U�D|��]���R۞̷e.'��a'��@(.?�f�>�\� ���)�}Z����<V �۫au�U�o��:@4'�Ih����:l�P���Zp�Z�kMK������z���7"_��[���,S<����G��;��*@�R�k��=l��a�G�?i�aw���f��Y*�R&|���P��ß�U���@d�^R���w���Ac5<T�d�įJ�ZqX����A�ҹ���{�y��ο�U`���Q�tL#ՃR!6�� R"x�� ��� g$TPJ7�}Uw�8߫��w+�����E]��� M��u�F9x ��>�Ӽ����_���1��5���:�n94ꃉ�L�����UVi�P�Rc��ڈ�W &�'�Wr�Bb|�/��#`�ƫE�`t��B�k����G������}���ק2�Gآ1 �6�x �+���m1kTxjہ�Vfl�w�����JVU�UBAL��>�P���L[�F�̩���g�9��O{�K�R�z\���{Q��(������j�W����p��,��k�R-[��� ��n�+6�W!G�i��^f)�X�{u0�VL�}/���7���]�Wn�vE�AR�W�F˲�Î��hyI��!�T��@�f�cK�tDyp��-|U�^c��2S�zS!1�s�$癟��Pz����>�Vo���;��"�ys$�f���\��c?%7��X�̃�&�k<�M�ߗȣ���+�r�u)���U�,lM��n��f"8�-��/�y��_�ڮ��V;0/��k(ݴ^�r( ���Ɨ��⺫rO���XxAj���x�}4>�E�O- n�<�)��1&��'��A�շՎ�����d�S�pEf,?�>�����P��z{����B���@wh��0������:���Tk�a��EI2�� ��;H���z��<��T��bZd�%��Rs�h��}9�dT�"IO��Ս��/t!���K���k�99kz��$�t�6��<��O7�?V���3Ά��H �\�xc� �w�F������t����; ��N����췠y�ܮ2��?!\$�c�#8X�C�kpA���=sq���$p=�2�!~� IJ�؝���:�!/U=��%L�aP-��}`���n�v�a+��"�p�.B���\h}i�k/W�j~����@��CaR��Y��l������6j����« �]�f�I�v/�8XW/<<C n�$T��7f�Xp�����B �������E�@#࣫_`�<�6L�ҘS���z�:8��}<�'2'�ҡ���j���t��Fl��2�]�/�A���U��� �դ垦;�$d�k��wD8c<�1��~j��8�AXo�eLol7u.�� j�/N@����d=F���׳��u�v�!TΨ"M�V �v���i�[�������{*kmN�Y�a����&�.¦���8����M?/���h�H��Sp;S7xI�W����?��Oht�>���c������y/�;o ��Z���s4����C���Ta��rêk��j��)�#�*<|DT E;�b�,/ar�H�>�K�ft���Үm{�`ٳ����K����R[�[ �R�������/Ң6 J�~�Ыo(HN-�y���&ۣY��"y �]��r�����V�g�H�c�>� S��nCK�8W�ISwV?��\�R���BG�� �MA�����*q�x���;��ّ :�n{�3����s��cs<3���Fdԏ�hl��BZ�\b��07���E l_�0F* s�,�S��)qL�Z�'�H�&o��2#���F��Ih���&{=*��@5���`�+Q�����Q���蠋� ��)\^; ����%���IN<�����(H%� �̵xҴ�Ͻ���!��뫑���e- o��b,��F�����[wBxB�����������J6t2\�Ӟ����lFG�L�n@���M���Ps���$�}�0���g���:�aه�B@{icb�� ]���3�]�7���$JŬ���l�k:1��a��M]��N�|��♃��?���Hp�qz�\�a=���t���u�p��xlѶ%�������N�w59��B}��J��8�PQ��f"�)��������L^k阬%=hB�җ%c�s�n��&��k��R-SX"�" s'!D,�WABx�{=Eъ��C��M�Ǭ���C/�o)L��Җwo ���T҂��� �����J�ִ\�;q���;��f��cmOy�6��&2F�At1����\b��S�vV&I��G��;���uթ���{a����T�-�f�1K�ͽ� �i���(J�'d��Qa+��b�S�ATHk����/��-�rf���}>�kȩ&�h��7�v`��L���xC`���R��!NP��/{Q)C>;U[ ��ZC��� E��ލ���y�f��D�� ���J���zIt��ۈW�� ��S�T��Ӻ���b^|��<Ɍ�@d�ӇA�X�h�Ć?�Lǭ�����B<ޖ.���N�}i��u[Y12X��� $���t��a�Xh���p-f��G�����d/�a� +���܇Dk�d�3@����? 33x��E�5��w�Ժ����-��z����bx-NJ�L�h$dq-�<�����!����%H��0��@�}�M���2�l�rS���2��ѩ�gh�L��j�����tP;d�� CkЬ�;�Q�\.�M)���z���+t��,�v� ����R5�YK�Z���r�Z�����O Fmc`�jb��zY�#��{Y�d����^ªA����\ِ�b��Q�-���Na��$���, 33�۰��Z���,Ƴ����4�T���P����m��&VY�F?�ݙR</��J�0�1���u�gd�����<;q��g2�Nwx���K(�������Z`��t�4�Tꚺ>N�Q���F�vXLS���y��+6F�O{ �Y~lwaw�$�x�.O���}b�����N�m#����e���J���F��k� �U�z!}�Ē�Fi?7������)H <ښ��2Qw2�ES9�o2�L�q�<Tz�^����'
Static task
static1
Behavioral task
behavioral1
Sample
8f7f501eede946002fd94ca3d70d2d40.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8f7f501eede946002fd94ca3d70d2d40.exe
Resource
win10v2004-20231215-en
General
-
Target
8f7f501eede946002fd94ca3d70d2d40
-
Size
2.2MB
-
MD5
8f7f501eede946002fd94ca3d70d2d40
-
SHA1
c1f3f382b6aabc811cb29a8680b972790197e4fc
-
SHA256
1b5dfcd879974dff765fc603a73f502b778ea571181b6cce6d008972fa6cf3d8
-
SHA512
2d1d95ffe73d9f3c0a0962b2e931aba9434efde9e39f30f955dc6e80ddac31170fca4ca4c3c5b671082d817b48911ea45b0606b08485af9a7a7a21cc68ab72f9
-
SSDEEP
49152:cX8PNSjyzVEPWzkTMergxXpQPQoUyQUfeBWic29u+9QB6uuiYkboaT:HPNSOzZkMe8xXpmQtqt4d9mu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f7f501eede946002fd94ca3d70d2d40
Files
-
8f7f501eede946002fd94ca3d70d2d40.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 7.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE