�sV�"A���߸�r]t+}窥*f��-��J� tu������;i���\�iEVV��u�4��A,T�� ,M�vb��x��&*\�)��^�����M���� ^~�dR�� c���������$i~#hz�6��jbq7�����c�*A6��i��c_�5�?q<!c����#�A� ����:�Ag�QҖ�����9Dp�_S9K��u���z>N�F�I]��k<h$�`��6�f+7Wf��0�ri�ni�v���O���J�%ۡ0R����O����QR9�uR�ڱ1M�;���O9���B����(:���c=�nY`��w���u�Mu�]�W1�҄�P���d�]A�hV�����x� t���]����j� �lX����5����F�T�?m��:�ߤ�f�8l/���d7�ܚv�:����`c㿰�C�r�f�~�[}T�1���G�9r�\W<��W�kᩩ�b �9T)��'I��Ю�譱+�N��+���M6K�� $���w&q��l�NW"iT:�{�����D:� ���E\ӡ+�\�}�e`B�c�����l�� �409>,X�Ѷ�çS:cQ��[G���h͖f7�I�&���n��,�����v��o�O6�p�k&9y��_��W��܈(VR�}怓t��i�}1�'��JI�;5h�oj��e]�{�;@C7l0��'�R(}e�yZ:xS���,L�u�`=�_����g�-סy������Ws0��Y�K�����`B6>~և�1m�}�ь��+�? mv��'�Ң��j� &.���$_�'������~�������C� 9Q>D��B��S��*y�.�����-夗���z`l��,�Q"��p�h�l+ܞbKM���a<g�shz�wOQ>=�!ٝ���F����k�c,²�w�3��ױ_��uPh�0�Ma�t���ߖӮa�AYҏ��)�`�Z�r-^��ͬ��R)l8zud0m4�n���u��AW9����YI@zZ�1g$�9Ǥ�E ���W��>~c\b;�;�hE�7V.{���X�n�q����{�����Ś,������8j8H"ѐ�qYז��l�":\A䑸#戗5���`;�<���"�^Z�x� =]B۶p0{=潄рo)�w��jzn�MS]���+�ܢ��/!}_��衁9�c�Ԑ�֕�P��F$^�ی0��m� Z$CؽL�m(���� ����eR�&�0��6'�C`�3����iJ��_F,=�^����+osG��_.����-n&q��ך��rF�8Ȁ$�CC_�z̘2�C�q�0�S���1�uYFb���WO�%=��q�۞5n�m`?u����^��lTrWo�M��[�U���o!1�(�{9R2�F����o���.m3�v���/����ڹ����#�V���F��q��,Gz�i���w���0��(���+�>9���~�zJ���# s�#���b�Q[ ���RCұ��Ua��l )ps!v;�dj�n�%-�9��D���YZ=Ƚɟ�r f���#�0���t�t�J�C�쐑����QӠ�-���St#+n��U�������Ǐf��];�`R��|��<Bҽ#J������%-�麢ē�M4�+�j>."���dN�Ӽ��),)i� i�5�������q�*dzD�L ��>e����vY�u4k=���.M�:�-�Y#"�[��_R0��8�VLi�s��x?^�u��L�{�'Ed��'.W�Ƨ"l�:�袚)�f�v�A�����<*� s����A�Y#!��$���.w�l%�D���/�c�`2�k�O�c�`�c�'�ȥ�G/�?}��*�T.x#���nh�r�2AֺsN��k}M�?LLҒ߳���o�L��¸-E��[�Zb�n�Ĉ۶��`9.����tyv�j����b�������$�$��D���E����� 9���OqZ'rBR����g?DX����1���(��3�xe�(�q��Ed�8K��bM�w�o.�!�#DPd�Ұ�-d�JI��|.T7��;|A�l&�7��*�&��8d�&M?��忥@�A�5{ ,���X8�>y�r%�W�u�Q>���u?{��6��D���UFE�h��g� C�����w���Kw���,�AX���?K�Һ�t�:C��n�����=}s����Wvh>� �/@A[��CC�w�\Cnx|�Ϗ5����\e�+��^��t�S2��j�9���Ųz��玃'M�������E�@�B���j�̥X͊�z�/-����ͫ5~�V&�ܠPv�4��YY�$Ћ�A�?�WA�����J��kI����c������%c:���qZ�Z�Q�$a��Kw�� �c����2,q�����_?j���c�˃xv�B$i��<\-��H�n�i���=�f�_v��N�<N���_�����f�<CZ��ygHm(}�$g����� 8J�bu��Z�;���?f��:LeZ@�aHD_��x�֞��3�'R��G��ј;eJY�$�?�3I�.��%����[[}"��A���zdф��լ�$��*S�����XDJ*��a�����h���+Ϣ S�9�#ұC��oxY s����#��;�����}�>3�q#@Ё j�r$|6f<t�u�7܃r{�A[���fL2��'{5��ޯf����-�g��Ƭ���Q�t _XA�B�c�Ki9�!o1�;��J�?D�ν�p��ɔ;���^��)ԶM��Hp̆������&pƢbJΦ�t y@�5����k�֊��T=(W�2��T��mY1��A����o�M��RܕTe��P$c=w����'�{��n��i��9�w���� W�/���lh�E4����SrF���~�X�5\,��6�7k���̐���c�2\�f�t�w$2�=a;���"������K7`���]�BȺ��/�eg%OL�r)\�;���b/�}تIQ��3ğ��q�H,"sћX�fg�V��,�|V��9�o_�7r����7TUR8�Lo}ͪL�B�D=���3l�d�������������&���&���X0t�=k�t!��dG��7��� )�3���,�O+{-��R -��c9� a�ͤ$*�ڝ�B����@���1�� �$�l���U�1�Hذ�@r��EH�>z�f�u(*ڭkʣI"y8�&X��:zm�?�o�,�)h6�U?�FS��?x7\)�B"�.qG������0�w��� Z�E�t�3}���Ʋ�N �`M�G����'����'w�ȩ(�j�,DM����0�ײ�m��@m(�n^����Sǹ��h3�Ȣ����ꐦW�7���n��P O�T���N�12 "q�%#l+Q�/g}SdSrU���M�1�"��?Nl���$�L��V�y��s�3)',@ ��w7 `���8'�Wu�2�R�~�4�e%�c�E ���i�\�c�f�r'#������V�ɸCf<��n3���r����r���Ay�G�A�mfU��-� �F�$;�zR��UΣ�% Okg���cu࢛��L@+���s�a�<H��?��b&���̱vgL��V^L}�K�=�(p��kɧ�Y�+)e�t���İ#@ZT�g����.�5���s����j8z�}�w?��.��J�~��I0�bu��� �E,����2qվ��^"�1�о��_�BK�"����A��5�fasjCx%���gR�JD�ʳ��s�h�]a�.>���r{o��
Static task
static1
Behavioral task
behavioral1
Sample
08dc9bfc27280e5b1a0d68390718cd6dc97894aadc619b535db20a39c8c801e1.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
08dc9bfc27280e5b1a0d68390718cd6dc97894aadc619b535db20a39c8c801e1.exe
Resource
win10v2004-20240508-en
General
-
Target
08dc9bfc27280e5b1a0d68390718cd6dc97894aadc619b535db20a39c8c801e1
-
Size
4.4MB
-
MD5
8366c3b1db1614b903892e9882ef2737
-
SHA1
7fe130047e9c47416d3243d88c850ca4658c14f5
-
SHA256
08dc9bfc27280e5b1a0d68390718cd6dc97894aadc619b535db20a39c8c801e1
-
SHA512
393c322faf323a193089ad408da83b0820e30887d52db032e1ae25fb308f242c5e17947332765b2616d2d9002df493f826a6b6627c970d86a020ea915abadcbc
-
SSDEEP
98304:KsDsLNkbNgkqA9El8donq0WgjzLeY6XFfDvxvtB4UE2dKqN:KsMkbzqkEBq09neY6XF1FXldrN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08dc9bfc27280e5b1a0d68390718cd6dc97894aadc619b535db20a39c8c801e1
Files
-
08dc9bfc27280e5b1a0d68390718cd6dc97894aadc619b535db20a39c8c801e1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 808KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.3MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 192KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE