�Iř~���ȹ/Z����o���#[�*��&�(�QJt�s듵� ��`p���-qⴻ��� ;�Aؕef��,��[ۢNX�����FJ�W� ���J8�[�Sn�^ �F���]�y�����֠6ݓsy(2�ٮ�Җ`x����� �u��Y�&?'�@�j�\_|L�o[�ˆX��'a�4.��qR��ZJ���Z�W��j1�?�E��'n��Q�䣿��Hdꍥd7S #$��[��n'J?�u�����m��R.2��@5�v饖ba�o����ٟ� �Yú��w�NN��}LP�Jr��_�)�d���x�#�j<����_�{tW9_��,�?��l����9q�0uL�w�GrPP�`�;�W9��U�TP:�������o���� �`�C��g�b}�÷��9�,4I ��d7!V�+q����ѹ�P��´�#� 3[��Ko���+��9�����:L�tD��arI�z76rP7�Վ��rϡ�O��$������bD�Fo���CM�B�P��1^�.�q�!��1����t6|��n^�^��@��%L����_I���c����4}.��E�<b����&�B��������5`�-�;h�|l]כ���l~�ݘ�\���t���.�I4���s'-l?#�y��"#�:�BP՝����VL6&�'��CP�8h�E���"��r�(���M�ٽ֒s�i��e����%F�0��W�}��2(���q7+f���[qk�J&�FH6�~r�m-QZ$?X�yD8��g��MR%L c9��ʕ3��s+�\��� k�/�.Nx��<r���������"כ�uH����mkz���=���s-s K'�T`tF����j��.�!Ub�} �Q�eelW,�nK<�T�%b�0J ~�ff�k+�B{� ѡ�j#L< �X�E�_ʻ�l7u���Jq����Q|���E�2�01 J��uCr��@�h�E�0(Q��h��^���Na�8���V���˺���p,��ar ��^�es�@����M8N�a���Q�a���M���et_�i�����c�"�Ӎp�l���%j������쁩��~�nɜj$��LR���,e����88#�"/0!��5��rô����#���NxI��U3����Q3$�c�6�S�h��mq�ow@F�����`������U��d��u��C�zy��d���=��8R�g��d<6�֓��X����SM�oeO�?C+���(��4;�:���S�v��ei�\�KEP�;�����Xw?���I���χB��~�|ṠXV����ką�ǹ w{��}�^FfU��9T�̈��NBy�|��՛kr��e�U+�D�� �*]V����Tn���F8JE��.f�H����%3i�o�ͫD�Ȅ�I���T��:�0'�6�U���筶͐�Z�=�ȶ�g��k�M��u-;]������t�(��W�+���Z|��`��cH^6�1�l�����T�T>��̀7r���@�<����k���_�G�/&��r�,8wۍ�8���$�:��*�0����K���Ht�d8^���^@y��0=��B�x)��wc?7��1�-��}��c��k���/w�e��1ru�V-��aP��Q��L����`Tu)#��4IP&{G��Q������O�w��h�X��+n����g�,�jm̑=��h>�T���m[.���:��1���J/�m$�D#�i����_��àM���ꤠ�r��C�R&4��ȣ����}�U)c�A���A/��5�ү:��o�{��w��C4O-�"}/�!�j(�lI����B���T�y�ҳ�'���f��KI�g��s�L2]�o->n>�"��ff4 ��(�G~���B�V�y�� O�:��Y<��K+ڱ�n�G��m7�:�2�ڣ:�ׁ��d�_� T9h+֖yZ1�Xr<W7\����8X� ��Q�tm�m���;�j�� ��ྻ�e�b��M*�B����c��1)E����x��ig�x9�f:[;�}=$�j���=ޥ��J,Ȥ���J���c>�t~���cRgi�����3���)z<�.��;l2�2u�M��ͅ֏��P+��F8��L� �vcO�tk�up���-��H�����Cـ#z���y,�D�T�� Q�/�Ou��\��5�:�Mk�JFc��ST�Uڋc}"&�v�Gz2@bF{4���Л�_���z,��|+�2��5g-�d���t�yݭ��KG�ҿ��$�����S2a���%զ�<�-3A�1Kh���fO���z����z��k��Z���DW���d�c�ԩ&v�@�)���<�_��#,aD����5s��s�j��i��U ���)�I�y�v������~,�Wۻ��T�q�_�,Ӝ��ٕ��n8�/���,'����`T�U����+y{�P����8l�N"��Mz:�ڲ�m.pX��pn���~m��-78r��� ����'Rt�E_L�D�`��d�[�������o������g���X���q�/�_n��-��������>d�g*�&]�K �n���n��l��W�\VlѰt�PñPZ���C����Θ��A�l�i� ����ҖiН�eD��$��]�fༀ�{;Ɓ>V .kPn��F=�=�!�j���T>�L��9ga�77��w�c4�8d���X5�)<E�)͑c>���av����2��P���ݏN��@��P���� *���uƧ����S�x���/Rn�Z���{ �3.6��:g����}�����&�/[�e��xC�<X�a� ݿU3�H�xc&T�&t��9����Q�*�N���HǞ@Ԭ߮9�5V�C�4(�bL���KUⅨno����z������6t�����=g�G�A���Y�������澰����+���c�3WJ�C������*"y�y�������u+_XM��ں%�]Z�6��HHߘ�fjg�E���2o���{�\�����ઈ�G�H�L�/�_�5Qqj��.c������T�����G1�.�C�fa�<T;�àR�+�|IDI(F�\�*�aT����`Fl~��25>��~�)L�͌M��-��ȧUy��g8Spz�7�hrI5�*��ۙ8��m(P���0t��v�{Y�l/���u�ύ�|���A���\f�6��?�)��s��.���]��q ��zF��F�}��BΔ\ڞ�J�Y���㊞6����m��9 #^f���.��Jb����&�� �lj�V��9��/B�����/X��1�G��n�Q+�Mj���%47&�0AU�?��)G�� ��t�/L��IG����.�1�w;4������� u|�EH���l��fz|2�r��5}�F�,�4O�A�pU2�)v}]���Gϧ�x�����uB$�ѐ;�]�R���K����#-[���H�V܆J����Q��Q[�DvR���8�;m ��vo.<ِ��䔎����C��1w�R7{j>��`���z�w�*�S��Q� uƭ{gWҐeJ>���b��������s�s�Y�ng��[��&���q��i��ȱk��������ӣ���ku���$�g(����
Static task
static1
Behavioral task
behavioral1
Sample
a69f0cddc85c7b8ea3e65749700d480ac3291e910a926efe826026b61dc0b9d1.exe
Resource
win7-20240221-en
General
-
Target
a69f0cddc85c7b8ea3e65749700d480ac3291e910a926efe826026b61dc0b9d1.exe
-
Size
6.1MB
-
MD5
e0c20663783fb894d4c8aeabe5047d58
-
SHA1
b1f4d1321a4c59610e2da83934f5e5ca008b8f98
-
SHA256
a69f0cddc85c7b8ea3e65749700d480ac3291e910a926efe826026b61dc0b9d1
-
SHA512
3f1a351fcd519117638d8bafa7b748b9c1b9341a002d397c1b259508b1673a8f17b9295eb3a6e253523746620d910e479217a2b440e0777906536c1cef7b5290
-
SSDEEP
98304:8Epeal8MR6bwsxS8SVvosgtnbiU7/rYdaKKOJrcpRDeepgrrpU+M:8UXbiUVA/bnjYdF7rqR74NU+M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a69f0cddc85c7b8ea3e65749700d480ac3291e910a926efe826026b61dc0b9d1.exe
Files
-
a69f0cddc85c7b8ea3e65749700d480ac3291e910a926efe826026b61dc0b9d1.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 81KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 21.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5.6MB - Virtual size: 5.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE