鼒�4��Ȥ�+L6�$\���M#��f�^��f�������?"�C/0����fҚ��7�)ТxYS�bٞ���̀m bә('�-+�K^�3��Ӛ���$�`9�VB7gT"x������[�}D捾~X�y���vϥ� y7B5F���y���9�`b�}:��֖&�e�9Ȍ�M���n�a�P�pn�����b.��b(o�`���U[|��r_�Io:or�C�,l������V�����:��;�@�kF��5O����.�"���� `�A��i:%���[��C�w���j��Ϡ{Sc���h|�[�+d�i�#��� ��f?&.s<�̀���<����65-��40&δ ��I;�%��\��ԸY>�z��$5ۛ< [���d��!�����o� �]G�����e�l��t�)����������|���ܑ��#�R�f�8�_�g���;':f�L R�0�(K.�B͊/����P1�,mi���u�Ǯ=��ֈ�;'`��� ~�O��������m�l�@DM��� �\ ��Æ��6d��� L�2������&�2/O:���H�7g��J��H��Ӗ�h;�c����!�]G�)�6� ��쇵,���Ŋ��*�iO:��zp��?����ȮmS�i��U��+�:��o7/�x�{DbЖ���Ev��N��J��쩹�|q��q�ڤ�-9:1�6ϳ�ݶѪ"�rd�����VQW�ju� �0Gx�`�γ����T/^گ�蔼|�>�@�p�Qj��|!.=:����WP�MԢ��y��z����f�3�����_]6��ȋ�#�����w/'%��D:�xɐW��1��y�{o�w�Fv�����!j<ᯔ%��.���� f#�v�.�l�[�Rޞ��5bڌh>��?��{[}b۫��ͭ�R��f�� ���L�~Z!B-�zRR=�S�, A���m}Z�<hV7c;0$Pژ�':�O��ww�H�(��n&Ě6ŏ��9ZO��lD;������K��90����ꨵ��!�ս�g糓�U�I_��n������-��]MOl�0&)��LLG���?��¡� b紩Lى��2���1 I �F�8���~H�:uC���D�+m�c��s��,C�W�p�Ƴ�B;6�V���;jz��K����n��/b; �yr<@� �#�EB�,�5��%^~����W��U�1:D�(|����/Ü$�T]m�)�*�1'�x�CW�X���̗DxMY�AiG��E���`�����G��m*���C3ٮV��'��e���B$' [gɣ��U���e�y_�\�F �F2 ���\b�Rs�/���f)m���|ʼ��젃�t� �P�A�ҭ[xܻy���=�o{���VI'��F9���PPO�`)$���9���d�� ����L���F+��N�)(�E�`s-��|@%�����'&z�����&8���A|������]��=���C�jZ��ۣk�2��@��q�.>�OVO�vj���d#N'X�q���4������`0�-���&EK#ܨ�������9ԩ�����:��3 �JUN���D3DJV��N���rZv��������������`^����[�|���1����AQw�[�ӋRF|��S� E����S�Bmn�q�.��n4�4�f2���D|���8J�P��fgc)�*'��Q���|2��;k�8�<�Pq�~G �4z�S<VR�&�Y���2 �V���f�����a�{��@Wc�#�>ss�aE푾洸Z���ެ;��+f�B���E�1���?Z�=v������G�1YO@>��f����U �����mR�G��o>N6Q��u�Gy���>E�C��&���>̅d;��j�r�"Qn<"��È����S]���F_������ԁӵ#��|p�k����`�BoH��}cm\�N����������ӿX�-J�2�@�m^�q���& ����5���!�WDv��*��t�=��:��/� t�e��yA�~"(c�� _��:2�����=O'L���w�Mr��|�`�?����kW���Xǿ�x>���O�������J_ ���1a�*��rԍ��G�z���tN��~f�&�p%�����|��C�b�2����⧧���`�IO��k����Ut�N��qeضHO� V����qp�1��ڃf�6�Nw�v���|����A�1}�*����( [3~���)�L�8�M�ø{R�[�G�0@a+��M��s�b,��C��'�!�j��A���E�+#���p��������/>+?C���e͚6ܮ���ĈZ,C��൳�*<Ba�hx쳄���-b AM:�e.����q\�@�c���\��ږ���Q�D��@T5J��\�={H��i|yw�=��^&��'f�|@S4�a�u}�Sb��-�UB����,��' �J�B�BL�N�;E�mf�R�s�;�25�%Aݸ�ג��)p! DZ�E` ���&{����tYB?ϼ>�MM��TGBZ��[2��)`N�"�'���(�D�z1�;{�Y��Se�T�&�Y�M�k�C�ke���t!���PvU�F!�X���i1tY��S��jD���r�*_evv��F'�Ʌr���R ���B����'UƉ�5��gN��f�!&ą��f������AhT��Ef -?_-��DO������d(�&�:{[���G�_��b@�>�C�s�_��<<�x;/#�X87�63!E�?�k7���*��ʊ_���oF��2L*']'Um6V�g��@����X)0�˃������ꓭ���;:��(�hO*��sJ|,�\Uз��7���->���Ӝ<�6�����+h��F��{����5�q���+��x�$�����������o���E�)��val���p J8g�\,�ʒ�T��8LR돹��=$-X����E�X���i�\�o��!��Q������]�|pqe������a�|=~�Lg��{5��wF=Y�����y6�60���������&m]�M�$*����"�P�!������l�
Resubmissions
12/06/2023, 09:27
230612-le61labb92 5Static task
static1
General
-
Target
k9zpVbYrRE.exe
-
Size
4.5MB
-
MD5
8c250292777c8f58d9b7c64f3dd90f5c
-
SHA1
79ae2467f43b7f77d3aefe57c748eaf14ff25b54
-
SHA256
942d5043775f9a4628ec23b9549f69913f139ec413e11f73fa3cf59750b8bc62
-
SHA512
f77d2d15bd13a8969a55dfbb9df15354f768c4e228a2429a68a191c04a099f0c1f41b73216270182c0b9db5c4f7b0de39ada484d033a2a40d753b3deffce5d2b
-
SSDEEP
98304:/D29MbWAa/ajeJehwELWzxppn0RQVVC1ngwMHR4c5wLGkzQz7irjcUo:cyWT/aay6p0iO1ngwgR4lLGgQz7iHcd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource k9zpVbYrRE.exe
Files
-
k9zpVbYrRE.exe.exe windows x86
14ca349cfa93ed19d6e36826a87c8ba9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetWindowRect
CharUpperBuffW
advapi32
AdjustTokenPrivileges
shell32
SHGetFolderPathW
winhttp
WinHttpCloseHandle
Exports
Exports
Sections
.text Size: - Virtual size: 389KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0 Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
1 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ