Rb; �L��"�+j!*|�"�b|V�ZW�WI:�XV?���|�%j�������I8u:4���s�(��%��TS��2��9�;}^�����y��s-�ڥ�=���=O����W����K����'���U,קE��Y���'vzL���2E?M�)HS��L��C��)�YNp��Z9��ͯՀ��3�`ʲ�� z��~_��~�������Q�]�xlV}�o0�� N7n3��:�߶7�V�8������2�z�7,��h���;�2�d�lz �2�!��C��S��B�'�^NK��m��}�L�3̠�o �%��h��P�� %��ݤ�m�5>|͊�q�ǰ@Ή�i��^O��-�V��όwӊ���SsIR�框7�`2c]j<�d���͇��mg��/H3qy��-A�9~�FKkG����\�:/���}�� eƶ�U{�tBSOH����� �+M9 $D)_�"��^��?j��>�-��;w$7_��</U�8��p]߂�(LO�P/I�ׅ�vcuO�KV��5�kN�^�ە??�h���GY� �����A/9��(kwJ�^�P<���u�9,*Y�Mu�ݰ��#]k`j3Ѓp%���!�:�����߆��c����'�۽���� ��6kB��}` t���T�,�:ɠI���K����o��,��<�OQ�����0��#\²��g��s*���r�YK �Q"������Ӳ@�V�p�~Y:(��ָ��fD] ��Y/_���\�Nf��d���i�:1�������E���@�튿�Mɽ��A�d�� ��I��f�z%jm�N7���( ��i� �����u��B�R"��rj�P�6OL��1���`����3ː�|ʰl�H!8����2�:��i5�Q��?�b�64x�.�QL������Hi�0�M�z�r:�n�*y�J��3�F�{,jMo(J�%�+{_��׃���Q���U���CFT�WS��Dv���e�J�)�����,`��9tUJBO�������6���\����G�j8�Fpb`P:CO�?!S�R�?��z[d�o�'��P߈M��/�٨�j�GD��{4Z��5:����Vt₷�,A��z!�:�������� [{�`�Եt���TwV;v�{�H�G�6��<���ob�l}.ּ<i�2�����PZ��×�/�Y�\�^L����Hʝd�X:=C���R>e��ˆ�n@�M����VkI�T�#K�;p걷���P�dЀ��eM�_Cw������f���O���sk�cq���w��Z��9��y+���a�ı}n� ��"�+�><���7��>T��@ș<=�t����6U4 ��ꁑ :����T/�Z����4I��D�0���S���-c3�.�%x��q�I�ơ ��TD�M�����X�p�YП���RvǴ7�����T����Ces�n���?@i`��C����ռ���������94� ,"9#�m.co�s��c6�,�걎��^ @2s$�x�=;��F���j���Ri�=P1��A��k�Y� �V���>g��|[XC�!��5UGH\���ў�+��;'����$�/� �M|����`e���$���O�YQ�8j��w��>�5��]�"2���h��Kr�㘜F�r�Qj����:��u���H�Y,&0��*�*��^���� @�u����� ��a@Nu-̷�U�a������M*Z̢�����G������2.�N��Z��.E8�0�v\}7�6�oW�fo6��o��<`��N�I��,�W:5���c��eh���e�����B���bX��Yz�<��%�?��U��L=�$���<j0�����b�����r���X�Lc���@�<� �Y�R2�����5���ڦ�V-��D~�E�ڊ�M�����r�"����79�f�{�a�{��#�*�ѻM�]?�~7F˘ǁS�+}bN_��\�}p��%p:��5qX[Ȼ�,N�^�dͣ�ʻS�O�Ġɷ���4���2.%q|5Ϋ_B-�)K�N��$t��)'��d�I� T�B�0��&�ӣ�xd��ðq&C��@Hw7[�u���S ��G��co ;��}U�0C�@��vʜ�t>'�v�1D�+����ޖ/��9��n��ϒ7��[8}��9p��{]\Bc��㣆Si��a+���X��n�:��*�g��u�����)���շQ���}n��\�����u�`��̓h���TR���n����Ǜo�`.�Rņ���\,� 9M�T�A�*u�4�Y���?���Q_ QY6t 0o,c����z�"M�5��BS�<�Y DNzq?`��B�3��'��QD��YG:���.�:�'{��H����H0*V�ŃE ì6k3����5���P�mF�"�DI��Jm���� ^�ΰ7���f�h-;����yü9~)�)��)��6"�>������ʋڽ����kʄ�>��h����K3UZ]��զpX0�X�w�,����,��}� P�t�����c�+Z;��'�� �;����\ ���8���3Xe)�eM��:D������<���+�^� ��v�r���C]�}�Cl�����Ǥ���QL�7��%������42L�F�� ʤOX_�r~V�C~/��1��є�0p�=�>�P���̔��f���UxPW�/��;�v/��ھ+�1��MS�� �� &���EУ"�m�LjbYbL'�'B~�n��oX�%���e��b�Kļ3��. �[�Z���@�:��9��t}6��W���23���v��7���o��6b~s�b�D�}�3��+�v�6�4���5�70S4fQ���&37C�^N_J �Z�]oUqw��6���Z����y-oj�3�LgYhk�H:9����9jo�*���v���u/�j�ү�~�Zof�C��?�v�'Ci���Q�]�k�l����o�1�z�7m�� $ �AՌl��p�� �)���sܳ�]ss*���pA2;3 O=#WHp��*]%����)^MT�Ҿ|I�`Ʋ<�vg�n��諲 C�t���V�[���}[�9k|�V�ʕ�t��O�BqA���|Vr�.R\����X0��%5{�E������Ltjs�^Ǒ�0h��p���.�{��=�Ӡ��ԯ~B�����-� s�w�c_�\�ފg�g�ݟ�{ �*���q_-[TY]_U�hM�vr�ͱ��$�᠖Bwks���7u�-O�t���ER(�:��f�[���]�n�HC��o��rA�U�bF�Njj��2�]և�!NLz��_Bq�_Z�vؤ>ۿQ''P��l���XR���0�yl�N����
Static task
static1
Behavioral task
behavioral1
Sample
8cf1f1a2cc08e26fa3f1921b0bc468909e6730066ff30965885c4e5c5cb5571e.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
8cf1f1a2cc08e26fa3f1921b0bc468909e6730066ff30965885c4e5c5cb5571e.exe
Resource
win10v2004-20240508-en
General
-
Target
8cf1f1a2cc08e26fa3f1921b0bc468909e6730066ff30965885c4e5c5cb5571e
-
Size
3.1MB
-
MD5
34e9f91cf50b6f82881c95eb6d8a4674
-
SHA1
893979816dd46de69330b8881a69580c918d664f
-
SHA256
8cf1f1a2cc08e26fa3f1921b0bc468909e6730066ff30965885c4e5c5cb5571e
-
SHA512
53dcf38fa529e15d9788790e1ef9442aba333c5729e115c7bb99ab7a3c16a214e31fbf99ca01cf5a42c6e3e1a2d5ba2477996e1ed0b2b5859cbe022258d9e9db
-
SSDEEP
98304:MvUj6XEAgzyTkxTsNKYPdnObW4BjuD8R:M5BBrNjwbJ9ko
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cf1f1a2cc08e26fa3f1921b0bc468909e6730066ff30965885c4e5c5cb5571e
Files
-
8cf1f1a2cc08e26fa3f1921b0bc468909e6730066ff30965885c4e5c5cb5571e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 332KB - Virtual size: 672KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 352KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 196KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE