�W�w���uB�7A��\���]��7����R����{Iɺ�,��h�V�Ub����VV�̉�|�r8ҭ�Z:͉�M2��}��[��ʎ�̀�\� i{�S�Qm�j��U��Pq�ݸ�����F�3��ޑ�[I"��Z.�Y����7b25�ARD^F��v~���]�8<I �W�-w��榒p���ڠ?_��j�ZaOuW�h�D�ز䐵c�xN�B(vۜ�6��E�x`P�X�*{6�M�짋�H,����c��w�?;�m��-�jH �[���Bq�-F%> ��y}]D���T#7\�ѴTt��'�]aJ<>�(��T7¨�J�����M~zĐ7�Hy��gU|�j���V"�#Ķil�fU�DIm�e���9�(�U�]�ďo��+F�:U*\��<�lgp�45� �\�A��{�r��H��I���fʰE{☡���Ĭ��F;v��͘���.�H���h3b��#��%�˹�����B����.���e��3�;�J8<��c:���k�̲˶�[v�\��9���<S����9��3x�����P�ΟC���<K�u�G~+�E�2����� B�1D'~��c�ޛxVk���w��(��z�:�p��`�+���h��S^8�c��5�~��J��"�i��vf�2ogO�;��-K,���˪H��V=�K��@ ��)�L.r�H�A_��~�i�����7 ��T�� �rB�m;Y�aĭ�i= ���q���N��C \4�ݖ���4"<pj��L�L�G���"���ǟ��1/�R�%��SY���/�~.m33� ��u.�V^fJ#6M/W�ڱR���T��Ѳ�� �*9# bp����7bcDA�j����ΐ�A����t��w����A%@�^ސ�\j|���?����DDZ�O��L�vǸ,��nt����Jr�M���!m�ԋ_=�0�F�Z�������������QAFH�����J�W�x>����(���gǘtPeM�i�-=4�/I{õ����~ 'C�c��Ѩ�/�D�e�5�(E��mI ���nyj&���:�Ŀ5ƛ�xq�$(�m���9�~��y(�m?NR9-f��m���H!�������1MP��l��w�|�?��8��x��^�}XȪ`e�d8�K���B��������ޚ�)���}�9����G'E7���R'a�! �MP��e�O�4�G���C@�u�@g&U����Rǘ�ݸ�f�(�]ˀ�I1Ln��#� x�C%�b~��/Rf�D�*P���������&�ρZ�B�5J����b�R�f�P� �=� ݃��R\X��V��9�=Lם���3�w�g��v�&�A��s%����_�m�s�F�:�荳�.���I��5(խ�d�dO��BH)k�B�s�JNSK��4s|�R-��+�*����� �Nw��`�}���H��)\�){vm�Z�[�i��[n�|%������}�� ��u+Kۦ2�Lsݩˆ�f� �1�D�<�bB>��VL.��R����\�LARkyA9ԾXH����"M�l�����blDލ��jG=�t��D�*� M��:)����ܫ3�������)�ow�����R��gW��(�89�ց<D��'r����6��U����p%�4f����E�<~��/�#T�:���;�d�30r����!k��ʑU+{U�����'�韽 �+���L��^����������"�oL�@s�-t�HO��Rp5@&�Fz�*R�����d���?O�����#1��2���獝r�@��G�A�Vv`ޥ�8�4��m�gᲴ��פ�[�J��/�1s?ZOM��&T��|g�E>���)fE�)0�ac};�`s�C�lr���_�F_@-��R�Zv��t+���6\�D�͘o*g֠Tp<�և��#�D��6O��؍����d�"Ug�(�7׆��>�&h�~<�\�d=��d�⺺��2ծ�� 7��O�y�\�q7���Z)aPF��ORc)P՟d7Z�꧅���p�?�����.�O���,�(ힿl �r��C�t����*s,��\}�s�M)#�Lt-"/|�e�W�g����Y_�G�|�� y�nai�h��3!XN�w?P����R>22!Q�������Ȫ/s�rP`d '^�bȟ�K=��FE���TY 1�;�LƆ>;�o8E����p�'��|;����va�R���B���!т4�1x�IQ^�D�eG/��B A�#>μ�WM�"�0��#:ni��+u������Ġ�kX�8jܠ� �"K��4��[�MF�$��ȏ�m(Ѓ�Y�^�Cd{\:�"NU+�ï��$+��IA�����MD2<=,o�K��?U�1&�J,�-W��?V��d,W֗������H6���8���ͷIu*�ǿ'=ۆ�i%x5��g���}D\�f"B9e�����Ȟ�5_�����DR�\>�K�G�n��.�:��2��L���1�������^�cm@2Xo&'����G|�a,y�伥vg�?Y�ա�T~������umc�4����o0�$��Q��A�ΛD���� ܑ7ߩ� ��Ri��W�� |ISi�\̿�b�="��?�d��B�%[2�v�8W�J�y��n)���w �S�Cy��$B� ���3k���X��7:���1�A��+DCB��xW�Vkd�e/!�[$������q��E��~��9�pS�A�)"Ʈ/�7�����`�����6p*`�|����⌵���p���_��r�!��ȢjX���y��,��������4/�,�Q1� W+� � ���ԐZC��X8oۓ�1��o���f͑�����:�>���V�q�Ɵ���$)���/.�/M��b���q�8�}c�݂S��4�V���]a��[vI�]�,�P�8������m��C@��>���J�H��s��H�l���y��i���}�rd�V�N{�ݱ{��_��� �������r�Xd�s*S���V�VR'eEzފ*��|y 蝜�O��_^���|�֚����Iw9��ڞ���ً9`��ޏ� �AE5-7JW��N��_�b @D6�MsZ,u~|��@� ��/�B<{O�����J�~�YIT��d����C?��h/�9&�o~z����\�|�� ��@�����,VlI��k�k��O�D����oʸ3����P��1�L�X�ޱ��10בm\�QM���'�X���BIu1�ru��m��M�&�s��� �D��O}OՁ�>[�A��u�8m>&~!c�Qp�4���Rw�j/I���;y�;��bb�x=-Ӽ,q�"Td���C��7#��kM^�ch���V(����>��H������i��T˔� �E1�����؆�B�m[��}9q��ó��ė0�c#ե��µ��7�6�n�H∁�n���\���A<o�y04�qPg�� �)�q&I�����L�=���2"7;�2Q�_|L��+ �\��������B������'���Y��Ϳ��7fB��fY���� B�̀\�`�V�'i{�
Static task
static1
Behavioral task
behavioral1
Sample
09ba1f1deb08ff5e0e0c073300d86e2275e9d5469321a247fe28fe241adbf15f.exe
Resource
win7-20240221-en
General
-
Target
09ba1f1deb08ff5e0e0c073300d86e2275e9d5469321a247fe28fe241adbf15f
-
Size
2.9MB
-
MD5
2a4072d01726074c6d718febf34b7e12
-
SHA1
f3de01c307eb8336247416c6d73b484c980d43dc
-
SHA256
09ba1f1deb08ff5e0e0c073300d86e2275e9d5469321a247fe28fe241adbf15f
-
SHA512
58107a04516ce6ce7658a65645b0b546ed5aa0a8529b68478c824c937f7d244a7ff5d0c8e4a73b191bd6de5f147764fd834e109e8115a4eb28beed151fce6a26
-
SSDEEP
49152:3PuBRaD8A1XuzIeWsvbv4hkciK/HnLvDXq4B22sBKcKtDJLeo4IozbkRILZcs:4bA1+zIGEBd/HLLZJsBNKl4IQIILZc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09ba1f1deb08ff5e0e0c073300d86e2275e9d5469321a247fe28fe241adbf15f
Files
-
09ba1f1deb08ff5e0e0c073300d86e2275e9d5469321a247fe28fe241adbf15f.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 461KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE