.�m�,�Ộ1 ��(��Lm���2a-�������:X&>��ΐ�yw�1��{�,�K��� ���b����Y�U�D!��b�e2�*ܶ,l��xU��cB���n�}��ě��u,` ���tH5�q�`(#�(��yb>J�4/F 2�Ywj�r=�\���e�,�C�9��Κ��<���NN��qr�6��*�a�_�F���r�J����Z����k�����>K�� ��8��Sv1q�����)3�] �UF�>�q�}!B�e9~�P*�-���i��z��k�2x��<��'��a-��>��)mQK?�LC6��r1�S�LZ�M��^0��%_��=sw���:Qd-������zM��`<���y�{��_h�g��C��Zy�W�Vl�mq/�D���F�.K�w��?������Wе&ź��3YN���Q�O�J=��6���V�@�RR�0g��(��7,�|��ѳ'��ݢ�T�5�B�l�Nk����YuB��e�E��U�(����E�����w~2�����$����0��n^�P��?6X9��C<;�R�|h���rSFX�(B�=�4��A�ӆ�� ��i�47��x��X�e~O��%�w��I�H6l"���y����z�=%v�VIx�A5K�A�K�����Ŀ(����l�~(���Kl"�7:�8e�a�M_f�l��x��{<��*�LŅ�ִS||屆�{O�A�������������������}��?����_$�Ja8���gH��O�Р��fol ˛E)��l;���/�O;��5�F����=��ZɈ O�3�xX�E4أ@����ᔾeN�u���e��}�e��a�����9>�����bK��sro�]�Q����� �6uf;�Z���;vG˃�+Z����g:�Q`��b9ǿ�����(%�I��w�;c��v�:�?����X�7P �\M\�U�=׃�Q�Pte�"~�$�j��t�(P�;��e뛸�l)�*�)sl~]���Q����"U������i�SB�F�l���2�$� �g���\0��v�@%������N䒑j`��L�fu!&�������cnk0 ���(�F!6?xh��dp�G6�&k�$ h��W���FHėl�hlX�f����-��R*���l a(��������ɰl��tY��u���w��މ���dkɧ���(�����AtH��t0���Ro����'_5yzpv�qz�̘)7�����v�_�h&Ҏ�WGn��7���DB��ԛP�,�&� Uz��$�����%qL���ʝ^�rt�0�E�]���D��B��oC�E�3mzv��x�rUajQ}(�(�#m�D���e�W���U����A#d�p���>u����,���L��P�n%��1oy�ig�t�Y�z���_ ���'R��@} &*/qG`px@�L(�+tz��y-!Y� ��3q�zV+�ﱗl����!��o�V��ʮ�f5#x���y������ �ȶ�]�Ѩ���_�$��{�A��MĽ�5l�t�qKOJ���Z껵�Q��&2�lf�����<~킕�1��d=��\d%�@�e��� #5Ko.���[}�Q;#�S���Z\������^�9"#�M-��&1��('Ya�wv���Sh]Z}qD��*���â�D%rB�Njc[�w<��� Y�D���(h�D�|qo#(�V7sQ_:��=�(�觿�W*s�۹���J�w�\k�������W�[��Q�O=(��5tAi>u�{8!4Y���Q����yA����U��9���w���Ǭ'l��.p�m�kڨ v��4�,��U}$� ��),�@[���N2Ņ%}���~�*0�bڃ{��3����b���[b#��r�1��̅^�(G"SD���P��g�f����6��ч�!�'�r� �-�� ���((����T���Ϊ\C?��-n?@l?��.Q"�np�g���%;���˼��OoO@�"�$[��u���ŵD���������Mnv&�����5**��aڕt|�<�;��gp���/4��6t�u��P4k�(@�P`8H��N�����^�-���qB��E��P�8���ȑ!��NT�}��� 0�� 0��^=3�B��>��~O���y���-e����5M�'>��P���l�~8��jE> ��W�$�r�-aw�૨Î=����,ǃ������ԛ�k��e���L$�N�;,� 2�h����&����&�$��b�,�ĠU#�et�:������#j%۴�z���2)��tkQa�VT�y���+���"㔬��x��A].�W��m\�^e��$���e�(bj�Py��p�Ө* !Pd�T���m�\�� b��g��֍d��3�~��� 7㬑/{�I#nϣ����Q,]���P,��L�l��~�Qu@��j�$^������QZ�o��o��X��%�_ �M���S�� o�i .����U�Q~�6N-I?= KF�^Y�8�_NJ�H4)��R�Y%�G`PP����L�z�87�a���}ڸ7��R,�T2'm=�X"禯m�a���������~ӀѦ�?�fl�R�V�!�jX<��.�j'����b�/9��0�qZW�m�Cƃ!辴��|�����т#c}�e���~/=�>���f����J��o�.F$E����"po�#)�!����W����u�>�Ry����xA�P&�&��)v7$ [���)�;��i9[�����5�nq#d�'�3��7�eh\vA! ����X=��)�Ƙ��qHr��c����?R��;%��p͇]�q<PO��u�NYa����Wb��e)�'�3(�X��~=Ա�+�B�N6�4Hܖ>,�<����?� "���["� ��t�`���'�Qto���>�s�^f��9[�#��6V%O����e}�qM�߃]_�Kh'�T�rw�⒙_}�ک�T���b���q;m�ûǃ��7�YdLA��2� ��:�Xn;�T���L�����U]X�lG `��hQ7 �qŤ���5���K*�쌜�Gɖ�eI]����yd݇���(>@�����P�={� �)���a��e��X:l<D�E9��Y��$�����`�Ϛ���B�����U�̬+��"������ ���31���$S�\�Ϝ>j�`��q��9m ���H4��/�FofnǴ�RJ��O���d�5�"�b�����e"8�=$;�=�c�:D<"C��f�(���JR�:�L¹�p��t.�����5��u�yRƳ۫1M���a���r ��)|n?��
Static task
static1
Behavioral task
behavioral1
Sample
8120a72f993adfb91dd27818123c3aa373ba58a8b14365cc9cc7621580d74343.exe
Resource
win7-20240221-en
General
-
Target
8120a72f993adfb91dd27818123c3aa373ba58a8b14365cc9cc7621580d74343
-
Size
2.9MB
-
MD5
db7d34a6f8ff9f431e4d5e1e4ffc54f1
-
SHA1
e527bc2b1cb35fba61c3859c2b9c1abb440b1b7a
-
SHA256
8120a72f993adfb91dd27818123c3aa373ba58a8b14365cc9cc7621580d74343
-
SHA512
67fa87065f6d2b21b83a0e48c8e05e73f3d6614ab1b8a7ffe5b89a1fba2981ad418e26a54355fcfd05fe850c8b8a48c2c3009aa9b2b16e33989c62d3e0218027
-
SSDEEP
49152:KZqECZqQSCux1i+ZoHW0URaJxWd/u875fLzYTZ6+5wGEfNO0lLnp68G8cGl:KZqEWq/3xdqURaXWd375fPmh5Af/jrc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8120a72f993adfb91dd27818123c3aa373ba58a8b14365cc9cc7621580d74343
Files
-
8120a72f993adfb91dd27818123c3aa373ba58a8b14365cc9cc7621580d74343.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 461KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE