��\���I�O�gf�6���z�S@�))K�|ZT��� 0$���ˊ�$Z:���d�q�Vaԏ����9����W�%��f��¤�7@�6�lv�f^����q���9��1��c�)��K|<�A�D�*�H�Y��C~�hZ�$��zM勎JL������Ow��@E�9���z���x/ �k*{�؋ș����c���b/RC��3�&3��R&o���q�C�Dʰ��F��MR]��;C����^�n0�È�F�=@��sAJ�|����q`����.DszQ�l�3ol�2r8?-��?�]D9�W�-�W �}�BRJ�Ndgr}e�Q7����/8i����ӽ�٣��n�F����ۗ�\��t��[uآX�����9�t2�A�?�-)����P[�X��Nc�6/J��zk�JߢիH�����c!6c�ǟs�x��N�&�������PB�s��v �=�'�|�m�5��F�O����5 �0��M�to�Q,ژ�Jf�Kn��dv%R�<R�3�U\&�>�� ���@��C�m(�͍p���Dz�s�^�����%gYb�}�#駴f�M��q� ��E��YH{�s���DIC�o6�iJ(����BdƎT��O,�f];�x��.DJ$.Q��P ���� M�G;�k ��7��`�c�<�i�n�`��(���?�2�/���Q��J�c���5͙����#�H���ْ�P�����r�.�R�kK��}�t��� �54!�mHm�>e-��~�U�!�U桅���y�xq�Ux�4�kw�"Dż_%5�D�%%� B0ܨ���q ��N?J��S�k��U]?r�<�h;O*/H��(�W|Yi�7����L��U̬g��A���w��Й��_���i�����v�H������K����0�r�p���Y�M7�e���UX��fA܂s��A<0u���D=l)��Qq|���U�2���Y�������j��P������S��0�_�%��%>$�U������������'�����N%j�<w�-Г̄|�^y!���<s��"�|d�����!����w��*6_��.>oȦ̾�PH�a!9�@L�ʌ��[���Ř��YM��䯻+%��D@"�"��*v� N������_�2�èd���� ��1�ۼ}m��1��۹x^e�h�b8d��7d��s�ڈض37��KY�#uW��_�I���\�R��:+��M%��U�TS�C�Jm7摚��Yp$5@�S[ ��To�MG)�t�;�Z?î�S����0/ҷナ�9��V��U���B�]3ۍïe��Q&�&}�?p���6�pSA�wH���e�9���Ï��g����!��N��L���j����J[<r˞�tn��b�V���f�)�H)�p{�)e1�k<&$���4�z�H �%K"Dm�I��>RQyU^���*��D?�d/=P����J�<Ln��9��"��^�i�v�;�J�|VF� r3�����s�;W _~3y�����6Jq�ՌM4���g�g<�?g����牢��ܨ2*�j��E7�θ�?��7�*ͮV�a4�V��\��3J.�gG���&�"G��Q��t�!�,��� &��������c�o���8�u�!m*�mաF��8hGu�%+�QLD�U���E�>4�;��Q�V�<�Q�+�� �����.YMM컿9so)�u�c��`K�68���Vъ�Ȑ2[�4���S렾�Nhj������4�Fy���)����_���q=Y��B��(�vH��y�;o� ��#a5�7/�8p�|��Z�� aEk�*.��*W���Klf�k�V��p�}���n1pI��'�+� EiA[f<Ou�@䛽�)eN�#+�f/�u��K�ew�)��P�e�� �0��D�Lf��ů�;� i�S�b�u�v2.�U�����q_b�����8)N��,�%��,��~���iNu�%������<F�����>�����x��⌒63.�P��h#�wݸ�\ �Il��!�r�vNj�4�������eώ4U_��$�U^JJօ���֨Q��+�{�+�,�Z��5���~.���C�� ��*\�Y?�����\�00S����n?3�o5���$")�etg��������(y��YPsR0C��N�S��å��L���S���l)������� 3i&pM8S����c��z<C��6=�����N,��Či@��מ��ս93�ߘ�9V<�d�d �Ԁ�R�՟�����F1r�E$�-iԶ�� �=�S2� �{�D��4���� 橣�Pꄦ�E� +N�Y>6��F_}AL��_W��.�l�l�ߎ���tV�����BKU��Ǐ��Y��t��?�4o#>������S@m��X�M�����_V�| ]?���rt��K����<�KJbz%��z�:����)��1"�L4~��G�_�90O� ������k��,Q�M�EE�t6]6=��^>��j���Ƃ�=�*���'�wָ�#E�Y�#��)����)�ۢ�eP܍d��t�/vus������O�����N4iu�U扨�a��ȮO=q�(Z�_X ���.�f�s>]��i~n��CE��v��ҠB�E�6���#�b ������F�$ +���>���lc� ����9��/.y+�f1��� ~wg� �N�: >��i�_�}Bwv:�35���9�^By���Dj�J�chߦ}3X)��=̬��ު?*?�bQ�~ ��������&�����8?&�mT���%��*����b$��ss,3!`�����e���iïb��qy���c��hڭ.��M����HV������k $x�+�Wq��aλ!T~��I���=\���`⣆`$)2`����:��'�R���J )_��^��)@�G�I���Ml��TC�D�T���O�Ĝ�������qB�ʇHZ��f�q^1s���y�lj��#��j��a��2u�F�X_I� �6F-{(�,�~�CB�\����W�IY���ȣ\����U'u���\��.)W�ڥq@�O]4p�#Âj/6k�G����6s��m��N*��v{���Z��#��ϦM�wH?D�QǕ5s�ܬә�f�dT�� xK�u����5ԩj�� ^&��pF{�$��zM{Z����:%)tȠ�`.������N|�6� ��44q�U��W-?�#'R��s�Ť��ֽg����z��]1�2P�h�O�NҲz<�'l���vF�n���g�7���]t��S��`!�=��+=����f9�8�Em<ڇ!��z��C�=��gH����^)ވn<3�bQ��8(�ԫ�T���[���lU}E< �����p�L47�Acy=Rc���k3l���QN�('<�s�.�_��K�������?B�ԗi?{Q����W��#a�y�LX��!�@���T�r�w�J���P�!+ڌ��_�0x�@����TV��
Static task
static1
Behavioral task
behavioral1
Sample
9268667e2bc9209bc9748d894f66b8916a0463d0ef8ec11381108cb3debc8e8c.exe
Resource
win7-20240508-en
General
-
Target
9268667e2bc9209bc9748d894f66b8916a0463d0ef8ec11381108cb3debc8e8c
-
Size
3.1MB
-
MD5
e520f65d2af59a1c69a96809fd025d9b
-
SHA1
b4d69725fee5e979b54630ca3986d4948c4b475a
-
SHA256
9268667e2bc9209bc9748d894f66b8916a0463d0ef8ec11381108cb3debc8e8c
-
SHA512
916be13c5242f40b18fb9f3bc1cc07007181b03ae40784a5842251f3355933b6cb6d4ceebe248b5941d45e1e633b182232792fd0d05f60d689c0ba818ff084a9
-
SSDEEP
98304:baOurMK3SJKtCttfwhW7KkCok9NG4rE/c2zp:bapMiStKDkQbqz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 9268667e2bc9209bc9748d894f66b8916a0463d0ef8ec11381108cb3debc8e8c
Files
-
9268667e2bc9209bc9748d894f66b8916a0463d0ef8ec11381108cb3debc8e8c.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE