h������3��Z����/ڑ)^m�j�e�X���pXC��51���𐮀&��K�Y�����3@�9kC��M��6�2��d\������ɓ����L7���M�u��~��0<s�\�R����u�y�$'~K��Ч���B��J�Rͣ�Pt������N��b���%]+Ɇ�~J=i�eq��l��F" ���u��v�@k#�� ��怴����I����s��0��� �<6����)x3�8)ܔ����/�l�4���ۯjȿ\�� ��z~^�Ė���={ҧ���Ges��G�yv���;����T~�ކ�e>��b����=��:���T��V«A�1ܙ��AF#W�G�l�F�%Φc1k9�&j���V�O����mjNS�5����P����Vk���>k/������Q�#\�-�{]�;.�]0���ιXP1���@�`=���`�J�`��Þ��|���8���']�����{S�z�`j�վ\R�ݼ �٬�[��7v��k'>����?o����g}A~����/U2[�\���Z�&�0&/"9�Ӗ��\�.|4�:��ȩfv�e�-:9�Q��6�d�T��OBQF[���_4Am�4izt��^�}DWT�#F?m�E�ngmƘ$R�ۧ�`��ej�M��#��سf�`��(tT��.��u��y}y+O��Rl�� �Fa<Q�ԫQ���N�d ����<�9�ŏ�.�vѣH�#��p��.�����.!�q�N�ж�9k���b�ʏ�ͳ��;�"pA9Ƒ��@��Л"��;4��R�\�1�P��c>���Q�D�)P;Sƛ1�}Qd�P�Iߟ�z2����?�a>Za[\��c�M�X���K�<g�rJ�?��a��J�g w��^���ו���SG���+��d�A�^}w >bR1�(-�W��|m- K ����;�&�9?�����( ��b�;����Z}�������V���,J�#� ��E���c�扛����a�<XO�#�/p.� ���7����g�1�?"�U%>�u�Y���? �$T�;}����{J�UF�Jˬi���*�s�T �"�����)dC�`.p�%��N�L{ݮ��Ը�Ia���$���{#��ŀ���V�j� Q���X3:�[c5�{""���0F� ��@�R�� �yP�e�V� ��s!dQ�.̣TPso�9m�R�?�H��]�J�ԭ��<����CH���eg�B6BUy�`EJ�a�c���k�h(UZ��a����5���<wPN���,�hRԬ� U�T,��7���om�6G�9��J����3�)ꍁł:B�� ,�lC("�d.�|��ف(���`�� o�[] &������!�\������Ŝ�z�䦹�Z�S%�Fu���z�nGv��=�>:Ua� p&��+dvv!4���?��נ�,�S|�Q�ϥ�Z�����K��<��0 ��]���D��^Y�P�wV�J`�K@PA���v�U���\���O�閤<k$�:;��z-�f��R�Lx�% �6�l��4'OqI�Q� ��!b軄�_�A�L���oh'�ܰT�Yzs�ӹ���2��m�vpf�DP���:�*2�Mg���?���py��X���лF��� ��mց�kh͟�rS̆�N�/�-�Q �ѫ�`���n�����Ĉ��h7�ಁ�y�E�C�lD�[���}���ҙ˭��,�)�UW6��IO�~��-\�Q��W5g09�R+E��?�����<�����͎r˶�w8�������K�������QÏvQn�g��/>�ӂC�ђ)V�����9��Jyv�ޭ#��Zk���5�}�*s��K��~ҀR�m�e�ÓO��V�2��D >���@�bU 9��Rs e����ٶt��Y����@V��n2[������k�#�)fN .��;P;�˚�c/�,)��y��^4"rX��e�?��y��Mx�7�I�.H���r~�Ęe�V�������R>o���h;N���$��i�]�8(���'���F�*y�4.wdj�����?�r٦a�2;TE�v����#�����?�xL�B��8��1�����t���=�"���`��=%`6������{����A�"���M�>'珡�0��hE,�I9����<��*�h��!z�ɸ:̬�]����$O�ZT�r�Ql�Z����#QZβ��܃��,h��yPjV�R[P���%Zp(���?R����}i�Y�;�Gyx��0]S$�c��&>��5+[ݒ!���{%B#�:�=>�S�[?����:(J���'6�r�F�bڼ�R�r�e���F]_��0�Y��<.A1��D��5�aZڜ�j�oJ��k�'΄z�M��a���l� �S��~ͮ���l��*}x֛�%�s���W��.N��� ����j��I1��g�ܪ�O7���O�e��a��W_z��}�s��1�Ag�>�y���6��b֤�'���p��c◈���6���Fs�,c)6а�xO٨j'$K�|Gӡ� �}��m)CK�/5M��̋���lC�)YB�(j����<b��d����8$G�ջ���2����]�K�a�����o���bG�����1 |`��~ȷY�����y��E'@�խ��Tr��l�OD��������n��[+Mj��z���2zZp���ț������y:c��JQ�8�JG2�R�F�4CD/��o�Ⱥ!�]*��e6e��H�)` ����:=>�9NC�<��v\���>o1;pS��3:$ugXSUE�X����姘#����ݦ?�+�3-�Y#�Q#���~m?]���$��XOa���3UR�~�/teB��#��բ.c/���}�ʳ����Q�b�\#[�]���t������R{��w8�jS��e<�vpT5��ۇK��j��i��J��.��ԯA��&�3Y'F������[�u�K�]K_.u�0����̮���Psa�0�'��D�Ȭ��[�[VUj�ԇ,8!�xv��@m�H��q�}_(W����|$ki{�^�.��m��d��0u�#_RҒV��j�/#|j��������B�����75���Uh�t6��m�T̐�B\(c�벱f�W��? h�7#�1����͞B/Z�p_�0�����х�n�a��j.w;���e���p$����Άo%�6H7��#�,$phg=����< �<ך&/����������$X_A-����IK���ҎhZ�����d����-$��|y���ά�.���Å88�%���z�S�J��wf�;Q���0�dI��.�UO͖�f��q�'S��I�c��+�U�K Rt���%[��vL�ޏ"���Y��Q�(4�( #��QlAI�����j)�[*/؛Yr6W�a19-���x��ö*�ƈ m�5�Z�a+���m]���zh<��ڼ�%�E�H� נ�_S[%���eT|�-c��p]�X�����:�qe�H�k��_����V�˘��a��s��E���4\�w�����j��#��y��d*�3J�y�5��HYN�;^��[��� �Ϭ*/,����r>�0�
Static task
static1
Behavioral task
behavioral1
Sample
cc431f2d1e6094026173c6c79157dccebcdb9d981b7974d97205744555791e8e.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
cc431f2d1e6094026173c6c79157dccebcdb9d981b7974d97205744555791e8e.exe
Resource
win10v2004-20240419-en
General
-
Target
cc431f2d1e6094026173c6c79157dccebcdb9d981b7974d97205744555791e8e
-
Size
3.2MB
-
MD5
5bedddb216348f37b710cbb1f4335872
-
SHA1
8a87b748a562325cb258e958ad6e8b10eb71e595
-
SHA256
cc431f2d1e6094026173c6c79157dccebcdb9d981b7974d97205744555791e8e
-
SHA512
6cc788f25b726c8e7b00d714f21943cf585b104e6a1fa1b625cfadb5cb779ab57d43f09612fb3a3ac85a9f0ab81e49de36cddeb8dc9ba2dd656a42c15378413d
-
SSDEEP
98304:N/maQPIQSfUPwKaFZT4PlDK1U/cNerWQYbZEiJk:N2PIQScPwKU0PlDGA0eQz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cc431f2d1e6094026173c6c79157dccebcdb9d981b7974d97205744555791e8e
Files
-
cc431f2d1e6094026173c6c79157dccebcdb9d981b7974d97205744555791e8e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 932KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 204KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE