�S�����>�k�|m�EG�'��D4�$Kl��J���D�)��=K���iGA��T�D�F��7��� .�Pjr�sb���+��l��-#�D[���ǵp1�06e4�,CZ���"��TW>s�C!R�_�"�)&�k�ZoŔ>����U<(� �0�#����j�;��������T��䚑�.�(r��eaF�A�B��C ��H�?Ӯ�w�ळ�����'J �w��t�[O���9D^�#)0*A�(��a�=��%m����*t9�E�K��~�nTZ����K�/ٽkȌ�g����H���1z�/�W�DŽ}��2�8��A��*_�b�$�aC�4�**����~�n.�Gk��n1+��,K�>�n��Qe����ީ�(�JNoe�����x�k���߶��Y���N̓���k�����[����v8�X��È���s�����GÀ>��Ϣ�iDM�2�5.:g�U�tİ]4�[��._*C�Jl��aȊ���s`4vy�1q(�B�!5[���f��$���6��=mE���M����X��d��e$�������h��ZQ� Ÿ���������sCs�1�+=0ӚՍA��Kh�y�.X��+�%�U(-Ix��0(^ބ�w��⿑��&�%�3��4)p�\^���T���I (o6��.�*hJ��Bwُ�`��;��5���*]�j �䁧��B�R��&w���E�,����0�T)�hl)�w��3�������I�ŵG����#�3�����{n_�np��G���b��Q�8za��7ql;kb�����g��$����Fa䠪 �O��,�#�~P ���D��V��A�cO�Ut�����/&��i�/@��Bf^U������F7eI��apb5;V���bb�b�w)"f}�,���1u~� )L�����@@4@= �Ň=p��pHv%�?��t|u��{���'��ȯ�>U�)��{ I��q�W�E�ɶ�ZVU�n��wȧA�dq��{I]�iֻ�*A�_��@��xx�"����H�����<�Y�}_-~��6��,�$˗�۵y��r ��u���Ԏ�\E~����jn�X�I�](h*������u �sp�B��,(H����a��m֍�!�K4�>��w����K���4����wZ��0f�� [�Nd}��G��G���b�`��!Q��5#zC�ho#�IՆ�K��0$��̷�=��1k��0Y皳g�&�ty_��4l�Sv<��>�㻞n�| �G 1H�a��`���7V�����V�E3�\���t����f���+�ʛ�j~��6��֙��|_�����"m\Yo�2�Xa�_[7�,g�ם~Rc4�#��|�X@�Cͤ��0x]�WP�(���� ��:��!����b���a���q,5���B��ݸNlƻ��o����>���5%=m~Z���|�H��F6lk�kh�?M}�Z캦5�1��5�2�&.4�9���~���DoY�"�A������s����B�E\�����w�6o�:^�O�(�`��]�Sh�"�}��}��h=,� @2M�f>�2b��ȴ�����t���ْA�('*��7F ���L���!(���\�%��vb������܂�� �k1�k7��8� �?vWEi��f�c�q+}�d|xp�T[@"Z`٨�-�KBL��]�}<��8}�+��~�u#���<���j��<e�\d�e[~��~�iD 뭔H@�{��q�/���-���o�3-�m&���4�EI�QY�N��q��� ����k�U�l7T7�t~ܠ�rE�����~-�{�b�?�Lye��+�(�I��.��t�LH'� ��ҥ�|�H�ӬˠyU��XK����fM��Í��"^X����P�,���?��������wlU�����,a��x�Q]�9R�'nZ� L�� k<���S��f$��}�� ��y�B�h�P�����ٖ�N�91''�\m�y�l} ��/g��.����fH�jN80/m!�<�F����p �&�8H��]�u��̗��b����z*�����(��]Ѹ�Qw�<�����xq�,@_�7�����E<q9?ʉç��<��,3�̥�n�F�h`ʙ:��KT_����:C�+��)Y8�ݬ��2�X,Yg��<zƯ�V��v5�i��</�(�-Pv>$ы a�~�/h�JqJB� c��U�@�.�.��+û@F�p@GQ�/��>lH@H�8a������s /�݄4��f%�㤮��'�ɕZN& ��$��� �K#y(���?��*��z��.�%�&ѕ�����^Y;��o���������$��pFS��}Ds������h48��O��G�����l��0� ����0�-Rt���A�����aj�%��mefs��9������o%~�C��1_9@�!���]X�G�{u)���b�?����@��"����n��o�&�6'5�A����=�\�N��<�hY�Й��tr���5�ä�LV�l�o[� ���ߣ>�$���X��~���ҡL !j��?@���: ��!�HK�:�x�,�ݪ8v��'UL(T��K���2�sY�VZl��w] �IYIy5���Q��(�N%2گ=,��8$N6u2��%>�Oo��Ʒ��'��w;3���-�KJ��L2Ť�p��ۜO{���k��-W��3B/��� �0-C�b�O��7��O (`? ٮD�WfS�;������"#��uF �f�|��[���ndGUN�sN ����B�&����e��~0�r����&�w}ߌ1��d������t�7����s��,����χ��kx'���|:��Y�@�H�H VG���0G�Dp/ǡ!bl�p����ׄqt�e�܅��f�s�Bs�)ʡ2��W�:f��d8=��C5`/���,h �����2hdvT���w�K�����ŎeQ�T-��&�)�Y�Iy������Cn�I�E�c�����g�}5]�\����g��B"�k�bK��N���j�Ra���p|E=��^^�����ǪP}r�5Pҳ+\~f�c��ܓ*�e��s}/ɮ�n�m��[O�M�װ�r5��~�#�("N�25;*��ϱ�){�]��,��"��v�Y���o�c�q�K�uJ���pF3 ��Y�1W[�L3��"�a�'�������QwJ�5ٗ=����RZ'ӓ�,E���ƛ��j}��33k�<��u�+�q �[]��9�)ZV��{ZAj�0�t+�I�ӳ�?=���FOM��4E�����ʳY��`��PM}���_���&�U˩�7��́=<������%W���T~x'ވ/��
Static task
static1
Behavioral task
behavioral1
Sample
087debb5b43c07f011b4facd7577023c5f02f16b40395ca916a9ecc769c737ceexe_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
087debb5b43c07f011b4facd7577023c5f02f16b40395ca916a9ecc769c737ceexe_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
087debb5b43c07f011b4facd7577023c5f02f16b40395ca916a9ecc769c737ceexe_JC.exe
-
Size
5.6MB
-
MD5
0e97ee8987c0e05c0aaba5ce86af3f14
-
SHA1
d6d9203cfc3f9ce03a7731c15bf03bd207dc9272
-
SHA256
087debb5b43c07f011b4facd7577023c5f02f16b40395ca916a9ecc769c737ce
-
SHA512
d3b93790f96ec0112c87f60383c9d5a71c6254e67db943818fbf71011244322c39a1c3f33126bd3bfe6562ebb4c10ede84b010040a26f2662e3af4494030eae7
-
SSDEEP
98304:mORvd2mg0YAHzD9SKgZdwWOt4C3xqZPmn5sJ6ez7qpbkIQWvuioLKH7whZzAaFmF:mMF2m1YiP9SKgZdwWgt3xqM2JvqpeGTJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 087debb5b43c07f011b4facd7577023c5f02f16b40395ca916a9ecc769c737ceexe_JC.exe
Files
-
087debb5b43c07f011b4facd7577023c5f02f16b40395ca916a9ecc769c737ceexe_JC.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 59KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 19.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5.1MB - Virtual size: 5.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE