83 �W&�zD��@r ?�b�5���M�a�˩�գ���h<-����h��\�2�֓g}D �Ҫς�?]N/=Ux����R��N9���@\�sцG���H�ls�ez��`6s�4��������5� ��5��E{�;E������)�߆�/|N�3�\%鴹!�K%���GQ��v!gz�;�2��r��e��H<�_P��������h����pt�����D��瘯0(U��ݑ��~R��l�`�ʆ(���{����u�--����r��ҿ��4�}���ng�l��:?l5d�nf�e�۹�ULz<lx�Ռ $�(c�~��+� i T���L�����e�e����Q��j�"Ê�����˓��k���6�o��)J D>��=֝3��B]##�� n�4@Lo.�3�4�^U�{m��Ce� #�]]�����8S`/L /�F6����ӌ��~7��F���]ҲT}�qg��*-ۇ��c֘?¦IEn�M����N��K1?.HTs�iBU����' �;B�?on�S'm�2h[+�Lo��3G@�(�ͤ�E7���=Hw�)HL���5�n�a���ܐ��?�"RO���cP�T �pq�� �7��b2� ��-Q��3�F���s5R-�']x(�����Q�q,C������ԽX(4p�֘��JS��ʻ��\�gC� #�xls&��`x� ������"���N�4�0S�b� 9�EC��g���l~�M�o/��b0�d��&��u�����r1��:�9o&��W6� ��Qd{��adYE�#��E�A%�^�7Uu���E�z�ק���o�ɗ�V��� ��4�P��c7)����(���Y�24����� 4�c�w5��,{uօL�����;�q��n�&�h���6�q%�ֱѵ�ra��n-�g �I�ּ.��6���F��2���A�.��N�g��LÝ�e%��x��#��m�׃(dA�)1���8��&�� �k��c1qe���P]�!r�:�� �X���������Vt�i�8��J�����`;���:/��Pz�&������T��~TG�0�������p��3�<�/jk�Rנ�X]vR�Y������U���:}R.K�q��ɽ,/B���������JUdҎ���*_X����T�*�uƈfs��GdKϞu��a��؟[F:���-<��Jݑ��I2Ӛ�zԍ�s�c�'��&��QB��)+�ot� _;�-�.m{� ���iu�*y����1��k�ڲ��}F�?�w��G�����kԖ��9���(.��A�UI�Xȴӌj� [��j�>�e���YB���������&��ʬ�~��?9B10|&�T�WJ?�nc�����v��D���Î*&��������{��=��1y�G��2��_a�w�� ��X6#�JwrD��,*L'i�=�p&w�b���`�2%}��J^p����`^�P�9$�I�r{�d '� ���1G�$v����a/l:X��)�4�4֒8j� �P�f)<'�]��F�+�dV�6����h\���ZR���)����H&B5��*�@�C5Y���+����C���J"���$��������ٌ���sʫ1{�`$����\�jrFƕC����C��z��pi�Pq#�����H��{j΅�FG�.f0�[����q�jf���*8?� �q�YX��}�,{��ƹt�m��f���_��.�\ ��Z?l,*(�9B�i V��ZQB��mg�8]E�LJ�=�O��E�P��Z�,ن�}��sا2���z���w��(b~��-d�Ĩ�5_غC�T��y�l��8>���T�'ՙ��a�4Ǽk۔�mz�!P���!�� ,��eXX�mH4~���M��pC*[�����TU�ŕ�amz �/��}B�P�����ٟi���F�4=���;�E�5 �m-E.���6]63۳%n�Yx4֟�dY K�@xL*xT��T�/����C�U��A�� �hUA0���$����i7�D+`����� S�/\���lvkb��(T�4��~!���+a�k�i7X�,��$��V@��PV��Z�Γ���h��{�5|ՙ�ే�Z��vrzܨj��/=�"�ҷ'����)�48 U ��X���)�@D�n�a��-�=�.�h�(<0�v���+���h��g9c�O���;؈K �ٹ+���MsOR��ӂ.ɉ�VbfVf#J�?��ŘkN�~���bo��=�`�EUx�PhHBAt#އ\�S �1��{���X#�9��r�9ko��v~Y�y (v>Ki�V��G|F���[�6� �{��XަW'?TD*��n�v�co�<�������B�p0|��5��k���#���>���x���e�%���l��AK�*%��#�i��{U.�!5�� �@*�j��G�����ґ D�zJq��R:����\�?�ėv~�a҃0���߶v��y�ro�$�㰮��9|"Q{X���E�h�7Qm����i�%�2����3�`%V�j-E�� �.�����a�6��!��5��:U�JM������[�_��z���)��%^�hQ��J���Y:A�����]�"�@���ӱ������9QWh�lLe�6��;.�jE�N��\�ry��Ug� J���3�D�P9�dz"�{� �^M����L.84� ���"�_O=2�05������^6�T������+�h�%� \�����,/3��>t5M���ؗ�D=��y�A���~�Й�? �70&93���:B� ���`In��������ߵ���Y�\��ĺS74N��\�S!Qp�HN�c���6�Q>��w��*����$���[5n~A�>�pH�`��! ��O�ο��s�i��e�:c�7Ӌ�]��&|3^��� &z�41���[��"�9"����\ �C�GE�O:z]>p{'��%�Ϲd��-v���axe4VezV�G�F��%�U1I~��2�F��>Ø&�������q�&���_�!�o~0�Z��ͱ��s��z=��7�>+��c�e��e��I�CeJ�@��<Ÿ����?���M=K�7:�J��Gh?��{m��"��?�՚������\x��Y,�O�ӯ��%�k�q��'W��]�_���gR'q�c?��`U����������j���B�&��:���a=!��*�å?��4z�kl��lPE#H-=���A���KO���$a��"1��]>���@^!���]�;��lJ�c�Q�s0 �S�_9������Vِa45��J�Y�<�,���4�C����)�q|��u�\ّC����A��+$E��6���8�(3<�1�"6��7Q�jhc����h�+�z1I����7f�~,�M�I��7����L�`��';��Ę��]p1���H@��-�y�u�E݀���X衸�">���{+.�� ޞ�����v�$�����*hV���F,��T�BЈ�;�~�VI���O/�')���6��0�L�,Hδc���R~-�R�fyĦ.^���g�W<>٤X��L�gr��E(N$A�����k� ,6l�<;Չ��C�95�8)��'�!T��+u�X��à��g�t/2H� �i�50��6�" >+�U]9��p:�v���U����N�
Static task
static1
Behavioral task
behavioral1
Sample
f308e90ff057f15fc1b5584275ada615c191f2c29a9e1c19c8f2ad7dfd9447af.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f308e90ff057f15fc1b5584275ada615c191f2c29a9e1c19c8f2ad7dfd9447af.exe
Resource
win10v2004-20240226-en
General
-
Target
f308e90ff057f15fc1b5584275ada615c191f2c29a9e1c19c8f2ad7dfd9447af
-
Size
2.3MB
-
MD5
70e36d5ccf2d111155cc4b847a34205c
-
SHA1
77ea0af39f4d214c8c99921cab9c3692ecd124a4
-
SHA256
f308e90ff057f15fc1b5584275ada615c191f2c29a9e1c19c8f2ad7dfd9447af
-
SHA512
4a7a7807a9fe741a9c694d8ac059d518f9f13971ab280b9e32d162615aeb08e5e60c0bf6302f6dd7408c6c581672f5299aa6f3af915a017c7d491171e538638d
-
SSDEEP
49152:ba4Uzd3b7vc0NLYO1ST/f4AymFIE5AxCaS5cfn7:dUZ3vc0NLYOs/q5EMSS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f308e90ff057f15fc1b5584275ada615c191f2c29a9e1c19c8f2ad7dfd9447af
Files
-
f308e90ff057f15fc1b5584275ada615c191f2c29a9e1c19c8f2ad7dfd9447af.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 13KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE