�H��@j�f�ձ%*S�'7�C�O�U�cA��-�`zFKF�~N��g ���������kw�Fu���qa���E�5=P.�.���x�T��<���u�{A��n^��8Fe�f�nmZ��!�մ�����6E�@_��u��m����~����$ɟj@ӡ��=6��wI�^����].3�`�8:������6Ν���`�yu��Z�uE�����#M�8���=��s د�A���;u�N�@�&���Fj��F;��s%uo=��r"O�n��{�a1����iP����C�y�����+J<�'��� ܱ��X.O ���� �� +S1X������cV�S������u�ՑD�����(�h��@T"��A�s�#�)�:p��m�>�-�筶KIr�N$�u;]�����ov�hg4�u>q#��\���V����yn��yTo4F��#��B���'MJ����|uX�% )�&^��~��\Dzg�Tה�4�NAc������ ���Ys��è�q����6���hh��}�x�����0 �=�Y�vߊw�!g^F������ ���)�*�hvnV}e��HO��Ԇ��!�g��q9ڒ�[HJ����[�������+;`���������¯�t}`��V�nG�J6��g��%M�2�*6a}���m�7��̒�H��>��[�����O�b�v���9��;�d";X��?ńp��$�9$"�^h@`�����Kf+�&�Om7�D�A��_�1�]���U�����o¿�9 ����]��f��|����9��m�JB�s8*�`鞊�yn٭�-�~� ��|��OW�U��q�c���������� �vF��8W�d5&����CXIn�T*��g�ؒ�M[��(p���fh�<��#\��>�a�d��:�U�r͜6ԧc,S��yX-���3����2�����������,SR�C��a������|��fݩ-d?z���D���>��(��m:&;UzG�Sm�q�(4Jޝ����tt�W/$����5�2%��������ծ+�9��W\ �ay�+cIWR���WB�@���A�)�q�m-5ؾG��|���ӫ����[�"����g�,�o��������I�]Z}�tP�jv�k�d:�F�v��n��/����TG��N�´j�h2W�W;4W�H��@eS��-�|��[t�R��>��A�X��� ϽUUذ'�P� *���&� T�Z��l�c~$�sW1�$�#z��w۪tk�#����w�X�8�� X<k� �D���v�@ry?�7H���g��8�/���91T��d1$k�#IѸ�f�k �s[E��xE$rcLģ[a�53�b����eپ��^�,�ϟ|��N����oo�T�7����Mq=:M���`��@P5u;͒���괳T���ǭu�=���ڶ[��[�)����@+$�f�.����</��&��}�Y���)0-�]*~1{?^:�{.�F8zm����Փ�cm����$]#&y~�x�����U��I�� \�l�=81�B4�����Aakiڴ�o¤ft��tEt5��x%g�TӁմ��?�OB���(�`�x��1N4I�GU[�W�oo��L%h�|8E�R(JԎ�&Y^�J@{�^_*�7��Ѝ!�7E�����ڂЭ,���)�I�ڌ#�ZY��Ôm�bӱ�BQ�?ù�SD,kI<�#�}6cf��P!��G0o��3��h�-�m�7���8Q9��� �V�P�t����XD�5��;%�z��߆Ÿ�>2�����,���.���i)ZU�t Ip����9q��.G�+Xs �L�E�pD��h7�����VNVA2B*9J*��������cn2clX7�k{� �dV�D%듒w籹h"�FF$�b]�\g�#5R������/`��u"� ˖�qF�$zރr�^ܒ/�Eą(�Po�����y �Wj� ��d������w���m���]���a}�J�r�o�k:�����-��F*S�N3=��)fYk��D�W6h�c�V��#tk�N��@&:�8�ty_��:F+��>�A���������:���H�~Nr;�n��[����ח)jTd+l��pF �iܮE���I�= ~�j�a�.��>b��SIm��tvhw�eT�U�;Y9��M�'�R;)�f���7 �1��3�ך��U=��=��f&����KkP��d0Dy���-~;勧/�*��Q�"����Eu�d7���(��jڻ���-�N�(���!�=[06���d?�t7Á���b���:^y��Y�Pc�0mn�@@5��'�:V?� o�㫃?�\U�M)4p��P8�aĥ��́�T��Hj�nY�/��qũ\ۑ9���c�9Q}P*!�s֖�������1/r�KVi�]R�<7gG�9v��_��Q�� ��Y��`X�\vK�e�y�=�7_kv:u|<���������w���I���(�wP����E������U�_n�|H0lsк�kJn�՜�9,% g��RCoh�Zp%ζ��L�e#�����H&V��a���;�!���k�y��om���w��x���5~��9Y�х(�6ֵA���i�A��q�V���vN�h�xs����A�B��<'Xr�EqeS㢭�l�F��gg+�-8⿂��¥�{���@r���G^!�}�Z��HE>h�h�w6���=55w#|}�u�,=�$E@����Q3H}c�z1���Cp^Z`�URO��G� 0rW�V���w��jmUgh���v��of�F�Z���� Xn��o�����넽q�Y��"9�LD��3M�Є��(#���~Qk����d�b@����A�oz��j%�$$���8÷I�ɱ��d|?(����-zX�IJ�{�ѩĕ'����9�� |�m�qxY�����d�*\�(cf��@�� >8MIݨ� �;,H I�X��'ˡ���,8��U����L�{\XՖ������ ���s툪��9��ն�p/(�3��z�bSPK���f��j ��2ҩ��"��}.bDž�������;\.��~�{������������˟(��1ʆ���O|��h#�H�oCb2�.-�c͢��xw@5��d0(`��cfu�eX�`��&��5�E�̡�%D1���7"�p >WM��.J�� !.������V|�P���]��pʊx��O�bc�D��j��nNV�� n���� �m5���S�Hq3� �\_^/��$r����]c<��^�t�$P��N�˹�(q�}��ߑ�荀G�o�e�!������2<>��m(�^z��`]G !0�� XrJ=ޏ�p��a3�h�Ap�ˍ��5Mع��9��n�р��dAPW6@L��`]$]^Ҳ�*z��ձ�F��<n��
Static task
static1
Behavioral task
behavioral1
Sample
cb91f8052839d8c58cbfb6dc39e88bb8.exe
Resource
win7-20240215-en
General
-
Target
cb91f8052839d8c58cbfb6dc39e88bb8
-
Size
2.1MB
-
MD5
cb91f8052839d8c58cbfb6dc39e88bb8
-
SHA1
3b97432aafe31684767ef0f18fe5af624462911c
-
SHA256
40c104c6094a998efa758c6d7f2a2501597b9e748ac84027dfa1dcb3936196d6
-
SHA512
ccb5cd36f9020c6ceba48b26bd664c8875a575c23632ff402333c3b580f2f933c46e8237d3dead72b91509f03e9469cf820c96670da35916dc0e899fbb00b549
-
SSDEEP
49152:1WEpokElR6gUS4qbU/xqWEEAyC1QNa/kpLyZALU:1WEkKgbYIWEFWNa/HGLU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb91f8052839d8c58cbfb6dc39e88bb8
Files
-
cb91f8052839d8c58cbfb6dc39e88bb8.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 45KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 7.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE