D�J�n3��{>Sۚ�� �z����!C�}{]�-M�AGq�-6OE*�����^sK�ˑ��;J���mt���.�����p�7��O�"!8���*pw8H����/��B�&���S�;��e���!�����ҭD�o�hl�Id��RP��)� Ը�߲�p�N�d6��@�fHe֭����D�|ϰ�4�w՚t#ڳ>��7� V%e������U���֜.�?Eeqq}�����`dĀR7�� įf�ed`z�߬,���3�Y4Y�G�/?�O!a���` ���.���/��Z���1���l������7��q�����ٿ��Z�#��`т]1�!V��-�g�AG�g�2Q�괙e�,�#����c� ��g*�����I2�����I6�����Z3�*ZDf'._� ��oG�1p�#f�s���i�2��5�����2)���@�Xݒ��# L gt��V(�0@��h�������������c�U�m��K�q����/�4�KmVN{m�.g�T$D��$�ey�IA�o�ѵf ��q7���a�}TԄ0����(�?���ix�-\ciy�r}��r7=��I��� �i��8�얝.�G���k�g��/u�^��;]�Ӣ��k��t,��3�L��gӋ�p��FZV6�v݂�C����!9���_� ����l����8����Jt�\@�!�^AM(.Mz?���r#lq�I��!b�����������9!�;����/�l{.-$��H$��W9�V.����Q��1�9����w�R��W=-�ֹŭ��Ù`xqz5�$�ߪ����p�舫Ꜭ�����&�B4L9g��O�P���IΤ�`���{=�,�C�Q��g�:�ݮ��L5Md��+�~�ɘxƖ���;ʺ�P� ��Jk��F����&���@��� �|w>��Y鹿8=yѧ���n ���lO�Pj/�g�vA��$Czf��g��0N�LTV ��:k����#��S�li��� ���"�.�?��y��0Cr�˗2.M;/�K�:(T��>�u6�qxfBV��O� r�܋�mbNGo�X;�����@4�R�^�Z��6��t��F��g[��7�f��: c*YW�Z�@���rsV�[�0ϙ�h`�:J��&�F�ᩙ2�Zzuxj}$^��O�J�*��.���2�J,����i�%�l��}��q@��ʃ ���_TҁINkD9�3ͯ���;�F��!&/X�lB{Y����+\�R�J���qj4$�]���O ���55H'[.�z ��ݶY\���-���H! [�tS��JJ��!��{c��`��������XN��5 ��JX�vC� �Il�Q�� ��#���իu� ie��-X��ZE��-#�iHf�[�2�OM�*�����^1{N�ݓh�[��0�����ݨ>pF�ɗ��-���Yp�h�t��\���ֿ��EY��/s�&����� ı��T�}_�����Z�8��Tq���t�P�Nk���z��8|c��J�#C�����h��MŒ����B~i��~H�/�]1'�bMi�m�������w�s>�& ����tW1*���M�a��u1L����_�I$�cV��ϵ�L' �"��L7�y�A��Zq*��צ�b��Ǫ� ����WQM�e�oح�J�,�����JP�\�rEs��t�� ���5����%�@�R&��f�p��b�7�YC$��:�jK9��Ev�>*�����5õ���#Ҟ�P���'�V��;���MF��7�� �������l_0'��%07< �J�:(���tS�70IpT�a��I�*�*-�p�% �nF�5�G�:]}6-i�c8�'t�C�;��m1y9�k|L��>e-ƛ��}�uJ_��,l���o����Dz��Խ��/yv*�S��J�E��H'�$Y�fs��)d�ˡ����O,�`w�#�=��K�B��U5,�p �8&�{�{�U{�¦��� ���8��7\n���Ol�~'�ʇW�&;�V�x葵����U��ݯõ���{�����z�uDX��nXQk����mm(\.�X0�~;�z<W@V5�n��_j���P6�A��K���mP��L�H� �%�n������@R&<�6dg��m������E&��;x���Tx��Z4���jv�p�S���<�LO�:�E��y��̚64v�iDb�E����ʍun �,/�A�����ܚL��K��F/R��%�g<��� }'�iz1#��X���2�!^�{ �X�B�-K`u�� ��(�������);����!�:ؔ)��W���� ��IO�X���j\jޝ.��/�5���JVA�<��R�,�z<e�A1��f���ә<�{_K�y��OF���Ҽ�7���Q�ڀɸ_F���>ʵ� �7 �#{�#�Z�>џ�ji�ݣ�fz���ӅV����e�'{�b &�KE�h�S ��C!�A-�LN�۩��E!-�����x�>���ץ���S������CZ�n �� 7�f��q�p�7j�D���s�!�mV�1�qU�%^\��H����iU��uXvK�p�&-sy]#_�Ɯ�5NAbS�_����3��&h�f�����BA��*��?��y-hP����+E5Ї,�'^2�����%�y�p���tO{�E܌��^��l��|�j ��W�;ʃ�]��.7PzR!Dz�H�@C*�@���Ƿ�+$��n�Ԯ�pE���)R�{��m�}V���8���(v�G��LC�����9��A?��䂪L'�?K3�Dh��ն�L����v��s=�OC[��JIB���gR`A�)�g{�7�=J�)�����+��,vV8��%¶�KV�����.�(e���B�o��E>,�uwU�)C�Ng�ʙ<j�#6>��)ƥ��X]w��c�4��1]�qӇ뱊/j����Ib�8|~ϙm'eO�ӿd��7 �[ �A2d���m�B[&0���ݧ�<�������� ������d0Lq]^�ׁ�#��m�q���h�2͈�!Y�Rh-�f ��h)���Ə>�~˜�Q��b�����Q��Ya�ď=�Z���=F�yr�D��6�
Static task
static1
Behavioral task
behavioral1
Sample
3b9d70c67fb380eedcb5d04c6d3cc9b2.exe
Resource
win7-20231129-en
General
-
Target
3b9d70c67fb380eedcb5d04c6d3cc9b2
-
Size
2.0MB
-
MD5
3b9d70c67fb380eedcb5d04c6d3cc9b2
-
SHA1
09766d3548390ee90f2b60492cba403871f1f082
-
SHA256
c87beae4bc69463608f2ada586a367e23f167062f6b3a25fb277a2a274dd72e1
-
SHA512
e1a28074a42639b4cdb70915a7bc36e37fa69dd4ce367842a1c7b65447d005dfc020ef0041df6401628e2210a62759b4baf43243697b03c60a219b52b804652a
-
SSDEEP
24576:qja+0QKT262+kJwdU+hJay4RBkzLVumLg5L1GlQNQ6qJ8nwWgCRI4MVATVbZ9ofC:qjaWm2Z+k6S+IE4mEtFNIffcVECb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b9d70c67fb380eedcb5d04c6d3cc9b2
Files
-
3b9d70c67fb380eedcb5d04c6d3cc9b2.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 42KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 7.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.9MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE