gϸ5���_�-���o6Y� ���0��5]��L������`���+������lA�-%pp,.~y�d��v���VQ��Nn�,33��ð������pb^��KZ5��ކ���샖b~����$�r�ԐP��/�Z �BQ�}�o#�MR ���=��k��G���M�> �*�$�����8�x���� lj��y�I��W?Bo��(���<�J��S���v�5J��P�OӍ��P �y7��l?\�T2�穪;,{�j���@����SN���y�1N�Ąړ�/Qǎf:6j{Q�j��n�o����H�\�{�j Q�3}�u����b��/�� D�=@?��ɉ�/��ق����1���x$ #It��b������*��d_���GdJ��Ϋ#�i(WDK��uâ�]3k#���eU9"�2 �D��@1��%��o�%{�]�©�Z�LpJ�`P��Y��(��d����h���GL2�>�t��5�[�uR��թ9��h�l�;�u�4�/��F`G�i�lyJ����c4�h���c<�#��m�G���>YfA���̈��z����88��Ra��Z��ߝ%��ڻd��:�сC?�_fj�±�)�Nj�n$?�p�rB"4���e@lIt+��^�S^89@�����]�ϋ���J@���qK:\��uW�eW��i�8�qm�Ŏ�;��6T���S�����]����B��U��r��1~?97��rnGҹ���g� !�+F̮F�$�[G693en�#y��%ȔV������`��v&�����e�� �fՖU�����^Z2���;Y��� W�K��:�ѮiJr�ސ�6���C��~���)��Ge ?�����h5'��l��W��n z�[j"b���}P*��Ĭv���tE����ɥ�g��`�A��]sD��ϵ����V�+�X��A��CH��Ak-��l���u`���U0THdZ���],�Ьl�������# `L���tF��d�0�'�(Hz����Ӑ�~�S?p�N���`�}y0���o�萈3:��-I��N-�V�8�����pv�Ѣ�ֳ[d���������e��US;�<�@u��8ϑ K)_a3����z� �p~�p���Hm�)V�G0���ᯥ�ȋ�du��n��5)w�G��� �ew� ʈ�b��`�^+��EX���=hj����Goa-(Z`����}Z ؆)�].�3�F˸��gtЬ��]��D=� p�^a�p�V����ht-�)��!� .�8c�|���@�S(��x�LbH.�nD�KI��"����3�3$ҾP�<��Ƈ�� ��.i̇a��`�H l.���1����������w<�dJQ�ʷ�ϕa���C�iR������~��t��J;���=� l����6p��:��iIK�돿��BE�f���Կ^�����Ŝ�����h6�yBY�/I$�U�`0����\�5C-a3��9MjR��Ur��WY_��`�M1�/T @�����3a|�py;9B"��ov�u�h� R��p���1�`�2dz������Y�v]������;e�K2f$0�tR5�S�wE/y�?��c�'�d= J��M�M���ND����(���!��cho}���%�G�,_@S]�=i5���aZ|jW,��� �-%�G��u��Tk�7+b$}K��Պ�yxǭ�i�����2�,�P���ǖ�n���$���K�f���"�Y��D)h����E$/�hY:�^f��#N�"f��ތ�7V��}�꣢�i|݀v��0�FI�2*(���^�X"�(:=��2������(2�~�B�~�K�钕�D�?d8_��m���ؘ�W�c�����J�.~fd� ۹to����O^pRÑ�cT����}';#�:�W�Y�O���<u;^���2�/,���A]]�jA�s(*VawrA�'0� pw��E+����� R:�j��F"�Y��EP%�$iZ����(-�Y� (s�0�0}\p=u� �'X���h��<�tvKv��� �|�Y�H���<��j,��?A�>����3�h$��q�Y�s|�|N�( j����lHĬ��/3E���g!��ﰯ�v�>�Lj��q�ԩ�bKHR��L�Gc��h3�m_�<ށU��_Q�h�����*�bXv���ƯKI.� t�f� �_>�Hd��)L�^�6�2�����y��v�f6�Bq��^I\��V ��$BԿ�z↠}��tR3�b��),^sF]��?�*�fz���_�B�V^��gh��=�5� b��;t4ml�7aۖ�%�Ď~&EDf8�!�&:��y�Sh��|'���������5�O������� "[�M���QK?`��klj��Q�q[����~��ئM�e�e��=VO�3c3la1pc��8 �A ���<��!Z<w��%�c�KD��3Ӣ���HC�J?��8�K�,��|��Q�g�Q ��m�9���<�7�2��s^��\�����o�x��.I_�����+h�aQ�Z��D�+���.S�|:KرĦ���(Juy�3��[?�t��L4�;�M��xQ]�R�W���)fN5=�{S�,���!�'���u8�V��\�O��&2�=�mDj�?q�Δ�����P�-���%�؏S�:[E<�w�*�ۭ&��>?��v���!�V�{~*����(u��{̼�����?��Y+y�!���B�u���ί�s�@�b�4���0A�&��NMŲ��Юzӧ�G�r����: <dR�ac0����@�E�Vߌ̪�\�O�V�^����V�H���m6[tx���@��LZ���>Tx1Y�S��[�XcRq��J��o�J�����L?�~г�,'\��3��4%mH��F��3M��u˙M!�M�f��m��8��B��_4��Q� ��e_��-�� ��&�Q�Pj\W��<˵zѝb�G�������QnQ�o�ު�2]���^���ex�r`Ή o�}�{����!9H>�4���K������j���PUB���N �[v�i�}�/�i4k�X���~>�)cv����֢k���BQ�k8 ��f���[�]u�����`�p��"/�����h�lB9��R���`D�՟�� r`��ų�5u�Eȡ �/�g�cۉ³�`W���"�.��% S���n�ޭ�#���_S7V?�>��R�'���]�@]����/�����(����q^,�k;�!3�]I��,6/g�sb�:�k�E��!/�z��:�S -��=4]fP��6�EX���v��lڿ�s#�@i�Ⱦ�O�o���i�R��n���Sg�O�/���v�cYsNOK�1}.�w��[$��Ȳ��Z���h7[ ��%} �p&{_�o���� �{��Wh�#T� ��� �#*a�=�� �~�ρ~ �?�̝��u�}���h,^��)��ҳ]o1�D�>ڰ���Y� ��O�[������݃{�,Mi�5���}���j|82�pL���!�93�V�� �F0"D��}U�\�5®�����u0%�4�UwRY��:���_������%鎕ҍ&��ώs�sk���T&��]��j��9��g_'�3��K��fq�<��� � u�S�w��?y;n��f��_��������v��H� 2.o�7q�����w��P�9�A��`�ew3N��a�S�%����Q6k���:?��f������=����+�yY��.P�Ji^�{�&�
Static task
static1
Behavioral task
behavioral1
Sample
bf7b1bd98a46acbb3854f961b665bfcd8a191a808d440b137b0f44bc52be96ac.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral2
Sample
bf7b1bd98a46acbb3854f961b665bfcd8a191a808d440b137b0f44bc52be96ac.exe
Resource
win11-20240426-en
General
-
Target
bf7b1bd98a46acbb3854f961b665bfcd8a191a808d440b137b0f44bc52be96ac
-
Size
3.1MB
-
MD5
cf6d39f65d38b5375026d88edb85122f
-
SHA1
f64f2712036c5409d24a8cf094b79cb1f15270cf
-
SHA256
bf7b1bd98a46acbb3854f961b665bfcd8a191a808d440b137b0f44bc52be96ac
-
SHA512
a8b449e3bc688801508f5072405fb3af5579e5cb7ba2a2619463ecdca2215f019afcbf70ccab6470ab26f435dcd086c6d275450ff9bc2912f061a70382f58a79
-
SSDEEP
98304:IRaTcziZTyKkGf4VGa/KhPTjEzKtFsz4EcNwy5:I7zisKTf4BK10zsFJEe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf7b1bd98a46acbb3854f961b665bfcd8a191a808d440b137b0f44bc52be96ac
Files
-
bf7b1bd98a46acbb3854f961b665bfcd8a191a808d440b137b0f44bc52be96ac.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE