�t]|�0����)9��j�ȼ�Q��?�A`���˅��a�P�̚D�L���1K�����"V��xL1��� �~����/�+�����_2�Ӡ�(�+ʌ�I(O9�o�K�$�&���u=[na��擁V�������w��a_�� �st��#:^���.���� ��QZ;~����v�*�Vء�f(�R��mj1x90ͮ��{H�-X@l�M��A��m �G�����1�B��l#@�v�m��#Ch/��Hz���A&��撺��3+��wX6L)1��Y7�љЦ�B�Q�V˨,��c�J� �����߫�ß`Y�G�=�y5��Ζ�]g6ʗk��������VK�U cl�dH7ZefO�'�?!�0�`�iJ_����s� Q)̣JJ{�S�5������q�*}6J4fy�/�RY�ͷ^G~s��#H�#:�M���Y<nV$5o�X��E@#}��h0E���PN37�[$)6�.L��qD��8��;��uY�%��6��h��z�[�w�G��4W��P�hBTdTEb�q��S�!N3����/'%r�iAj�#NJ,Ap6��Z@du�֟���75�ewK�r:��9�\���˗���K����#��<����L�F*��P�y;��ڞ�J@�":J�G��SUe��j�q�wXeX����|g�|�%'-ߓD+�!� �sf�, |���g�A<7̰�En)M0��{Ӈ�ҕ(7H�Q���`(є���Ӯ����B�E��X�^� {����B��p�B������-��7*�Y�0�!u���S��Z�j��oR��W�tYǭ)�QE�1�APNV3@�F�mXX������������Ԛ|�?F�!?&�䵁ۃ�"�r ���U�{ͳ+A�c��L�A��"9���)�M���}9������`@f��<ϒ�+'��5L-�b{�����;-�z!�O�GxX�c�����cĬ��m�PhiG5ߐ:A��3����6�$ۂ5`3ن�`(���Ӥ���kc�M-��m�� a�(�� I�i�3N�Gc��G�)J�d���\��C��z�T�]F>22�& ���6~��^�b��>�u]�wٿ�QB�P;�#yXA�5�#�N�M}�LֱB��]�ZD9ºɆZy@XUS=�*�FrI�d7b�h���C�fl�I��ȏ�f!��'.MW1ȭxlahG�W���N�ޟ�V)l\����뼫�#�NBb[mjf�� ��N�b>��{�z �5�4����g^��a��k��m�Y-�d�jR��2��K:$N����G��@+H���S� �!/�a1��Ak�3;�q8]^����"L=�-E��(/��f����2�n�9 ��m���h#D��XJc�?��t"z�J>c�ӈnJ��G�>��p"�W�� �3���F��Z6�ii��⒆P������� /�S�p1v����!�G���WG+�B\�<���������!J�Z��Dm�x��� �3��t��O*x���5��a.À�/8j��]�bPIJ�p���w]�D��l�2Q�I]�˕�JX'�Թ�M�&��V�+���l���S(\wD�/�Sij����c�lӶ���_�H��������X�n�־�����Ж؈�cd-���h��1�3��r��F6Z�I[A>�} I'K�����o����a���Q��m�PL���_5�Є��7���,�[�*}V��b���?���u8|+ಷ,�e��m���z���~�Yn%��46�Ha�O�4K��7����lc�R���Tn2��>Wa������2���;/�pm��6\"0�w�H�z `�N�p0��艄1�G�y���C�Xx�y�#~�_|ԇ��7M*���uNN9Xd�~b���H�M\`�?����C���s�'��/�����D�"��V^' O�H��|*� D\Ƨ*�`�VD<iP��O�!����PR��'3��tg������;�%�ML@�Ēx�R�|� �8x���*6{Z �o��&{���19�����ZR�.m����Oe�ߌ���=��>���iM�� ��e M����ގx6��X9]q�6~�\TA/�g|Yi,:g�m�����<�s�IkiN a��6<1� -34���%�a���1vX���y. }�`b�>�Op�I��������#X>�,�o�7�=�m�Wg_ZO3�-V"������^�1� I�g��0����<N ���a���J����Kb�����2�5)Fo̷�ͦ-j-���(��k��믔���o��+j`��C��+��2N%�v�3ڣQu"ݷ��ܖ���feUa�M���I�QX��6U����26��@�iq�h�oY����[ſm�n����$��Q"6�H@�%=fd��>�u��g>����b`B ���r���R�Φ�ܕ�mW�X��B�p����~O��BY��gJ)'7����gnW��2t��j�K�O�Dȼ:�j���3��2鼻�3%���}������,���T�X}��$G�=��5/���f.QS�D����ɇH�lU�8D�T�(��"�J� ���T�u #���Ss���XNB���& x��L�����%�b � 5y���x�֚K��-�g��T��_@� ��� �QJ��,j�#{<h*��s���YY ��t�Z]�č�ķ��-�������(����>�)����G����[h��z����k+5�&��]��hC��pF�M���q�� p|�w�Z��m/xᠬQ�)�+�s;��;�=����TFc��(� 9��8 *v?�� �H��<~\�dtY%8*Ù`�9^q�9������jCKOYv���鿽�v��?40��&����݁�尩�H����T���cO��z�����|k9W�� �X�H�!\�"�W����0X~�A������9���T��_���}gyq(�G�5���"1�$S�nX�Hk�����]�ff=�5���Ci!"�er7�vi����Xv>��ɀ�E0�̈���nZ L�n�,��rߌM@��4-u���pS�_1�7�M�̭Ct�8*;K�(����)/��|
Static task
static1
Behavioral task
behavioral1
Sample
f09926888893ef7d3dca096fbde7b7f3d673cf6000c451889f4c51ce44991069.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
f09926888893ef7d3dca096fbde7b7f3d673cf6000c451889f4c51ce44991069.exe
Resource
win10v2004-20230703-en
General
-
Target
f09926888893ef7d3dca096fbde7b7f3d673cf6000c451889f4c51ce44991069
-
Size
660KB
-
MD5
ad4d16e04758d9392548256004f4427f
-
SHA1
bd116c8849b046d2264437434c9277d39b9c5e2d
-
SHA256
f09926888893ef7d3dca096fbde7b7f3d673cf6000c451889f4c51ce44991069
-
SHA512
d1c69bfbc756c08badf3c6d2581fe5c36857ccd7caf346cd4489cf2f793bec96f06472ac6eed8aedbc75618aa4e163371548e4ca7dd27cfe6cbf716448d83704
-
SSDEEP
12288:2czrJb51tJA2ZxqlMq68+LHVB+w93cOUjPj2GXHdl625djicp1WMh+8Xz8/Z:LzrJdfLZs+Gq1Bh3WL3LJocTW2LXz8/Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f09926888893ef7d3dca096fbde7b7f3d673cf6000c451889f4c51ce44991069
Files
-
f09926888893ef7d3dca096fbde7b7f3d673cf6000c451889f4c51ce44991069.exe windows x86
2cefff826a895175826778c618a26c6c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord607
kernel32
EnumResourceTypesA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
wsprintfW
Exports
Exports
Sections
.text Size: - Virtual size: 323KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.date0 Size: - Virtual size: 592KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.date1 Size: 648KB - Virtual size: 646KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ