+��x�k�馁� 1ǷlT����A� �1�O�;j�Pq�ゞS1���*~��b�''���걝;z\�f������vN7"����=�j�]+2Dz-.IX��a��;��˘���XI]�v���ɬ�Ȧ-�3�����`y�x[�h4oj�7 ��T��G\Aʇ���y�S����Bq�����(�K�4����@��I=j|�O�I���g�FQ�lء(V�`4�����籣�=�m$V5ե'�@�������G]W,ǣ;̾Z�d��rȔD�E�����a5,\Q������w��y?�j���ŠuT��^�b"���?~��U3��T�!_�� �̹ Eequ1"��n{����"�%$��q�{��'^��}s��[��j�w�u����Xu}b2���S�����:��zy��s�*��䖎�F��� P��}?]Gᜊ����-kЎ-B�_�so^�)v&v�H*���[O��ǐ4��7���;h̨�&�����֎A*+�fp��\T_�S�}���T��#�]��@#�y��6�M��tBv�Yv �r��C��RA���b1�Q-P�4�cbv#h�ndړë~����P(f_���S3�T��]� �nM��X���֯4�T��#����ĵἁ&ڴJ��#m���Ϊ<�$P���B M�|}Q9s���,R�-��撡�����r�.�~��E\�d��d� Ϙ�H.��Q�1�έ���d|M��x"+�؞a�ae�_�%ޮ|� ���`!�Y0�~$t��p&d�ь#�X #�T �g������� ]��crg�$D�5'����mr��P���|(D�p��h��.L�g���ܒ��b�^���o���3���g���E����Q�I�;��r�k]<�:Y�/�OV0�E�PMXa�Z��1������7�:<� �mA���-��Ax�(�L��$�y�^����D���}����8��V�ƕywuMg���D$��Oq�����F�l��Q��R-�8Yh�֮N���!�O+��%j��V�@�\���=�3���_~b��_�9��tj ������ֲB���nn�����?P݇�%DF��9a�!<;�3|֚s�7��K�4�s��p��8�zF�lt ,�W�[=RZʺ��^,kʤ魎B�A��.��h�����%dsG;Q����b���&AńǸ��'���,�rB����v�bx��N �m�`@�cߊk�=��N�.�H^eTVDh"�����SW�V�kW�#Cy��6�I9���=�s��p��,zc8lɔ^�3o�h�F�j,O� "q,�l7N��o (�4 1���;�$�-/44dC�����\�"�S�1�������\v��;�l0�9���� �3\JB����;%�3 v�]�U\�O�[!�Gkx�A�6=�4��j�k��U��jNF�&w�L)��IL.�UJ�s�ʤ�����̄����H+_�g.[�mw�e|��,Kj�{0{k?�on*���/ X�r� �QH[ȓ�X6|V�ĢRx�&����$�,����0�q\&��c|��G��/����2U����&М`�_���;��J�dda�&�o��`t�vY�5[�f�yw�N`�a7��dK�� �\?Ĵ��I)�����ܼɭ���I���h<ckA��~�~]���hq�H ?0ad�/:���8��) 5|��u��$n|��ߠ���k_ʤ�����`m@���;���Z�JCAtK�%S����'ZcF�V Ƴ:�$��}Ft'� P=V�0�qؐ��e4�o�o����G)��eHF�ς��>����r����#��o��'SDC�����iw0`C��Y����5/��l� �xL�4YZ"'fw����x�'�w@͆�� ��C+K�d~A�u��7)���C�j�X/�or�=�wZ`��L}��*l;�y��Vк����_؋�&)��!�TY:U���}$.���0�hD^07�S+�]X�}61wf�45Ƶ�v��T\��@��*��.��_�=4�91�=p������iu�G��*����4���SQ������\g#(d�;#q����e��s���ۏ��h��T�V����w��[{��}�v����R�����ֺ��X�'�Ns�s9h�柫�!��X�g��X�m�������(��g�;Y��o�,XY��g���.<�] {���jP�8'��_�J�<m� �ݼ�'��{JX�7�{�U���� �zi�%�l��/w���N�$���W��֙���������ީ���2�/S,�CV3�+,���k����sKd�s6+e����c�~�F�:��qC�{�;���{�:#4���%�2˭�q��a©�������7�nq0O �*���%Mv}�#��� 06P�C��4۶��':������ &o���N�*� Źg��̎O��I��MD��1��m�ކ}gN�gDh�!sbFE�s�*�r����(l�� 5Vn�D��� ?���J.��e��������zW4�iĪ�3����?:�32>�t�����76+��cF6�_u �5Wī� �/�� ��Ķ*�ް[�GSf_��[��^Y���o�s":'���N���%Dv���������W���Km'(�=��6��4'��1�<��)���'�Y�a�i+|���N?#�$�(v��C�I�R��T����F���g3`$/�.��:��4�������V ��!��Q����m�7�[nB�@q�qe$W��Cq�{1F��C �i��t���'j�Sbi3�zד���-ek��0g�����̪� �,��_�(�����Z��D�������3�.�5��)U��N�-�v��룟�ɫ(�&�.Vx䀁$��v���Ђ�'�)�S���G�v������* w[>/~C��Z��U�?O���1s�#�|4�:��uvm�#Wf9� ��ϐ�|��5��i��s����P��rm���X� hN���rmn��9�#�8�aKQ�vc�j�G\��B��7�Ql�[����9��y�"�/�3�îӦq��y��iqƸC���?���<o��]���d��':�W��B
Static task
static1
Behavioral task
behavioral1
Sample
d0b82ea18beee7ebcd937a3b952aa10292a30f101fdb47f842f28b3fb5742b6b.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
d0b82ea18beee7ebcd937a3b952aa10292a30f101fdb47f842f28b3fb5742b6b.exe
Resource
win10v2004-20240226-en
General
-
Target
d0b82ea18beee7ebcd937a3b952aa10292a30f101fdb47f842f28b3fb5742b6b
-
Size
4.6MB
-
MD5
9211a3e1dd6e5e8f5adafdd5360645b4
-
SHA1
a459c522888c8d53bc0b428405719b8bed7adcc4
-
SHA256
d0b82ea18beee7ebcd937a3b952aa10292a30f101fdb47f842f28b3fb5742b6b
-
SHA512
70917ea147d7a000e9d8da7af7c3382b11c847a250babd437c310a9bdf43604185efa59f22c5887a225aa38593e676ddcc265c69b55c21fb9caa5661ba1bd5a1
-
SSDEEP
98304:oykepYuPpIJMxFasWBGs8smd6/SIGZcg6UWZcwdHctzM5qeoQhNzIGms:ocpYuPpIm1WBGxsmspGh6dZcwdHkoBjF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0b82ea18beee7ebcd937a3b952aa10292a30f101fdb47f842f28b3fb5742b6b
Files
-
d0b82ea18beee7ebcd937a3b952aa10292a30f101fdb47f842f28b3fb5742b6b.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
Sections
Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 188KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 297KB - Virtual size: 17.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE