��<oO��&�v���ۅYz�����gv,qGB>�g�P��~�G�8h�W2�xn'8��q��ﬨ���۰���Bu!I0m�8����s%���P��)�ٙP���ϓ�:��%�e�n ��;k���J�"�i��!�V\��bv�6���bp�<R�r��U��fݲaբ\Q�j�k-��m/@P�A"��niݹhT}VY��C�)&h��EŦ�=>8ݎ+���۠��x#��!&i�dN����bW����s�ƭ�Öɶ�5����;����!���������&�t�O[[ξN��E����,�@c���4s�.��y��o�Y�4��� �5�gi��b�!��s^��GD�]|�~Z����'�h\t�����ʉ��W��8��� ���n5R�Oa�s��a �L�����cV�j����ڱy���T��&�z.s���bk^:ֈ���ԉP�l����F�%B���_��D'b���U<�����ľ�PT��ıjK�.9'@2;r<�8B���f|YC�!��=�j�d����'�� �99~�j�SO"\�Ɓ���_�]WI�t���Sk5=q���mT"~���ĭ ���5q� !>��:U�.� �8���݂�v_xКm�sZ��������N�?uَ� ��� a����E�B��C�e��^�n��cQ+L��vn�p��Nb�$|g)�xmYj=�l��t[�||v�F֎\2�~����RFX"wtDs"��l}'�H���`�b#�>H����﮺��g��Ps���jF�4�a��9}(�t�U<v�5ܾ�$�9�z �4DppKMo�qJ9��yWsw�\h�4��!?�4�@]BhD���>ڠ��*���-V�.T?�D�RC�V��c��^Y��!�d�����N���A�֫`O��:�N��j�C��d��.U�`�>�x��[��{�+/�^�Tߏa���ULq >IEW�39�?�4%c�]oI�Ҵ��ἀ3$��HЏ��?���'��&���Ys[}[�#7>���^�̒�����#���� �IAJ�VI��L�<�h�;ˬ��D�v��{h: ��y�᠓S���G�K�������,o��l#��*?hf���&��_r�{0�u��%�X�o�q�/n��ܵ�ҕ��}'��ក��̝0��I����r�f��g��g�y�P:z� �O!����`ň���Ⱥ����)��z��鹧xﱛ#1�'X��z0,{�T3D�)!�%�J����D$��Ӵ�C�RLMl������ zbE�4����zX�����H�8K����?�{�c��֫yQҩ�>W>=�ZM��cw���2XB�6g��8_��&Eq�t�C(�� ����o}7�Ě�3�~D��h3��8o<�n&�qk\t�:3����PF���:��>�ʨ��fʼ/,�^-Ǫ;�D�!N� �??���K{0��p����� ,�ה������ Y��q�%��*�Q��"u��}��j n��%�֧U{�����-1)��������u�U�T�4^�-!�r�t�����RI���^�c�n]ɽG��+8��j����ؽ��M��s���+?�˅j�l������j��cb ��J?�s���|E.�&�>�ؿzy�ݕ�b� ���Z�������~Rt�6�)M;_xϔ�>J9Lׯa+?'�;v�nЍƑ�Z���+������վ��V}������O�֛MvO�.B��k�c�]�FT�I���G}@-�z�Ɵ��l�"5"U�$H!^�\�*� ���P�6��`��T2���1���gΏ���DN�_�%��D�����y'l+��t�ˆ@Ǥ�L���q�U�𣺆7\�&Z�qtW�j~jF{A�wb��[^�r8�D�N����B�|�U��p���9?E��n��7���,�!��w�;����x����_ �G0�u��������������s)e�6Ј��v�H����X��?0g�A(1�}��k���^��Aj;�AqTe�Dj�[����~,�G�Ȓ<�d��*�z�?(G��h.��d��a��C��H{�fA��iE�I����6�y�Ø+--gg��t5�Y��������4"�w�Xv�G��8�v'&j���gV�y�G��J�,����R}�楣��n��9�>�nk��Zq7���"sB�۠[�N���� ����ٖ�I^�,ҽ��=w�ق��j�xG�����S|�[�4PC%��r��k%�����1�B��k�30��v�fѤ�K}���9��/����֟}��&�ֲı��� w� ��"�j-��x�|��P�6�:|AR ck��>-**;�>���2٨*�g1¾?PC<�S�<�4ov��V���"�Sʫ�ޠ�+�]y&���ON�A僅��*sg�Z��I�RԞZo+£� 2�{�d�k���+���>.3����X��c ��>���N�Х�c�yY)��j����@�zХ���!��RQ�fJ;l5_S��\���������ROg|����@���TSWF0'B\1���L��c���&"V�1�gA�I����c(�+�r��ɛ�i�J�r�U�Ml�`I����{\�=�x��1)�ACAU�2�`/�(6s��={��sD[���S�.g^Ba��I��kb���&%��?�ee(���#�ud��I?I]�8]'ͅN��|82�RS|��ֲ�{!�q�Qj�NX��0E�SESF\�cknr���;<�����"�f�jLŁ��Br�YE$���.��=w���ʢ�r�<�P��q���U������0H��ؿ:C,�\lj��D�9p`���i����5m�ܳjg�wT�l�{+�!��4�2��{�m�q��PIk8 _=@:��"r����G�x�w�R9q������3hlȨ���3��sFz����ϑ�_q]v ���)�����hVE�J��M��+�����#����F�:\Gψ@M/���D�0EK�;�.j �G$��0]����Jӧ(��l��J[�`8a�SIt~ƒ/��I-m;���@�ߍcGWi��c�9���5&)�7{��H@"ӻu�20@�����M�x/�IV�|R���L�CH����}4���]#8�J����LTZ��'��!�F�g�)"��9l��P�c(��< )tHÎ8K�pt��OEdi��D�ۡ��ke@/��{B��lX(��iJ����}���=C_ � [O|ch
Static task
static1
Behavioral task
behavioral1
Sample
b8e03b976ad74a81d77ebd639c7ecbf74ab5698a6935a26129f853d8cec160ec.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b8e03b976ad74a81d77ebd639c7ecbf74ab5698a6935a26129f853d8cec160ec.exe
Resource
win10v2004-20240226-en
General
-
Target
b8e03b976ad74a81d77ebd639c7ecbf74ab5698a6935a26129f853d8cec160ec
-
Size
3.5MB
-
MD5
2545f63ae6039d69666fbe6eed3b57aa
-
SHA1
f491eaf9337860c1fe5613594f749a0f0d34c0ba
-
SHA256
b8e03b976ad74a81d77ebd639c7ecbf74ab5698a6935a26129f853d8cec160ec
-
SHA512
241a9a75f6dd35ef78bc09a38e2a35aebac0dc447903ec6c98b0af7daa8531ef0e09fb96243b4058dd2f5e8aebbc5a3bc5b1b891ef29d87f3891b395496bfdca
-
SSDEEP
49152:BlNn+hf+uwPXhL40IUtGFcrYL1i8SYzPFbpkpRpZF6YatFx3fPp+yOw2sIU80tj:JnYf+umL40IJFCe1i8rhWVwFJb8K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8e03b976ad74a81d77ebd639c7ecbf74ab5698a6935a26129f853d8cec160ec
Files
-
b8e03b976ad74a81d77ebd639c7ecbf74ab5698a6935a26129f853d8cec160ec.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 11KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 22KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE