���zR�B=��=?.\�� ���+��~��L�(����)���3�M�� s�C6��M(�ax��8*Î�k~;���}{��!�\��|0�Ц>( ��&��sS��i��B k!�W_7�Kh0�7G~uA�q���L�p�EZ���P[���7��M�����n��B<��7È�6�Tj����NJ}1ۀ��Z $�mjK�jP=�me%F=�U[E{��su��y,J%2^⑁�P�;1��4�.�m��GDO�7k3�� ���x�1|,�z��fe��]]�q�; C��7*��� �=\<AY�:�Uv��N��#z��M��qM�o��[)̺�]P״ŕ�F��,�,O�� .������$�l���؞fAm��� �����Վb��z��J�������P�B�ܭi�t#v[g5��9����?�%K��#L�4m��fhh_h�L����"Wo���X�Ux��ڻ��IH�!�.�dp���g���O`�����%%�>�0h�ִq�nUݤ��Od�.r��f�\#bV�������T��z{ox����&�PƵ��A9H(h7Q�l8���*.�7�˄�N�B�h��a²MFt��ڦ���s�Ly"����9[��:7'�����@���&���p���i����7J�͎��NPH�&�\䶍���Ei��z�Yr��t�4P'����r�A�L���0������X �>sP��������c.-Ҡ]�KEk���t���v���b���8��Gz���^|Ê뿠�D4b,èF���;���t�L��F��Q�%�� ���b�\D��:ȣV�k�gp�&�1��)���邒��㼊-������yo���;�����k~p�Y;K���$�z �5F��]���� x�ʘH�ˊ�@��v}!��A+D��qsӷ�\OAҲ!����Vm��� ���n]~v����j�pv O .,٤aa|P�Yт��]yP���6h$�#e�m�#?Eh��ٟ["Ye�̎A�G�./�vz���װ�8��0o��@H� �g�z�ͱ�/�JI捭��76\F�S�w�C��a��9@���r&��+�F����I���&��*���K�.f|��ph�2�(�+��xJ┯�S �Jق��O�7������V������*FA��T���O����� t�8�`xq�o[s�a���&��iԿv�֜ ڣ�zӖ��=$�`8������㝙�ea�=�sH�� � �M�l���AE���������^Ft:�8,3��_mי���g<ʑ� |�P�c�A��װ��������`tI�����k�܋�N�ãKN�#�C����!2��w�}~cv���6<5�9��+��Nw�v �g�i��K����Q������J�$k<_An<��=��g��{;bI�yēSv -��sbg����u�82�I�@��+d! ��d����aоFKP���G-J�&wj�r�PJ��Qab�7�y�=����{n��v� �8���ј��~���:-�N�g��1�q��l�X��V�}�X8Y��$��8.I���I� ���j�P,�Ra��:���v��������%b`r%� r�3@�����T� AŗV��O$���v�7�y�*�T�R6�nz�%����<3�:0R$��G�t���^|^�Z=�D�4��C��0�t�W����M6�x����u=7��8�^.r��K�bNp>�VpO�~���l�.3���r��C��[���,��Pg�z�����{E�z���[֊#��f���˪��߽z��,�ۊ� �t�)��A�u{]�§�`UH�q�(D�"@��0 gl-�~����M�?u� �H��=�e�l��A�5�����^a;���T��Ȓ�?�I��.ç\���\��a �O�Q��s���z�i�����~��N���+MU[������� q��}3n�������f���k�^6nT�ں�z(?C��c�;��0�ك*��f���{6��� $��w8U◁����C��������}N��Y���%�u�iK�#�\��Ż���u{���P�f|�t��Zw)^#�O��e g�Ql��EUY�i4HE/H��q���v-}X,�l�9=t A������onV�0 ��>2}�����X2R�ݐF�}P���qY�岁��y-7w>���N2����K��=�����;�Ѝ�e��S�Q����^��v�'D�'v��-�I*uଛ1��&��f| ��眜~s���� �a���j�ޒҚ�5Ь�����\��_�NB��; �R<�=�,���]��� �kn�⧳ ��f��r�y�0� Z��l��g䁦-��3��,��6�\eK�(�~�4�~�uaZ�8�K��q���QlS�!Y���0��<����(�%(:A`����]�"a�GK���h1�W��2�MZ*�9I�:�?�é`��+`��<]_��� �,�ٟ��ݐ|����~��U��3�1�ѫV0BN��tC�L�#�h�䡯~�a�m���D��$��2���,��&�g��xb6�m��;��+dC���NE��%>/_*�N8mTRx7�9���c ��Ɇ�� Di7IX�O����MfZ`}�8�������Ƃ�;��<%#���>+��#�q%I��eڬ ��e>�fs���LBkl�U� z7A�rPq�Uo�������n�3��!�z��Ѧ7yc'M ��.���Q+���E[�`c�kB��{Au1}��C_�%���V) bʺ�@Uky<҄,�c;UZ��]��>UkY �ҫ�D-�^��x";a�@������]?�����Q����T��]�c\����xoP�υ�W,��c}���p=� ���-�}~���ե�� iva�>$/�Lz5���}F2�o��~�,��%&u�2�*�p95*�̇�S�F ����]��W�hJ�R��*ɤ^�������� dKuY��tns������Hϵ�TY�Z�;�N�z�8I-R����Bh������ម��ں3��J�� Zo�-�䗫^T��+��G^���ٹז��F���n�<���*���I��2hٴ `������ɡ;�p`1{�l�v�>�J��F��P5�善'JRB�3C��Qj[x��,`���CV3行�Flk������N��\V� �,�͠��Ԡ�MV��o�`��a=����<��|�� ��j���s�'V$�k~�s;T��29U?v:Έ�:w��n�� ���z�JN>�'r.�1��k �T�jơ�].�n~���߶_,�s�-i��mT$��U��h�6��OF����~]_��(9b��n�Ԅ&�$�N4�c:ܖ�<L�u�}+�E��/�¼}< � ��&���D���[A���Ě� ������������ �����"��rH(�� �[]���ψw;k�s�XWy~8*���O�4��'B���gՀmӴ�|��Rj�9 �u~�� W���U�ɱ��G��cu�M伜p-䑨;��h��ށ.3E��V������q�'N�J&�j���o��î��bo�z�����I��V�fv-~2�6L�1� t�8~����I����y�Q$ʢR��D���7�95%���1�Ʀ�C��e��P��ɻ�"KP+ 3��3F��b2�p�;���Hn�~��Ba�s_�la/�)X� �6&M� ��UZ7��q$7Ń �Cz��d;��Լ��T|�@Hc�
Static task
static1
Behavioral task
behavioral1
Sample
08bc3190027dd8ce65a27d80388e825b45e1f4e672dbb5290a2ad4bf8cfd521c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
08bc3190027dd8ce65a27d80388e825b45e1f4e672dbb5290a2ad4bf8cfd521c.exe
Resource
win10v2004-20240508-en
General
-
Target
08bc3190027dd8ce65a27d80388e825b45e1f4e672dbb5290a2ad4bf8cfd521c
-
Size
3.7MB
-
MD5
c749933ab03f07979afae174a6294ebe
-
SHA1
88067930112204c74227b7338f021d3f8b3de6a0
-
SHA256
08bc3190027dd8ce65a27d80388e825b45e1f4e672dbb5290a2ad4bf8cfd521c
-
SHA512
87c1fdd3cb56f0c54a231679d1a768396396ebb42b13927edb241c820c26ab0172470ecca477ae6684f342fc5a3f0ff13caad7f51042a6fbc0ddc18669574770
-
SSDEEP
98304:7b5n1sDVKr/82h9IuF0hzHWZZyZFewSMN35rmhoJui:7bEDgb82MFhOwSWJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08bc3190027dd8ce65a27d80388e825b45e1f4e672dbb5290a2ad4bf8cfd521c
Files
-
08bc3190027dd8ce65a27d80388e825b45e1f4e672dbb5290a2ad4bf8cfd521c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 368KB - Virtual size: 1012KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 192KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE