�d��`[�"ٛ�%��K���߬����*��j�C\I�J�:��� ���ot,���Xspm~�T;3 P`��"*_>ʀ���n�"ֿdq�yx/�u��<����u���n�q8����(���%���F��{���� �|d�{��?���,b�I_ o�� A�ڟ,�i�M �g;"%`��R-+s-���D�T���9�%'ϫ����P�@��7,��6� �%����=���ҿ 6�MJ��� ��A����e*d-5菨\�I_B���j'�Q��H.a������-!�( �_�;!�Ra�Y���)jI ��'k@��|%�9�|Y! ���x���y��^K��}�����_�0�֧u\�U�\ ��w���.,�0N�_m�j�DX{�������M"X��iZs���ᜣ/[M��D�;��6��η��4���]>s��=��fbW�AN��� ��ԈfH���GS�Z���1Q�@�?W�������Åс:8�~����:��{�;�pK,D��Ty �RW�C�x��?��@E�$��/�ȣuK,A�S��Ը�V�Zx�m>)D[M����g�������;=��;L���ơ��/�+�C�O��t�0�k��Ls_�퐉��3�?߈(����a��֗�ǿ����O���H��|���;���lʂx���q�J�Ш�}�&&�!��ҝ��b��7:���Ŵ��-�N>�}> ����a�M������R�a�:<p� ���F�sW��^gy�{����f�B%a�33�g����lfί�_���B���Ė/ԘP�9��k^�;T����R�o]���I.��t�(�]�Y�������`�W0g��oO¶ȷķZ.T$�����Ԭ���(�f��%��^Ms(�o��{aH?DG#^ �E�E����e�0�R�b�_��f��oj��O)T8�z�w5q��꾣gN_��џ>I��q��:��R-�E��i/�0I0#��>���X����R.�7�߇�H]�{#-!�{�A��<��!ſV��vN䅞�f���X|��c$W:;�N$:�⤪1HV|'���&r���ux�����S�LV��?����D�3�~83�Ȱ��#3ɨ�|���6"��X�Pk�7��jp�ψ1eKeG`���*�H�|O��]�#�)~gҖ�J��t����UYix�[���(��R�!��V��NB*�W{ۦ��^��ƫl=��HP�6�W�Ƭ�Yw���6��Z���+��E0��$z\�x{C��9�p�OG����:�d-QLD��@�iՑ���o��/���E�lߕ5�p]�j��D�=䁷�����?���� �^��Z�o�����M>�I�#4Uڠvusu�B����'���j�+Kx������r�#>F��S3�%O H+��>�2P�/;���af�Q}��ޮ i���Ԫ��MtC���Qvǹ;������Ț��� xAؑQ�ȁ��dy�^�� ��T���"⺁L�CaH��4�c}���>�ԃ �x��MΞ��A x�5�"�nƽ��7�����SS&�g�F���^����dυ�y�á�q���Wb���>Wo��� :�8h��ߔv��{c\�0n+���M��(�W{c�)_�m�iA�>,���d���*y�a%;���p���^�}x��v����sO���o���PѾ��[�|*�3{?�?��.��Q����S����U�3�&*�D� ˥O��6���/�3�B�R�֘�%��#/k�3�U�Ϲ)� X#���o��A�N�)�0%RI��.�XUV��7����P����T�I�èHi�ֆ}���+�F���.�7��d�_%�_�g�'G��#�ES F�. ��f1�A�^��`�;�"� �4��Q���)pd� ��L�ߴ�yZ�o�1�� L ��槡��0D}�MD����aj�Ї%� �<��+����������'���A�-tHV'�V -���*�Z.$��A���=�25�PA#\���i����RB�7��Z)�4_.�[�K�q� VGJ�h�UU�3%^����k�QY�8[r�Q��Z�t惺]��-aJ��:b���z�@���w�Kc!�ȝC⟊���i m�?E�%�_��8�#0愝����ǐ�N��i���en?=������5��j�����?�j�]3#��xa.uEJ*�ү�#^��!~5c��J]���vD���c`�3r��Ǎݜˆ�TI�h��@Z@��G�a�whX��n>л��F �!�� �.�`��x�z_���B�"����Z�dž&d�0<əi^`���+�HF���Py$���� �A��]�<Z�@Rm�{��S�y�2O�8qz[���%�l��e�g8����H3cHQfE�ѥ�`�5�e��I)rI�Bkn��Dpe�Lܶ���J�g��@oM�1�b���#���$}nj4 I.��J�2BH�@��fe�Qq��g\�����Q3n�bX��o�)�����:��Ǹ�V�m��ҥ��T��»�@1ܬOAzۛu�����Ц9Y��'������ͤ<�Se�_f�A�� ij�kY�����w7S F��`KFp�d�6�����O;l�#zh=�v9������8m݆Y��g���5�7�x��w<{�j��/ I���BFA�?xWI���E?ێx�l�%}��k���-e!�s�l�c�wfXZF�}��!�r��qFC=������9���/-p�5%*�:� ���������4e3���t��)�%)d�M�掆��s��g��p�� ��h��g����|C*�?������&��Y���g�j�'\F�5�s��m���&|����X�1#�wj�}�e� G��=9���9��*��t�[��Ŭ1����n��r�ߒ�(����G�Rw��Ԛ _�!l���Z)���������Ί_���$r�`���ˀ�dxH�G �5��F |�$ɟ ��)Ä��1�US�gG�f/���XM"��ފ���Mp��#^�8�J�r.cB�;�����?�E�����) �]�1 �2�cf��Y��(ԟj� %��}�x���<1�N�X}ԡ ����k����a��}�����,�s�lzn�G����緽D�Cn�<�V:7�YMb?�\{���Yw�Z���aL4�, K�_�T����çH.�J A���+iUtΉK�(+��+$��D4���y �;�\?���)2z7_ͅcIܡ�f�������k�B���,�ҏ��j9���V5��#����N�c4f��O���R- ��kF#�^ D�f�y���K[0��b�o�b�.�� vxt�4Q���fR{�ϐ��}:i+p�g/1�l��VfB�rB��hǕ�A��,𭞞�I�+SFD}im�K- �6J����خ���E�m,�M�t67E�VR����1a�7+H�:�8V���ϰ�e�-��rvXf���e��Љ ���eD�^���DE����ӆ�,9i��0��F�,�^�*��Sb����ݙ����Fm^=��}��{�g Fa�NE��N��bX��k�cmd���耸�v�&6;l9IU�W���
Static task
static1
Behavioral task
behavioral1
Sample
9f155016f14ca4410fcfd4ce4174c9e731d7333e530d1a1d248a9baeaabca9ae.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9f155016f14ca4410fcfd4ce4174c9e731d7333e530d1a1d248a9baeaabca9ae.exe
Resource
win10v2004-20240426-en
General
-
Target
9f155016f14ca4410fcfd4ce4174c9e731d7333e530d1a1d248a9baeaabca9ae
-
Size
4.9MB
-
MD5
61a158085d57b81209d0d455fcb744a9
-
SHA1
5cc80e0e3346eba456a323e2329a8878be29de05
-
SHA256
9f155016f14ca4410fcfd4ce4174c9e731d7333e530d1a1d248a9baeaabca9ae
-
SHA512
2476af91be8a769ec9a7feec609aebb6659384ad588669da570185e924428997454fd34c6a5be773b801996abd2e3c5f5b0d6bf710b3a4cd8e7a27afb2aca20d
-
SSDEEP
98304:f7TD9DjE74pfoKOXuJLp42Dx+cLCVSZZfm68dBdf:f7TJQ74qKVJu2Dx+cLN8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9f155016f14ca4410fcfd4ce4174c9e731d7333e530d1a1d248a9baeaabca9ae
Files
-
9f155016f14ca4410fcfd4ce4174c9e731d7333e530d1a1d248a9baeaabca9ae.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 256KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.4MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 192KB - Virtual size: 7.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE