͌� �h�8����,��������K�����O��HE�Y�g�(m5��{���ekA�#����ʒ�� �K�F7WB&� M7�K��yQ��Z�G&�����"�<�ڮ��.��_��"<���`�doR��"��w���W3w��<��ז͡C�K[��!}�� �,Hg������T� �Q�oKYm�a@�I�/-�y�Z�6���{l���0�t=���M�;�͈������*���K�a���X�K���6!������80v�-tӒ��*��h/�b��m������� z2�~�2$N�(^~���\̜��A�s�"Ha+����e�[}�Y{Ge�����̴c7�P��R�r�'�a�K��1�Q��_��uØhF��dVZ�k��'��O_�i�W���o��}�l[���y5Wv 5�i(������4�LOY���S�&��l�N��c;��������`Qѡ����K�wIDkxC�GS���Fs���(o|���M{�����ex8Ĩ�~��+ k��O-���� P��U�2��z�>���7+�MR�u� �f_$��$�0���ye�^]֎��吕W���nW��e.UN�M���.cs"w�|N�.f �k:���9Mq4G�F>me~$.��ٌo9�}��ݨ|�Ǯ��,ĩ� ���E���_� �Og`/5-�,�;�����O�C��D2����q8q 8%脩ψ��s�+�{<�6̒g��E�2�!`6m�,'�эB����mIv�W4R9&K�Ծ%��P��oԤi�K% m�\.��[��?��x/������ˌ��$� �7� ZA.�oZ �Z#_Vu�aOojY�����3��ʍ��s�Ge�X�'n�� �� ه��z�� ��8e (���)xoo㮬?����8H�kϠ^=I3��-��oT,����'4sZ����g%{L���&!B���#����ۆj�Ψ$(��!K��ݾ��d1���bb���FP�s���>�s�Y��#cRk�3mR �FU>a�� �݂7����]����y�{[���ƥ����p�%jftf�~�>��v8}=��`[#�L�C��8�v2I��0�X���E�(�O(�jn�k����nG0��v8�x��`��!���!� �R��$+=���>#�$���1�8�u �gد�'lI�4'W�����>�#��@�5�\zz|�E�m/�t*���No��5D,����EU�Y�ץ�/�������}��i�A�c������K���tE�%N�4�ɂ^F�H���" W����z��"'3��� �����Y8�Z�4�3�n��E� �V8����f↥D����{�(k���xM�q������� �TEF��bP����uK��H���( G���4o��nt�ߤ+]@�<�1��;�q�Pt��Lؐ�t�dA ���8L���V���AՋ��w�sS��1!� AFy���=xݻ������.��z��`���=���v��H]��� �0 �T��A��l���e��ќk��8G3���>�n�MP��7�C����U!h.�vg��|�.\orl<hn��j��@��$�Y��Q���������W�*T�Si���Wu1x��z3#���?֩O&�O��8�]p�������BmO����̴�T���<�j�&��H:hb*��e_-�k��7�ԉ�2+� H�Q��Qy���߮��v�+?}PH֊u�����21�q��[Z�)r2���Y�)���&�`�FoQ2�txZ0hȏ�Q�7����<��L_�an@���P( M0[}��R���c>��E�������J�H��B�.�C �v"T���tN��ì����h�2Ϧ� ���?�C ��/�r1�z�W1W6%[f��H��|T� Um�sK���ҟc�e N�kV���S��>'�{�'|,o���4�-t�0Ƴ�y����C��.��cs�t�sI� �V7Dy%�7ZnNMr��yZ\� :u�z�A����h���q�fl�=|a��g�n�}P �4�|6'���#�q�B �G~̯M9�Ou��x��%��k ����D����c��b�>���$��_������[�/t��wpL��pz�>i��T�p ����#ͫ�L�M��4��o$��KZG7������@P��0U��L~뷿��J��:]o&�"a�j��Po!��^�l����<�c��~J���6�?��`�-���B��54�����_��w��R]CZ#�n �g;��ۣ?=T�������rV�������P�-aWk0&�=t��a��������l=�����Bu��]� ��������ޯ�\ ��c�O�n��Mȝ��^�!7���A��Ɂ�0�N���Ҳ��3[��Qnr��@�=���ShB0�,JQ��l��э���Ԑ.�ʿ���ik �y�\����u�5��i��u���&"�:��pNh¾����8�Ǵ��-l��<|xr���:5�0}�)x��(��?<rewv7X�<�cݤ�|O�7h�Weh4nЂ(RԢ<}�f뙍�'&D�.`���?n��,�d,0I?��<�|x!��}E` ��!w6$��#"�:kU��W�3 �Z$�����?����r6�|s�O���&�99Ⱥ�z����,�C�I�R?���%c��|�x�BH�h-�H)���'��� I�� �.��mp߂JD�.+b�d���;$%Ʒ���Ϯz������^דR՝b�9�Q}�|�7���!p�yq����X��w����3���5��H��iG�<����R������o(E�$�3�l�Tœ��:n�d���������'y;�,>��6���>�cG���W�ܵ�ݠ�Sw`�uFj���r�� _.�[���m��DR�jr\�������F㤡�7�G�����Y���5���$�59�������쑀]l0k[��Џ��"uc ˽�I�i���R0������L�Q�����gyd��W�ܨ�T�o�j~F�o��?@?�� 6pHq�JK5��^��m\�����n���X,aqC��������.���PHFyPD�ד�m� ����00��HE�*p��Mf���]^bNw� dY o��F���+xA�=!\��5��z�jJ�L ��T0�-CF�p3����w���>,�F8�n��(e�
Static task
static1
General
-
Target
8BP_Cheto_Prediction.exe
-
Size
7.1MB
-
MD5
1a8979c3f75b267255a4b3142b36697c
-
SHA1
a02a1f614f28d3f2882e3a6258a3cdc4eec9e3c3
-
SHA256
b76766753a9c79e17dca2b4e3811ff0b25753deb7790126b069bf7f9caf3179f
-
SHA512
3b5e7964e9d05113e9dbf1a33073e5091dd9f41c5f6efc481148ef5beb2baaa71a8cccbf669b3f93e8aa7c92f4343a94785fa5888abd36921ebbd23250c36298
-
SSDEEP
98304:w4nMTLORfjnA57h2LMwMs0GFcVjJf1k+glaCjNlRAzi9FylHPh1hDNATTb7:iLORfDMzs0CIVf1Z8aCZjAHJn6TP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8BP_Cheto_Prediction.exe
Files
-
8BP_Cheto_Prediction.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
Sections
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4.4MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 363KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE