�תb��;{��Ucr$�F�P���Cd6Y �қ�'ڳb�Q[��>��n@ڑڽ�9���@$9�̓_������9���#J���Ěf"<aw1,4C}������T �aS�P�w�|����/��p-��)��8*�Vd��?:-��e�֠M�H��Sm\��bb��q!(�ݳF4�.�k�CeB��5�~,�3����$����W���7�0�B��{X���S$8;�o�K�8�z�?*%��m(�����Ne���^��+-��=E�6 �uL�D����Ӌ(��G�(xC�lqx����6����Y�D�����YPb��&�r��]�dT$+�fc��ם�iU�غROKI��*��>�ڙ�,�r��D�2Z�Ԑ�8�2^����˧ ��;�c��2��y;�"ʍ����K��D�QL��Em5>QX�"�Ħ}�f��o����[����6)���F9Q�}�RSj�O K=����;������� ��\V�<�8�o��z��ٍ�R�_�vR{ud��l��U���$�"��g��*BBQ�Сg��r�`p���,��ρ�]�y&-$�v���o'�D�ؼ�{�H,�y�SB�I�S;}@��9�O�*1�� �e�p�#D*���!d}2ṉ��33g���U�vA�U%� h���U�K��9�����g�n�Eʊ�:�?d����9~/�h��t�O�;��pA7��w��z�p�/�I�j�x��אضH�Њ���i]`��ҋқ���ʾ��#̜fA���AO�T�r'ڳ.n�c�2�����V}�ݍ��Ѐ7l�7�y,(�G�P(�Z��U�(���Vo1Մ���>vt���� ������yN���d5���ovlH�(=���VH]�M]���v|��%kW�Jq����c)=��W\����z�cr��Mw|L}a3��:Zb5�[+͒�/�C�����A��Yt�GiS{B���8��IC>(�i����w���Yէ����If%�۶�����%���|�|l�[�6��S��S�&������oYU��:�!�F�C!���`#���[�M�$yn�4�g��BC�`N���k���+�6�#���A^�G0�L��2����8�G�-�A����o�oV �s��+E�cP��D��p�^~����kc�?ƪ�y'�X�6�^òVEoG[^��������6�A�Ö@�+���H�LN-X�C�/]=]�{)�� qWd�v�?�n5�\�q��LGU�1!���b"�m)K�'kP����t�k����Fћ�TՔ~C��2o��Մ���!xw��>}2��\��t7R/�X4<Խ�N�u�N��B�8�ҹS�i&n�j#N���{�&D*���e�1�(@N�M���f��&����r-}����eϭv2�طC7%��9�. ���Y�i�N ��a_ͧs�Y��fZ��:��#M��|6�3V~�^�9s��H]���)���j �~P�6�����z������7.!�+�F����oʳ��4_��O\��GE(){Y ����fe�b?���$L&Z�h��؏C�F>~��L�ƿ:b����^�,�uܭ��Ǜ}��F�Z�s��_^��'����y/'����GZM���)o�%�#D�x��%��6�c����_��R��-��1�!c\YH��J2�0^2�_��6(x� g*!b79t 9s� mdq<�����z�@�])<$3frD�7�+��ބ,Pf�ː��l� òx�Q�Qb�b��gZ�����7L��E���mT�Q����DA�5��2A�B.��6.v�J�� v�@�y6t�XP���;@i��� /��7ؼ��vq�\n�{��K� ���/�}h����;"�]�X��g��+3cK�R�����k��ќ[��[��i��,�3���~6���#��G;#���/���� G�P�@�\��Ϲ�`��v��|�Q�2I�%���i���EEWQ�;X٠�����k�t�G�$5i��v�s�o��%s�O��_7=�N��_�gj��X��l` �W�"Ya`�$�fn��P���O!ޕ�6��9�YCh����68��ʶGP�(�m/r��>��-��^�,���quOe��@�lYc��b�d�4�HU3%�bV�ր��+�́�����^"��X�0�I~��W܊ݰ�P���4�K�p��>Cy�M ^^���(�Ň��oo�g��氥1����q����v���o��9 ~@��5��H��q�6�������as��z{ܩUm�Pc�3A���I��C:R3_3^�-Q�x̉^���-���gGH��[�Bq"�ȓ�.uO������c�y�G*�]g�jE����J(nd��!���{��#]Z���P��%�k-�DÑ����%σ�b�\�h�?���ؽ��u�:��;C8V/Lp3Qɩ@ee5O���y�6����i���;�P�~�����e�?���)�ĵ3���5�N��n�u�L�r:��_s���VlB��A[~�����W����@�`k��s�� �[����lɐ5��+�;�����O����RE������Sh������=9���v�Ns��<�,!ڍ}���>]�]';�R�f~L�;I=+��k�p���N��>�eM���^�^ʺ9_=֤I�������#���I96�;����֍/�u����ʶ���/�?�nF'����XU8)\*�xTl�r���XiR D�;��F�B�4ږ+8���`�R|�Z�+jg���A���M���o����2lN�W3V�4�����]A0��5pz� ��#(�O�ݱu��ǹ��ܗV�`Fk?�q�b25h[��D������!a�E����/�J��3�8�=��w0�"�\ ��䒨�� ��aQ����s�x�Gv��8}�hbA)�p ]3��#p��Bb��_k!�Y�=*T�`��ȘՌ+&/�� ��F�\6VY�����gW;���!�C*��u_�JQ,��PJ�W%zσ�)W)z3�vW�oTFH�B��$atb�rvأ�0��^���s�z���S,c��_B����?��T�]���ʶ�'l�>Br��ؓ4�s�F�ig�T8��֦';������p��=�iI�ԭ���Ѭ�{��W���z�J&���s�䁕�A?D��1���}ێ���<��S�] w�-TpKE6��9R����d�2$c���h2!���Ry̻�9����}�pq��t2x������[�Pk]#x2�ҵ�Mvn�Y�XtR�t����(�z���V�c�k:�|��t�n�#,�Y�� ��4��!������O]�k'��V����vXTf&�Q����tQJ�#?����6�Zf���n!E�f�&�[k-,�0͜�ᙉ:!/[���&L�3k�π�����x>��h!���h���6�z@Rָ2=*����Of�[��Y6d�}�W�|p��b�q��g���x&�����I��E�l805�ɘ4 �U���+����]���rXK�����d.)W���G%�}XHg]� R�Ys�Sx�f;�b�6�Nd� �<����w�Լ�6ӄ�� �ow�>I�B�K8&e�v��h���{=�ڈ��]��ß�YQ��TA=��#��������Kj������l�I��S�bgY��a���P�K�z5�:�"��L�@��CW���?)��������(��Bd4���vr8
Static task
static1
Behavioral task
behavioral1
Sample
0b4cc474968106e9dca5bf02d1f8f4b4b42564c31c161b43914467f3fc778007.exe
Resource
win7-20240221-en
General
-
Target
0b4cc474968106e9dca5bf02d1f8f4b4b42564c31c161b43914467f3fc778007
-
Size
2.8MB
-
MD5
7e98c1125d56fb33124b965e83beb615
-
SHA1
ba3d8a6c05aa77fdde58623655e491b104f870e1
-
SHA256
0b4cc474968106e9dca5bf02d1f8f4b4b42564c31c161b43914467f3fc778007
-
SHA512
0f5d466989a3a7f653d47b4d1c9a87e9118e3b4a1ef6ff673feae069055ca9cb28753d3909ee4a09ae8ee09811228cff51c81abd349bb9cbad978a68e7762f27
-
SSDEEP
49152:lugiDCpgOxm6Y44OPaGEyi746aNcJUBbVWJu9mnQwXij6J9bH9fVZ:lFRlu/bG7NNcJ+XaQwXQ67hfVZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b4cc474968106e9dca5bf02d1f8f4b4b42564c31c161b43914467f3fc778007
Files
-
0b4cc474968106e9dca5bf02d1f8f4b4b42564c31c161b43914467f3fc778007.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 276KB - Virtual size: 732KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 208KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 192KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE