#dL��ZCR�v�gj��5D�E�[xv�M^yg+D�A����;�2w����]ɸu���24�_���T?\ct��G�t�[Z�h�QX]Y=F���& �%��h��0ݐ�5����e����ϋ��F�F�/��!MP��� ����]��*�m>����=r5v�"���+��-����5Ee�ۗ"��fs�ya��=V���t0%��Q =�6M�����>� Խ$�,��6H��Am�:8Iw�DK&��SJ��:��҃Ҿ����CDZt4�c�m��q�@���슍�R�le�u��]���R���t��~ k��G>����y��:R�� n�D���SY��.ޠ������Ⱦ�?�$�7S���:4�~�w>�I��al�5ݷ�<s��}�Z(����{6G��[f �A��,IxH'��wa;cc��a��PQrɊ �[�d#�i��wl)�k! �4���6���ˢ,��D.R ����ɹ�Q����w� ��ǁe���������)�����&/���o��V��*al*�a�� �A�7Ff6�Q��o���ʳc6��2-M�$�����.�����LE��_VA�F�y��ݟ��5�ޗ��i�b��!H=��8�g�5����ϛ�\g���=08\8�^�M�O�.>�a����=d���f�^N�����+�0o�I2ќ|.��Ss]o����>,��,��2S �&�7c��P0�����kNt���oM���%��,1����߃O��n��MF��XH�6X9S�'Z�=;.m�\# ����v������� n������GQ�<x 'LI1�&�r���e6��{f2ٗ�w:sHΐM�5yj2e��|Y}C����\#?N�۷ a+j��%�p�h�;U�9�;��m%X�^i�3|�v��4���;������n ��W�;�ĉ�j��>iVH�����u����v��ס�|�������&f�?��=�����C &~�6^��$�(�<�j�6�Q*o+�`��O�nu���>�W�x�hO���%�PZ�Z3ȩ�$(p��IŮ��h�u?�L���Ly ���<X�)x��ad2E_���0:��P��x�BhL���I�g~_����qx.Gb�ƀ���x/�|�l�f�-錤�:���æ�,S�ɧ��D]���4ґ�qR�M F����\9B�����҂�(���F+��.T�_@�u����7\{H�=��)���a^�F>��S�������d �ퟱ��:a�v%�,y����N��A2�������0��>��b�9I��9]!~כ����ݷ�5��5O5S1�t���l�1a��b����X��k��d���N��õF���j������:��@핪�P�ܞpܙ�h�2�����T;Y� з���6���Vw����� ����̈����)���գ�uI> �^(}������n�y5{�˨��}�:yϷ����.�`P����"�O%�]"�\у�T�����:� �u��C��I\�{(&X:��9�MX�ZqvH��G]Pe�`�m�}}l�Q!GX�`��z�x�`�5�}Ԣ��� f����TI*���2M�!������]��kM��B�K��<u��yE��-��`Y�vH�c����:�i��� ����x��(�b^T D����t�q��WR ́n�I���v�NE�O���Ĉ�Âįj.�2��X��=b��"�jup�!c��\���w�n�����*���{ۓ6-�wј����}�0���n8o����&|)�g����y�n���\��:�C��Q�?�n �E�F$�ݮK2���!!���L{����kn�Ĩj� {ë���^{��c/�53=@���HA�EC�O�y��z٩(QF�Ɉ�]O��=(~a��N�����g��v�¨F�;X��Y� ��܈}��〪ܼw�|��\�Fp�ş� j�,'f^W����b�.8��t�[ےx�yK0o�kۗ6�u$A�a�?����"\�\BNT�w��Oˑ_E�X�*vg�����?o;:�����=�����P�<C�(S�����?�c�*=��nf����]�����Y����^���>s�:m��X<��W�L*����-�Ի��]Ԓ����E���������m��m�,"I>ks�Z��(|��;pاs��5�a����FMnr��I�))�7���,�]���P��y_��k�y��_����@����f�M���?�B��u�HyzZ�Ƃ��y���;�����R�ԭе�-F���PMUq�J��uo�R�������@�X8O�=3{�Mm|���+FO����bAE�=q��ž���x�����S�?"��B��wH� ��fz7�K��6��rT=�_Y�H����2���5�3p�%� �7��Ӄ�������i.�םy��ed� I��ɲ!�0�+�̿�2�q6����+h5 N���1Y�*y��uc�^!P���"�� ���YewϬ�y�n":KP�>�*_�o�E ��5�혤+�~+Aՙ�p�T.H^K��<�����t����+�O���_5�#�� :���ň���;��[ef�_7:�#��OHo�Yl��o�6�D�g�*�PY��_zr(�8Z�#U7�o�������-q�A�'.�vK��\T98�����Y�"˥�AѪ<ˢ�^M�0�w��+94 '��V����&�~���M��� ������jf���:�< y��C���] �l�8? �I���W�)�2�����иZS#wBRQ��U0����U�����ÄY>?g!#������I��1������m�k��=[�²�����TA�����p�(�b��D:�8_w=-�#�uI ^u��D��{��P�)�҄�~o4/�>H7̋�����k���-R�s�,,|��谀՜��F�^�ˈ�>����5�j�&5#^�g�z�$�Y'A\�]�j���U���5ǧM,������ws��� ��%���gb�m(ۻFԍ�� bK��~kble�X�@�*uG��nfa�ʶ�t9x�%: ���5�PX�}K OS�p�������-�_w�� �$�R�s"�J�� Ă7�fOv5)�XӲ9�g�&Wod*� �q�LB���Xl��yR��&��?��������`@F��f�b(���J�|��C����Τc��ݐds��C6�䇀2Kj���NTB���u
Static task
static1
Behavioral task
behavioral1
Sample
c0b1d891bdc272599578a5b0d8fcee9ed3b58caa2245c1553ba155803f213900.exe
Resource
win10v2004-20240508-en
General
-
Target
c0b1d891bdc272599578a5b0d8fcee9ed3b58caa2245c1553ba155803f213900
-
Size
3.0MB
-
MD5
fd7fe93131e64629067f918eeece0c13
-
SHA1
7bc2da061828e49609d619fd8e4e3e2fba9842a7
-
SHA256
c0b1d891bdc272599578a5b0d8fcee9ed3b58caa2245c1553ba155803f213900
-
SHA512
db21bb624614bef256c734365c0d748c20aadc2b121282c974c453aaf2bfb827ea1dbf34864a198bcea9e53d0ea2333f306dbb1e102ae356bdc3457294eb3e4e
-
SSDEEP
98304:r+HTRLObiQ6f8AwwalgFOhR1ilJ1p1gZY6qKH6:CzROs0AwJqcRolRkYiH6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0b1d891bdc272599578a5b0d8fcee9ed3b58caa2245c1553ba155803f213900
Files
-
c0b1d891bdc272599578a5b0d8fcee9ed3b58caa2245c1553ba155803f213900.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE