&3RJ�����0�e�ϫ9וR���>Ԭ�r�/4�J@�52�r�;n�,�I�n�qkP�Fl�m��� J%$�8���/ob^� ���!�z[�)wv�}�2Yf��8�ϰ��c�/�[��lH!�.͊��Ǻfn[F��S���t?�e����.B�^��br�VB���$t\x/�7<o���yz�J�64X8#λ�\��'�������V$�>��6ߧ�o�c8�"���������l���MS��v*����5���� ��9���A7D\:��9�/��0u?a��?C��^���$Mefb����"�.r��*��p�9_ړ�[����*A��/!���u�it��ռf,��o��=��oۈm���)(B����QN>���b�a}e�M�_߮$�}�F��5�����8 �pi���lB���N<x$3WX�I�_�sR��A&�1��w_�s��FV���*����о f�A����P�iio��Y:g�y��w�3o�K1-��U�o��*�8�����m5���D(�>���U��ϋ�lq�.UU��t�mt��N����f,Lj�܇>�Ϩ��:Ed����=�<1���D�Ɇ$>�zް������#";����= ���k�"0�f����y֍lS�Ǻӌ6�4�d��k��XjƔ�O�\-��0͈Qѽx���d����ق������.aꨒ;���b��˫��7B'h'���?��h��wL@���^`t���&I�����i�M��8EXs6��w]�f�#Q�{S4����;vsC���̧DA��[a0�Ni�G�E��8����25�������YH�]�Z^��������U���}���NSV"ͭh2U_� Vߞlz}���R��N��]ml(����^��q�c��?�M�E� ���FLU -����M� ����x�O�/�|�Vp�I)�:���P$K��ö]71� -���M��Ȁ9qwJ'~!D��v-c��[��?��1R��b�;���A7�{P��|�cc���u�>q���j|��3|�B��R ���pY@��_Ƌ��4/b��֫X:���F�cUٌD� A<�ΰh�9U'Ơ%w�2���� ^��_�t�*�E���\�%���]�����Wh�����1L��3q8�T�&��3.��Z� �� dXc��Y��,����;wd�)\��������o�Q���M[f�}��5'i��VR#�i������{%��ŀ�=7%uAa�C �w�Q��N���v��&XHz�YW�ē?2"qNX�oFwj���,��}�S���d�(oz���P���ԝ��v�DZ^?�"J%b��{�^�`�Ta� �_-qע��H������!sq���j�M\��;������O|%y!� S�#��+����}�P�5k��K���3�ٺF�fPW�5��8�UEMG1�_(9xRr�2�&���7DwL��e���I3���9WȲ�f����i9z��я�)9�]H�� � Il*m�>��,Dz�������>I�H����K�LnXa:�K�w5���>��7��ڨ��D��L 0� �q&��t҄����OO�h�HJ9�*�Ah�X�� ��k�M��`]��m��W�ޅ]��������\����H��X�Q A���;F"Z�{���yӍ��=}��C�n�],����#����8��`�]ͼ�X��cZd�۪��[w���x�(���Zw�Q�����9Sv�ݨJ�ƌ�-�0Ӆ*�#���H��@k��<����Е�X��Y^E��栾�V�xS�3c��:�8��g�A�BϤ�"�1MY@���)����z"}s9�CquUM���60-qs��Q�� �Cq#�7]d�B*�r�2(�J�L�/f��^CqJ!�{hF��E�'���^�B�R�fwi��3��!.\���a���/*�c��#3�v�^m��?�?��"G��! �3N�H�$|�m,�s�V�~�,I�N_(�X�"��$&2Q��T�T��Oq��]kB���4�#�B��W%�j�3�)q1'���-�k���Bɩ�N���|�#�(��P*#������*�4c2�� �Z��[�T�o�w ��g��z�mY���ns��LX��a.�a��ܴ&٤Tޛ��I��U��5[�6��B�5�3���q3���ɡ��7OU{��9/�<qd����_ f����[킀t��q,���e�N�����<����]E(��3)�6�҂��>�k)l���͋�௹��9�A-�d��)��>�~��0 ��y���;�BMQ�r��d�T�EFV��3r|k��������N]a�`��U�(��.������3X�!~>LضƼ���P��$Ϟ^�wU��:��KD�x]K]���N�M��3 �`��|�q�'�/%�W�IKhk�a��{ i,c�H-��������g,�R]�ŤȋyJC��f�.@��������U���Jt\�H�����&��6nkfE&��E�����^4����)Tz��B�ہ̾C�/��=8�� ������!Ģr��~��v�@������+2h�Z�%v��9&����@l7ZL���F ���>��q��䎎���_�}���h�-pi�ܮQO�����&�q`ުW���{����,��i&K���a���e�O�r�;*B?�^�W��6ै�h�Dma�&^1�Y������ �RZ�-\�`P�\���$�X�`��P~��vL��٫5�L�+2��l�(���k����b��,�%>\U����>X��NC������A)��ď�&�w� ��{���k_��e�\$7��ta3��]էa�e&��������B�\�&c��0���pƋb+!^cB� (���xwx��u���;�M��R4����]�> "?��҂�1�i]es=x�z= ����+k�#5�/�g��{x��4�O�Ua����An�Ʌ�����P2��/ S��kVZ9G,<Va?ң�+mnr�� O�V\v�3�~b��8B13+ewv��a�^����|%�������R�~��C|��%Bso������_=7�4�-�f�dކ팢;l�,�n{t��-��i��S4xk��_���� CP�D��k�l�`�+�D;���U��!Ջ�Ճ喧�):Ӱ�$����*=W(�@��{ 5 ���b>+/_V�T����7���*��E3>�g6�I`�r�3zAc0�0�S���:�����T͕���hp��`YH��k�DH��G�������v�CP|�4������؆�2�hQ�Re���N��]<�ʨ��N��oS�E ��i��) ����b�:ӱ�n�I�1Ԃt��k�����2�l���f�x�F��[Wp���EC��9��C���VwV��<S����(me1\&]:$���Cqc���v��ENY폨Z(7�;C��P�A����,whQI�Wަq���
Static task
static1
Behavioral task
behavioral1
Sample
ce6f2518c4acac57d81c8e44f4aadc6ab6db69c01811c3dfcf076c29182d4b0c.exe
Resource
win7-20240221-en
General
-
Target
ce6f2518c4acac57d81c8e44f4aadc6ab6db69c01811c3dfcf076c29182d4b0c.exe
-
Size
6.7MB
-
MD5
bb9e44c4f1e985399723fb6ee3bdf99e
-
SHA1
8aca80796ea6d39fcd2960653a4e1317afc55d02
-
SHA256
ce6f2518c4acac57d81c8e44f4aadc6ab6db69c01811c3dfcf076c29182d4b0c
-
SHA512
13a0ce6fc44cb78a0336f4838904a6856ddcd21b93be1d2ba52bdd1c8277314b90bb45e9125722c96daa02fa95bad977fcac45ff8ba7886d954405b7f94d7687
-
SSDEEP
196608:a90HU1R6fSl/k0R/dIdBSL7d/T+XeHMf1FlmU5Ojt7iZe:a9Bj+vxkMf1FgUcj9m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce6f2518c4acac57d81c8e44f4aadc6ab6db69c01811c3dfcf076c29182d4b0c.exe
Files
-
ce6f2518c4acac57d81c8e44f4aadc6ab6db69c01811c3dfcf076c29182d4b0c.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
Sections
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4.3MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE