*�}�TDgo�6oqT�E�r�*�F�=���^?�j�y�����.`���v��?x���_�*O1/ڻ�'�yxm5�bP���y����<�V�A�J�i8!��_�z���7���NkbR�^~��-l��U斜�͕���?LE�XS ٲ���Qݬ��h`�c����B5`+�!&^!�������� NPOd���&�#r�H�?c�X� 3YY���@D�N\� ��85�K�`�Z�`\?ד����ԁ��_��ٓB�;�y�4�Uf.���ޘ5�A�����l j��q��M�����@9��Sq��1���q���K�fm!������Q!�5�0�p\Y|(P 7D=涒�!8��b�j�<#}�UKB������e7�Ր�w�3?�7��~w3s��M����^�W�2���c��M��M�(0e��ڞ���/@e�^��:�Ed�9ؙ�ހ��?Q jOQ���SB���L� ���?�� "l�JƜ���8�(�!6��x堾�^OV���!]%�7�=JZW�Ϋ��kK���2;KU6�H��C�i=�є��{�q���Ф��i��wf��}���;���y��!��|�XOg����������^�>{iP�><O"ߎ� ���\>�4aS��rX��NV2+��>ppr�s�&>x��ɛ���p��a�~U�{��up*{.n\��zzQ�$QئQ�}հƋ@�_�.S�L���*44YF�S�3n��wG�̒��Քe��=�Yj��H�<� ��߆��^n����о��Qg6�_�}S'ƕ̈�����_� ��S���a����]+.��D�e�<s-�Gv��t1��A���V(�� �傓�]5���^������1��)��gn��A�K�h{5K��)��$�|��1�^�6�)�6�4�������ɑ�˺Ę���9օk1�� թ�0CrR(9j�#̖�<��̠�!P�P�&-��2u��/���+�y!g���1�$�ɀY��ڸ��o�y_}�։�d3�� ��#�J]�*��)�|����#�=�*P�y���~Jv�Ga+i09T� �:�\��wwc�)���gK���)r����ݠ���a����|�f%���{�oV_�M�r�c^�y������qe�r1���A5��P�����6ͅ2�8�6!&��ƿZ���{SIed�k���u�2'zè�p2�:��k}�d'R�:N��� ��B���v ,����) `��OZ!:?J�5�q��{�Y�.�t�ML��F�q�+�@�u��}���v�]a5A=�xr8I�~�k��'^�h����v�k� ؽ�;��5>oA��J^[�+:z���fG�;�� �b�%�3�r�X�w�1� ��Gj� )�u�~�Eo�{�������k`��D_Xǻ]!���n!����G�@��4����'��]��SD��΅5����-t����ϱ����='���F���]���ź����F.ü8e"6�}�et[�@�sDŽrʞ0�f^fJ�1��ʘW��Q؟Z��I��Ƙ��xX&���)&�������ۅ�u'�U�v�AZ��Y����b'�Ts����0߷˞������_�,Q��o0]p慮��ّ����7�Z�Gm\�D {��>�tf�e�)�X���-wq_Y��}s!r�J��2��~N����c�(���R��C��k��8�.Ň�S� goR=E#t���DBPu���/�]� w���8�Q i�e�'0���^�` 6@1\�A\p�h�I��\�LR��4�W���`^�k�)m�����;�G�� �^~J�1N�4=�g��t���6K���eaL��3�rAw��U�R���Tr���t�/�!,���9�����*����]�?&�w�����#��b�Ə n��z[�.|�sv���rk �LԚ� Ƚ�`WH�:8������ɟfs��z fef�TS��+��v�ئ�D�Dq�������*n�)�e�ܯ@���������Y��X��<F}3�?�@~C�fÌ(�b���ZP��qP�`��tHbM�x�}�@P��^B���wPU� �_�K��+� � *���ٗ��ꌘ�=ܚ���a�����m�e̖���?y&�Y��N�'!R%P]d��!ϓ'��ퟐc��Z��o��!��N��(���>r�|�@���YY�\y��?h�j��E���.+������9��$jP��c��8 T1g���l �{�M����E#�f�Rƙ�̴��a�)��\*����l���aH���N��{ �" ���l�Jxdc�3����ֵ��#��c��%&�Xjݑ����i����|l��p������aǫS���UL����c��m�v�/X� 63:˨�/�+LQ����!����H��u����/��T�m�~��z� 7�DW� �&�Т�� �]s����]W7�j0퍸wP& ����J�A�-�����:�ă<�%B2Mk��+;��2 ��tr?�'�ڒ�%Ő��^��� �(������cL��C*iEl�^�k,�>w_�F���Ү5ٌw�k�H�9n!(rW�Ɇ��1?�r�{��LG�m"`�����*T�,� �^@i�1��V��)���!$�~"��g�k����<�����. �^�!�]���D�����Ma�) #|j�z��1^M�/�F�+&�gp�l�/�(��&�Rt�Z�ϟ�%-����4b,��;�@C ��ޓo��y"m����NȲ�T�u@Qk�����n�o'g�����({u���$|��'���,�-���Iu�0woB�2��sp`D_������ѓH`��Oݷj^�xa��5�4`���Y�*L]Ξ��y��4t��2y��� ��9B��$Y'i0���O�i���|���\$��jZ�;�U�k���U s� 8�딤[7�%�|��/�� �܄z����I����_�罟�Y=|�h���C*�~"�ףāųE'�d������d�n8���܁�,2G�:?d�ԕXӍ�)fK�DvҸ����)Q��nM$q�ec��|홿W�5ΰ�>�ζ���N�KL���Hֆ2���7��Se�x�~nΫ�l���^]�#R��(,[��vT�B���[�h�/mj��?`u4�+;��,�K��KVSn�ѵ="�F�<QC樿 b����+��L0��;:���/������/_�Q̎Ȳ3�Z��#����R�==7h)����LaFaZܞ�-��ql�:T ����ڧ���|�U�g._�������� >f�Zc�HoS�q�Y���vW����5n���P�;s\��CYo�c�'�~8��-a�F����_���v��A�,c�p�N~.r�����R�H,���7SN�"T���MP��Ŝ�V���H��(,��R��O%��T,ͫ�NB�_��}֭� �g���9?1����?a���-i�����%nK/���%xڨՃ�<aJ5���V�(��z�&/v��nCb���y�Lꂧ%������!ݛ�J9P���_]��?�(9p`݈�i2����2�$�G�x�ʺ��
Static task
static1
Behavioral task
behavioral1
Sample
bfa7a505e80c6729f6c3259f5a17fd32a3c48a54c49330fd21adda4bf7a93238.exe
Resource
win10v2004-20240508-en
General
-
Target
bfa7a505e80c6729f6c3259f5a17fd32a3c48a54c49330fd21adda4bf7a93238
-
Size
2.4MB
-
MD5
102aa72dbd8fd873b3ac34eb95563b03
-
SHA1
6117b69f7aa1fecf3e01be7ae3716080f4e0c861
-
SHA256
bfa7a505e80c6729f6c3259f5a17fd32a3c48a54c49330fd21adda4bf7a93238
-
SHA512
b117022a0da5ae0f0873a13e6f63bed840da8258e5839bffdd2be9e5a465edf7f412e95e9ee62dc052c9ee25a08007e1414ab9e6f4ce5590f747974cc5d76714
-
SSDEEP
49152:gFqD7FhtNOPJ33t+8T9z56I/xxPIdf5ou/f/QNnxHzAh2IG9BYhUdXayxbcI:xFhOPZ9+kF5hkdR5/XQNK0IG9BYhUMg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfa7a505e80c6729f6c3259f5a17fd32a3c48a54c49330fd21adda4bf7a93238
Files
-
bfa7a505e80c6729f6c3259f5a17fd32a3c48a54c49330fd21adda4bf7a93238.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE