q��i=X\|���<�)�qp�O�߽X`9��j��y��G����Z�A������m�o�Py��߾�Ǭ�M8� c���ہ��Sm�=|�]D���qX���w+�M4H܉="T�w�`O%��F+Fږ��d7��J�T��7Ɓ�~�+\����-.��~�y���3���{�<D$9$H<�& �Rg�r�+A�٭���v�Z���\��zL��P�ؿ��$���Ǚ:�Ne^�����|���1Ĵ�!�������{��˒���0��?���݂����sMtaD������)�����R,1�C_�n��jn����l�Lz�C�8�~�6ج��`� #2� �=�R��l�`f]�Q���?J�@��V�����ӳ�C�-����+��2æ��uU8e.���噷p����I�ǁA���ޙG K��_�WL��$-f���\kгX�;�H0S��'Yؒ�e��BD;<������1�����x����$��*�j!����^O�1����JK�{`fw�۔�J�X6�čS��w��Vxn2zh�Ϗ��~MrJ�g�gX1� ���I���`0UɉjϠTK �u=r��/}��8��/۽:�%��Sۯf=��h4~��P=+�d�UX_}�Hq�A��7B �fN�D�e��)6'�`�u��R�3x˷oT�y����=]Z���,6�o~{�����]����
Static task
static1
General
-
Target
Build_protected.exe
-
Size
7.0MB
-
MD5
3c4ceea27339a5d7b88572342e7735d0
-
SHA1
c0b077916236f4a3b95ac9f9d6e3135290605e29
-
SHA256
01382d3aa639f879afd45703d10feee2fc9b04c299a93827d256e4b4ecf039bc
-
SHA512
850d5b6248b5eac049dbbb423286cbac6564c7bc63d34f11cee5e83868a3e87f26f46495e6ad3510ea9c4998b834374f464fdaeab9564cad2e986101020f1dc9
-
SSDEEP
98304:V2zwAMWqhJn3saNEWo719eORc+GTY6IqG1CGyenMF74eHrb3nii8U+Pg6L41S4:V2z8WqXn/NSzpO+GrICGy3F74uoPVX4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Build_protected.exe
Files
-
Build_protected.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 1.2MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 21.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5.6MB - Virtual size: 5.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE