V���l.��_���!�z@�k�s\�j>Flm�j'P�ؗ(�~�����x�&��ξ��G�3�ͿU�j����Fs���桌ğ@C$) ���U���}):�P�Z��h�^p���J��C�H�˪���b�2X�8�5�G>���N ��)�����[gj������f���sy�3 =-��w1U��b(��&OD��LW��f z[���Nc�cB��e#B�1$���"wM�cW�����rjr5n�D��J��Z#�>Y1���,B�toIj8)��b#q�C�K��9X;�H��v#x�II�*T�|�4�/�ƨ�hY�h@�w@�/,e��Lي2;��v�(:��3� ��ȧ�mūE_b,\?�����.��8�F~C�X����ӡ,26�Ҫ3����ߨwh�:7�_��Nz���>'>i*La��{���Ku��/m� �,��=�<�+���@��a��Q�MKT��TX����|��5}�K�� F./�]��QB���,1�_�<9����Bq="�:��e��1�%����C`�M��!#�:�r������30���� ����q���9g%rS������:��W.S@J����:.x�,��!�Ӂ�Fu�K5�Ճ��c�ULU�D9ʯ\�j�D��(����X��1�]f}ź�N�r6|�oؿ�'��TS��.آ��k��x?�T'��F�gXh��u$v�05�/0����+_�v�=A����o�DQl��ض�?9��/���}�PW+��Z�8�������� ��%�+۠܁ äzg��Z+3�G�<fi�a��ŪV�_A`Bи�.�>���zHa�Оa^�\)����h��Au��0G��ܿ�U ����E��$�dS`�� "�dt�����Jn���^�!Cj�;�D<��#��?�9s��p{�����I^;�)zib�6�]��!�숂gw��ңl��4��]pe+�X�U���ph z� .��*d-ӽ���8��ͼT[v!���-]�(�@�u�F���X�Ǿ\i��5��爴��]6,�ѡ�{��7���V���u�9�̅��J����1wf^�<�3K�T�B������nD�wW�Z�.Y�]�?yoPֳ�ZB����S�^Ne��2b��ToS�I��m�����)��?�����3C��:S慦��]�8�x{ٙ�?�Lu�:.�����OfRsf�e.������Â���"͏궢dVw�|���um)Y���v��I���\�e��입v?$�N9��^�S�o���g-�:2��D����$�P �5�X��d��ƓֵH�;� ���=/<�Wrt�Fx4=��[�H��~v��/�:��>:0ԘE>�{,� ^��=��7�o�/+c�@�b�l`�����{���m���*���6zd�gS�!ei��e��I���A����Kn.��{ Wl-���z�E�T��{w*sԉ�.[a�u?�Y�e~2Y^���H �4��Fi=f�{�$�B�AX��|����'\l9�)���*�R��W��|��ev�tUx}���^QI��L�� a����{R�� B�A<Z�)�@C�!�M�Zp�b�p����ӂ����m ���Aŷ��ҁpׂc��3j��V�3m���~���LJJ{���2��^�J�·�ӽ��{�?R�G4u��i�ʼn��BtNAC0�xܨ�5|�2��Y.�0/ҹE�!�Q^X*�1���*�:�:�5���qFUĠu����h���|,=L�C�d :��-30����u��~4�~�8�YU� �w�6W,��f[�LY�k�&o�Vn�����"�M��pC��*�'t&ȶ�!3�Y���vZ2�I�8�L37�v��q���[S5�xuk�ޕ4W�+O/ay��O��480�ӓ�1�-�O"?���c,�6��C����=��M��P|�Q�j {�u��<�^�iR}R�,'O�Bݢ��[�v�S�����D����@F35�Rc`��b�}u+�a/�����OS�V%C�X��Ԧ��+٦S��^&�5s��,rM��+��T���fK��<����ۊğ:�A`W�i)��sƈ.��:���xBЏ�h��l�p�6;>�Zl(ݺ.z��� �)ʖ�Tc}��H�_��$���}z����s?b���C �����ߩa�����;>+u��j�,�t̽^r���:��>S��� �����m��ų��m ��������lQf�c�tyͣ����2�a:a�j$�v^U �Ԧ��Bˑ3l¥[dw��� |��5��l@����6n�v��-G9����jT���c�����]��y]���Ch�s�h�$�xE��K?.�ټ�MW�*9�J���}Л�FE�p8��'�t���L��`� ��¨@y�`��\�rv�gz���r=�iLxZ� !B@!�ypH������^�v3%� �ƺ�H��ģ+��� ���j�-�m//ߒ4�,��6I�����^��~��s`��$� �F�0KD���u�"�W^y���P��%���f�&���g)P)϶N�I�6!�g?�I���G;?I�H��1پj�l���1EIQ�r�魾+Tt��n� ��\66�Bȩ6�2�pf,(0�s��]��?���F��S�Y�"��˨�r�H���wA��"�0ưϩ���1_�����ٻN�ëbâs.�σ�$^V�gL�P:6�-� E!%�1n,��!�s��q����a]�?�s�Ô��� ��ֹcK_�Tb·v�V�*��vw��H�A��ج�{�;�}RJ ����)�dB�����=�ϭ��ƄB%(Y��s��y��c�J�*��~�xBa���7)6�wA\�� R��e������t�촋c�;���������g���U:��r�|�3O.Z᭾������ǻ�4e1�l�1��*:����I�8 E���26��5����D%~��}��8=R����X���[����m�wTͣ���z�C&˝q� �����S�3���\����B�|K3���4�(�z�3��H��ӟ�4{X���B���m���5�5֧P��$p��(86M_�v��������67&��W�p��)qp�>-@j�-�Ap�����7KB$F=Ll��v�QDŽ��^�(�ѡfE�/�v����t��6K����6Z���CsK�T��+��= ��� �Uu����.��Q���e��1n�Z�VWb�FMat~.HN[9����R��¨���9���:�j
Static task
static1
Behavioral task
behavioral1
Sample
16eeb0cbb9be69e397864e207437a9f4902f987ff8dc0c64b373eb456d6aaa65.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
16eeb0cbb9be69e397864e207437a9f4902f987ff8dc0c64b373eb456d6aaa65.exe
Resource
win10-20240404-en
General
-
Target
16eeb0cbb9be69e397864e207437a9f4902f987ff8dc0c64b373eb456d6aaa65
-
Size
3.0MB
-
MD5
080f82e776acb66c9b75a93b856f6ea2
-
SHA1
19c4238d501afd32c8ce209d03b836d3e7288934
-
SHA256
16eeb0cbb9be69e397864e207437a9f4902f987ff8dc0c64b373eb456d6aaa65
-
SHA512
4eb242aaac3e2d0122c1d33b37bc5688c999654867aed7923b16430f02ec00c316a9d41873921700efcb618fcea2821b01aeba04ba66ba33dfa25381d00f80d2
-
SSDEEP
98304:FKg5IidRB1hZE1t3aD0ck7aoJirjD25BFP4V6:J5Iidlhu1tqrk7aoJj14V6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16eeb0cbb9be69e397864e207437a9f4902f987ff8dc0c64b373eb456d6aaa65
Files
-
16eeb0cbb9be69e397864e207437a9f4902f987ff8dc0c64b373eb456d6aaa65.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 589KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE