��f�SY�v�P�Ou�4[����v�.����̷���lm�!�E���Ph��Xh���p���)���}"�B}�Հ~W��a��]���Y��{��vW7�0��F���6@�υ�2`�P�h��_Ǵb�+|�`��K��M�D�7�1q�[ax̚C����:�wV�F�������H��*����9#��C�|�<`�8?*Y�,o�3�P.���K/j�Z~��Qv�0�'�rx��E��s�ʕV�}�Af�������?=P�[��]GW���7#�~�ӈ�w�F�R�g9ăwTV���n�1/�'.u���%g�(A"rozO��g��~a�#�,�\�C���d�e�;�v����V����/�d�h7;��(�F`M_�N��h�k� ��o�ً��ʻU����/�����;�y�����-pN���������IaQ��r�C��0��dW��UDO�l3j�� ۚ��h�A�vj���F�����Qch��%w�(�kXy`�� Gᣎ���u���/����� >�x�0� 3�әf�[$-.����� ?�X���c�t廾���f� �H�'���g��"F�l�;��;����"��Y�����j��f��=�/���$����0�ۈ����c�����rj+Rm0���S����],���Z������E��e)y\���RLR��xa���j1B�}�O�Ȓ`�n�y}�� �a���@N�}o�Pǃo�}^8�ܐ)*f���q�gj}��a����0�1 ����J,�5��}�v�D>Ae���A�h� i06��u�����U�|���O}p"3��ԓơA{cBå��vMVx�5*$�j}J�n�����3C�ޯܦ��lZ*��@��UJF1���������DNder��7>:'��E�(�|�!#��Uϸʋ�b+{�(�z��v+��b��3�`�� b�1kA������U(���;��X/]�|�֯���g����{�$��,M�A���E)�5�yg|T���0�f���06/n��d�k��֝��n�, �e �=��:k d"mf�*���>B����� P�Rbf����T].-���^x#wT���2��\e=��% ��dB uH!��#&��;3$Ψ�;�{櫿_M�����d>HxA���D~�=�n���}8��L���8M�: �.�O�g,O��q������װ�h�25�+5�W�Ka�wh�*S/` R0Z��K?~c��j9��-1�����0w��[���Ϭ��0&굻8> ��57v��Y�x.��0(�<r�T�pjuj߈�F�o���T��#������ܩ��Ӱ�k���O���`�BX��P���������W���c}G�y0�W�������'&#ehR�d ��2��W��א���4c�����5O���C~����6e�Y!���_סl?���_A��%��u�ċ� @L�p�b���f�IǺV��}l�y����U�'���o���O���;���.E�j�5̿=_#����f�� ��Q MQ�&��M!�.o諸��_��FVJ+��b|X)Ŗ��rؼ�fӢ�����Mqf6�����l2���e�xCnB�s����j��Qv��7�C@0��R����ܜMF�g� ���[n}��)t~o�w��*�>$����`�Y�OG��cl���Oå%vx'�fǽ�W��cjjH*��kd���LN�u���ڡl����*Tmw�I��H�c4ċRZ?^f���6���:r��۪�N".��+��XG�2�D�b0�X��h�����~D7Lg�� ס�@D��_9���S~�ڛK��S��yp����n�\�w���i���r���N �X�+�Z���~�et�e���:�Z4E �MsT냊��B�I��[��=�y�Sw\qk��ZI�h��후��y��g'}R���r�X �[w����L�z_�@�k����L��hV,��~|�պZVq:bN�����YqKq�ONE�fE"-�ҹ1��(>Y�ɉu�o]c�H�C#ϻj/������"+C��sQn�$�`W (�S�Yo��YÎ��x4|68���Ɵ �A���(T� �y`��`�Ɵ=�$��5Р�G����3^��8Q3T�H���� ��|O�����'��>�{��"���p@K��̎�v��472;�����5�!MY/�j&,�:6��o�v1�S��\��ͤʞ�uU�h�����$*"��L�+n2��f�.��"2��r9���#w�B� �{]#���Q��d`��˻6�Cj��(3�����T�a�[��Ç3h���L��dNx��?��9?�3�#����x�*��]B<82���UM�fF���`h0��-�����oR�dh���p�����2�d�š~��K���Ǽ@ߤǑG��A��\]ĵ�ا�:��q�c�s�&�=ۄF�m�^A�1벯�Ю�������Cge�Y���8����@�l��D�c�E��H�L���}�$a�N"r@{�%�p���ĺ�`���aM�<�*�Sa����p}Z��m��e,q�P+z91����_k�to> �?��2o<���f�Z6��-C�R �%��&���V��&aIUmh<��JK�W�����7a�W�k��_�j����n̺r��/�� .�K�XYe�M��������4&�(ہZ�ټy˕�:�c�� ���}H7�m��g��s���.�A�I��Qd��ҹ4}��jo������VU�$��#����ܞᇋ�d���.f�IE�M�u[�KF����lX���,��$�|]^�V�,��kb�8VJo�<ձ����;�+�'�fxJ�m�!�����%v�w�!�����@�w(�)4N�}\�*^w�:K��x���< ��\3p�sfi�1[�s�����l��䦳�]j����ӰpHX~�Z��0�}�)fͬ"��;_�6������҂��ҽ���9��|U�F�>�22�GJ�[��=�sW�������k�%kLU`����f� N��[�6sE=���*�����.�e�v�kyb$1{�Ky&�d��]_���o���+BU>�y��l��x�V-�f$�-b��~�nP>�ZP
Static task
static1
Behavioral task
behavioral1
Sample
ccf11262a0ba34e1f20abf01f99a301b.exe
Resource
win7-20240221-en
General
-
Target
ccf11262a0ba34e1f20abf01f99a301b
-
Size
2.0MB
-
MD5
ccf11262a0ba34e1f20abf01f99a301b
-
SHA1
bb0d84c9f7a8fd4a7f02c77358d44193d1e03b00
-
SHA256
3de878af6b489fa200343e24987e661a2ca923e6d871c57d1f9a994fe43d4a51
-
SHA512
8b8832cc9c5447619dfa70dd550f8110e21d0b7d19ff86724de91d100859d36ad481ed148d9e1ec4d9b1471664312ecafffc13f1b067f93627b6ab7c50c1a947
-
SSDEEP
49152:045pJpftQpgVJm47pOBq9hj7qqQViV0Kn4BmkC0j0c6:ZpFTVjpuq9h6qQViV0KnYCZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ccf11262a0ba34e1f20abf01f99a301b
Files
-
ccf11262a0ba34e1f20abf01f99a301b.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 45KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 7.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE