7"0l�l,��0v�$�|>�X�~"j�|m�N�@��N0�m!�W)�Ƴ$�-Āk$(�8�j����h��}���𐧇/��D�;Z^��˱�'�s8':A�J��n��ؔkR�w��V���H���;*����- �����l��ئ�3-�2 �5Lq���п0Oi^�IIN �̺Ag�T;k���B"Z��rT%�G��t<���`�z����&��):)}��|����γ\�Xd�oXJ�t��&q"�2y �9S����rĩ�/8���'ڱ��MT�?�(���W_�i�E>���h<���b��y_�̢w<Y����=l�������N��Aǽ]�Ƣ3��֖��L��D&��6M�,q�����XH����L���d��.�;~i�p�r��S����|�� ��<G��W?��w�zj�p�3��#��,��C_��=T�ͦ�"�?�fnl�dL���_�i��Cw�k��w�q�C-l�m5+�ea䜭��A�L�\kAAT�������"Y�� @M�)V�T�v$;���TP�~P����'*��yoΘ.�w��b�ʳ�ЩG��D�|pУ˃+���z@��8�jϐ�&eS���V�[� qa��'U�5aC���R�0r�q�X�0(#?��:�՚�Ѡ�{"�R��d@Rx�fp��0�������Ⳟ��;��6���*�g��(+�f��[� ���͝�c�Q<|XE�k�i��\�W��WQ��V�^Om�Xe���p/�Q�k��-�N7���p� �KR�\K ��إ��`�t���j���(�I}+М�q�����ֲ��d\ .'UAg���{�/���,��J1*��t����XeJ���Eڲ�W��G�j��9��~�<МCOк#�]���f�+�v�"l�[��T6��u��a��:��,-n����3ҽc�<b�e�W�%��� ���*���ż�T�`|S�H�X������IuA���^d�����D�b�#Oi�5^EQ�h��=���=��M,! U1upyk��q�U�UApȢ�ژ&��^"Fs�a�@Фm�۾�Ůڲ��?�*�6�K!���|N��-�e��}"�f��y��[�����2�W�?�23�%�n2��v-��G �Cb`�0i�I��%[.@c�������!돮z+�9ɴ�NUm�-�z���{�����"�����'FF|�K���q(;��v��Kȳ� |�'*ā|jlC�7fݢ���l� �5�W�ۈ�3�/��������*e�������[oN��iĐ�ۨ��?n�j�<r]>�D�z`CI��B�*UG��|w����V_���s§� ��� }���IH㐩�D�Ɉ�]�X��Z�)�^[�/}���n��$b�%-�C��|�8��4��5����B�4R�|�z$�����͕$�,�،NNS�K���������n�ߠ�u��^�(����-r�nS�Xo3�S�͓����Q��0���� ��ۓ���R[��}yUe X.�?g:��؈���w��[E�� N7��ڀҙ�����W"��Ms�@@l�1:8���XB�3Νn��To�����x̎?}���=o���.*������R�X�U����Yoܠ�c�������x���\Sᆖe��Jf�[��B��w����^����^����{�V�\:��n�_��pI��ow��9,L6�� z��V����:z�P���;�M�1��cW� @��.Z����&Qq��xQ��&2���Pn�m�R��є���9n���g�-W{�IP�E�V%��·�{��QW����xH��:�x���Z,0m�T�F��6����@���U�3��y���o'A�Z�p���p>�5Tm�6Ν�R�\w�e� H�F�Q��:�'/�*��R��6ص��ȋd��E)���z%a��^l+y�2P���0Ǝ��Z�T�8��A���,�i�M���U�b�|3��jp�e7x�fLtX3T��hj��Ǵ�__�R�(��$�Z>Yv�����+-��ҫP��B���/Q����ݶX���:�1�Tb�)� ��VԿ��h�̻�8Y�y]�����o��{{�@�P�������hƎnn�T�L-�c-U��> >�K����������F#�����mظ3�DI�r ��W�W��f�c��Ȣ�"�o`q@��ٷE�?֬�<բtL�# ?��п֝Wυ�S�Y�e����@^�-"�3S����q�ҙ��B��\���W&Z��U^��n��_�e����%r�2j'g)6��*g����7��j����넱j]Vۄs��ۅ ${�]98<>�%$�t�� ���Ȯ���e:z.�� n]�?���o�t]�<��ZUI�qMV-}�g��\��{4 ��6���� b��cq���m�[F�R��a��f�`k:RBq� �-K�����g�R�gF� ��� �kv��0�U%1��:B�,���?h�i.��mV�l�|c/; �Q�!d����"�&0�����Ua���I�v�Eߟ�=�� X�ln�k\ֈo:��fehi� ��VEA���%�����eX{&�\��\�8������^Aˏ����͟�zCOTN� �ޏ|�q��x��l�E�x-������a�i�����zN�E�A0e4O]1bl$5�ћ���>����c�)����S �0�lj�����)N>�\&NF�ϲ��I!v=8�����h^��c' <��{cUkH2c�����g7�ga��~ں�E�n�Ƙ�Xa�D��!��ݲj�yV�r���a�C�71 �?H]��΅H�c`��}�p�F� �lHKs�`+7����3l1��B��P��ٴ�]M5� x�[�}��6Y_��{�"E����XtM�P?���p4�-�(��Z��ΒEwd7U� �tD{���N2�@ 49�GLWĒ�k�P&ݖՓ{��N�_gRc�<���-�i��#��FW�|���"��A$���/c(4\���V�������l����$A9L��NBY&���y��Z��V̤{CEa���:��N��
Static task
static1
Behavioral task
behavioral1
Sample
bf841573e0a97b99930a551253a66a172dbccefde73ef02c0b4391db100ead6c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bf841573e0a97b99930a551253a66a172dbccefde73ef02c0b4391db100ead6c.exe
Resource
win10v2004-20240226-en
General
-
Target
bf841573e0a97b99930a551253a66a172dbccefde73ef02c0b4391db100ead6c
-
Size
2.3MB
-
MD5
43c327167a1e87440ab629ea328cc40d
-
SHA1
804f0bacd4f3c05d3d9aa8aa73c8260127f69388
-
SHA256
bf841573e0a97b99930a551253a66a172dbccefde73ef02c0b4391db100ead6c
-
SHA512
211ddd6f5bd86ac87ca45cf77ead94e232213186edaaab58d3285a441cfee59e4971fc82add53f07b7117d2f84aaed107cb99601b22344cd35cb64fad27ab460
-
SSDEEP
49152:Nn3IYtFQFnFtsqX+2Iq3LrPRDNHi3uVneLJAWkUuuh:NnYuQFnN+2Iq3LrZNuudeLJ/dXh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf841573e0a97b99930a551253a66a172dbccefde73ef02c0b4391db100ead6c
Files
-
bf841573e0a97b99930a551253a66a172dbccefde73ef02c0b4391db100ead6c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE