�v̈́Qk�����$��-����N� �g�8����%�����0����ѯ�\��[{��.��> B�v�?O��rZ���D[�����^T�����F9^Зa��Ш��y�9!:'���(�!Z `����-����I �~E����ƿ^�{�t� �t�b����Ӽ#���j���ȵ�Bm 圊��~S����Y"m�:��?��P�Rm���<��)�Sm[˔,���������.�ʕ�B� �bX&�����M�"��)�B�ļIlY6Φ��X�$?L�Ŝ�pG'4�-�c�v>�)o� ��'�y��B����NG!G�(�e������PK��L{Q���$�i�m4U�a'�i���e6t����|��%�����B᪨�1u�p�Fc�SN�0U�|��GK�;��j�p���I�瀣�>�폕`&J����h�Æ9�,q=a[� W�(���m��@�(�����7����\�s��8�j��Urwύ��wV@C�3�}�9������ʼG$��X����ͭj/ �jU[��#%4l��O�i7�J��/J�a�!|��-A0R��3�Y(M9�ޚ�������~���NJp�P`���Jң���[a��8`BX~�9)���C�P>�q�^�;"9�<��*"��9�Q�P�n\�=ZC�:�.����!%šB*��C������i1�ʻL�������WE��H�W��5��R�.Q�K.3[�W���h-�R�Q?� �^��;�=<R�]����x�U�6� ��*g�p'���ʫ$M �2�@3��0;��d] ��f5F.�We����;�h�[ٖ4ϳ��j�5����(��X��_��:x���/���CL�P��6�Gt�ͨm����,���(����p�ho��'�5�mSA��\bϰ��d�d���b��tu�~�w���C}��m�w:��P���Y�1�����37����g�= n`,,�|#.�E+=ۇQ}0/����b#|�(��2�C�E��7����)�REC��݊���G���!vDMos�Z*�C�x���H���D+vQ���_������m��=f���5W��i�����5vµҨ�A�"��љT��S'�4V+�ذ7|�,@y1|�l���m�Ro�*ꀰU�:f���F͓���k����G����������Jn�l5�yO�J�a,����y�'PK� ����R�O�;�V�0��4�����9���דi��yh��Od*���n:Xl'�e�f��A�s�zp��G�����6~fO��� >�8�5���w[�*����!y1��8jw���p��J`�ME� �Od�Ї�ky~�q_)����a�a� *t�<݆�G�6�P�7S<~�,�������W8�~�{r����y�n�6A�n�S Wl��H��(��(��r�H0�9Pb�R�Tu��i��'d������C��_C�!n7~{�?ߡ5����(M���1�_Ǯgʼ�c� M IN�V8N67��'5��g�<~�H5~O�t� g��d�PpC�-�������ev��4B�Ǖ�vħ)��|_gx��f��gr�1rc�p��?���R�7���6�����]�L�8,��^�2����qCfƪ�~��F!�-���}|�%I�Ps��H��)��i)�@@��Q����H���=,c@��w{��I��b;�v���*�jV[�h�А�W <��*��ſ��/�PC�7Ũ�$w��eAk�N��8��A!b�'W�����)��������KDʬ ��G3#�bY<g?��Lެ�59� w�b��#�����|oO*A�"\��0��l}{:�����S�q�����{t���~U ��z�y���r0���%��G3��� 3S�Y��=`�.��}���'18(mI�h3����i 8�C��^6M�����\� ����j���T��-̝��4�f�$�?�{Z\���ϨEk�"A �h���Ơ����|7/xU� ��e�� [$X��~�wcmMa4K,y�zS��oK����٬-�u��Z21� �����痈᷼U���Ȏ�b���@�mo�V����+��o�9v�4C��8�#U�,�G�^�{� j��̼70�ie"�,F����d뎩̦P�1��)�?��,{��o��Q����!b5c���`p˕B���/�f�:�Nj�jw5��Eߪ����c�)t)/-,m>�i�\�Ҍ�GT�Q�4���1i�� y�y(Ҩtku���A�Ya'��˳��W �W�4�a�z��p���%�Ѹ���-dJ���Z��v����>H0֫���L���m����0�`�r \* ��4�38y�MiT�u6�SY���/�]O�ځ/)��b�(��@ ʛ]N���>;��o�]9O��j�����;�����0�unȯ��dw�ls a���� ������Zy��.��W�%���71��`}/X;�f�@5a�pv�n���g�$�� ��?Tt�T�F�c�ϸ�����OCʒ88�ʴ}F�p���^IW�M���2�2��3�je��OKduz�wt����V�Kw@���犀ێ��=<�T������ϴ�P��+�Y���[l�㶉͟tz����/I��KK����f��>U\x�1�ieZ}SD�B��*�� 2Q���A6Bz�Y"������ ����eNP�$J(��N��6l�E�ȗv�7 �ɢ{ۼ4Nkc-�Ι]|5�B�{��'���֯{1��-a1 X��IVDϨt��Q���+\Q�ÛN�~Ǣ yt�%QO���P{��9��r/+��If�����\��[�/`*��<*۫;ڽ����x�Q��ܰU&;��{�P���2���NWSp���ӿ�B� 3�i7�q��Ory��_������VH+���S������݅^G���u DE��ڮ� �^s����s�eB6ĝ�` ������z�������bo7�e��Z��(�|�K��'�� `g���h@��'�HVU�Wn���/~g��&'g,���ܬ�F��'�A�i�>3�PEL:CWK���Z�� � gy\��vI&2�0�?R3�7,�"�&�N��͟��O��"�~&��S����w�l �0��������&�LR#�â�GJ ����<�x���_�����bEHh���_���F��ʖD�$�9��a��\7��N�����"�z�%6�%�ˬ����/�J��B���"9"��,�7;���hO�i���~�̦����uGA����U;�Y���vG�P~a����O���-NH,�����*��Il^�k=y`�e"a&�6?���r�-A@Π�����EmY�m%�m�dG����ņ"t���D���,L��ֈ<'�`5���V'?�nC�Yp��1����|7��!��*� ���Oy�����ZV��I� ����l�H�/�W�2��j�����Ds����Z&�FMG�/����9i��+�¥�F������r�*9��*6��= �q�����Ԃ�D{��;�S&,q���ҟ��h�ƙqk���_�6V[�)bs�m�d����-)�O���"��R���(v��Vr���Nr�VM�� ��������xN�M���m�+����>'��9g�B��ʾ�}�wk^���z�jr�kg�n �;����m ȭB�=p3�T��;��_�%����C�k�tG4�\�1+���E��:YK�#��ء�,q b$�\�����S&G]5���x[���}����uC��":�+�=;���Z<�
Static task
static1
Behavioral task
behavioral1
Sample
8b56dd0cf09b887d4fe93bdacfc472179c6a009b411144bcee7e3ebc26f4cfc7.exe
Resource
win7-20240221-en
General
-
Target
8b56dd0cf09b887d4fe93bdacfc472179c6a009b411144bcee7e3ebc26f4cfc7.exe
-
Size
3.0MB
-
MD5
3d34494615c352bde4185ddec46521ba
-
SHA1
4cb34a91484a670425e7cf07a2a1dd4d1f7d832d
-
SHA256
8b56dd0cf09b887d4fe93bdacfc472179c6a009b411144bcee7e3ebc26f4cfc7
-
SHA512
12473c40fbfa0931d22c7c47160dd97596997e062f9bc17bbe8b9bdd39a43989d19f5c370dc6040eb8510d28cc120f776da4be51cb1a77f23ac903490ac4684f
-
SSDEEP
98304:8tbxDT/JbYtIuQkMQXrxkmJSDme/lC4F:qbJmxcMrxxJSDmql9F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b56dd0cf09b887d4fe93bdacfc472179c6a009b411144bcee7e3ebc26f4cfc7.exe
Files
-
8b56dd0cf09b887d4fe93bdacfc472179c6a009b411144bcee7e3ebc26f4cfc7.exe.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE