��ߝ)������� ��2�cq��S�W��\X��6�# &h��k�� �9p�Zٲ����%��p�4~�YԷ�9�����7�F�N�eæ���\�Zػ1��� �������s�V �-=��x�o��� H�xF^���f^T)�1���x��@��+a� &A�(��i��\ �W/E�?:���0q�c!�*��)̝�һ�"u\��`MX ��5gnxJk{gd�[j�'5 ��"�k�|t�Ds��%H�c�`��M}�������k��ց{�#�=?[�x���fO�Dp�����BBw8��ļ��ԡ�ž�R,D�~�o�T+c�C��i�B�' � �n�{S�f8$�������"+�mhr��%>�>W߶7.ɬ� �3Ѳ�����a$U��9&�8F���s)�ރX���BoG�cr�|�A�e�uJ�2����I4|U#����"ɖJ �G�}Us�����Rbc�SkR?����g��a�%^q�}���#�#q�|`E�/�D�m"���ْ�/����g��No�T�� Eڜ��|�S������>�w�3���MR�"��L�V��_5|����r����� ����\���������L5T��)�!g4�ti_o�j?nã�o8S�9�W���K�2~��p����J�>�IPX^���\��a��ĩ(%.��Y��Z�&]�|�?���=�7�:`�� ��U�jԱ�~�1�'I��M�Q5#]�ȗ�oɰ�&%�S����9څ��w�ޭx�&ј%9cY�|L�OeUٳ��a7��V}du���Vd�?r�������S�����&sT�k^�bN�H�g�6᨟n�`� ��Q�$p��| JUk��ɜ2�|O�jk�&m������vx�j ���������r�=�r,ֺ��k��y���y� �B&�B]2���d�i�r�QM�+���x^O0��.����t�����=�:�Wl��|l�P��W�ʡ�T�����w���t֙��G;L��x:w���C��x _��]�]�~^���9�����c�z��~� ]9�r����Ȃ���+�D�[0�?��������o��d�ϗ:�:�V.�tZ֬=y��(1S�GtY�D��g��B����HvO�_�����H��#�m��2|���U4���V��z�n�`�X��i= jQ��1��6���� Q�s]6��p�ho��~$��.�=��3����9?G���~�,XO��lΐ.*� "����f�3��V" ��JJ6\�7�b��~q7���$����o�$O�K�u�A��W�F2�ѯ �8R�)��݂Yp+ i��e2h�=��%��� ��G�qgI���ס���n�;o>�~�ZeG���w�� Odސ_���Y@�%egI3Ћ4��a�����'�}�iJ�Y��͝�\�u{�����P�����~bx�R_�ʅ��xg&��GB"*K*L��I��;�2�R�ꛀ�~( ]-���J7��G�T{#7�]�_f��+3dH�� BK���F�&�O��oy�/샞�+C��Ł�C툪�W8GѳЦ����!��n���[j[o�u�j�::����R{�bz��W9@�>�L��k��q������- @}"�a?�yS�����O������k��+��<�;"nvY@?X�c�7��r��yB�S��o.����"�R�Yx~H�Z�e!��� U����#ɤ�rU^B�i�Ƥ��V�X�������U�;�CWC�L`-�`kR���6�0�/�Wi��l��ibjq�hqC�����GN�B.gd_���ߏ3jrG6��r��k�HOU ܫ͈��_Í�=�ZM��N`&E n�l3Y��7���D�~�ڧ�*穎�Z��}��dl��|g"S����]���o�&U<�ݻ�;���dl"0�0U��9��.�c���md�B����O��|~o�_���_��a���A�#{��S2�v������x�å� ָ��q��,d�].���d��q�m��0k'Y<��� {{���4_/m�2�\�o���u�+/�����9(�1"hs5���R9?uLʦ��:M��ԇ�����̱r4>P�"���1���<d�k��,���]EA�}ɷ�eȈI�y��f��f�6�ng�����*R�1<�#(��,�5҃����#�$n�� H$�B��ʍ��$ˡ���0�����'AE`��t��1�s邤ng]A�t��~� 5|<PQ:捙��~o���{� �uZ�t�F��J�������y:̷�#�S�ML���OܓGF0ϳ�o�_pR�'"��U�K,fx �T9��cۅ��3a3H4Ax��Z�_���!(T��i�0��Lzſ��IcĿ"���P �� Ie���Nʣ۔/Q)����66��?>J��� ddQ?���ЦAԮ�Oi ��$��[Gu��-i���b���,4-�G ��5���;�m2�R�#r1Pq�y�s�+\?�~U��i� H"'6+�w� %���v����G�@hx�B��[���9�W��:ӯ烵���>̲o"�Y��QQȟ�t���5�(N��G3�p>X@7���<���nyhL0t��~����?�����s ��A@c�Mw:�����'��m1�Z��IN'C��`�~$���!��-��6eˡ���;e�G^_�'�-9q�|:�X��6"я��4_�1&�`�10$�XD�}%��o��A�I�^�lv��Ȗ���y���~��C���$O&��u�f�ov�[��윉�������cH��DɈ�C?F����~e(�/ɉ��r�� � �qX�4��T�� �xi�'�� Rcm4���f8�T�to]E=\ۂ)���G �uAF��gj-5#/����Y����ί���M��cVi�P2�t%�H�b�~ʺ�u��S�cj,W� 6�����I�A���}��~���i����G�q79�z���w���q��;���@oq�&���$oEn�<-O̺��%d��z��@��"�]����L.��l�"<��F$�w�w�Pc�H�!�z]���#���aX�V_b��ɑ�����-��x� �yq�>��i[�t@�L9�I�^&Wud���t��d���G�s��GD����p6�i űEVy�Ү�=pI��N�(L��Am��[�'g������ d�n���6�kGw�*D�^���v
Static task
static1
Behavioral task
behavioral1
Sample
420a0afef2b1ca0becba2405377ee528cc5d1e6d903eac4e59de97b1ac22ca86.exe
Resource
win7-20240221-en
General
-
Target
420a0afef2b1ca0becba2405377ee528cc5d1e6d903eac4e59de97b1ac22ca86.exe
-
Size
2.4MB
-
MD5
0f8b01fce87324b3c2e7fa5964ae96cf
-
SHA1
cd0126cc397c04e8dbc75d488298c2c8b6d4adb2
-
SHA256
420a0afef2b1ca0becba2405377ee528cc5d1e6d903eac4e59de97b1ac22ca86
-
SHA512
c643bffeee45d14b6724d1b240328714440bf80959c7922a11715cbd3d7172723035a72348e079eca7edec62b8a62dae84185a16b4e0f1fb5a016d1ac4e6933a
-
SSDEEP
49152:AKbOKWc0NUys723omzuVp7UxIZ3OxIQPdir6yfCVCDuIHZV+/F93p+o0HGDEn:A3E0NUyM2pzuT7UxIZ3O/PdiWyqMDhHx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 420a0afef2b1ca0becba2405377ee528cc5d1e6d903eac4e59de97b1ac22ca86.exe
Files
-
420a0afef2b1ca0becba2405377ee528cc5d1e6d903eac4e59de97b1ac22ca86.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE