l7�}JI���6�ڗ=�)�o��M8�>S���lc<S{��t5u�+�JP�apxi��]�O�^��g٧������Y>��Ū�� �V��٥�t��� �\3��=�ͬ�m�SP����HIz��m5>� ��C1����0��e��Po������?�U�����ܐ�R���E�j���$(��Y����{����ΧN���p(����$M��/]��f~�y�6�ŧ���؞f���xy>��}�Ս撄��0*�-3.s���#� ��E�?�q���u���DR]�1�����Rlj��i=�5��X���ؕ���{�)r4Ms1�2]V�����][ ���9|�47 Y]oDM��@cI��њ5��c�������2Μsn�lR9��aَ�bx�X.���`b &��Ƿ6E��?,y�e$w���z8$��Ծ��E�^BN�j�PO��'�Hz��I�8��_���Ux�}���1���#���Y:F��ie��Mq)��]�L��%L2q�^�1��|ý�Uh �����C����x ���%)r��!�~�4����o��Jyv?�;4)כ+���{/���i8����lA�����ԧrj���|>� ����N,ܼr:n�����"�1������1����·���el�Z������yWF���ߟuj}�~ �1m�pb6Qj���� �B�'3�Y������}g��[�/Ӵ7�b1��\�W�~řM)A�NƳ;�7^��ew �)\�ʸ��s�p4��@>E�_�Nr�F��Sy����m��jV;ے���#��?W�VD�����JЖ3�İ��!�p�� w��o�tt���qn�El��b�����+�Y2��}0�����2!-ȫ\b1�v̀'��t��VA��؛���:i$�s���-x� ����4�BNm ;� 6W�~(X�{��R���B���e�fd�5%�eֱ�'֜�r��߾�2��M�y����%4;�UJ�F_"�4v`Z?�.�-*��H��x�����5�).���?U�L_���Wk�B�)���Q%Yp����}�M��I�t�4�Ul ���1�G�?p��K(�@+����'d�{給�m���g?�M̊E���z�ʻ� ��8� 7�&yC���Q�Y��������H��;��H���bYm6��H���:ԃ-��Г�uڵ)�f ��.ۆpƏ�����2��!�C�su=&H+R� ��R��//��D��������b�ŎL�G�/��y�� �*�N-+ߟxq �J��4{N5�l��ޙB��Qٸ�7큡��� �<b�Q%A!h�s��M�Q��מ5�����QU#w@2�3^��9�"�1�OFK`5��7�l���J!�כϔ�*�5�Y_��o(PTi���U��j[���<����b�& F'��ݔ���q4�q��ҷ��+���y����]{>��,�,v��;"h3H��P=���E�!� A!�]ś&����x�Ӄ���m`Tr�=>�=�^�sOQ.�~����|�m�}�2>3��!\��pz��l�̪(&�y�k,bvʘɺT��^ C\V���QJ*��i3������� $Z��{J~�ӥ/���b+����I /^ރf�X +�y����y������0^�]�"n���է2y9��y�fR���dvzگ����|��ۯ�{��ȸت7��W�&*�c�LW3����%�M�y�±�>H�ʉ}I�`O�H�dRA{`g��:�w�#��$���^�5�x�a��� �n�����eYO�c��Z�,6K�U<���ћ��8�'VEW��*ȌP�zʞ�A�����$q�'���C�Ƶ�dge��n��M\_^*?O��p��J���Xta`�e�Ð�h]a&0%a�.�,.rFt䞂o��0mL3��UV�5�D�ҦF�AG@z����$e�z����glM�z�����F=�3$�?�OU��rxc�:���FH�<�^{ �����F��^2�$ݛЍ~j!t%�}���ӡ���9b�����xo��-�&i<GL����yw�gn�6�J3���;v3G�u��g�E� �X��'m�h���$w �p�=�w�֛�G�t�4���q� $2��1������pCT PKi�;�����|[ ��ʸ]"��hnX�����i�Pn�@'4�D.���Eg��2V���7�f ������q�i߆�dנ6Y"���+i���G�[�ϥ�c�G�6��~�]o5�8�ƹ�8���U:]M����sq��v&É����"r��� ������_`� �j��~h��g2�C���4�GX� �����2���D���������KhI2�ob��A�l���:�z|7�ŞP3��\�FJ!�#���8�\�V��5��t���Y��y���M�`r*���o]z���k��_gthh p4��P��DG�I*��ו�|�J��Z��*�$8F�-��Y�����*Q�g���)�ڒ:b1�ҷo��8#ZF�&�Kh�H�e?E�� }�{3��z+�X�l3΄��C=��mZ�Y�Z�G3A�>FP�Pqω�m�}�x4���"o] V�ה��EH��=R�������4�%]����,��!?���g��{�p(�c ��/��i�5��XؘX��G��Օ{�.���0�=�˙L���t$�)��6a]J�4 =s�ӗV�� ���X�eB�z`1?�����#1Jm �I��A��@��&pQ���&�ɜ���N����O@8Y�e�����r�|���ij;U�˞9bxVE��uǛSto|�)P��{�i��f���B��{��/Ʃ�>�7L���'h���1C�#�>��7��4�+��ߵ�ӽ2a��4�p��P��s��=x����Ӓ�8ev��0x����0�+3��l�`;n0;�G,|�sp���kl驣�]�������S�0�|�mP��t���05^V��I�����c(m��K�����^jM�B�86�� -�t$?R�=&�A�Q7a:G�tF�F|���SRc��C!�g�|�b@.z�뒧�G�q���sCB��ۍTQV��<8Z�!������1���V̼��ߋ�:��*�!7��B����æ%�Vq��J�e�q {rpd���$me]`owZת����� i��g��1��N�~�W+8�x����y��+��-~�1��9�{P��oc)�]�����N���#~o*�,�U�����O���}���S���w&��P��d�����ø&��'�����M}��ϻ��u<�נJч�9-��5Ï)7����=�N0YsL�Ҝ�_dp9@B�E �{��yݐ��:k�~^�NZ\rȯ@�C�}��@A{T ��{EF��M�b��ħ�����@��'���+�q�4��)��D#�`� �{T��i���+ٿT�l�y�g����)#���Ilh!�`�@��@>�dD�9��扝@`)���6Kŗ�;eQ߄_��%�}%Dif���Z�ݣ�������|�Y^[*9�E���R��@�M�e����VtqdI��������>�m:R^&dqҲ�o��1 �"��8�Q����Q4��1��ؑ�?M\�Kȏu"/�58���x��ɵH���5e�`����.`K3����'䊬��d��M��0�_��xגL�ˏ
Static task
static1
Behavioral task
behavioral1
Sample
80cdddb0effd3084d584f5a60bb34f0748dbf4811475768d331bb8c033c3df5d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
80cdddb0effd3084d584f5a60bb34f0748dbf4811475768d331bb8c033c3df5d.exe
Resource
win10v2004-20240226-en
General
-
Target
80cdddb0effd3084d584f5a60bb34f0748dbf4811475768d331bb8c033c3df5d
-
Size
3.5MB
-
MD5
755c343061ee6a3e6e15f6349c94565e
-
SHA1
83843bda9335b70828ef8dd78ec76383c05aae28
-
SHA256
80cdddb0effd3084d584f5a60bb34f0748dbf4811475768d331bb8c033c3df5d
-
SHA512
9f7c72478e4e8db3e9d23a47b4084a5c81deb7c455d896538535b874586865b394bf718a4ff51e914f96082b333891fa4496f8485ab2566cdd9f20786e2dc44c
-
SSDEEP
49152:xAEx6EPJz4TfMX22BUpOXyXH/3/3whQUf6fd6KHav82fbcJtgXCg0:xX6pAqsyXfxu6fdov0Jttg0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 80cdddb0effd3084d584f5a60bb34f0748dbf4811475768d331bb8c033c3df5d
Files
-
80cdddb0effd3084d584f5a60bb34f0748dbf4811475768d331bb8c033c3df5d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 1.1MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE