mO�x�[]�f!������=�9$���vw�t,������oK�c�I�76�{/E���<��ڎ ��!��/i���)�2k������� OKX����Q��H��c��=l, p�I����i�\�|����0<��,]����D4y=#�݄e���&�����]���+��)�ߊ�ǻ*\��?�YOqz(-���e�����7��P����x,6$J�/��%�i�%5.<һ%����N �����:+�+�բ���hO� �hc<V��,q:+D� !Ӗ1�S�_�^)��r' kS�j1!w�kR~���ZKh��#��q\�dՎ�X��� 4٭� <���K5i��VK���w7isH�<�gOjl N��#",�R4��`2��$2��˰�M��2�i}�x��ҩsUJ�p�B����FS�_]ܤ�����`�rv�O�<\���Z�7qzu��LI��.E�3�̻e9@�r��LI�m��mc;y�k�k\���2�~��V�;.�R,5gS��,s���C�i��f�_�x�0��F��U����*���-��o�GU��Y�rLvXh}�pvZ�@��/:>.e�QR��Xu`���]R{Q��m�b[���'͞�rp�;@�kI�g�Ʋ8Ӫ��6j� ����]eL2��u\F"�/�f�e��'gz+*�>�'\�g i6�+������S��F�?2,go÷-�b���~t�R�yOC���9$H�,m�1۾����H�)�-�����u]����AgE�ѷ~����?-�=��F��1k^ ��;�X^Ш������k��N��+�����1܄OO���p-"%����ْHU�f����8N��KAB���ܭ3�z�����O��F�E�?V�b���~�� ��C�W�Ψ��(���5slt�+-z�!�#��h?t���{����obđg���idޯ9"��X���Ë�7�6*5{���W~/�v��{�Y���F;��/�����3�?c����b���<��-���#��"Ė������bҙ�Eb5��~��ŶƔ� �7��Ѻ��Sj)|nI��Na�H]-��5i-{�1��c�J��S(��5�(ٹi���Jd !�N��c����ӹOW��˳�)��L;O����`eQ�]��e[w��N̸���w6rp�y�M�~u�2x;W� �����g��3�b��y*1���?�W�$<2h%���FF��?qx�^�j2���Y��n����o�u��u�@�~��'�%�eT�h��oidi%Zl`��oI���Q��:������l����{�N��u�c�6b E-�����0V�Y�.�ie��f���1�EĘ�������3^K?Ԙ�,��*CL�h��n�x���.���+��6v�yzVˇ�\��A/5���l]�[N"|@�ٻ2���!�g�6��^��U[7\}���{��H� �c`�AK�2�!��t��!�K�X��������j�d�g��D��H^�WQ\p�k��G�W�ub��w���$���u�.�m��,oK=����kV��uv�A��r����.[���Lc\p FW�VY���Z�F�Ѓ3C':������ y������aIZ<�w�����CN#J�c��n�@oɺ7�:�� 6g���'|p��G�D���e�/CDg�?�PЮ�T�5����'#�ly+�%۩F�>)D���Uc0c,���,���D�Tw�p��Orhc�e��ْ�kfbN?�Y���^�,`�O���`x��! ����2�g�������1Sy���r93�`�f�U>������D9�Eh!��n,b;Y��2����_� �H^��~�����D����3����+^��Q�K$�MB�8��d'Y���>U߳%ڃ>���@�*�k�$�� 5tҌ��+{Va�����զ ���P�i�,��!%�e@[�պ�DO�ʮ�q :�����[hg/���-q���p#���:߈�˸���i��S��s)Hg�����B���%?�f���F�8������ߣ2O�K{���bS�.�Ͻ�d��{�H��Lb2������8*�NAj �V��V�3&��N� ��b����R`�3@2c�j#��M�D�����Nܐ?�Ga}��t�4ޏ��QxM1�W�s�y���7��st2�6���+2]�#�h%aL�OQrN�7�gSDP<V����'_�)�i�8�i%WM�K�!a��'l�;9���*�] +�Ө:���}ŅmU�"C��9�EH�?&�|��²H�#*qX���~�Z���x�R���>p����u*�1�ɇMrf��1 ���l���<~_=��9P����Qr3�|���.9\�b�զ�O����� �+ ���h��w0:�x�Aʳ����*� IRO�2��������VBU�-���ZcQ���� �Vb@t�3�t�W��09�\�ңd6�u�(��cSAWh��&�~��aO�=��j�y�1F�"0�gh��P��b�|}1�|��N����&��w��n�3G`0��-�.>�Q+��8k8�:�ti�eU�3��u���%�H��GX~�Qa�V�; ���Ww�u?Y�#���4��j���U��<��I�uF/+�:�w&n� �l�(�a}����[��NjF��ڣ��� 5c"���M�Y��i�{Qy��"�������x9���������E��T����₫:�u�� J������c�c���R�D1����M�9ҙIkX�r��&�����%��%~2���C�����s����u�VH�������i�OѠ�^|��?���_�+�*�<j���Yه�g��`#�Zm��?�%l��a0 �ޭ��;�pOlX���(�$c#�{���MeF�#y%�^ܔ>{n�< cj�YK�.�ȉtr*n� ��!i��ۅc��kV g�`xlE��)�3�Z�:`�Ru�hj-��'���������61c�P�fc���L�[#iڦ��n�.�l�Y|ݺ،�e�y4!&��p���`U�{g���NA8b1��]]���.�v�H*)�jw����'rS�J���N�
Static task
static1
Behavioral task
behavioral1
Sample
8c14c76bb60ec162e9cd97de56d815b8ae1eb0ce84a5193d82b547ddd38f7193.exe
Resource
win7-20240221-en
General
-
Target
8c14c76bb60ec162e9cd97de56d815b8ae1eb0ce84a5193d82b547ddd38f7193
-
Size
3.0MB
-
MD5
88dd384d3363e4947b0d393be632b089
-
SHA1
b4d7fb9a32fa43ca45ef549bf7776defd820d6b5
-
SHA256
8c14c76bb60ec162e9cd97de56d815b8ae1eb0ce84a5193d82b547ddd38f7193
-
SHA512
c67e620bb7853ecf05e13f91f121d82ecb3f0bb32f75a151256d6e3aa180d512e1e0976a5d335d46d0586eda4ed4d5de789dea39d6f3f347762e892b26787f76
-
SSDEEP
49152:j6IeaMDQL/kb6qXR5CSSczWLGaTtszlRyeCTJAkzJkU0iw4y2gIkAoz:j6IebDQL/6XLaczWLRTtszlg9FAAN0D5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c14c76bb60ec162e9cd97de56d815b8ae1eb0ce84a5193d82b547ddd38f7193
Files
-
8c14c76bb60ec162e9cd97de56d815b8ae1eb0ce84a5193d82b547ddd38f7193.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE