��u�����%���M�U�"���ާ/n�T0���{DDɊ%��YӤ5�s�RU,09�N����ʄL��/&Ҿ���Th�I%���`���s�����F���? h5T��&�rF����WkoY��,5�` ����͛M�*K� ��:������38��@`�Q�ȱY����愅�y�����x��g���xtݘ�&/� ����9���5��_��U�ў���Z>CVʼn�l�ǭw�>l~��EĢ?[\5j�Y�F:� ��Btg5��gX�">�<�fEa_U��M ����N�'�B�YWM��g�\P�uܤ �{&����A{j����K��փN����v�˫f}�}�3�� o@���n��H��Q%���0�0��j�H�RC+�ubb�1WT e�LO'�vʱ�r�x�D���擘Ɖ)&|��>Y��o��ŋ��g���pZ�M5��� ��+8o [#�rQ]����|2�M-��i��)�b.�+&[74�n=tj���~-&.��\ԃ���`������M��C�!g�n�rw���F�V9l_S��]�L@�*�3��C�Qs�ʷ;8J����m��c���ŢY05O>8�U�}V�v� �U�%��-�%0��Z��,�o���L�K�b2i���ç(`j�i���t�c�l�W�;z��ܡ�ٲ�h�>{`�%ΰ��� "ム~��hS����u��H����a����s��l�m�(Y!����/ %��PgX;L��?a'����}(w���?<�t�l�N?�4��ِS��r�NW��$Dc�K0�P*���>K�������f��#�dxS��t �UcrGڢ;h���eUFأ�^��nl@L2ʆ�~U;\�+��<-^�{��l�$^�0�+����㸤*�����༯�EW�;�dӘoH����^��F<hW��Hφ��)н��"5)@U���#y��B����¾oh_�P�� ����3��6(���v��YO�(���'.E� xkB9��I��ۃ<@�D��)��n��Դ�i5f�My��wX���+ũ���~�̦� ��WR��Nt س}G���M���5���j}[XF^�2+���q�2�"�[�u�(iٝ1��c�J�k��=�n��U[lu4s��+���:d�4K��I���=��Y���rhѫ�pb�`��'�٨��@�t:Iy�������(|d\oy�Y���Z"�C���X6��t�~��F����F[&��h�=(�\�״�u�o�;p��!���+���� J}�4B���/���>:!+D���t�� ���.Ո�[��P(����o=�>]>��T6��iL���<�Ҭ���-�X��'���m.�;��V�X�Tq ���|v�r�+:l���H�N��ῑ���C���c�ޗ����<Y��:(��DyV'�g�W�a˦~6�Rb�5��]��T"pwj������ǍU^y@�3�F�J�o3W�0����ד ��s'#@y[�@��* L������Q@�*n�TŰ��`�x!����1Q���ױ �����/�N#�����閑u�J�б|&j�q��n��G�+R��#�ߣ7����Ţ�ݍiL��n�����9hed��5���=P�ʊ��1VK��)��2�Q�s���,�ːz�no��.�������n;S��g{Z��¾�6��o�@*��� ���%��[x��s:���$�C���H�MX��15�r�����ZڨF���!���h·� Sz.k��n�d]�tM��G�=�gdU���6%���y�J���3C�:��~ʊI�������:o��B�Χ�x�N蕊��}��z�:�ة�22A�{�&��gs�«]9��˄9�R�3϶�hf��W����`�������QO�V���wZ ���t��Me�J@�x�h��q =ǀ��x��h���J�L��VY](X���]#�F�\?��2�,�Y�5A��������p߸{�]��%��Έ��UX��v<��8�R`��Z)��BV�5���wu�q����X}���5�y!�v2/����T!`��c� �4�L�1���!�e�����J-c��jT!%������:I{�{L�=a����l輗���2 �@+�? d��+ R0�t/+�"����.�#���T��<�7���},:�Ox2e��3AX�@�4���Z�Ⱦ�Q�& l�I����R6���8ٙ�E��Qs�MȠ�Q={)���ç"�!�����7�IƖ��ƭ�O9p�?�pO~�[%R���Wt�����S̒$_�P{R�&����S�w���O�8ܞU�R��p�{ǧ���%N�㽣��~�c���0 z0���A?��ΐaלl�/�+ YF�K�g�^�a���� �i4��X e���ۻ)�3X���9���՛�C�U��{���'֎�g�'t������C��bX��¯��n�ʂ(<�ǗP�� �����;��b���-Cs/��|���H8�<��L֮���nCÿä�����!t$\0.��Gf;ۅa4d�]�hҢ�um���2U.�CVDV�de��Z�<�9�-���=z#���5�)�ͣɞ�k֟�7�j�vc�/}�I#�-����,s�U���0���ᣞ<�8rWA:J |f��q���������t�yTӅ�c�p�^e$�Yl�$Jj�^;� �/n���?A�~��x� ��qT��(xD/�.0q-�@(������'�'�|�d�U^�jz� I�'k�,����wv���Vrk���1������v�,G��0��^r��ûհ1�H�� +���R��-�����}BeT�ZX�͓��&"\1 @�r�@RWV�>��o7!��W����{�Im�Ă����%Jl�#e�Sho�9m�۸�����W<��o`+<-U�of�yߥL��㨤�e@ٓ��8v����L��g_P/��?'�h������+��-9����p1�轰���'���$�� ���r�r=�qX*D�=5��<"��l�#� r�c�AO��ʂ�5�.Yq������g��# �� K����l}��x�B�� �$��XfF:��]��F.�p����o"uc���Z4_���ְ�%���64��cS�,v�9�����њ3Ѕ���`��qᮓk�M�ӥ�a����z/��6}Y�]�'Іi���RpY��Y�>��Cb��-c͎���s\�S��6�{4&j���X1��x]=8�Qj>7��:C����lY��f(vz����8�=77��*���� ����2���p_<��s.�=�:�wuw�y�����@4��3v��]]^%F��?!��8V
Static task
static1
Behavioral task
behavioral1
Sample
8b1f583f6fd2ec655ec5fbee9bf8d5bf5c6667f55749795526b5b528fd26e9fa.exe
Resource
win7-20240508-en
General
-
Target
8b1f583f6fd2ec655ec5fbee9bf8d5bf5c6667f55749795526b5b528fd26e9fa
-
Size
3.0MB
-
MD5
554effed30ea428cec167e889c90d11a
-
SHA1
476828cd0e83955cbc7d9bbaa13bdda107c67556
-
SHA256
8b1f583f6fd2ec655ec5fbee9bf8d5bf5c6667f55749795526b5b528fd26e9fa
-
SHA512
7033d0338a62ed3ad0fff4ba055f4b6b15ae89689b2ce0d44406c8253479f82824f5657ad5520cd3babc6a85a1f976490cf952771e922eeec5cdd9bd8a8909d6
-
SSDEEP
98304:9iKawMDhSerR8Xn/VMl2IlCuhXTnyX+hn1H0:9iKawiht8Q5OQy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b1f583f6fd2ec655ec5fbee9bf8d5bf5c6667f55749795526b5b528fd26e9fa
Files
-
8b1f583f6fd2ec655ec5fbee9bf8d5bf5c6667f55749795526b5b528fd26e9fa.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE