��+�2a�ո��ձk���_����؎������������^V$��ž� 2"ϟ�Ec��W�����s]F�nm���}�a.����#cl����@ ����1bґ�3�&�,�m��Z@r��|J�n�M~�8ʂlsv�m�\"~��ځ���5�O&3���H9�Q�ے ��V��#��A[�;k�ҧT��]7�1�喕�p�Nz0ʆ �IUR�Z�����N�����'�Yǥc#\Nq6qj��J��'�ޖ��o�)� `���UF5��T�`�մ��/P����g���p�\J����$9�q)p��(�t�QN�{d�0�u��r��Z�No�6���#�O��rq��t�v `����m���r[{��&wE!�)l���7\�R�MD[JD�l�ό�D>���}�.��߹�3��~I��?�4��_�!_�طXM�VD�@I ��=ػ�L�B�ʦ���4����6כ�d�@�`o ��Gu�@s"�C9D��y����a-3�Ɓ�\[�ղ�jA�<�C���F�a![F��]͚ٱ��}�/��+�sqp���I���F�TM��+�U���?r#�f�4]I�lK�����уH��4��%���t�muM�o�x�=��м"���_`a:�麸��� N6�-�n��q+sg��P���-�d-�#������?��ذ�5b�"���F���_��}W���R۷^4����i�O�Dn�%���t\�D�#�p�]Zv�q���� (X�>PK�<�%d�/Ƴ�3vSo�%d ,��|��1s�*���B��E�(a��{�Xu^�t5�`Ӕ��twL�)��ye�,x��S�TC�t�MǺ�@0M[�� �> $A��4����D�4�~S��Z�� �"~'�fETDB���/�X�nt�,����f�ax� ��ؼE|U�@|�_m�9~�SB�x�H�Ì���^ڟHҊN�����'�Ag�;ԍ��/����'��d���ը�nTj��E����n3w�U&.QC�C��_�QZT�ڔZ��d#�q�H��z���F67��Ե.<�iS��Gr��t�����r�a'Be�x �_TD���j RҔ��4|���Q���9W�hr�_Z�K�L���.*��ڼp��q`��������e&K����^�.S�=��ue�v"��Y.qe�Ӓ�yE�cX�o�m������� �&�>~�ʇŝۻ@k������R��8�6N5���i?B��RԼ��lo��>-���:��3)�v�,x��-���>�!dڥ9|�ޭ�m}\�v\�|H�_���=�Ƭ|��m��VE�e�g&(�!?��J���1h�]4U�j���2]�|_ݨp��ͧ�ڟg^y����p͢FY#է�*�WXx#�6 O����}[����}3���<���PК|�6�yX�z��A� ]NO�g�(sf�Q�%�`\3� �eE( �sMc�\YW�w���§�c��(�0n.'j����͜j N�%��6G��P�m��0�G��{O+0�R�Ϣd��.��i�����D�X�"����k�t����#�=<�>S?����Gϔ@������b�w&:&�F�[�L���c�5[�sj(s�>Ɗ��� 5Ĉ��=%W��-e:��4���Z���V{O�16�с��V�)*.Eu���O���'�W���ਬϙ%8_˃�T�95p�#NQ�V�eI����^n�U�����+)t��?��e6����Y�����(-=��,<�o8�p@ь���'�w��;�~�$�f� LJ�6��&hX��z�S���-���o43y2A���)������۠�ْ��~y����KI��,.۸���<^�C� �0sw|k�)3�E�i��D��/�< ^���+,��g��iYeQ� ��Tc);���;Ϩ�6lF�U3fy�Ue�9���S�Gu���q�`�-��b���C9W���'�P�4������\Ж�� A���%y?������!���~�JY�L�1M���k>jb��w����h3���,� �*rK�{ZB�hM��J.���J^���{R�������k '��1����G0�����:LOx�=�n��V�W��~�&b�X��lV��yw�b��I��F�����8?4��kt����+pm�c�]�C^ ����'b��f���@��F�-S ���735� 9LI n+0Z�)�(.5e2��@16�y�n��=����I9��-9ߦu�&�!��r � p�u+��f�7���$'�c�⻓p;1��������UY֚1��#���A�:�BDzh@';a���g��Q�.]'��f�br��=��T��<j���+�#��݅O�.�)��sH;g��!�2�g��~9�so�5:nb��R|�ލ�' ��ê%�������d��J|M�ֹ���3�mC�&�IF����b��[ŹY�ⱁ�k�o�}�;_.�c빞�o!/,~�Bk[�X�ŗK�f�˲`���9$�y���^mo��_֏��k�J�Z������>�^��-�~�}SSS#����,B'��X��V�����_*�(u�ϗq�5�/�h�%;����oitw�:@�Y*^�9SF�ͳ����?��w:lS�V��kz�*����!��x����C����;��},��#��o�-�y� 9��5i�9�sJ��� ��ʱb4pQ5���f88x�^)�I����pT��S�v�P�%�\^�W�T(0����-�K����Mեj=����̠�T},X��^���S��X���Y��=-y�QNZ������q"9q\+K��FQ�!��>��=�*�T�8`�M7��d:�&P��(����s�D�_*L)�++��l^A)$�R_�} ������ȫ�@@0��/&�3S�d[�v��_���W2dY��j��b� '�w�p��L�i��VP1N���bDP����@� ��-o�'wc�w���&o�b�d�(@�%O�7"���o���h�؞.��*ZW"��ǿ�ڜ���w������&�`�S�h�I����'-��n�@�锨q�!E2*wY#;���u�ҥ@+��Ӊ���1H�^0f]TH.�/��>�F ��{f�n���j*��ijg҄��"�N�Ѣ�X>7{�2
Static task
static1
Behavioral task
behavioral1
Sample
9daa69c49c8bab2f4546a4546ed9e96502fb3d65a15a8a913528a278753bd9e2.exe
Resource
win7-20240221-en
General
-
Target
9daa69c49c8bab2f4546a4546ed9e96502fb3d65a15a8a913528a278753bd9e2.exe
-
Size
3.1MB
-
MD5
7c68a71d6bbc69000f5d2589a650f68d
-
SHA1
4a8a8a8878c493a6b82b2cf81ecb15379b380fe9
-
SHA256
9daa69c49c8bab2f4546a4546ed9e96502fb3d65a15a8a913528a278753bd9e2
-
SHA512
71e93fae6a6ea232a7fd6641dca9d0cd9e0697f927df189063f6f5896a91245ebcf3d1e6f47bec633073d92ffdcb19f79c245b58e2eb4ad86a46d4195b1804e7
-
SSDEEP
98304:if4LFeQ0XolgGeQ8/H290UWb1GPEFz4loBYz:8w1cH2901ZGPExyoBY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9daa69c49c8bab2f4546a4546ed9e96502fb3d65a15a8a913528a278753bd9e2.exe
Files
-
9daa69c49c8bab2f4546a4546ed9e96502fb3d65a15a8a913528a278753bd9e2.exe.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE