e%�^��Ǜ�(�n������."�����"n���������R�Z]t����:��ƻX �TCԤ��ƴ�%&u�A� ]�z��� ��d�E�� ���BaW<4$���5;���U�A8뀿���M:&LIÍ6�ڛ\�����5rMV�M)V0v�o�� ��B�E��U�:�_���^�f�PH�7�*�"-�`���������},'�Q���c~2)n�X�ʴ�A 팣8�@TN�;B0� ���q秤�n3��ꉔ3�C��S�0�k�+9��Y��O ,�T0��/��!� �#���#�u����1 �_p[���+}ۧ�m·O3�5�$�"%C(Q�`JZ����WA���|���f��W���ߵl� NlQ�6V� �-�\!<{��V\�H��K}���2{�?OU�;��P�Y�t�E��g���a���vF�F�ՠ.���<h��$����r�E���s�2��̼B����m~���CU�l���a3��f0Jۺ�e���l�� �ށ�F�*J���ۓ�^���ϳ�rRt��HO��ۂ&��\����j�x��=`�Dq����M�I�غRtI���&��ܨ�c����8�k'ݕ%���W������ͯhbY�B7!�_y�ϻ�*]&����#�4%� �7��s��: ${���Npћ��2���!�q'�K�ڧ��+�����p ���R�]��_6�a����i�D�`�c�������(�;c���|�V��N<�ZlmP~)��S4��ˬ�G���y>��wz�gx�f���W��Bw��u�:͘�KX�N� acͲ�K�ы��2m��E�( ���_F�E��{�n�R0S�{���ڇ]ri�d�4�������9�1h�?X���I9"��^]H�Ѡ<�yߠL�?�e���%���>�͢�"8����=���9�&5w�0��Q��Ai��5T�D~��r۸�Ὀ�pCl�(y��4��Gx�/����T�Ѳ$ fF�VȤ�K����n��SXV<~��XZ�� ���^�8��L��$�I�:��6f�nқ^�LYy�����g������<o� ����6�)^�Ѯ��&�lG��PL`���i�`$y��$:|C��]ُaV���q�\�������i8���/c\�႙�Z����}#Z�]�͵���G7�83��s���i��W�>�f��������a���a`Z���y6��k�x]�6��aYOZ۔���و�k��|�W�O�"��̚�:^k� ����H��`w}�3�K�bN 0���X��d��t���z��=_�R�j�w������}�Jc4k� �3�Ur<Wq�\^�$�g���岮��1��*��a1�j�*CH���@�p@���'� {}3s�R7�U�Ȏ���"��T��Z_��+��0��|B��Ə�!?��5&'����v4�I�.���;5V�R�����OM0We����c9j� �le~�};�I�a��Vq@^���Zi�gW�S�Uzaj}8�Psq���)��N�o@��i�em���m�*��ARmd,���$���4Razz(q;`���%�� �-���c���t[�$Z�e�����J��rgU��t��B%�v]��|�q�-E�W�bi�d,���;���T��'���i�Pi7�_UW���s|��܇�.���Jd��u���CO�X�����G殽�Npź�T���a��غ �V��{N[�j(��+��ȫ���/=��s��?km���T��y��ҍMY��VVl�C�S�3�B�a}W��G���M��!���\̛�/Vv?.��\~��^�ƶ A�9�Ҁ.�$^Ѳmlg���8���p�i�[or��Ο���9�;���viA�D x;���RV0��g�d�p����jЍ����> jeqS�v�4�������W�?��_�Na]0��$��GkU��Z��xE߈gwS��#w^�`<�F�%����V���J��gkg0v��}�:���ʌ���5�-����'͡��B��)�+pn ������օ�VX�;�s�ʞl�F^�k���(�%u�jvo�N�����*�nƇ��wI�v�Te���mͲ��Im/t*<� �,��[���0�^/�p��LZ����)���%IL��[v�62�� ��.�8��ъi�,�U~GH[+w����FOۂר�;���"1j�>��t�ϐ!�2��+#G����ycm�@�f��-�Q�ŏu��q���*��)��)k�/%���e^�g�r"����Γ�]\p�*C��IZ�&K���^R���<!c�X݈��X��,>��z%מf�c44�2�~)/��%�n��.��'�(R����?2��Ejϫj�v,,�^�^pW��x�07�TG���X�N����D�Ү��]�@�Or�,���(�u!�=V%�ʮ:�$�ևml{1\��q� r���fp|�C��_H��U&� ��4�wD�F�с����Rz�s��)m1�|�1L�D���|k��Pr@|��R���MH�Qb����.��xܔY��d���Wv{��q�v����h��w1��E����N�����1�d9��A #� c(p����'Մx��i��^��7�`~`�V>ϹD�����X �H71���`�*U2�HYԇ~f�W�uo���# ��~�y����|+š��U���'}�2����� N�AE�|]�ׯ�4wɤ�hz�8o9��=��y�q�Q�|���Tŏ�0Ţ2�o�����c�������;��h��1ֿ��������Q��D��y"�;Ft@}����� )��þ�����T��CL�؉-�%H�!z��N����g�h&s&-B��6�����O�> 捊�Pn�p�����v�g긏� Q�܋+����$��4��ˉuk�y�S�ϑ -hMc���oy��1f��:X����:3U ��~P*��[� ��Z����Z��n�&���(� ;y���%�?�פ��)O��y����U�x ����-�S%x��-ը|ݓ�PZ�Z��U�����J �P���T��Ҝ�=�v*#��=�Q��q�p������g�$B� �!�7��y��%��.cy��mo����3Nk���4�Co���2g���1�1���b�O�����Ч,��Y,�Q �Vb�.9�^���h�F������w�Hy*� i7XD�;��2���H=N�zEHT.�;95��#Qa�����۽�F�����2ӒZ�ݲH��B��e�l��Y�%�� ���%���m^�g��t0�W�i����_�b㳽�\�]��rw����������M''�3.���%�`��#�8�c*��a���s��ph���vݟO�6�I�H���
Static task
static1
Behavioral task
behavioral1
Sample
8451822bf118e0304953d131cceb45c77e46dd92a919d86a0b7cd642b2c89a2a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8451822bf118e0304953d131cceb45c77e46dd92a919d86a0b7cd642b2c89a2a.exe
Resource
win10v2004-20240226-en
General
-
Target
8451822bf118e0304953d131cceb45c77e46dd92a919d86a0b7cd642b2c89a2a
-
Size
2.4MB
-
MD5
4347e9210cf1563277e43e3b1bc0ca34
-
SHA1
3f9572715f065ca3836b711935616b19fcb36ac8
-
SHA256
8451822bf118e0304953d131cceb45c77e46dd92a919d86a0b7cd642b2c89a2a
-
SHA512
82d354c85c4ce0bc4c12c69e506a6abe7c1f4629d0dcdbdcf333bf9c5b18a4289ed76c342df1bebc2d55896dfbf068b2d11ba55c43d953534ecf3fc2d17edc64
-
SSDEEP
49152:FPLcGRPl8LEE4eRQw3NixbWMGeqpZLvMm/nxzt88uk0V+suKXhTuSuLVUU9Yr6Bz:FjvP1eRdalqpJMAnxzzuk0QKZfeWWKY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8451822bf118e0304953d131cceb45c77e46dd92a919d86a0b7cd642b2c89a2a
Files
-
8451822bf118e0304953d131cceb45c77e46dd92a919d86a0b7cd642b2c89a2a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 48KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 204KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE