И 0P�:TK<��90-x$U�Jh����&�����ȱ�x �>�/T�������^0o��95��+�7]s�<��cui'���Q��#�r&:;ͳ%SY��q�Ev3Gʟ�����gXT�h��X��jA��x�nr���O�_�;��D���7犻���"�����n��I���D4�ӝA�������H����M�#h�'��گ�}��qQF�::9l�]��K�e�tc}������V��{q�����(S ��.�,e�Z&�c�l$Ј!������#N���p%��Z����ť����5?�1'��^X��d%��J��h�W�ϒ�Ć���b0��ym7{Q Jb#a�W�\��rf7�v� ���s\f���Ą�9�3Q�Ya/�V2]�*S��)��o��-{b4x�]� �A��W����_E�;��#�J��` �$��E���������/q'%K��g#W�o9�y��xBAqడeV�WI��!���;W���I<�P�<��Ly��=K�L�Q�?��N�м*�J5�I�:9Ǥ�w��t�z��'����n�9u���D8�֒D�E�@��u*U:T����E��S�ȻouBB�o���ږeB��'0����;(��貖d�l����G}f��sX+��,�rh�����C��p:� QN�(�ob*}���I��L~R�� D>=������a�Ԥ���G��������8�N�`�{��B��B�m]�O?A�a�y�eiSRm9�`�9����;2�c����М�O�'\x7q\�c�#+b��h8�ٳ���ѸH�`��woK�&�W�1�oin#��{��oྋ!Ӯ)Ah�9�0��A;ȁ:��_q��P�O+�cN����x�{���W@D^�ud?@e����nJ~|��:���C@8Wҷ��m�ާ��*<����0�����Y��<�f�ud3K��E* ���5�����&R��(%#�C,I�����ۀ�c�����v-ɧ�1C!�9���M�d}MJu�����X>ǟ��2�D!��<�! ��?�u�'i��78��\� �Њ��Vi��+�`�<���y��|��u����A�omr&��ĶY��}y���m)ρI �E������OU��<���8T��]�v?���+X�QV*\b��ZrR/^�T-�H����=����G����|�ȍؼ�������-Dfc���%0�P�lEBA��*�:6+oѬ�3��]�۷�c�b�*&�J�xlh��g��� �7�<�t�l�*�xr�6���hVS��1��n�J�G��~�B�5����Q��nH2<���~�svk'��2+jJID%l�����x9��p��\5�����|�!A�+�H,��Y.j��6�7����U�=Ô*�>�J�К�Q�U����a1n�,7]fg� �3#�G��bUX��歔�\o��<��FL�a��S�B�bu _���!�I�7��C+����4������k1>���bLS'A� g͑NO������`�kZ�b����3oaK�UŋF�_�~�kn��f*��R�_L��j�Y�uE�OLj2ŷA�j�}�V��uK_��}��*��K)��ö���['M^�l1c�,�A��!� ��'+�ܜH`<�����O���sNE�ș*Ϯ&}J�?�IJAm�|j;�Ы��1�dܐ0��:�A�,�����w{r_�4�u����LV�������z�E/�Cɥ�5��;T>o�]-�a���Q�WsQp�A�xu��p鸜�L'����6<+[�"'�� }����_ Kq��s���P��ś���g�p$��]�%�v����i��x,��/��D �1|�<t������s����%��*�7-2�lF#��)'���^� Rp۷n*-�E|f�ZE�Eѵ"ke�m�+LLTH�k�k����Ɍ��{����ym����J��h��9�� �i�+ƙ����-�Q�9��^Z�ʱ����~�̦��~�A`t����^��h����g����k�I�퇐����mt&���~'��û9����4�uË�31:�v�%�|J!�nS�b:tҜW��E(������IQ��E��9�q6����u�/�Q��c��{S.k��]���b��a�8���� �E%�Ƿ��+��HK����G㟦���U�~�� �� �lK���v? Eʊwq�[C�?[u:�ens�,���~��X���C,U�28�B%��[ �ts"�0������G���b{��7��Ա^���l�H��J��gR�C~��y 3�MMˑ��� |z�f���d�( �_:��bi��&�-2�6�\P�1Hu1<d9� yB}V]�=0 �`^�G[O��1X=I�/-��Ū>0�^\�k�pD^���Ro�����+ZkNݶ!\�*5�N�sH'w��?[<ߌCG�̿�ې�%O˛��Z��rZ�� ʝ�|�d�i7�~,�!C�z�y!8x���F���1i�p6�F��4����3��ҵdd�@lˡ:>`�"�>Z1f���CSFۼ�J��?C��-�%6Gcl�d�C�F��;�,<x��z��'�+��Yb��E4+ �K�5�v��Q{$q��N:���?V�i���1��ʸ���Av;[L���s�~ z�^0�,V-��hV�O �c`�)��R��j~�@��x������a-}�_�ˎ�zb]�BHu;�[+mp�@��HItI�7��)�ؾ�h���q�X���·�Zu�)$3���Ց{��M�h����;��C��������j;���L.u���nqks �H�8�&��O��J��o��5`��l�#����f2�A�b����[���-}�F�Wٽ@�]T���T!��� c�Z|�������l���T�np0�s��ߤ��[9�Ĺ�\5N�q�Z'���C�#�4�a�D��"3��'GA8��������~~ �Y��i����Թ�J�ޘ۩.�T��9<��t�.���u�q~��G������~�@����g�k�l:�i��K����l����^o8 �� Io2=q�K:٘�ގ��{�RD������#��P7ʁcﳋ������s�|��l{FU�d�3���w���.,0��dd� ��K��mQ�-�[N,+�$��iNj
Static task
static1
Behavioral task
behavioral1
Sample
976f39dd7fae1bb13125ee857be95ec0495f82c28b20b0902097d6a4f6e96d33.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
976f39dd7fae1bb13125ee857be95ec0495f82c28b20b0902097d6a4f6e96d33.exe
Resource
win10v2004-20240226-en
General
-
Target
976f39dd7fae1bb13125ee857be95ec0495f82c28b20b0902097d6a4f6e96d33
-
Size
5.0MB
-
MD5
bfb6e09eae5b357b16cda258bd487df8
-
SHA1
7229d6627eae1b4f4891a72e53df1197d735f700
-
SHA256
976f39dd7fae1bb13125ee857be95ec0495f82c28b20b0902097d6a4f6e96d33
-
SHA512
b5ded50c3122bc66917d55931ab567ab8908e205bd084b2613fed0c017faa92e0dbdddf3bbbc2edd284740a82b7c76a1a89d0fd1feef82713c3ad474fc056da0
-
SSDEEP
98304:METR2LkO0kjJPb75xyEp2nwhZuKl5yCM/FSeuO1J1BxACn6v/8axGs:MYxkjJj7NpuwhQKBMXHZACn4H3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 976f39dd7fae1bb13125ee857be95ec0495f82c28b20b0902097d6a4f6e96d33
Files
-
976f39dd7fae1bb13125ee857be95ec0495f82c28b20b0902097d6a4f6e96d33.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 724KB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.1MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 84KB - Virtual size: 820KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 192KB - Virtual size: 7.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE