�W���E�P�i0Ɩ����&�?-n�aםO6���w7 Iu� B��'�왵����[��?�{����_)�&��.w�Q� 9gB&�V�v(N�7���2�@җ��Gs���&c>�Z.8K1����MPa㓶�ta���e'��T���̣.�9 �p�Ƣ��.\��61H3��_��?@X ��ӎ�ʪ��P�QG�dTЌ!��}�ߚ�̕>H������k�+�}b���HPe��:�t���Jw'O�?��U oUnt�x@�.l]�xi����dq���kD ���K����s������En�T�K�2��Z3#y3HSJ��V̠;m���*�.��� �Or҇h�:�bOر��<�E�u�clBÃg&��5�p�`R?����x��p�A%}�{���^⹅�v`�4F����JB�����n�<�ļ�4�CϨ)��]�B��U� Ɖ1,�����w�7k8��[LT��w����u\b�P��[d��J=���i\�N�Dtr���b��ק�B��!~���Bț���@�AS������y��i���N_E��Dz���97���r�!�ml�6��m%��T3͗$ҥ%�=<��I���G���y?�4��D����zH`��!3�7���"R���6�I=�^��W0����M�Xj4mF������M�qʥ�H����kĒ�8:��`�zݝK��բ�O!>�5�d�W|j���1�;Q2��D �I�Q�q�6@J�1�pr��(0R�S�����Ȁ��!�I��]����%}�����44��|<˹�{�8�$��$��@�U��\���WCBY��ln0�ޥs�8�,f���U�S�:@�,c�aes�,~_�m�O�DI셻�ԯ�����Vq��=LH?F���c�<*��&#� H��_��[-on�c�K�BB 4L\�t���j���2�D&^��]�߷���\ �z�:�J)c��_�g�J��>�;����!�S��?�l�Իr�Ej�٥���D�s���߃�,���3m�����!�5� J�ȗ���I3~��VRvu����x���?�`��A���㗳��b IF/'*i��O2��ۮ�J�kd;?�D�/M�Äys� +����| #�4�=�Sq%G����╆'���"���'�QHv����!�����˙|���,ڕ�CnBG��Y�)��]��m���GG�i�ʷ"��s��r�e�e��4"_���7�n�;�����˵9��4���hk��a��vQr����Jc�&I�\ �u�ݻ�ف�?J�dӮ}? ��=��#&���{��]��!_���jM�[�'V�n�K��u��rbgW)�/������\�������c< k_݂)|��^����TE�5����3X�&t5�~z�,�HO��-U��(x�G�,�Jc(�Q��M(�} �"- #�d�^*^��t�?W���:�GM��DV�h37�&�@���pQ��{e�<��ps�Y�3�xD2�5d�2&��T;[�IJ�X�-?� ��.��f��0f�m����s(��:C��g�;RU�P�Q�ZFYkj�:+��ٜ�M��-���S�՛b 3H� A�����N��=A1��� ��Y3�(]Cڨھw������]ܮ5#�I��x��ğ&H<C�M?ٸ����� ��3��:�A�����7G�1W:�܅�غ����z�i� �A) F(G<r��~�T��Ax�.��ެ��\^f��P����_��X�J�*_��)���~�> <,G��N����W���Ry�5mnE�)�Ʒ�rj��Vtz�JF�1U��ؿG�dc�g��Ҹ���_�nP�R���X�´Ɏx��}iM�=_����z���g���m�n�i1����%d��-~��ۣ\�5�U#����(� $H���0oL�e�������9 p��ӗ�W��m�F?�!��v�Z~��%���_���d�(���J������� 0�ڥn��x�s�P^|��7��|�0 v�)L�Z 3J�`�� ��@�1�i/���-���~0#����n��N �6��#_ �x�0C-Z��¡�K�� �Cl���ڪJ�"*��cx�O��D��Ğ>!��~�>~�����n=��]�U�h����� ��.ǩD��\��Vޣ�fb��O�G ���\��&�n�$�����y(�1�F^E[ �)�2��oWm�"��5T�齫��edz���Mc-&�H�L�[6"���~����z��<�`Qr���2d<gPC����>O��/:'J�{��Z����}zvA�%�w����ȏ�D��e*{��!��T��F6ǎͪk$��c7 %�`{�*A�vI��z����ie8G�W�.Ij���茯�zUD3[]�u#�!�Kٻl}g�-sٸ�%�Pi����Pc�.������x�o!װI���~a`��R���k/���Ͽ��Q}뢲�ÙHq ߳8� �����,ūre��>�.�-[�V0o�G�-��3+?38\B���EȋX�^|:L��U�|jH�>~�!0�qy5#��k2����K�Ņ���Cbm��`u�}|�`���O�FW>�-$6H�26�������j�2�-*wZ�t �&�J=��("wqP]���EZ� �������OjA�;��$}�z�A=��(�C�NrMA����,꾃2��G���F#�)<#�d'W��I��)��eU�av���f��O���&BP�H�2��C�ǔ+�g*k~#`2�up�V��F��%�d6�i�V���w �6��rq9-�o��,O�^8e�hdS뾩��50� n��8�5>r�h�NTtPi4,�P����N�"��=��b�Z�ӫu0�A��H��6��3�������A �E�KƮ�����f�>!� �w���'�V��tD@l��KH{Xp�*p�"���m��*89 P��A �2�9�(�_�+���O�xK��,B����`��e���4KY�����gܭ�eQ��|K�}��[�EU{��sA,�O���1����E2r�3���Zr�ߟ�p�g�;��WKmX[�\n�u�e������J��B'�c��O��8v���Y�=����4"v��=�,~��oc����u�JՔ�r��?a�M�q�)�vQ���p����=W)����� � ��h�&�g� ������ڲϐL�q�����:���@z����i������7��Q �L��q��<ԥ�'�X�)"7�#v�bz�;� ��s-5���2ݵ����`���hmq�U�UT�}>�>��Z F$G@Uq�>|����?��-6@+�"�v�D�+�������=�SOT���_ۛiG���Ch�ݱ��;��i�8Qv ������Oo�X���_.+�G�>-MGr�j��猳�l=����]py���"��D"2��j�<�2A�5L^@��q�
Static task
static1
Behavioral task
behavioral1
Sample
a9ded212aca690b25314cdbdca3958c42ea3ad53fe56307f17a926301246537d.exe
Resource
win7-20240221-en
General
-
Target
a9ded212aca690b25314cdbdca3958c42ea3ad53fe56307f17a926301246537d
-
Size
2.9MB
-
MD5
6005f6660e281d409a0df56ee2d63ff4
-
SHA1
74ecd22161edeab56627f481f09883e34ae92f18
-
SHA256
a9ded212aca690b25314cdbdca3958c42ea3ad53fe56307f17a926301246537d
-
SHA512
d01d88b63f079777b422554b930dbf0b60a5aa2753ecb498679dca842c26c2c19bd23ecbcf0978717f8bd8a3bab7ee1e76f9e2975a11de3516a1e2bbd991bf7d
-
SSDEEP
49152:ZvVZIlnhOY6UKOy7FAK+nvyzZl06DX0ehf3IeP97v4X0GhVvQUqgr+T4zGru/8K:ZvVZI1gW82K+vyzHDke9H7IHQU7r+qUe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9ded212aca690b25314cdbdca3958c42ea3ad53fe56307f17a926301246537d
Files
-
a9ded212aca690b25314cdbdca3958c42ea3ad53fe56307f17a926301246537d.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 461KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE