+�*��:V[<��ach��~C��5.��0K�L�*�R���1����8Ԝ�u4Ɯ�2S�jЃ�|���F�_�H9j�6tp{��@�2�?�Лb�����}�aѫn��&��zj/}����&EH{��ސ��"5ʩ��1B*�^��)�^��}J;g/�>�ht�.XV�*����0�&s~��W����F,KÍ �a��Z�{�]M)�Ah�W��Ƽ�ӄf�1�o�8!�|�G����I��E�@�Ĝ���<͛Xͱ��T���ؚ��/VVD_[��w�뎅_1�|�"/���&���C��F��=9������HI����D���!�ƽ(�c��� ו5 3e?��6|tT�v���oj�d�0����!����IG�f�)��Jt���_���}��C��}�pf��G��R���j��u�1�_��g�-�ǣ~��N:�3�?�V�G�1�h��gh�2d���w/v���ʾBd�q%.|������^l������O�<_����;��6��j"�6���5�TUH�v��2c��N���Ы�m�D~�ٰ??F��C^����}�r����6iA�%\���LR2��腚j�-9^�"��Go*���q�j�o����ps��� ] 6w4��F����y�� cr�������]M7��b���b>!~'�h{(rU^��$N��BY�t֥�TH,\�����tPޞ���yڰn�ͨ���G�vh�,�_��k�ZPBXǔ�s�6�/��;DB]����+i7žs��E��Nۂ��Դ˺9�[��5��pN���D�'��z�66��nM!�`�7@�IAVRP7<M���=��~�0��l��\CՁ��_'�w�Sf���#�Ո��r�=���:�%$���#�].�S���h����)ڡ~���U����辭-~�J�y5�*D�kb����c�Ƶ�����vp�e�����=�Eb��HE�~k�z쬨F����G���b���Fhv+��F��e������cO9�&2ng�K_�^����LT�o����^Ȟ��h�6�x�e-��M�<���ӄ��e��l~߽f�+�s�p��@-0Nh�61� ��F:�f�R��n�<�xӤ~��2�lZNJu+����Io}rr1�����ޚ�>�p�`�:i���{��x�;'e���;�O�*1E',u����G�`m����?t7���kc���sW tB��J���^��w�W�����n�-���Τ+�ob�8�֢������A�O�^�js��1ܘH&�R���-�Ky95��6��7O��Tb��0`�\/��#���`�l?w�98��k����G ,���MP��%>k������Sq�K�����+:���צ����R�]N�s9w �������?���\,���mQ��o2A����AgWҺdBϫ��g�W�qdH<]��f����2�j sQ=l9ß� k�op���(�?�q���0��;Q,�д-�t��ꃖ��'�! 2&/�ģ�(@��'l���!"ŏ�]��d�^ F���O��|�����q�xi><O����f)-��^�f�,(g���bo���UzE�G����_8:ÏI�f( ��{�(e��>#ay��"��Q)FI��������E?�=3Z����7��>��v̢-��Qy�x�~"�����(�>ƣ]��c�:�$��m���Yv���Nl��Z�l�?3*SdB��K��Byl�c��) �2/]�휗G�6��H�9���!���.(��^�/�Ƀ�2�Е�vG4�_��� v������ ��T��`APR �L�H���8:��M�ɿ�۽��/3�*S�T��{'|[H����^�HL���P�(�2����ú�r���\;�s�}��F�]ɰƓ�OO���8)���7#�q7v�����2��Y�9�0_���ۂ �Ԍ�����F������������i����]��.��7�'.�@q�HW���Ō����i9�P�$@�{�!:M�=����9�n���~����A���̐]�g�|©�,��+Q}_!�W3!�~�!o��0��_$a��,�n*�ܪ_6c�^�פ�Y��u䕾x��_� �&��5o)5E��s�ŵAc�V78t?��l����a:�.��a�J+II�f���0���<;c�?U��y��n��M��PƇ`c�6����|�q�@i�����En%��{~q,��0��� �$�-�*�^whY��������p�t�!���e�Ƕ2ug�=7������ߝ�tL���M���@zJf�ci�8IFs�FBV;�����;ď|��������I i��D�&{�%o�a@�&�R.Yd^��!c�A����;�,m�� 4ij��NF���3�`|��P��@}�b�X�V��*L�:�(Nw������gB;���� �`����$��zam��钶�.�5��G�NLW<����YK+�I+Q55�e��*��~��s������X>Q�Fk<�%�d�F0������3��_��[���0��*�( PKs>5��>�{���f�� ���pP�vl�V�$�\�n<��X��8��ǚ�����*U-�%N4�p�T������mz��&H�;g�2��6"����j}����;CƏ4j�U�j �V:o�w�7���қmD��FH���:�wt�\�'W#�������S�@�7�3e��k"�@'Ƽ`��uDj6R�t����)��S(�8�_Ϸ�V>ٵС��L�sϤ��,,�_�P��9���0M(���i9?&�Oı�Lv��cZ�2,�"���qK�vƴ�D��dc�_�;Ֆ�A��aU#J~۱�Pn|#R�g�](�#�FOMp�V��K��U�#l'<d(�3Uɬdd�����9��d�u(�q�>y�� [&��#I�,\J8`��xyײNj��?/��ګ�]IZvƑ��Z�,�)��N�X�R��!ݧW&'(Ηj2��"���6V�"D;�K�q ăY ��<vv8��г�.(45F���h�t1�3/U��*ҭ #�H$<�tz�%6y�#e�8�t3���`k���h��W�R�;�%�ߙ4ѳ?�<G4O��1�9-�^TY �$����������������B��cC�^������?�Ä<<���6��F���H(1�A�E]|�ʕo[���UN:���b��֙�pܗ\�[���;��G�F�j!�>��>O��hҝ21� ��ſ�E�מ��ñ_��?Em�h���G �'��,)�9Z&�&"�z�z�+�~������F�b'f�����ա������4����z��^4��%�/�|���!� ��ZH����TsP&^פP>�X����(K0)kip�p�C��Q����0�����&C;@������N�D�-7�i4���Um;-�yU�;0yp:�1�de�Bs1�H|�>n��Ru�GR^ȡ�}�)�y�RdN��N�� ��^4|�0wa�T��?�m��|�g����,ڬ�z�7¦T _>W�A�瓢��1�
Static task
static1
Behavioral task
behavioral1
Sample
bc85f6c9d136388898852a62309eef10a34b3118fd024281e14e468594c2ff9f.exe
Resource
win7-20240220-en
General
-
Target
bc85f6c9d136388898852a62309eef10a34b3118fd024281e14e468594c2ff9f
-
Size
3.0MB
-
MD5
8d6e0fa54df379d380222a4051ab848c
-
SHA1
aaf9a4b13c41beb62d8b40440a37e999c512a33a
-
SHA256
bc85f6c9d136388898852a62309eef10a34b3118fd024281e14e468594c2ff9f
-
SHA512
650cdc9ce136f8dd3a324a92571be5309c86e25ed40c463fe2ff6161723eb056d50fcb3dc0f5f1941316ce9f411eea5c67988ebf3b0b3037477e94af7a7119a6
-
SSDEEP
49152:vXXEVscFrenB6teP9akEurndc2IWBvXBcu2C3EOeZFvb0mLnAycFXd/En/8SdE7h:vnEicenY8sburUW5Xb2CM3k1BakSi7k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc85f6c9d136388898852a62309eef10a34b3118fd024281e14e468594c2ff9f
Files
-
bc85f6c9d136388898852a62309eef10a34b3118fd024281e14e468594c2ff9f.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 586KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE