.5��:�ct��Oİ<�^��� z����Ϩ%���X%Y��bOJ)ׂ��}t�M2��4�ҢNp�[�].ta�6zL�_i[&a����m}5�Z�KJ�y��<�搢 �pý����)�}l_v3���y���ע"&�AJ3���rY�ڒ?�(/XIhkz�>����p7�k�4�J�蘞A\Af����F�~���w�@��2���dVR��@L�=��/�r��VxN~;����e��܁�O ߩ���Z�=:�NJv���|/�1;�w��k=/�e�FG�"H�u��D�r_ l)�2��]�2݀�� ��^�l�@ů��������4 ��R�D�Y1ϧ��k�*4\9)X�,�g�kx��%.fB���{r n}ah�i�вo q���?��M�Y=O����������kH�p�����#�QU2��J� W�⮣��.a;�O�T/�4��QY҄iEG�=�х�����W�j����{��/{�sq��S8O�*7N�m؊����8鱌�l�旤�9�9"�T�&���7�ܩu�tv�J�I6�]C���s[�o�/�\�nNz�D#]��}�yj.�����RNB��A/��Jȑ�ӈ)���f�`b.,��W`���h�]ʮ��o�|#3�ԙ���gQ���2U�����p�sX��B��}�t���)� $�=T)\�|��A)AqA��,a�QA7�y� ���gn#��E+�x��e~��e���U�0�@Ś]A �<I���gJ)o�X@89��}w���F ��Ύ�ku��:��1Z� ֲ�΄Z�Nc�o����tIH]p���ωEx�s2�V,uǪ���]3�qF�k���J|p�#�+2�#�r']�(�� $jDw��)m� P�?�rOݍ�D�i������VQ(��]/�2w��y��B��y}#-`����u���f��֝^�Cgm��2�0Q�N���b/+���?%0k�!���Id�א$V|�n�[ak����]b� ̏�oS.n��si� ���?��D ����s�z���|R�C�}���:� -��b�\zaO�F!Q��� @�L��jh�l� ��N�K��MS�}��b=N �ĺ�����b]?;��<�� �fd���p�h�'7�zN��~�_�G�$F���TQٝ �Y_�˱��yK�$��8<E� ̇�����.���𥇜�#L��,��n���5��ŀ�gX+<d(�X�@�h�>��9��N^"�IV�(}�MU`���}�����X�Y����#�u�lO������B@\�Y+L� 0Is��8ܾ&���V�${�[�)>��x���H_��ι1�iQ<�M,-�O�VRL����b.Es�m��C�"�鸲�d���y^�CGV��c�:�/dv��J��B� r��ԤO�,ܗ�p�Z#-��x �l��q�[D�L&��� ���υpt|���K�����\��Zt|���f^Ӥod��w��:�㟈KW�?J'���2̗9��so�6���C����ҭ!=��7�/�s?� d���8}��'q�@�H/2�H��a���"��ޑz��$b�a�, w��Ҩ��,� �D-$T*��p�{�]�gЁ73'}'��I�o����t��sb��.����V� Hr|���T����p�&�4pS9!~6L�I�Iv�k���������V=������0�M�Ui��S����f�z�5H<wg�W�x�@|S��&��N}��P�?��:���V������-QǢ�b&�7B�yP�1O>�Y�r9A�}� ��ZHgu���P ���T�&5��w��p���̸ &��D$60,�S:'m�(����;��"�p�|r��pb�=��0&q�V{�/��>�TC$�P��솈�v�A�v�� 1�4MC�%�9���B�/�]��m������d�����8���pCp�ƒ2yۘ������� M�����2�����}�s��9������ ]>.ȸ��y^I�2W���E�C�)��}nj�p�����5�e����!�AI�~��4_���H�9��bI"�6Pq3�ɺ�ߥ��a� ���v�ņHė�1ڌ;"�Í�V6���vv�?XL2IY��k�Ҩ,�G���G����;��'���JܺK���.�^�äG���ȷ��z�}�B�\CC��6��ÔW�P����&�E�|rF���m �Y�����q���"�/�a�6j�lI2N�a�� ���>�z��jۊ ��au,�[������'1����m��&m����kj�V�?��#!����e�s[9���mJ��D�UE��T�tɀ0�*&��M�l�E���c�$�^lu�o�H�X�)�I�J�|oL@�3�1�h9k�6��ć�y�l� ��0F3�o�B*vNf��!+��\?Qwr��ލc�t%nQ��җPy;"%*���~WWy%[�h#7[��rl��6���*Q��>A�O7�JԥP�z��2�}�S�(����!F�G�Ay0]��WN�:�X"�.DtL�=��W�;&�k�'�["¥&K�e.{r�By�O�'���w�&�x���L=<3���c+?05ha�U�?����Tj��$�3� }96�Nʓ��&A`��o��Dž,`�:ӿ5�0�N� M����q���B`���*���@��aJ�֞� �P���ǚ�ZB061�L$2Q(k�'�պ��3����M����RO����#��������\��Zx�U���Mm!��X?< ����>�������c2�y=|M��$6�� ��;E�Vag�uȸ]4PS��ɸ4܌TӜM�EƜ?���W�WfRZ��4Y�8�\!0��1iȗnA"h�"9E��C7�M'V���=����/��zi]��;�ཛ�-��E���������:@���C`���%D�&X����.^-߮����dAW.��N�(VTswSB�Kc�IꝆx:�B�[��@s��q�����s>�B���LA3��'㍊�Ry@�&a��҈ ����;�)���u+���+ѯd� �� ��I��U*��)��S����\�gs��?�3Y�Cgb����.m���濧ĉ!i�E`nEPTO�wt� �}Q��Ζ��M��S��n�^�~ �����p�ID���LK �J���z%n�& �M�,hɎ7�9���u���H������zo���ahj�<#NZ � ̳ʊO��mz�k��2-*8�*\�r�\�v�������Ͻ����O��0�0�K%t��m��{q��|Vz/7) ;'yRr@0��72��/���:�$?�M�孛����9��l���&�G/]v!��[������ҿ����u 9 ���`��lł���v�r��v�#���n��bEV5W�b��61�N{�h��n-�jk��V__��9��U�Y��;��B<�*�D���P�G�Dt��5��t�u��������a��"���zXSqY��^�/#B��Ka��"-�罦n�O��$V���QV <�'�?���y�������S��ɉڵ�6Zk�&gj�/�!����ۿ7�O��J���h#,{�w��,���5��R_ftݺ��d�Ebr���
Static task
static1
Behavioral task
behavioral1
Sample
8769e71a46cb1b735e48564e99dc77427323ae40e7dc5eff43dd00444e041354exe.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8769e71a46cb1b735e48564e99dc77427323ae40e7dc5eff43dd00444e041354exe.exe
Resource
win10v2004-20231215-en
General
-
Target
8769e71a46cb1b735e48564e99dc77427323ae40e7dc5eff43dd00444e041354exe.exe
-
Size
5.7MB
-
MD5
9a1dc0bdd057a0ce7357f1097aeda7ab
-
SHA1
77d67afe720089ae6c2fb39359c2885786259abc
-
SHA256
8769e71a46cb1b735e48564e99dc77427323ae40e7dc5eff43dd00444e041354
-
SHA512
c86a7fd49047a6edbc34c2812a62cc80d8428e59eb62bcbbb0665107e4a3c9b68045de50b8b2b80d5c56c57ef4e396677d9d656887b9dcaa9d3017bdd0d2ba75
-
SSDEEP
98304:f23E22doFVxyXHXTy7uWnAnKJ8NtKMKp+M/gBt5wowwA0QY7GRZCYk8op:f2D2d0GX+1paIspBtXbA0Q8GRZ6p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8769e71a46cb1b735e48564e99dc77427323ae40e7dc5eff43dd00444e041354exe.exe
Files
-
8769e71a46cb1b735e48564e99dc77427323ae40e7dc5eff43dd00444e041354exe.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 82KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 19.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5.1MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE