#���`V�����J�ށ|��H���c��}���A#�R�Bl����^2M^�S���OR�!N��u�m�e�>���Z��b���Jv�`ׁf!'DDl�=��9$�֛����KN���E�-D��W`n��|҂4:z����=7.���1+Q➲-]�,�������R��o��>�,:פu`~�X�:�ji�gUkn$P�noϴ����C��<���N�fy��_���3��^=g�N��V-p���&�c˂��G�4�6+�g�Gy�W�S�d��G�NQ0c���.�E�h�Id����~d���~`�}!��9��-�S����MMH-�����;��m':�6��6\}Ͱ˴��2S]N�PL��=��|�E��H�)G�v��K��� �Rj[�d�+�=v��&�[�{�2�,��b3���,��?Ӡ����o4ߚ)zq1�qҟ~�\�Qj�9#���<@|���j.D����څ����L���v7u'������N6�kB~�V奆�0�A@���|'I�����+��oZ��P���Fk� 2��e�4�W F(����e��n=%��?/��so7���5�.(樞w5����cP���h]�˘�c�*<�^�m�N*X��p��I�NŘ�T�gqj�Q���+�ܸ/�� �$��8 Y�>��i�[H��8cU�XX3~<]�*W2�alÍ�u\<�4F��������CzV8�{H���ُ�lWT�V9��3��� !FVi9�Q9<�WE�>���qC�������x�E�;��iB�����;n4�%�ms$v�$4LM������ ��=���N�/^���4��s���� ����OuM�շ�(�1�;Ze��0��+�#��A�ʸ��}sS��R���T�<~���C������ΔY�ޅt(w���Pe~�G_�p���~�E�p�E���nj�=6�z�K�A_1��Ӵ����]���(-��z ��XlZy ݮ��� ��O�����w~R�d��iP���c �Jɋ�Q�э�O�]�#�f��L��}���}ဣ��XSM��JP�0�� ��#mU�Ma���t.�3K&Mr�q3�3��|J�G����+43�j�eø���1U�O��\u� =c�)S�[ʦ�UN�$E����H0�/]8�2)�B)�T@��ר���MJ��P��pT��Yc#��Y��][��;ҽ��>1$�t�I�rԑ���f8T�ʽl{ą[7 מɉ����X�,;+���g�H��\0�nm�"�n�� 2���Q:�[�&��,eV��a/�Sa��Y6"�hS .�����|�)E|:�_G�\ w݈��>���bv��?B���YJS������~�>3���WG�6�)voX���I'H�������{P�Ƣ�յx"�]9�o���sj��6g�]��!�lXK �hlC:�@.����]��忆���1��}*�X/_|�����k����Ͱ�W� 9 ��NoW ⭪|;�d7�"A�,yx���ׂ19�)�m�w�~`���Ϧ4�) .���T��E�>L�L�Y�A��� :|9����u}p����Ȥ�ALF,s��h���Z#���g� �G>��I/K��bǺ�(m�ɡ(�$>WQ-���p�2����| ILw�����>q3�&I`|����(��gL�E7�'�̹!u%#!�0�u�o?Fj4�z�11F"N���ύf���WfT�.�d��h�ˢ���3 �#������*��X�1z�]0�����A͍�hL1��w7�nxTl[;���U��n����:f)j��� :��/ھ[)��9\�R.��V��F��~��>��-�>����I� ���,�k�Njl� �ì�"��9AL2�?U��rgam��ye����3'���m����!+J������G���="jv�E_��y+�M����zʦ�CD�[������>���*J4cm�c���okeܭ���P������k�qDՓq�ϭ`�8@�3j��fg����l՝�}���%d�Oi{�b�&.��� ���A��2=\v�a Pyl��i�V�Y��i�Y�YN���˶i���A��)ʞ���*���揯/����dy������V �Q���P %.��)���#���gԵ�R�# WT�,<�7�����fT�3���T��|$�X��#8V�w��l�D��ę J����J����$ϡ��+���'�� ��͠�<F�6���%%sL1�9�:�Ȥޯ?X��-mc�w^���[}�a�W��$:3���5���{6X�7���`�!��]#��_]Y�v�_�/��N�K��=a����������U�y�Ԟ'��o��u^�/���3�d5���W9�"R��AF�{x1�_a�����,l�����(�6�o��jj�D ��{ NI�#� �3_�xw� ��J����z�/f��w ����(M�}_Aw�7�{7���(�^,����|�S�7����d�<1��ܔ؟�[�����(�8Õ�MЫq Yh�DRL���{��sD���T��-���dK�|���/���2X�Y���p�Ѽl�zV��˲�~�N t���M�{�3����%A���>*7��J}hC�<�f�15& �W�����y!-ٜ�� ��$5�͉���}���/��J���A�"�Uv�J��r�pD��V��H��-�)mkX�@N������������E2�㺏<�uT�A|�;����E��P$�}i�>A�iWՋnj��z"�h�G�O�K;��k�Inkݥ���� � IX|� �?4�`�փ> �r75��3�K�A�h�x�P���I����9 ��-��}�z�����Mݐk*"�N�m. "yf]�S2D�td~ST�[��nu�s�%��g5Hl��U�1V\qZ�����o�n�v�몧��t�������U�� "�* <��IFw�cY�2ROs� >p�pc[�J���*zo�k���c?Fہ����R��G������d�|fY��:ȋ����a� �u �[ �Ӻ�tޯ��2p��v
Static task
static1
Behavioral task
behavioral1
Sample
0fb3f81b106ba8c5b2974e0d007575fc8d1fa3f91917691925222caf0ca0fc04.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
0fb3f81b106ba8c5b2974e0d007575fc8d1fa3f91917691925222caf0ca0fc04.exe
Resource
win10v2004-20231023-en
General
-
Target
0fb3f81b106ba8c5b2974e0d007575fc8d1fa3f91917691925222caf0ca0fc04
-
Size
644KB
-
MD5
30b3b469b8963343ad830c9960a99fce
-
SHA1
8f188cc90d9ccd397959265affc7f326093a9128
-
SHA256
0fb3f81b106ba8c5b2974e0d007575fc8d1fa3f91917691925222caf0ca0fc04
-
SHA512
e9578dd09ecbd258cc3575a9fbd1d35831b0a29bfc39fcb83e1d6adb9ae560c51d97ac482ce46b4a787e3991dd483cc9e2d61c7c98d00397815c5e4814853814
-
SSDEEP
12288:JxKnhrQ82dp3/YPTj6KrE6L8WKSVVCB8LH38Sw:6nhk/pvuTGKrFQwVEBGHk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fb3f81b106ba8c5b2974e0d007575fc8d1fa3f91917691925222caf0ca0fc04
Files
-
0fb3f81b106ba8c5b2974e0d007575fc8d1fa3f91917691925222caf0ca0fc04.exe windows:5 windows x86
645779965074a3664b4d7de60a609448
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord543
kernel32
GetSystemInfo
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
MessageBoxW
Exports
Exports
Sections
.text Size: - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text0 Size: - Virtual size: 576KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text1 Size: 632KB - Virtual size: 631KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ