%ݮ����>���O|�gbV��a�hRl+�K��l�I�Y����K�2�.+�l�Hd����M�U@~�kY5pQ�8[pR�x��_=��5��j�K�3��TEdp�����uo�<0X� ��?�{<���rH�.'�M=��Uk�I�}�r�QH� (�m�\B5��"��/<���="�.�A��.Ih�sٌ|���_FWU��.'���Eh��y?bJhs����A�F|���}��=�h6e��*S�2E�)��;�d�ukx9.����j#��H^)ε@�������� Ļ��eޭ�C��<�֕�`n��߃-l�&����q ��������LҘ2�{�S1�N[���KI�֣�q��U�2Jo�06����ӧ�EKdN|��wJ��]����<1{��e4b��5�?�u�Լo 1��9ӓ,�̹�J��x$�,M���Dm@����K�2�y;��S�s���Q"�:HfY�!S�V:��ԓ��?8�sqoO9�>��e[�������rʆj��MM^��&襆�lilU�+�AK3p-��VuyV��e���t�g���c;��ٻ�J���?��� R��/�Z͙͏.������*i�/�7�37��@!�cK��ߐn۠�����ݛ2��"�>b����|�-A�V�4�B��>��f7߱��6 �e�B��DZ���۔���5��W�-�r�b�x���ލY_�7��&q�̾[�倨�d������8�gO�2x��r��`�-\74���&[5KZW:B�]��<�d��#*�%>����X���Wa!�u����_��|nk�� ��f}W�j�tM�P��.�aҁG_��3��UJ��˪z>�Wä�E8E��)�r]�� �7g�� _�(��m������Fso��!�Z����=���#[�$^�oJ(4?aWՌ�����|S!�1[Ht��{%�œ���IJ\�+�~B^�����?�A����d�����[R���E���?�M3�������#����o�OI����5Wp��>]�t;��@�sI4�����u|��\+@�2�3z����q��Qk����-��O�o{s4O��Ѡs�}�1\`j�l��7b~���1��c�k½��BР�q�+e3��5i(�J�pc4�:oLU�9ߖh",�ӗ�������$�Alzߗs�<Sm�A���M[3m�i�D>B+�kH*���]�{�\�d�Q��� ^y�����ovfҏpB�����K� ��6d'�����?���OG�<ئKY�u����g�x���������Дa�����U��y�DK����u�U�>�s�s ���%��ϴ�?�L:�4mr(��� E�qz.hֲ{��sRd��@0�Nԅ�"8f6$+Ui7ua�3�[�[��-,8�9�87!v�&��f �[�Yk�|)L-AIĝ=��M�@J-�h\���� �=u�eD���Z��wJ��5�RRj2x�������M�ai.Z�������=)������^G�w��y��lD"<�"|&�\7F�`�AN���N��̎���*��ɠ2 k*��EjI�Z��:���(�4Q����ש �f( �;���2,��y'Ll(e͝�R�wQ�y�7*ʵ\(�6���i�g�`��Lν�qzdz��g�LF>���vy4�F7��֫-��RzSjf�a�~���͗>� �RThm��7�B�����V+Q������F��_�O4�7�>g�A�k" ߈�˭�*e#T�XdD�dB�D�"����1�[S8+��"D/�Yd�_��(�Xؾ������XӤ�2�i-HͲ�%�8�)���C�$����C�' ���h���Q �Rl�AP^��c0�^:���=���M��l*�s�F��T@��Йx%�oAT5�!%���a �>���*K�]Dk< TކWҌ���1"�W/��a�w��sH��9 �s=�D<9��j�aN�)���o����,��;��Cb6<�{C|��u;�f�\q�a�K���\�������S�&�A�>w�x��Py��zJ�S��-D0vN�Y��1D�=��IU� �[��>6g >��}�,ҩk馵��r�f_ �&�qW�.`E����>i�U�LH>u�0�D"m[�H��R��1��х_����e�W������� ��SIR�O�]$1��ˍX�I%\l�=MD�D)��-3/�5�(J|�^�U�� ,f�b��kA#.LE@K!u K��f7�*{�a���8L�:�Oߠ�V� U|l��U����!�$ ����*�8�ՠ>埵�GUd��j`�b���������]�� �%� �>������=ȓh���g }𣦍B�����4%"Hx���6�r��8b��k�)�^HѪ�o��e�Z�9dnI⛮ʶ>�l%�$CҜOƣ����:<]$:��N恔?Fi9�1�"�U��gR�օpЄ&�>�N?2g�A5�G�S�X��A ��x`�7�l>K����z�����Ek����&������n��>��v!���r�(��F���!��H�-x����t[��㭕od:��8K,�p�b�A�"�a��4�p�$ ��Tf1�;�_"�� �x=nk�}v#�h=""��:Z�pB=����M���1Cl��U�J�����cmAa9������Yŋ�凇�7��D���YԞ9z����Tne��`�����'���E�L�Bc�˝�u��z`�s���[�Y���y��0ž����e��*�����������<~�>�����q���W�d@@�o�`=��v�,�Ld��\��ZN�h�#���O۪nrh{��6��ǧa�A���c�i�垞�A�������6��R���c��{��*'-�����~���y=W\w4�.�����.��O�9n�)z_⇳����5�x=3t�Y{�r�O������=2����5� ��[���Լ��'����$�I��s��Y��zq��!R�V�{�gV�k�I|X���kd�u�����X����<�J���A<0��dy
Static task
static1
Behavioral task
behavioral1
Sample
f0ddfda11fd8b355bb417cc798f722e1b2420fcca330ed7297b8728840337031.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
f0ddfda11fd8b355bb417cc798f722e1b2420fcca330ed7297b8728840337031.exe
Resource
win10v2004-20230915-en
General
-
Target
f0ddfda11fd8b355bb417cc798f722e1b2420fcca330ed7297b8728840337031
-
Size
3.4MB
-
MD5
90e5b25868bd3deb0ddb600d3715b587
-
SHA1
adcf95f2b790222088d21db11ff5164b9257004b
-
SHA256
f0ddfda11fd8b355bb417cc798f722e1b2420fcca330ed7297b8728840337031
-
SHA512
448497c8395a4ed1cad1f80b15077361614ecda0b5a05cf02fe9ac456e7c66ead3f1c1989877cfd69ee4197f09af2802922ed99f0018de55701675d1f28d804a
-
SSDEEP
49152:F1M00Wc5QwUxJewOwYpXV24f0dcVUIDdTzavKcURrDIyA+8/NuWy7YgFuTkF6Rt+:F7c5Qwxzwic4M6GIxPavKg+8132xt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0ddfda11fd8b355bb417cc798f722e1b2420fcca330ed7297b8728840337031
Files
-
f0ddfda11fd8b355bb417cc798f722e1b2420fcca330ed7297b8728840337031.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 2KB - Virtual size: 3.6MB
IMAGE_SCN_MEM_READ
voi`13`1 Size: 545KB - Virtual size: 548KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
voi`13`1 Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
voi`13`1 Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
voi`13`1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_MEM_READ
voi`13`1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
voi`13`1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE