���o�p����f��n��h����w2v��W� ����BS,ΖT��� \T��Mj,�d�e�OS�<�`,�l����sˋ7k���Dɡ��Kx,�{C�em��7�y7k�G%���� i & ���JR�X�_�w��so����:�f*3J�({��6l)�"���+K��]ɮ�n��κu�Jq(Vo���-G��#O�oFo��Y����D� ���X�߰���C���G��LLk�D���ǂb0!tfD=RË��X{�k���`�H9�=QhzڗsE�g����Uv��F��S8�X��y�px|�����Nu��Ɠ��j1�b�v��_K��x�?����j0Ɵ.�D����9s�T��)h�'�9���r?\=�����Ss���"2�?H%�Z���_T�H�6K����X��٥E�ٞ�T��_�����P��Zc�X���c�;̉.�HΉ�L��$��Z9[�կEk��V�~��N�D�JP6�^�v@-B���VF�o(p����b[�.�7)9�[Y٤C9!U��[��㖥Ck��?�� V, N�S�PH�h�`��Dkq���KHU=�.>d<˞ɡW�5 g�z�m�l~�Rz#����_��mƟ!�{�,�a)�d�v���*��-��4]�̤/�hѐ���=����ו� �L��N?ۿ?��e��R�M���e�SǛl�a~�y�*�@��o���������;: D�9�(}��=�q4hx1������؇G���V�p��45�w�yŤ]���|�K^�o |SdE2x��u�,������kǍQo�,�a�'�8��?ne�_��\��-�P��m窞�{��^SL�l�6(���B���!B�;�C� ��\�l<F��Z�=*�P4�#�Xkl���l&�d=::I�K�a\[���=\+u5���iwX, =�D%u��zy�(��P��|C0L�>]��:�����γB�'="�#��(�fZ|�K�� ��l㸮<�3v����]����Ft�ʳ�7�<�۸�t�����lf'��\�%�:�]�n�՟��&P��t�#�Gnwݗ�����}�vy�2�r����A�!��?K�l�PrY���:�.n9Ic��b,�p���tm��iT@IW$���CX�7�����R��� Y���,T�&�C�ڃ�R(�F�w`�Ɏm'*��..wL�O�:��0��5�2p�������Z,���h��TC�רk�r��HaX)�``<�z�o���&@��P��z�B���:Y�3&�����<A�'�1����,�T�%0'�r�x�I#.D�va�������=Y�%��x�^��ʀ���l��Q�t���t(;8~4����v[��P��Q$; ���+Ѣ��q�:r��}.���|���#�t�����چ��]�BTZ�����q� v 27��\Ma ����1���:2 Z��\��^`�t�cb�MC��7�"�+p��B��WZ���mLο@ Z��n�58x���I)���:�,��Rm�%������[3��=��M�L yrT����wa�Λ��%��rEi���X`lr�]�V��,V�px�Oa��ޑ���$��@ef��'ʕ�E���_S��#^��f�FS_��������0��&��\t�>ȍ��4)L�M,�c���0����^b��`����;:��3�n9K�r��![���y;5����'q)}#�O����_��s�0��Q!]�A;�����S��{��9�ϚC��8�/#���S�8�N��s���X�Q��6xb���_�)/����T�)T��vp9���{�k6���,��G#��i��LΓ�dB�OC.l1�tܖ��C/d�!���6����Aʈ�a���M��7��V����y�����)�f'��n��b�)��8��'T9� �"���'S�-BJ�]��ex��zkϚ�/����I��X��W�ђ{�?�l67[5{L�F��"�54�/h6`�>��aA����..���ޤ��h�>5t�������{�)PrL���*5�S���S=�y_�P�lb��W�}��L��E�dCB�y�����@8�S���y���}�I���� ��ʢoF��x��]�@�/�+���#�h{�0�脸N!��5��B�ۜYI��Ī�\kڹH��*FsW�Ǭ� �w�\���Bz7�J��p)n��w�04�Ē�V�$l�-9Z6s ���n�qnm�����*��^f�{9�%%����3[74��e6���B_`e6N��U�W�dCMX%��%F��� �M)��������k�"}/�:��u?��[O�b���T������SU\p���t�o��o��=2\9?������FS��O8��;�� ���L�S��5���l��,#&��+������5���������xoF�#�z��Y/X䝝$�~C4e ��J�Z���� C<L�M�,C�+���Y��ܛ7A~��ߞ� � ����g��v= �P�F�}�5�ؿ���uʁF7��9[��24���_oz�J�Šϐ�����S� �RLB)��6�r�x��$�%����ޣ��,��N��K�AɻG���=s_�O��nԓmh�3�r���1*%�$�$��1I�~���,8 �s7��HKfl�J��鎀�8��Y�Q�(�.o�2��E�D�ύ}\� ع���9+ ��N�U�*�A�C��UGmsT�{��5��# �d��*3&�qW섲��}��;�B�� ϽNw(��`2�\`��"D�C*8CO =ځ̊|q��w��� ��b�68!Ix�+<�Sw���X����:�4�n1s���}�@��47���kn�I�<Jb(�SrnlY�D�u;�<�MZ�F'W��~�Ä���C��d�ʹ�=X��H����txH�6����se0�vnn�n=��o�W,�t�|k+s~�&�� ��g��A3��Qm��L���F�[��P�Wc��?W�D����,dws7l�;�s(����E0ړ��,��Ab0(A����ݐD����IH�Э<�����Hea3%'H 9,�>o�J�t���f���md<X bVM -̭K`Ķ��.�b�7uaIړF&s���p� *|���X*�Wfs��/��Ŀ�%L�؉�\�*|��݃�cz�Ыw[���]���TT(5{6���@���Yŋ� ���<�U�պ?���Q�3DCU���?����F��!���+AJ+���d�`�d[�����y����vb��>�o�h�E�M�k�_<��?w�����w��֏�HͤV*�������aZ�E�0'���ݟ�-�ޜ���
Static task
static1
Behavioral task
behavioral1
Sample
cbcee3fdd1e82a6e0f992374d112d5ec658fbefe3169865ce42b5540df6ef696.exe
Resource
win10v2004-20240508-en
General
-
Target
cbcee3fdd1e82a6e0f992374d112d5ec658fbefe3169865ce42b5540df6ef696
-
Size
3.1MB
-
MD5
e671d4b4afcaad6c180920ebaaa0fb81
-
SHA1
2c9c0937d979a4498d87e7e52268f1fd09ad3b13
-
SHA256
cbcee3fdd1e82a6e0f992374d112d5ec658fbefe3169865ce42b5540df6ef696
-
SHA512
7db73b295d17d7b00879dd710f238757ecc4ee12a565432e9ac2a9fd8b92780b9882345c9f2da2096db3bb9b50930b054a0e9a39c7640d852bdc6f1b86096ccf
-
SSDEEP
98304:KVWRhrgr3rZsrru3lQoHG23PMU190znTz6k5o5:KVWRMZ8sHG23kU1CTzq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cbcee3fdd1e82a6e0f992374d112d5ec658fbefe3169865ce42b5540df6ef696
Files
-
cbcee3fdd1e82a6e0f992374d112d5ec658fbefe3169865ce42b5540df6ef696.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE