����n��s�qj�E�6�����K������~�������.c��@�e������B����@��F� 1�����A�,V�A��=�I&SeU�}��sz�9�;TA��paZSq�����uN���P��˘n�uZ�q"�8�}6��z`�m_K(��E�h���� m;?d��Ҟ^M/�#�-餱�iO������$zo�I`�-҆y&���Ʌv7�J� MS�<����H��ܛfη+!��}���5B�j���E��h+l.Ǿcx�5�o�c�"�VV�9���v���,��,V�v�)a�$�g�kL��A&����F�\����`+y��<���E�����:��zd)�+��)Y�� ��y�{����W�X����c�Zȸ��+���_�P[�v��h'O �nz��Ef���L���������e�JvN���J�9��Μ,�O���;�@���<�L2���F�. �3!�>�v�/L���PR����}�$ �{¨Tσ�e�-|m��A��<��.Ү��7i�kOv$b��l��?�K�����rY��poP�{�g�<Q����M�|�?Cɕ$�u��8�����1�ڣ^p����XRş`����MK1�;:zF��=X�-�.މ��l(4�ڗ+�_�b�7u��4���}��%�Z����۽Ez&8` �F% �4 NǿT�`��M�o�[+`t����M�C����3��k��,7�Q��wesYB�nij2�43g�2�*٩)�w�������E��곉'#�Pp��6�8�s!Yc�٩?�o��N��_�c��4E�MPB���R �[/�+X�ަ�-n�d��[��YI������7�r.�F��H6}PG #�/l������e���[��6cEצ �c[Eɷ��3�Fa�� .���v��1��pu��n����(�j��98*d�܉��������&�2��92>�5�k]�)�m��Q� �����TJZsAa��w��MزN�#n�S���.��}ʷ��%��VO2���h�K��H,[I�9S��D/=}?���&5Mz����9e��.?�g���r��G](����/��k��=z]�'�-v�:��d���D�.i6|>���'ǒxL�� � ���~hE�=�;3����)��� ����",߬�/Oʫ�Z � ������G��)�ێ��p6�#}T��{��K��9�=��p��ڃ��s⽝��v�N4�^g��@!`�t��Z���F��z?"�] gI�T���6n����3�#�Z�^��2�x�p$!x�ll�Pz�/�z+o��l����S�p�|�� ���Ǽg�e�� =��+\��-u'�P>!�~� �� ��ԗף8�+�X��;H�����}�D�]c˷5��ʹ���,�'j�#-�y�:�I�}_]>����LZ}Dͽ���zn����}�bܚ^���e�gb�X�����jjz�g�Ǣh�n�MX#�*��A�<X����w���F�}���G0�9�����}�"�vKlCyH�� ����8�2������ð_'���b����H��-�U�U����*��9�c2F����P[�è��d8M�� ȹvJ|!g�M�)}��U�ߎ1MN8���|��|����?�f.�᭡�&C�dC�8���f�I��M�ŜD:��Ca�3�m���6v����fp¿w��(~st>9��y��^,t�@w筕e�×��Q��O>!���kd�,!0M` m2H����+��(�6�La��"�c�%-�ݑ�zm>�"��n��y����I(�g%8�*�|h���B����em����m̞��~��?��Ezfد��G}���q�0�4,4:�.�����Vӥ��op�n�G6���x������%��5�XwVg����D���A4�ݚqQ=5~��>�"�7��5�pGSW#������<r��ٔ��h������R�������@�i~��zgo� ���k���6K'�7�B���Ys{Y����dbt)��F2�C0Py���)p�"�,N+���� ibk ��>��e�ʚ��u�\M}ی��G��N�H���.���K'�h����ɯ��.&>#4��v�:Z�Lȸ�� �A�s� ��5���?����YV��S��GJ�t��5�����3|���u�կyMo�n'u J�Ӟ�������\�$���F�<��G{�I]A�� ����2���?Qͭh�FX0wB��1��7=8����,ιƂ�H��������&�9�(_zrI)�.#-�+f\��ۈd�ߞ����D������RU��.ZDɿ0�֘eG ����Ƶ�ho�v�(��<��#��ԿP��ԁ����e�|�}!���|��I;KzU�>��\�7Tg����yG�$�K�n�y+?Y�"����,V��H�3,=�V�ۉ��"�&_-���{'��qw�30[-������aHYv^A(�����9����鯩��@�H�6x��$�^�Udϟ{�t�n, 솏t��7B"��jЭ�!25<V����U�A���}��&��VF�|W����ϥp�[7F�u�л����5,�噱�����lЕ��=�Xu6�i�8_��'�J^(��t�b�"$������;�;�e�U�I�l�`8�i��r$}�c�����������ܚW�idl�~T�G�)#b{����ʲ�e�!�)t��i`�K�$1Ly�[��Bb=Z�;U�-�����_aU�!hO��+�-NX��J%jt�lz�TR�h�Qy&=�V��v�Teo5�ǝw��oT�aL��EQ@$�?�y�b>�oC�(3�( �%��b�6�����L%X�L���=x�l�7�Hͤx�v/���y�R�ۉb�k�j9qʵ����v�hN�ݍ��U�W�]���8��3�-�k��'��ᇈ��/�����L[���)]�i>q-13����ն�۽��o5]����&�jz�s�^Ǵ�ey������y?�sg{��((��93��֓JK�Δ4�J�nD���&�.�9��d�eɫ��Nn��(}{��;����o�t\n��C���@�(�iV�b���D¹�B
Static task
static1
Behavioral task
behavioral1
Sample
bb2fc16c62d54f54058260038c8fd8f4626483cc724429f234b7e9ce07dcf241.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
bb2fc16c62d54f54058260038c8fd8f4626483cc724429f234b7e9ce07dcf241.exe
Resource
win10v2004-20231025-en
General
-
Target
bb2fc16c62d54f54058260038c8fd8f4626483cc724429f234b7e9ce07dcf241
-
Size
4.5MB
-
MD5
0ed290607e2fe7f593ee5a006bdde0ae
-
SHA1
9a94424d3681677611875a63a60f984355b005e3
-
SHA256
bb2fc16c62d54f54058260038c8fd8f4626483cc724429f234b7e9ce07dcf241
-
SHA512
0e84fc30d154565c586370a757342771dc5357c491c9b64b25c878f341882e80cd8f816a26cb95104934e9370354c549174d2e6a625ca002220e67568c974bf0
-
SSDEEP
98304:SmqpeQUpmbPlYbA+PvleuiyPECeNwvDAbyHmhylpYm:ZoPlYc+PJECeyEbzIi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb2fc16c62d54f54058260038c8fd8f4626483cc724429f234b7e9ce07dcf241
Files
-
bb2fc16c62d54f54058260038c8fd8f4626483cc724429f234b7e9ce07dcf241.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 5.0MB
IMAGE_SCN_MEM_READ
Ԫ�� Size: 548KB - Virtual size: 548KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Ԫ�� Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Ԫ�� Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
Ԫ�� Size: 100KB - Virtual size: 100KB
IMAGE_SCN_MEM_READ
Ԫ�� Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
Ԫ�� Size: 16KB - Virtual size: 16KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE