4��7<���e�"��8ɧW����h�%9Bf-۷Y��K�Z����oX+��(eT����ǣCy��V|�Ь�ǧ�)$|y�_�{��&Д,��#��SG�4h)��Tuؑ"�$�%�Ӵ�3IV;iB�9����Jk��΄b�j��9&� N�2@--�wx�GlO���g��rm��LY���!���� �#����T���&�gi��yh�Br�ְ����(���;]�]n�k"˜fx�,}�ۓ���b����<�C~����|�_N^�[�����˹h�M��>TYh�8��WgT�Xk�(��{�E�Np����wA�v �G)62�Emd�G����Թc�e����� �p�����>�eiQ3�}��z�H&{�4\̴Lpy��,&K]T���$���О�Y�e�^�"�ޗ z��l2WDɢrT�1�:ߗ+�|�Ǣ��«�i����L���j�p�aW���Z�P����'X�a�4VM����4��ʹL�V�n �����qi�Zv���U-��2��^�g�ק�mä��7���.�����A�F)^}#&�l�V�'C�ڶa��C�`_1�YJ��|�?�u{�V�gq[�c�����]nՒ膧� ���LZS\��!د�2}�Ñ�S���R*��Q�I�(�P �&��٣1 �+<���{H�O���e�����?!,���Puq(Z[y�R&��_jK��?� Z����s�GC8�I���LA!�v=�ʌ���PU�����@8���K�=S��7zQL$l Q_510rs������\tg�<I�[e �b��mfF�ká��B"��Ctq�!�Sw@�U>�[PY툘Q��տ�����{�����M��ɛ>y����4�H��|���G?r�E��\�;U��@���v�!a'��P����D��g+ ~=� e���5'yl9S�:@��֍p�0g ˷�k���\IB���So�bwc�%�2t91'n�p�0tl��Ә ��~�߸2����>�,��<i4���d�0��p�X�>�>�?��o�&���1�M'9���� "�r �B� b7T#��~ĠƝ;l(t������SLOT�EH�^�Y�]��Y�uw�T�/��Y3�����#=�ʉL<����uźDqr�LV���5���"ڀ�����7��P��S�aLV}��~�v0Ɗ��ba(o �>ԱP����`M����:ڸj��t����r\d���^q�������[���)t�����Ƚ�;OE��^��v�͕�R���4�w�vg��ᘫ�u�Ww� �g2(�t�/�m�F�A�WX��ˏt*��f*g<�9�>ԕ�>�(k��(���}�g�EE�8�v�U� (��%��Ā���8�͕�3�l�F!HSj��|�+�7�7y�Pf�����,��u�|Dd��?�HiG�f��f��;���F�������E$����V��y��ߐ�м�߀��b.� tt�kX'�E�f u�G���Hϡi�Ζ��'�����/m{��cj#���L ܶ���4��u8�Ĭ�U����mY��_�c���껡~hl�̩���������en�X�R����8����x�'e�<����M ��|1zϾ���������$�Yr(�VOΆ����Nl����N�$�Hj�W�^?��1��֎Ĉ��`�RؓI�%�����[���%��X��5o>�q+3��z�%�^?�`Ʉm�v����ÉI0z�0��L`5e]�Z��}Q��H����7�+���즉�ɻ|�!nR�s O?=J>�'�)��O��!�;Q* )�����d(����.�K5�� eV˟��!"w��yp�Y�t�TMfiޙy����Ke��6��`��(���ۜ`��snk.\+�*S��$ys��ގ�=��%����g����̞&���CO|�b���|`B:����u�w���<����z��Q=F�Nظx*�!�B�$HAs�gݙ���8���L���-f9���)>�P�ܘ�!�l� ���Э��A?aH���PP��}��2# �P:Op���;J6řN rp�~J�� H�[�Du��0��VBUL��I�\��O�������jm������`�gZAa�}�^�)��e��N�x�{� ���RRa�ըԆl�!��$��ƃV;J<��?���A�b�y_����M�ߚ/�L������r�yS���{4�-Vl��`]�3���BeX��-�1�y�d kR����O�=��ܾ���߿dz�w���6�I'������G�%�b4w ��6������V�BR]���1��wC�l�Q���Z�S��%��D�^���c�6��U���3M�O/ס��J*o�ڲ!��D2�$Q ��y8tF8,���\�c�����`A��p?�����?�IEG���4ȷ������+)�#��\ ��m�}��gd�uˁ�9`!�.J0K��K��ǰJѱ�� ?>I|��JD���KX ��T(�%�Jd^��#�j�%�6������Y]nn�9.-��q��E}�/�����W�G��;�H�Bs+�qA�P�ֲK��k!pmE�j �?.�x{�X��(p���Q��y@�����*D���1A�����0~���J81D�^�_����b�9�?�^}��`d�y�W�X���P�I�`y� ����w.���)e�����6� b��z���He��K~�u�����|���O+)EgO ˖L2��T���MǬ���S.^�=�b��ϵ �T�:� ��Pg^B%b��S���Ι� �M��f���SA�ݸQ�h0�x������ج�ɩ�6B��c�����Z�N��GḒ�}j��*F��%�h���OEZ8|N�/�ߍ;���Ym�h`����y����c�m6��Ḻ��GL=��,��:t�/F�%�~L�h�v�;�S��V*��Z#�i���V�s�[2#0��n[����WB��L�A�;�(9�O��L �fo-�ү>��J����sV,B�LeM�\-o^��(ÿ.�Tb���C��-��#��w�����QT4��p���+��aj�L%�X{]��|���:5@LV� *Dw1T2 �6 i�Ʀ��<j#B�R�vvZW5�P�����|J��f/d���4w����a��{, ���T\�����#Pz�%X�x�vw�U+�;GJETbc1AW�鼗|ģ��a��p!����jd�Ɛ�$`S����'v^���a'���������:{�_�����Q��t1j���F�+;�/�k��:�9=����謶����3�z'����C��/�)��Mtdaa���V��Diz�쁽��r�F�c�b��4���i� ���@|�k҃�!/�\�{��!�;��oE��3��+�;�� r��Ff����|]i�Ŷ��-��zEҋdt�����"��{~�������K����_�LIŴ��{*8 a�� '��T�_�/�.fwV ����I<j���U0Hbn���z{t$q]@e�)���p�RB�$0s�UD�v�a,P�,8��*q\34�3G�Q_��e�_�ZI!�e�`G�r�?�dDW� 5���IAc�w��&d�����>2S%$�� d%e\�~Aa��qI�x�����}x��^j'���x�K�x�jg[1h�ڢ �(��?�K��b)8��:=�
Static task
static1
Behavioral task
behavioral1
Sample
8ad95b49e02da83f31a967647045f85ab454de6fd568b8004b6e8dd42ed993b4.exe
Resource
win7-20231129-en
General
-
Target
8ad95b49e02da83f31a967647045f85ab454de6fd568b8004b6e8dd42ed993b4
-
Size
2.9MB
-
MD5
db1a427d79c58e46866f6e92559770e4
-
SHA1
416e12bc0dab934d6610d9b7ec531cfb4104312a
-
SHA256
8ad95b49e02da83f31a967647045f85ab454de6fd568b8004b6e8dd42ed993b4
-
SHA512
ed78dc0ba74cb661770aef361f708bb6f47fa02225ca75743409389e97395b4bd46e354034530430bc2424c534b6c47cacc6384ef8c8ee022be3aa75268c7cd8
-
SSDEEP
49152:cJoDPxAgUOyLAddlMIt4VYwBg/tcppcIdFpEfTsRIPJ7WgRevLE:JApO0AdbMItAYz/tcp67JW8wLE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ad95b49e02da83f31a967647045f85ab454de6fd568b8004b6e8dd42ed993b4
Files
-
8ad95b49e02da83f31a967647045f85ab454de6fd568b8004b6e8dd42ed993b4.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 461KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE