��{�'�ワ����.+d_V�fw3!< ���?P:��>͝�� ����/y�\~��[�S�_��}(w�������@`�)ͤ�T#Y���p��B�^�a�t'�YQ���"o�m����'�H͏�aZG4o�gxdhe9�4����m��q���;��+P>�&(�gB}N:�H̰�ljN�i��� }�|[`��W��T��OnN��uA�P<ꛏ�-�b�e#M�l���F�����L����a�%i����*���@)g�̾ _������m�� ����6�����0��0'�dZ�Bhj?U�Q��l�~�6�ƫ��t�������%�-%���>�Sl��kTv���<����*��ɲ�k��c��!O�s������R��2'�� �!�~�1]ryV�`*>����~��O�������Ӂ�D�[8i�e%�S�%��!�;�{OF��4�v�u��RXdS��D�Iϝ�Q��\r�]1*���E$x��"� (�3��dm:�~� q XgM��ʂu1��NE*1���0���l�iVQm�s������P�ٹ�~����o�W�Cχ�����Bt��poףʮi�\�X���5ט�m��M���f���-��j�*!m`���`�����A�m̩��W.�3��X�)�&t9��o���6B�2i�-�*}:HP2l�=Bg;��a�6��bI���C!��� ��6D�� =1�{��y�iy�T�!��&3�8ƾZ����C�CS�2W�zݞe������j����Nz���Έ�yX��ѡ�\����4v��Ѓ� �P���@bh�d4D�ԋAH�HjI� �T���$q���ȌQ# u��V�j_ũ3�����x��C�)� ��p��L���5�4xݦ��o�'�%T�Dߚ�[�չ�N��~h��bm�x�́PV�ၕ�m�: y��ǔ� t�`{Q�����j�T�> �VYͦ?�HO�����.zyՁ�R�<l+�Oz��5"3�a�+I��Dy��i�V_[�0��H+��3�����(H�kͲz���bàb���4�WH�D�ND��=�y�B�)��\7��/?���� �|����]����A�c i�Q :&���ӳ}�u�@"g[�p� �)8x'��l����%�]M������쵩m��o���X|�G�`���_����'l��U���x��"oTZk)Σ��M�٩��>�*�F$�l��FU��^O��kH�<}����8M������_����UҶ5{����D����^H��Nyc�{3Pr,XP5VƇNh�~�А���-W�@�S�f���ᮏE?��x8�q��7uԣ�@�>[$�� ���z��s<š�,�'ܨҫ�76�-��,��^�Q��{�\4 Kh��Agu��`��ͩ� �̴� ����)�n�cuWϪ�:Ւ{��p�i~���t}��扙�u�KH^hx��21�I��Y�ქ)�n̦�R|�-G"qŲ� �;�'���]��d�~��<�Π���q�!�p�Uyw��@uߦi����K�����U�ù��|Q&���������F��M�� �wo��*m�ja���y�O�QU�x0��jӓ&=���8�I�.��QK�_c��ܫU����������+��S�b=~)�8ү������4�\��a_{�j�����e"��%�����`%��w�IV`�k���K�w��L�ϣ�H��,)=��ZzZ&�*E~䀇����P�$7).�w������� �4�Nw�8�`Un�e����px�Q�d�-NP�5��!(0����H����\0v��o���<nf��SF�>��6�&�8��7�4N晖(����Z� Y��p�� ^ޫ�4���i��%u�MW�7LR��Cg��=����{��j�9����$%Q$X �'��9j�xc_��x}����g����xQ��+Z�d��p�s�������j@w9��TD� �#���5D쵕]��]=�"�(܄�����U��v����gm��2s��;�1�T��,�d�Y�� ]F�����f`�`��Ə�6�#�F�L�r���,��̳�������=o��\V�|i���<NV�\��v��:Z�öZz��5zM���Lqݫvϴ@�/@��2�fL�&;����Y�P��on����u����$F,�e��͡�#X�Q��Z���-����P���f�m���G��ה�qϣ����6�KV�EW�]Q � ��Mڳk���Fp�zeY3|���-��σ�z(?f�dO����*�\���V���6��}����~Kغ��V�9;�k�\��4�"�T���wF>�����l/b��t��iK'm%ĻK�OKӽR��w>T(|YSۄ���9�S�"�ܚڌ��ɜ0�e�ӖbC��H A�Z���^!�E�6�+Jt�_�@K]X��<��@������ �$�"�n<�Q�@�m!�/��+=��ғ�*זFK�eC+$ݦ�% �����`a�/"�&'��R���^X�� ����(�)_v-���%O�ٲf�rk�< �Ӳp�������Dn�[�}2�Мezh�AAah$��J�� �H;��0�+�wzCI�?JWYO��q��w8�'<��!� W�fN�̆~Bf{� �ː�m�M����׀�W9[��'��3ҕSo-��UX7$�2P �SuVR�j9�'���5��F^#>p�Y�Cy�Rp�$��A!�r�ͽ�u�ઁ���ă��}^]�x_d��C_��J���'��s��f��p��n)�F��|����W8�4���C�;Ƈ��o��:��7"�S�����wu`f����l0��ZW� ����-ӵ�%�"&�Q��ߪ.�P~�J��+�l(�eQGyö��zAZ �0Q^��E2�w�%iF� ���L��-�lJj��4@���_�����'G积Ä��A�S���~t���]� ���̇��ryL�r�;���y�4�|����Q�B!͌R��ˊ��l��.��b=!w�Y{ ��� <��Eh0Qjd���� K/r�8�94,�צ������KW��o�h���B���]�U��?�(`~F��A�Ѩ+�(�l��{�(V5��G�o�?>cN�����9����W����R���(�������;.d�L$�7��:�0 h� -h�A��5F�_~ŞXG���A V�j�Uq��(�u�Ƙ���m���hK5��U�vf^:� ��3W��S<�1��d���Ο����{EH�Z*X���~��Z�� �[$3{���Gլ��l��#C��r�a��`5GJ�ܻFռez�m'�4[T=�́/�,u-�p��y�����Ȅ�2"X�,�����~�:9��B�^��k'j�lǽ��8bW ��E�>R�(�oK[��a)K���.�S�p3�sy%�����W=-V�,ZZ���v���7I�)ߍS �9�K� ⍜=�ר@�ʼnq5K����-ܹ� �R�.��WM�Θ�J�/����?�"��ү��,/�+�kwN��>�a���jr
Static task
static1
Behavioral task
behavioral1
Sample
c09895e91d61abf13ee5a37fb43ac0b1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c09895e91d61abf13ee5a37fb43ac0b1.exe
Resource
win10v2004-20240226-en
General
-
Target
c09895e91d61abf13ee5a37fb43ac0b1
-
Size
1.4MB
-
MD5
c09895e91d61abf13ee5a37fb43ac0b1
-
SHA1
ecb33033d95b8be669cf0830a71a4a91ca539f80
-
SHA256
623d6ecb7bdb5c8a047272c38b956c7ab183039b03b43f238717c0113b6787a2
-
SHA512
828901566aa9770edb7819786bfa869ca76dcff8a5759f488159c9263f8db173c6c13d0b35316cedebd0496fc35c78108522e9145eb9c2ac03fcaf25a8ba0b80
-
SSDEEP
24576:Xi2kzAiYYoipksVrhv8sXw8+mXA1rZHC0IA/4mH7Sl8H18A7I8ACTzVJjXC:qAi3oI0sardC4gWMq1g+XVJjS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c09895e91d61abf13ee5a37fb43ac0b1
Files
-
c09895e91d61abf13ee5a37fb43ac0b1.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 168KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 166KB - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE