R��~�����IS�}�K��M伭�kvù��?��� �`��(�V���-8���zD�V�}���: �y��OZ$�b�6Yf.�=9������1�5�gFׄ20cnM�8��� ���X���c�V�*k,:3iY0;�eF]B���ݑo�%��0���;�U�����P,%Yu=iiƉ�פf�����J�DK56&��DDH�>��e�=ӊ$,���jo���T<m��E�^O]{���:!-Y�)�j2A�Pf�빟*_mx��,���:gq�ҧ�I���Y%�l�i5��gC�x��UZ��� ^>ә����h�&�ތ�o�Kp{o���*0��E�P'aYޫ�'��ʸ���(�X:�X|<����L[*(��9�_źI�>6e�ܜ�PE�z�����2��`Х�k���uh�eG�ZY^3 �b�.�z8�� �6l��U���� � ��P�:@q������]gBR�x,���*H�s��ACg��HX%&����J�1����M��XnSb�V� ��B���|9_����Yy�Z�T� C~V%bAWy#��H{��w�4y_��ͳ nhFTl3��5͘����\У�t|��Q�1|I�ny���%��ۗ;t�Я�p�O�݄�{�d΅��R(�zQ O �3�6�C.xn��I��G�{�R�L��Y@�?H��,T5��(/<��&�LK�� T���GJvt� �tHP��|+�1Lŋ.�LW?{�\&:/q��,2"H������SeN�ǚB`��E���DO�ee�=r.�����Yw���IyN�����r�"���"�ܖ���qa�G9���>~Ъ�;���f��id\���t�i{p���)Y�+��)+\�?-��Y4����{���A��*obca���Ix�� 9����ֈ����b2؊�,ΐ�3TWQ�r#��x�����=A&Mwر�.� �R�<����K��� �����،eo��S��K`�F�Y�rI��eo��Ѹ�N#�?7 md'����N��j�M�T���p��%���*gT90��j�����ܷe�7:���x����oG�~���'}�!�O�c��{�E���7iU;4�� g�>-����<76�Y-�}�Y�<'ÿTW��ֿ�A�(�7�lB!M6��D���*^0K�^����(��(j��u�**�a��l��S)#e�^'�CQG����7,�F��Zo���J>C���Y�8�2RD���aD��p҄��)(���^��r[��!���s!ۂ�*nn+:_l�ޝZ�߄��z�#����\��N�ȥf���H�L�|�R��p�60�h�xd@^��q ��B*�;ϔXϝ��J`���u#�"�H �z���(!�խ!����Օt�K^�ʞB���T:��g���z�d���v��i���'��c�2f�?�|f9����$Z�ӤD�ؠ�T��P,��M�c2�h }���PV��aΪl��ŠE^�过e��XS�|_K���Ȕ3��$��N��WC �^�d����V,,�����S�^�2��V7:i 癨k��Ř��0Dwe;79���P3��h�݀ې���2�A9,�4Jc'�D�-�:[0����wj��C�{#!-z�Z� 1hm=*����H�Jɬ�"[���o':��Ð��*Dt?�ՉY����>OS�>C���?P�o�|�K�����0<�T1�n�i��aKc�ɺ���i:��T h���l_�D܂EQ�3�N�*Nc��Ra���Z�y��W>��<�P����i���R�LŨ?�D� ���F�p?��dx}Ͽ3��~At�/ \�� ��N��gys�Ρ��<����� ����(_>���Bv�D�B�.@HH�3}���~�o"��7���\a���â��I�X)|��^ϋ�4��k17��c�I)��k�٢bA=;��?1#�[�%�>� ��>|�'�����m�V�p���kHN������f��h��y"SJ������O���\��B������xՈ�T�6��at�o�ߒIe�J#Y7Bl]��OX�� ��&��+��1���Uu�7�/��)��R��X�f��2��'G��QJV�]�GR j}j}���}��6/0p�Y-�"T�t,��|�bo��Wci����9}�2cn�٤Ҕ�KS$�Z�s1�_ē��J9�?�m�49m:���1���A��f���%�j־R=F�~��\p������p�#�����)���;0����MZ�Zy�װåe�ϋ�uV��JD�AR�f`��V�V*�������M��p�*��-[��ao����R&����,M��Yҝ��w@n�"�L��q)g��|�%�!���_�H. 42��c�=�k���:����g��XA݀/�%�p��� N�Q۫�M���|1d���B{\�e��l�b��|W���������7�\����g: ����]W��?�3vkNH�y>��g�{�)�uJ������:���bA�0�L&ܹxk��Zkb4��%Â!���{�H���x�"s��{�~��A�����S>�sv�$�����.�w/��ն��&�fDEYe?K�:�gb�2�u'��02���&�d(#�Kc�k"�TDĔ��W��i����`h|��������(��f��VC}��Ju�=v��~6%#�cXb��ӹ��̙�o"-wn�3�����I�ۉӁ����������J���O0B!|}��$��(t�]z+Ф!=�1����<�!�p3P��߬��0B2g�J c<�K͞�Sc�s��fDq�<P�0�ܟ��c=��麌u�I�t��r�y�jY�f�G�������?n�������[Y����������-D+으Z�{�Z�E��h�-��%��ɹ��U��1�����}��0*��ɒwO������� y�8*9푮��%+��6�/��ƀMK$c)��%�G0��gE/fA����� ��1p:ɲ�@"z��Ͽ�Ib�Wo����@D����F��
Static task
static1
Behavioral task
behavioral1
Sample
8c1d1fefcbdcca7c7561a8f6912d3c33eb307ec45e93b191ca2dda7f193119ad.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
8c1d1fefcbdcca7c7561a8f6912d3c33eb307ec45e93b191ca2dda7f193119ad.exe
Resource
win10v2004-20230915-en
General
-
Target
8c1d1fefcbdcca7c7561a8f6912d3c33eb307ec45e93b191ca2dda7f193119ad
-
Size
672KB
-
MD5
0fe38db89bf5e9cb74a270c135ae6e6e
-
SHA1
862050855f0880b73ed704cda9dad21e383d72e4
-
SHA256
8c1d1fefcbdcca7c7561a8f6912d3c33eb307ec45e93b191ca2dda7f193119ad
-
SHA512
65a1d7a5ac3bd31c8e4d6dadd774e426cbd50d2d412a3176c3408007ffc8558015c33cf09dd670ca2719f12c94c85a65268a60681ce900cf40001a43aa82d710
-
SSDEEP
12288:hR2XdQggoZEvvyMBbbNP7MSbN5jjzmq3r35Lnbwa6gAsoDcN6:/SFgXvvyYJM4NNF3Fnbwa6FsFN6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c1d1fefcbdcca7c7561a8f6912d3c33eb307ec45e93b191ca2dda7f193119ad
Files
-
8c1d1fefcbdcca7c7561a8f6912d3c33eb307ec45e93b191ca2dda7f193119ad.exe windows:5 windows x86
6248bdd4042c9ff60952d5ba9f5183ea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord607
kernel32
TlsGetValue
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
CharUpperBuffW
Exports
Exports
Sections
.text Size: - Virtual size: 325KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.date0 Size: - Virtual size: 589KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.date1 Size: 660KB - Virtual size: 658KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ