�*���tH} ���Q�?wp��� ������� w�bXn2�FN\+dIˆ�e��q����1i�H�����Vf+��둬n�(��q�w�B��$U��� ��wʼ����.�(7��4���6�\�a̗mt#k��,8½8��}*���3�-/ú.��:\�e��F',=�"�ƨ�h���_���bO�5!�&^�G�j@ѝ!�I�����; W���E)���I>��W���Z�JH���U����Q�W��[�z���B\���)�tף9mp��3�7�S j�8PѩQh}��*��)t�3�i�w��%<��s������7FG0�U&�kj����h�~�ɒaN��Y3��,g���z6��}��G����8q+C£��"�f��* � �f�݂������l� ���B9��oǗP�s��ϓ�r�`�#�L˜�0�1q�ⱅ�WC'���K@��hR��ފaIf�����,]ЖW�Ô������i��<����m����ZL���=+H��%���-��V����4��OM���OF^�B���S��T��`"���0Ch�#K�|�R]��C�ht�z��q�?��8�����1�>�M�ij�������cpb���#�Qf��>4�>�>)��3q���bܑ�1s(w������,�����c��Fu�C��U��%�oz��b$!I��I�� �L�#~ �m��+ ��]�s�JI-^���c@���ibW�=$��|l(O^C�/1�� ����� ��Y���0�6���Z�<�����cC�YY�n�?s��m\/�N=ݩ�1�@�1's�(�-�(s�� 4���v� \���`���댸�%����Ye߈�����s��tq{���/��LB>����ׁL^�>��<w�8�îc����_f� �!*{�g�W�fq��xy�7�x��ɇԋ.b6���@\Y����uRH�������j��+KF]����vN ��åK�և+8��,bY_�K��ޝT��z+��sF�_�ۇ��KO¸�"'����h��[�����l�<��#�� �m�9����pގz]5��:C�˪�>a����ڀ�a��'�T�0Q�4���t���|�L�r!v�X��}9qlɸِVikOdH���8��_ވ�WWOQ�f�re�q�2��UD�����J��� NE�"E�0Cx����G����e0�O��\�n�$`Ӭ -f�7#�V� ��!���7��ďQ����m?�������vs5�~�^0��O�"��q�<��2�.���K�=n\|.��a�!���M�ۢ��b����R�06��2~3w�Ҋ�a鉰�aZ�AN����,��`Γt����#kg�Z��I<I]�̿E [��6�9eRԂT8��y�a5��J���͔�h���Ѹ6��+A��D\�}�F�RS9|�%��з_� ��}��f� � �)р����H�t�ihj*�ѕL�.;��!��x%w �jq�ȭ�"���= �� ȣʠ2���b�E~��nꂛ�g�O�xq't�U'U��y�I9���ׯ������=]/f� ̺�lpdA#���A���b��6���G^j�{!<���ȨOS��ӝ#��`>w���W1yނ�=�c��so3hPۿIF�,`�J��Le�/V���f�Y�c$��|�{�0�'A���<.k��ex��)���DZ�$���~���joǒYG���D;��~Ow�WS1������7��'Z��{0)bs��!kmAR��5���$���^h3O�ɪ4ӧ��?�h{0��"d���a�/�8ԐD��'+��y �Ҕ����]��}�;�wr�V���4�Vt_�BʙrM��MO��,�8����;� m�fe"��ŝ��"�)�"��P��ӉA^��>c�O/1v;���SM�@�~�d�r�;��S ��( �}����nƬp��nf@Q�g�"����BL(���Z��T#V��_ 3m� B=�"�)���g�gY�ȣ����ҕl9���>J���_|�"�lg�[����Fm-q�6e�t�K�Z�&rYJ,��%��Dр*Jݧ��9�+5��i�kq~ؠ0���)�^$5����`Hb���WWj����5����b�,w2XNr����ni��^�n%�l�P娭=�1L! N���0!�a�����5<�f4,�������Y��{�酬nBz�Vd� ��il58O�ӜY}���I�/8�J���-���NdzYbΓ�A��]�"5eTUQ�$�4�1x���n���i���Nq�o���)]�\h�3#��W�&`�{��P���+�.4 iܼ&w+1 9:�+o����>/�����(D�����Aފ���ˡ6�����1�#��S�nY��m��Y6HB"�T��=p�͢� �i���cGsHvto4�x K��>K��5>�H��,��n[���{�K���������E� ����Y��y�?�5|y/��a�@�&�GB@�������xu�Ҕ��"��)��S�s��D�X[\�3��)c�M=���',�A�Tك������KO�x"��i��� ̔m'qhI�Bg��"b�¶#����p�=�������W���ym8��s��I��~{�?E�q5�z}4���N�7�?MM��W���N��vk�K}=+��r� ��-f@��P:�Yq����n�|����l2�I �,��S��$A�J�����9��3���V46PkL6���I�%Ǯ�HD�2�q��w�w���@������DX�,0j��?C���?�p�;��w�� W�5��'�����&?g�8��>A�ԣ�"��)�i�9�S���W�mx�z�$q]�x6'�e��t�r�R)��"��}Pg�����&��sc���ʤT�T�XD=d�B ��S��%��E�2��A#�nNG�94�����1��m��/�_��Ӟ�U�ˡ�/�6�h���.��H��,�C�����o��oT1*��!�@�wؾ�*��Y@"ҽ��q�{D�NÇG�|�f������ߑ6R���t˨Z��moPL�\��,��C����x��)7����MdV�:27���נu��[l3�y:� �o3_UGT��T�!������� �K7���8�vu?~).�14����m;��I9��w��[���g�z+Z!C\R0��YƜ����� L�([�nVrԢ�E`&��= '�o�c��ïy��؛����f����~l�y�<}S�3��}.�(nQ��."��Kg-�.Z�������7V��3�כ��������-�j���?p>a LRB�a�/�����h{���+ ���e����(8`�LR+Q?a�K���U[��nZO;
Static task
static1
Behavioral task
behavioral1
Sample
7bf9ed78fa54edfc0d1f816d9ef2ebd869b1b0a02324844508a57508dd44dc02.exe
Resource
win7-20231129-en
General
-
Target
7bf9ed78fa54edfc0d1f816d9ef2ebd869b1b0a02324844508a57508dd44dc02
-
Size
2.4MB
-
MD5
bf063f02060822b0d5cfe67f46352be9
-
SHA1
c5b2f3959a531a38317a66022e1c710673ce8612
-
SHA256
7bf9ed78fa54edfc0d1f816d9ef2ebd869b1b0a02324844508a57508dd44dc02
-
SHA512
56e44c459a3b786b8337dc88afd1a8f4c0bab8fb7c7f49929167716c24990d4a10c17bf980c5ac90b8e54b70d27e15d9124bb8e9a7d1e1109cd046871763f249
-
SSDEEP
49152:stoGDi7muy3aXMSP8SzK2pzeV82zPs/rAQos33FoNhdlRtlU0:VAKXlrzeK2zmAds6fdlRtl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7bf9ed78fa54edfc0d1f816d9ef2ebd869b1b0a02324844508a57508dd44dc02
Files
-
7bf9ed78fa54edfc0d1f816d9ef2ebd869b1b0a02324844508a57508dd44dc02.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE