!����38�H3�Me��ֻ�FԴ�����@��MúQ��ы�e���#WZ2:�&���9R�G���(>$�G3DX�-+V��������g�<��SZ>��e���&��w��M��{� � ;}�w�t62���2r�Z�Rf�|0��LKO� 5�n.r�ؖ��~qo�Ɓ'v�d�2��,j�B��Ĝ:.�Zf�c���J��W��Z@�.s%n�%��a,�D��Q�L���<t�;�����j?�+x�����6��h���#���Jsx�����B������-�gS����9k�"4��~Ľ�-#�^��F�"zN��BĊV����&L���;z���Ij�a;mj�H[�M)�;�Ϲ<6{38-� �>�t��G�U�Ȟ���L����Y'�YD/��7ooɡ����W�]Nٽ��J�' ���M�d���VlMeꑕq�$>�f�a����l�iW^gQ�b��`�m s*�_��`����q=>��h���Z���:1�9�F��ڨ/�9�_�����h��@@X5,Gd7Eѕ~�ṖQ{`r���}־�+�b ���5 �w4��\�@%�;C�聍R�>��;"����Zu��&tXSlA�,�E�'t��ٜ���&I��w)գMP��HhQv|1?���GH���N;������� )�J�9/�v{vy�s %��ɱ~{f���&�%�05,k $^{=�3R�� ����Y��ϫE9n�-/Wq�`$\m� 4q$y�e/��D?L�&�:��!#��R�ѤՅdo���v�V�C�+��n裺!�4$�]��<J�i��"���mN"�\�ȱ��`�NM�ȓ�s{x �� ���o�r�o�C��]�9��g�����#ϫ�V���K2>n0$�q��ⵌ�����������%q��x�Z�x�S����g�j��V,}�H�`����RTڽ B��.ф��rLTC���,"7�Owݗ���M��~�VwT���ةl��+�c��b:����R�'��dm�����:5�wG�;G���BO�!ɢ#^p�����a[Jīq��WB��~��vYm��ؔWL���<$����#}�X�+ڤ�i���9�����#]Ȳ@'lsH4�� �?�Z ��EsU� �Ia�Ib����*�;4�;{���kc#��5�]�Ю�-�*kG�l�,���;<�8�C�N���F�&@S�W��z���1e������-����-�;��?��"����.�\ɡ��J����٭���I{�鳽��-�L��}��B9)#C��%c�յ,�\��+j�؞f�H�F &���#���� ��Z���!��յ�Pp�e⎣O2�f.��3�a����{F��a�wClhNy��]�i�ь���8V�> ��'#��(8�>24��z�|y������u�(��^��V���B3��?A?��YK o��2�)�����)dDm��1l�3T��=�oU��)R9�N��D��=2���X�pڣh�{���D���5��� GN��Z�4*p'}{���+�vo���X�<*���c�+{��,·�\��6�0u�E�Y���*��L�M��iP[�������/q��� ��Z��)k�?���:.�~gK��Y���'t�Ui�zŃ�qam���^��[;b�h9 $B������4��%�̺A����I�������^Lc�>����IE9�57c�|i����N<��~y[�ή��s��l�z���]���$i,\��%W�*�OY�q��%�]12�����+����ms��t���5����>cs�݈֙3u@��V��V�Aڏ�����E����6E`��I%bl/u�ޙ�o�D�'���R� �#��ʸ�^ȿ\�#'��X��,����Ɓ뱬b\��X�R���c��j$LW(�0����<p�����$ۂY�%�_�t�RzN�Kz>\M��4� Z���� ��U/����A\��R� ?���u�a-9�6a���mdž���+��x����[�س���2?k�Ht+}އa��J"k�hh��Z@y� DS������_ƋIu���C��B�7�Y�}Gk>'� ��P���h'����l#XLQ?R;���N���Ny��n���P� �T/H�cBD#�:�Pt�������F"S�YI��a��%��X#��(�F�%���_1����g�֛i=U�*�ME ���Y'W}�t(�����,sG��SO�G?����E��t~^.B�?��`��WGL�"�u�D��1��??��� e��!�x[7� �*d&{h��OK_�KZծ=�8�[�6�.��YB�m���}_W(Q��b �fJ8���U*/݅��&t^L#��yx9�!x��3�3@b�/�ŷ誃^l�8AR��H�S�P~���ʴ9K�r��7�쵚�����ӥJ��ٷes�)?�s �od�����9���s�T���ȇ�<��q(�L�����E�'$�R�~��!�� %L'��x�Ҝ��'Ts2Y]��H�zǶɑ8r*�H8h-�V1%��>�����sk�����:4� ���q��f�r�Ǽ)���D*E�D���Nu����%*��ݐN`�4h����pN����W�ȅ��J��Hު������?TgvΞt����ڤ���Ym��O��<R�R��f�d5S�'}t�K�3;�{_� �0X���*Iq���1T߶��n�prop��Te�ϩ�g^u�7��!E�z��� ᩏ��L����Vkc��R� i3�2%s��� .��):��M����S�bp�Q���ձ0������ �:���~����P1N_>���~��Djx���6 +�a��t!~��dh�Y;�0̑�0�Z��@����N�?�#��C�J/��KYF��=��=Op��;Pxb��?������k���ǔ;�pf���;֏�V����j��tڦ�&x.E[ώ$|4`�|T�.�$���E�Dg�����K�������"�E�_5����:%tCkkC'/����+�\di���X����B>L;b��p�vg�#nW�]Ko�ؼTZ6V���z�Y� �䈎WX�?�+ޟ:��X�f�C�#�gL�<]�ԇ�Q�}�J#����;Ɉ�\?\����2����r�}h@���y�7x�Va0����byb���i�1�A��,"�t+wM�ک�����F�\j����_�r3B[���mV���ڙxM ���c�@���P��[4�ǿ��S=�-x��#v�;��L�'-9�w�hņ3��'�B�T�{Eg�.�v�M�O�.YP�$��
Static task
static1
Behavioral task
behavioral1
Sample
cc11f4ee28b7f0c084daffaa3e6ed474bc480c9c8641a6e279144eaa51d46b91.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
cc11f4ee28b7f0c084daffaa3e6ed474bc480c9c8641a6e279144eaa51d46b91.exe
Resource
win10v2004-20240508-en
General
-
Target
cc11f4ee28b7f0c084daffaa3e6ed474bc480c9c8641a6e279144eaa51d46b91
-
Size
2.6MB
-
MD5
d9b746b193595c4dc77914dfb1e34037
-
SHA1
ec1301e978a05c25480115e5c3c54cb08481ec49
-
SHA256
cc11f4ee28b7f0c084daffaa3e6ed474bc480c9c8641a6e279144eaa51d46b91
-
SHA512
d4c7c47377522db49209b50a4117e245235e4fbef97a0c1d013cf2a4a538a63089a5d8c256a28dd0df66318ebc3cbbdc433dae90307aca150731997ebc5e4f13
-
SSDEEP
49152:vXnQE77etyUNIw4QYbdZHKO2auwfsoqtL2Iw6Guhr9NR1d8Ky:n7ytxNUrZqDvoqtL2b29j1eJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cc11f4ee28b7f0c084daffaa3e6ed474bc480c9c8641a6e279144eaa51d46b91
Files
-
cc11f4ee28b7f0c084daffaa3e6ed474bc480c9c8641a6e279144eaa51d46b91.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 348KB - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 28KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 192KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE