��&���I�7�1�_k6��Y7��,�;��%�p;&�+�u@�lj1/9����g.3d\��a!��]|rY8Wm}J~�Wc��ȧ�n<\m�e�?;�P>��N��ޅ�e�P�8����mtv��=&*Oc��h�K�>���|�.�6-Q�{����z>S�g�I��-�������7kA^fP�x�F}A�A�"n��3T��Kur��z�/��@�W���G��Ep�9��� ��~�)X��0jX"��r{<�s-�� �c�q��J�\�9^ǔ. Iǒ���{�NB"ˣ��k�����zl��ƪ��c���d�����c�&���Me#.��b@�����Q�vl��:�Oz �[@�#%��c����l(�"Y��x��u����(��H0�S��� ������0�`�ň�~�H��L�C�k��M&3�@>/�P��P�)�l�}�N2Ħ����q���2X��Xm��|�-.�2�XLk�ɽ�d�I������ޘ������m��5�R�Uw; ��Q7ɼ��I{���`6��A�/9��]+����λֆ������'5��� ��hζ�%��7/Z�W�Zp�la�-$<�٭���r�)��;2�y��� T�1��O�m�w��(��d�=�cS��HC!�4���.�k�bp��� yb5gl��v�ʨfK9Լ��M�M��0[|��Wv���>�מag��C���l��Yx�k�{���o�cĵYW������6в�Yl�Rub�~^���W U�٧�AJ~)�|�ԟ�&��uW�ƅޕ�O�����!���10n���iV�^�x����ƓIV�=.���pq���2��W���W$i�'�����WԳ�p�gz��Q,�պ s$H���n�nqM�_ͨ/z�Iíp��h͙OX1+�����]��g�$D����:NG���W0$x�; �X�B8 �y�2 ����ҾM0\�����Ͷ����*�n��I[U��b9d����9�'���sg�lm�M�i�٫�%yea���v���/+�u� ��,��ߢl�Q+F;��V ����&��-$?�^��g�������{E���fc�X>��mo1�X���.���mZK?��_�)p�:>1Q��.]������Z��;D'�4�89a5r�>k��d��m��^z�s�$�I$���� ��=*ߔ~d��S�Q� � ���*�G�9O�1u; p$����S���cU���8�³�p�*w_H�3��=��m��� �5��Ԋ�� ���K�t�T��MB �%B�솢]�h;f �t�CT7F?����]|�Х���K���o����ˎ;����o����;[cR���-�q�Th!�K)A�C�z/��b5 �(姶��s>/1m��)�k��wT�|s/�گ]�+ִ��:N�;��)*(� #>*�����jο���I�-&���HQ+>z�У�Ҥ,���W�[=�'���Ec=�!I��J���=o� w"M���WV��B�J�Ѣ���m���� L����� ��s�� 3Ct�Y�u0M�T��g�<��$ ��O�7_ӭ�*�^�_i�YG;���@~���R3�&��̙��m��v �Q^-���@���:/�x{�"F��l������W���-}�*YR~�ȵ������۹��G��9b�h����3i[)M"ߧ"SM����պ}�&�J�ų�H��+l�K!xK��������Y����_&�8����i�9��PDϒx�6Z���⌥tA� >2?i ߀��%i�X#�{�5!N�eb�{nS�i���'�b#��Q��ـw/X���B��aW�n[:�chsFrv�It; %μȧPv%�=V-��[�Q���QӺ!�[������X�������hHI�9�X~ЛU��4 X�>�q{sv��o��X����e��W���y���h�1��eJ�)�)=�G HѴH�W��-;VK5�J�yX5B����ǫ0�,G�D�lӝ��ح�uPF�A���:9Ԑ�hGS����$M��;�ݙ*k�g?��9/x�֧}����'h�w�gф�vmF�"�g��ިmIDę"��(��� �~&�FsL�����|c�x�[X�/T�g��� ��P�N{���S#�` ��]㋫��>�du�����d{s�/�/��X#��l�YdF�j_���*q����~O_���[.[���Ȩ�$�3��OK�G���;1�e�_g_ɶ������kW�'�L��!|�06@��~r� P?7���ݐF�د_3s1��}��p;�V�{�v��g]�����m9���ܓ��hvz�Wr48�^ZH?I�g���>y�JS�-oI���ABi�-�����Ƒ��:�] �N��_[��.%����&�lyz$�I�R""*?��Mn&���@A�+�]�֍�i2=~~��D���P�ɹ�����[�:�{�"d���k��1���o��4Ʉ�%$��N)fY�����W�mh�x�F=��*�73�K6^� E�#*���[M���m�y�k�0r�E)�m��)S}w�u2����,��q[ߒ���&�Ѱ����qE(0���b)#K��z.�>u��i@�,#��P��A]Àʋ̐��&>z):�ÿ��z=��n���Ͽ���X�L�.V���ME z�;�>֫urEr�d:@���nËGվg@re�'w�P�gg˺1�+�p�F�d����Y�y>�O���>ʮ���R͇�eC�~@@��`IM�VB�٪�.�ۋ^;�[�~_�+�ۈ�;���m�6�)����yf�q��RC���w�am�4�~��m�]D��'��6��7} �V\�F�x$����e�gDxϵ��M̬��9 �/�^ [�;���XJ~��Ԇ���C�2܁px�g��g��H4+0�S�zn���D�qw�82w "1{�����}���V������nB`cR x��ߋ�;8���ED<�5��:�e��G2s9�g�x�%Qa �~��ֈИG�wCF���}��Il�]�at`��T�S�|}u)F��Q;�l+� �H� ���u��&{�����Z��@�%p�����N�s�q�`���(������Ú���t�ěᐒ�r� R���~��<�9!m�"蝹�+��P�2�b%�I�m�ѵ_>��{p4z������i/���nR��"@N�M͙���6M�; ��+���RsqV (�v6��V[Y��L��/ɼ�*v�!���B=�,�&P���{jJ=��s$����:�H�o �;��&��B�� ��U\cޅ�c!��N�^`�V# ��qd�.��WQ۳}��N.lb���6_�/d]���c/C���Ae]�Y��G��\�U*̾tχn�5d��'��Wi�S���s���-�B�j�I�=�����j�S��ܵ�����|��[� �瑛(�N2_�b�9B�䄾�ow�3�\-'=}��ĂO
Static task
static1
Behavioral task
behavioral1
Sample
8a8047cc657e3a82b53997b16311e61847a751fcc0d9bcd76d2735862be8c2af.exe
Resource
win7-20231129-en
General
-
Target
8a8047cc657e3a82b53997b16311e61847a751fcc0d9bcd76d2735862be8c2af
-
Size
3.0MB
-
MD5
dce728ae247a633c46ffb403a88680ed
-
SHA1
886cc0c7eecdb7657a5d09d4df9be1a4886d1a36
-
SHA256
8a8047cc657e3a82b53997b16311e61847a751fcc0d9bcd76d2735862be8c2af
-
SHA512
dda066e0ab6067b88c8c7556e2880f6381a0e7369546fb31e4472cb8991cb5cd85b4338ec54af088e14566fb7af2fd4a3244bf141bf2183997edfe204157aaed
-
SSDEEP
49152:4T8b1qHYck5rOrNjTVbdnKBF43+gCwpLzoJbh/yagntGdnHMaMlozLxQHmfUUoYe:4Ib8S5rOrN/NdKBVgCszgbh/yagt0MPH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a8047cc657e3a82b53997b16311e61847a751fcc0d9bcd76d2735862be8c2af
Files
-
8a8047cc657e3a82b53997b16311e61847a751fcc0d9bcd76d2735862be8c2af.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 461KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE