�(f*���{?�H�w�5\���k���Y�Q�|����e�ܔ��w1���L?�V��c�QЄ(S��׳8��r�@� ",r��*� tu��h�f7̠���n�����<Q״���K�`���L��oA�َ�����|ހ@Ƨl��7�{ 91���,���=T �8`kSTw�)�%����aK�>�$S$ya~�+��n���p=�� ;$<D-���~� q�q2�(���ڹ���no�:m챉��L��!B zA9�� :*�ʃ�{�����`:��p�r�o� Q/Ľn���M��a t����h�M�-�m p9q����(�+��P�� �w s�ق����z�!��J��o���-\��O t��/a�Lt��te/iT��\o�f�r�C�Ig��-h�� � �Iwpa�,Q��`�J�hG�p�LWK!�P�_�~(��$�a�6��h�P�wR�Z �A2��|q����h�9,�\�]�l�^,r\-d:��*�D*�W'}𖥢��q���6�6;�3��5�h�V�O����=�U٫�i/��9_� y.���;�݃U�h�+�c;� ���w@��p����C/���~d��g�D�J��B�Oj��9��:qꛞɖa�Q�=���l�,�Ǫ�NnO��a��W��F�A�ठ�j"{+7�J�C�4�>��WMڗ8���D�d�����R,cbCO��=�����'���yB�x 0��;�̀�&;���(�+c�����L�T�ؕ��d�&ڡ N���M���E��])�kh[Ρ�=]bE��A�7 l��T�B�S���UG�J���]d;���7H.K�E N�i�v$���M�* ���i���i���`�e4�(�3�_)�����w���zB�s�����q&ц���8+�!�R1�W�Z�y�7�CG���*J��}��Q{ ;Y�1�i��5�����o�+(0�HA�.�Y�=v��qO0>u-�,ݬdYy8�),L�+�I&7!�675�h���*yRGK�.�B�GzɳP��M�>hQ�`��a�.+�׀�c���i�"I��쁕�=������=�L]D�_:|�Ȋ��@W���vկFiìB�>��oHK��nnϙ��o����M`X1���yt�2�^�lL�� �穠qE�X�z���:�0�J�`����d��(�ﷃd��,�E�b�TK����7�|�!�ʻ(Ԍ�x8 ��4�U7��x��(cүo�;nn�Ӈ�*�2Pl�4K�a�.u���rի;�ŚcE �үr������3���y�|���a�����۹�.T��[��z�`�_p6�-2����8����Z�����P9�r��V���,�s�Le}�T���8�����6���Q�C�s��&�Ʀ'��2���JnT�fviz%�lm̎p�o�`^*��=uD���{Nx�&����U�82�����[7썷.g���_�i&�N��V0�o� fU~-of����"��h��H��-��H���W~�n .�b���z;�_�{l7��9x�,��a�-0<P�FcZa?َE�&�����Xc�a@�#�����q�n{�|w���|��mC�V9�� �לBo���_�P�K3Y}�3����yތ���������!3�����S+��o�%�u�}�B�f�bp�+rUd��ܪ��A]Yk��:z�n�k�d�D���RR� Fn�$�����=�\([;�jN��O[t^S(�٣�$+'/f���B�J|I� ��uX8�����(�N9iByZ�w_�X���!��,� ���ǪV_F��1�х �h8-�F��`��!�L�d�$ �ފ�H��E�X+蘝S�SZ��=5��dB���_������ B��^�j�,�2��x��'<faRon�W �H���r)Xϩrk���@����UTzЮ2\����kZ�8�9�k�L�#R�.����Ϥ 3}(�F�����H�����I��@%�z<m.ރ�1P�*r�0f��O��TJ�̩S�����D�H�p�y�k����a�lR[��]c�,��-_�<����EHwǥ.�pJ�y�b�9S�c�{�`�'UD�%:C��*i8u�/��O�{� ��R�Û J���@C��Qt� ���<aZ���B�5�B4�J��t1c;;ԫ9�!��Iȵc��A��тP�G�3q�������z����H���7EK�VG��]�A����F������L��&_v�[s���5�m�}g�^�p�6�~g�(�"X�9�):m!6Г���՜���ݡ����!/s��"�'��Y~ ����4�6O�$J>#�P�]�ӧ�����^x�4>oz�,UP���ǻq���״Q[S�)�{h�/ �C���8U*<���u���|��YD�]���?P\��'G���?���̓ˬ �ѡg� jx,,ң�2D�پ]a\y�E�T�UR#�N��;J�\�I�>&/�:�_��_�4�P<Ph� �e�K5�4�fأ�`k��CM�#�?H�j�2~RU\|W��v��p*^� e����,J�{��RE�~��} ��gb��k����p��(��y͜ ܬ�g^�#E����z1��*�m��-3y��c>F����������H,�~��J���&Ӊ������φ�[,��~���lj:�F��p�aú��iP�Jg�s��*.�^���gm�s�,Q�8�4s�"xC.��0 /�$�S�Վ�-���Yarb?�a+��Y�f�53�'m�/ \�&��g��k��n�Q�V����W:1(�݄˒¸�KQ&t�?���ҍ���gʿt��� Ff��ɣ{�wH��G�~�ݍ>��M��18\&���RQ�v,�_�$�9�� HL�;9�6��G��� So�3��(:�PZ>ŕV<Ke�,FZ~��e�g�Wb�DBԩ$�s���dU�^Y��VeT�e��M��Hex�����u� TpN��V��Ȩ[\}lr�í��/�&gn�B2��݈q�c���L�����R�Y8N�y *q��\JV3�=��-�����;���+0?���e+z��e�HMjD�H��ގ9�>�+A����?)�f��i����i)8P�����Y������r�uO��ޗި�g�ըiv�鯦|�{�ip���5q��Ț���?۲�u���EC�5o�蟚O�@P�`B�5��uHf�����@i���g�f!����A�S�
Static task
static1
Behavioral task
behavioral1
Sample
3421ef6bca548802e01ae25a667f7a5f40fe1e75ef8e4b8d4b8a91ab169b0108.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
3421ef6bca548802e01ae25a667f7a5f40fe1e75ef8e4b8d4b8a91ab169b0108.exe
Resource
win10v2004-20231025-en
General
-
Target
3421ef6bca548802e01ae25a667f7a5f40fe1e75ef8e4b8d4b8a91ab169b0108
-
Size
2.9MB
-
MD5
c361e81d8bc4b7c5c5754e8573937cf2
-
SHA1
2c0f67384183241e16e7e1f89f994af5ddbc1cf5
-
SHA256
3421ef6bca548802e01ae25a667f7a5f40fe1e75ef8e4b8d4b8a91ab169b0108
-
SHA512
1dc6b3248c0c5833a37511d004f4ac40ff4c59022628710dbd78f0d592d8eb8c200ff1878409b9508df6592b3ccd53979b1b60977d9c2c8e46d09d31531b9296
-
SSDEEP
49152:FQK42MpA8kkCLsWTXYjGOxzv8t/OmaBHow0kdebGa8OPDqtm/KRr3OoPAF:FV42MpA1k8s4XYDxJmaF2kde6a8Obq2j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3421ef6bca548802e01ae25a667f7a5f40fe1e75ef8e4b8d4b8a91ab169b0108
Files
-
3421ef6bca548802e01ae25a667f7a5f40fe1e75ef8e4b8d4b8a91ab169b0108.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 328KB - Virtual size: 664KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 288KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 36KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 192KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE