���k�}� �D��>5G1k�m$�&=��)��8q���/lt��vլ�)�+�\�7px^��7g�b���݁_p}S/���8w����FՐJ�E�RlA��5��.�熿ل9��q�N��X"CD���o�cĻ�I���XjGT���o�;7�`�ͥ+-��N�v����6����ޜAɟt�|�Nŏ4$o�u�S��a(����r1�]�h�ڻ���,�� ��$��F~��!�,$y�1�������Q�>�9c|+ڵN!쨏��z"��/��@��$,�y��L{��O���M����}�A����Y�C���C���=,H�gf���+xi%�� ���b���B�"���#��k^�JZ�_I^2�!:��H8�-�C}���u��><V�>Ԥ����� �N�Q���O��gy$�|c$�1�\�(�x���5�D����Q�m���a>�R�犋���Ⱥh� <�n����t+�q�M���Yr~F�����$��L��}-�W~�ʪ�TKo�C�Ij�Z����r�y�������p�D��XE��wQ��֘z������9�2q���GI2}��iZ�f��傆���$����D!�r��,ɠ{�_A��{��<.>�����v��IE( ����op�U�����by+~�?���r�nNAi,�}������a�L���cJ>G���XV���N~|��tJk��_7�J*e�����y��kd��8�{��������� ;����xN��� �c,��!m|���J���|DM?W�]9偒�y��_������@��"�ۖ��N\��ɒ ��7r��+�.���Gl|��9c�#����cbl p��H�4�����A_h\�QB�h�Z2��2/A�:m��1݄��;ʼ����DeC��{Ƚd��j|�ȟԖ���=��!�n�^�Lͯ�{d�Bb��6�k%ǖ C���>,�Z0Y4Q A�T���1P�>�S7ݵ&��A���\pIi� �(�`7�/:5�T'�n�J��Mb��2S�O�dfՋ��oLue��^0�N)d�םk#�1s�2����u���h�����CR;���:�������K�Ck�`�ݬ1lO�e ���=};���iiU�.���0,&?�J&�]��r�����ڸ�u���|�vA��v� B���: � ��QE��C3&�@�i�--ԅ��sP��7�GX�|�F�#��<BUX�� Ĉ�6�d���� ��]��N�q�FP�F��C>��)�����*��#:��23 ���Q�M���7 �y]�3���0/�6|��Wͼ-���>r ���,9=���{<���HI]������w���{V~'�s��"���̾6Du��!����Ga�h�9�����Ȳ\j��7�h�}w�8�_���v�QE��������x<�N�o�ȋaU��Z^6��,#��08�8�w_�qB�`S�ㅭ�Ǔ��OĮo�Qwb� ��?��t�w��#�RSD�Z'A�-l��gPՇ���S2���c��ܵ6>:w�7���ľ(�gouԠ��rQ��D_����L�r�������t�����p;W�X�$�l�7����H��l���cڟ�ȟviZ�wx��w����Т���d߯�Gyk�$�td=�*�R�=X�D�X�������)nw�`8�?�`8+:���Txܧ�QG<)V7^�u�e�H��W�kx��tm�>��o����K��i��8���)&0�|����]��HKF��-�0V�P�R�}2�Gn:[�]�5T���F2���JH�肞v�DԚ+2j]^��4��{Ng �E3?��Q��@�a���^z͂H�Ǹ�p��%�����VYrC2h��ɀ�b�u�� nm� ��������(THRRv��wf8P������I� ��Ç�y�z�T�,�c��ӢA�*F� �]m�QŻ�K�H�mAM�J��*��Dq�Eђ����#�i�>!z�������E:lq)�rh���\���������i^ �-�k�r���������C��2FK�av�s#�h�T�.��n���ex1���_�8�q���>��Ȗ���� ������O�I���o�����硠VS�<`���d y�"��l�ߩ xrg�p1�'�捺/�B ������U+�������sc�����ৈ�^e�"��W��Q*�>����hz��+Z�Y!�H��5��*��rÁ��#�h/�'s�U���*Ի�Z$��I�?t���0z��4;�;A��U�t�����ku��Y�j^�i-`�{��8U�o��r6�t��j�%��C��*+�ݘ�^�jF�M�͈wo��)�[t É���j ������SCB O��f60L��3c��Ris��40��@�q5�zq�'ְE�^�M���Mj���J�=4"4b;eR��v��z1� �]��3��m~�g�{Z�O�pP�0�� �9!�����Y�����;������^��7�џ�M��?�p@0~�B���c��"Lc�d�3Ug���Q p-Ei�lP<`{�#&��!Q�y"lu�t��i�������K����)@���5a�Q��v���z!��xul��p�g~��$v���l�>=<�%'���:����3�cR�"����$h���|� `U9��1�Y�HZ �3l�������s给�ڲ� M��B�:�E��biI|�r���P��k[��I�J*�LN��則!}0 3�܈��0�j�Ob���(���#+-Au'���'� ���Y\��|>����1N�����JP[N�EuiW ��52�y%��a�7�Y�b�ء��G(��_WTjU q�3�b�a�~ ڣpRʞ�gQ҇��/6*̊Y݈]m˦:�+-Nb�U�DŽ�@4�:�7v�H���v$ ^��W�4���)X�ڑP�Ғ�P������⋕b �}��j-~��9 AZ���?�D�&��'�cQ��m���s�:�S��.?��I;Ԣr�ȥ�_�C�\c���)�'����s���)U�ܢ��B�U����]̵�d�*��j}���]�� ������Wp+��N�&�D��>+�s$���H��^,�6�/��"�d�8�� �v�r�Q �*��e-�(��_� kuՊ��E+�RK�o�S�F��3A�����W�1PO��՞O�\_Cyv<�gm���m�~L���$���c�%�%���L� 6v���۠�� q��t�XL��u�2����)d���S�;��!�g��u˔�x�,<�r��P2��X�@d�[d��S�<�{��t����%KwF���d%bJE�ؚ��ȑ�c|Ȓ��d� ��Xs�[1?@��X?�BA;rЪu�"��X���u-�e��� �ZP�T�&�{��3K� �����z'Ke�<�]��6�&Jֈ�i�8gpz���
Static task
static1
Behavioral task
behavioral1
Sample
bc2c258e50d14fba84b35fd62455502b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bc2c258e50d14fba84b35fd62455502b.exe
Resource
win10v2004-20231215-en
General
-
Target
bc2c258e50d14fba84b35fd62455502b
-
Size
3.6MB
-
MD5
bc2c258e50d14fba84b35fd62455502b
-
SHA1
aec667a5453a2eecc5d6b4aef3fb351913743b50
-
SHA256
bd8872a9436be51ae40c89d46568e7398c9c79caafc8b449e186f6dc8665d268
-
SHA512
d8730ad3f351f2df8d2cf2821baa6e66801f2fa0df8500b82a72966e3904b2451be467636ad73c279051fd879add6e964dac9b29d67200465b8511b0cea25757
-
SSDEEP
98304:ZI3wfsA7UTSSRpiG9RAKxuiEazKc/sONB8:qw0ActR/R9Eaec/s+q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc2c258e50d14fba84b35fd62455502b
Files
-
bc2c258e50d14fba84b35fd62455502b.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 186KB - Virtual size: 12.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE