[q<\NY�%@�u�P�ϒ��|��F�m;[�[ �$�=�N���D]�Y�Hdl�v;g͎��:�V��~van�uH\y���R*��w�i�rLi�kr%,�o��(�2$hnV1�5��n�����#J��>U������u��� � �Ͻ�ނw�^��\����[=�QH���&��|Z�t��z��V:fF���.ǡp��Y���#ec�q�l����y7���殺��������y /e�Q9g��� $�b�a�嚼WC�Yv�O ��+�THI�̈́�(=n����}�`����)�&�{u�� t/^��� ���8�OA1� @&b����x���A�v��Me*��O����m�ZUvv���9_�A�b?ϥ$�ߕf���\��HsC�~I[�� �lz��ˀ��Zs��$�V�������GOt��{�qt�l�W~������j�e�������|�/o{��ƫ��ϒ�r;��|�(��%7��|����@�*�1�xI]��B�$�U�Թ�����u�1���f|�z������ǿ��-������Đ��>W��f�m�| Ug�E�3K4�jt�Փ���$}��J}Fe�'�Ig��%�P� �:.���7a��jY�:�5�����=��� ���py�f� {�V1 P�$��;`Z�f!���<�d���u�n����>:tR@��������kR$mh8��od�z��=8h#A��#��Uڦ���x�[VD yy��%h�����J�cjr�Ҽ"�{�I���d���m���fa�4K>����Po���2���Y���f�>NB�\�9C5�-|�����p�.���B�~~��jZ�j �Gc���dU-7 B�p���eU^����)_S[�YgZ�#�ޥ���Hx�u'�A�vZG�� SB���K���엀' ��D���ZE��5�ݰo6�N�qB�u�zh�F���v���qQ�Mk *��f����E�⬒��� �jQ��E�Sb/vh�q�h]�(�-R�m� 9WdO���<��t�r��i3@�G��4��?���b�m�� ���z3�t��k���"��[8�E4����a����{j�`]:m~c�"F��G��������uV�)h�@����9=W���C��p��<OJ�K�R让����%Wq{���������,~�E����GJ��f��%��. պo$�|�]OAÎ���&ƪ��n���Y��w� �|�j��e�������j�+zxDn��D�'��Ȩ�Nu�Uf��<�� ���L���D�t7�<�we��T���� -3G/�5����"����j��&�v��9,멚%�ɜ��x�Ϯ�*�"�@Γw.���}:/��+��LȨ�I����V݆���p �W�k�#=����a��3@� ���KYmށ�h��^"p�;Q�cM�L��0dm��i�5+n8fc�(��������PX��.�â�Ӵz��Y��K�<˫њ����YtJ ��Q?V#�.T�("�yi����Lޙ����l�;591��s�=��������E�8,>��|��0*�����A1��H��ZK���ϗY�0�=�\�wM����I��'�����b�a&�f�4]92��l��'���h��|CJDX�u�K��#�����&�d4r�u�.��wv]k2�a{�5����À���kd�6ÿ���9_6��4t� Μ��c�X��c�7ݧ��@�cr۩��I*O%�U��u}-�Z�XݿN��-U����x:���@SSc���SE����>(]A,�} {�[���(���"�0ҷ%v��"�=�j��������_�[��}j���(��+o���P3�R��L?A2e�y�'f#��:�N�&�7\�UR�� �|uI�^p/�ט*��/�?!.����')�&$��b�O��Pև���N��`�X� �����~ �|�Y=l���ښ��}��Ćj/�x\���{r�X��p��f�(F���H�\�=S���N�ç{�jh[ƥ|%�e����f��!{�"|-,*��%0�)-��P`�O��1ﵚ��۪�0N�E���B�]i��ƹ'������8��S��R-{s<�F�b��Κ1�t�u'jDh� ���hٵ�GEz���kƾ��8N�Y�Dqq�q�زE�r�y��t��5 n�\s� SL+��E��l4%� �!�>P(U���\Q��kpq��SŲp;n�k�~�M�E�ؠ{raEpL�ǔ�Zs�X89�*�E�s�yn��/�c �V9��Ō{�s*j���!���H"V{�&�ɽN��:�ƚ��KA�m�r��_��]x2I';�Y����>��0�su����#[�A��c�M���CW]X��nu���q�P:�.R���J�R2��-�ǹ�Q!y:R��c���n�^۽`��)���}q�gZ(hh��^`��Х�l���n�t�2lh��e����qO�ѱ6�J �����a�&�8�� '!h�3�T�A1������y�L� /@���6��2�I�Ӽ�q0�D�{]We�h[6$XS�V+�V6�R���E�a���F���5�uAx��3�?2�X�d��?S ��2� �P�&N%DvO�G/} e�h5R2�3��]E�ΐ�8�8ޓV��V8+�f"�@F�"$�E~��A�D�9"�������p�lP����eNN}.����gO&&��D�5n~%>�1ϑ���D��]��i=�~�bӗ��}�й��u5���� ��5��5 b�������L�Naҗ�������h�{m0�H��%�3�7+� p�%O���ٹ� uA ;_�/�M\�T��׃�Ȉ4���Wo�g0�W7��/��$ �S��8[�x&����S{G]̯��0�U�ҒzC-�Ҽ�0�;�Q���}����Aj.���}Zr�ѤX��[�ـ\*j���*�Wf�4�q�����;Z�H�sY�T���M���xeF�_9!d�,�Ǚ ;PAsƷ%�%Ok��Rۿ �l��#��#a9Vi�M0�n\p�*�O�j%������a\���B(J�6>&M�A�����qӲ,n*zNz��h���/hS���Y�������&N�B=r&f��~�l~/�իq�C��iL�DG�&�*�T�A�JF���_K����l:�yv�:^�qY^0��'o<ҿ�� ������ !���o{���8}���O��h�Ԏ��;��M�F)O>��T�'� ���g�����H��է��S���N�8b�$�<:@��o��{�b��f���;�)�J�_Z!�Nv:�����O5��ʑ�xڼ1\E/'� ,R=7 �M��HlF�*6D���x�������{l}�hL;�1j�w� 8&�J�E+^����#��i9��jWA���C�F ��~�ۃ������R%ݦJu�#��c ײ�Z�2;\��s�7�+;�J�R��������
Static task
static1
Behavioral task
behavioral1
Sample
bf5ba13df7f7549e987f77091823fd0f77ba7fd4514000e60ad9a4c28f949c13.exe
Resource
win7-20240611-en
General
-
Target
bf5ba13df7f7549e987f77091823fd0f77ba7fd4514000e60ad9a4c28f949c13
-
Size
2.4MB
-
MD5
f7f2373c7005d9978782be75bef6a1c4
-
SHA1
24523818e79c6ccc38c90de912743552e98be2be
-
SHA256
bf5ba13df7f7549e987f77091823fd0f77ba7fd4514000e60ad9a4c28f949c13
-
SHA512
26e4a9ba65207c91dd181c5010d051838d6172dcbfc165aa750cbe72297dde0b0c0e54b024a6cba070089f3ac5f943d67ba779ee64f78a8f37b425f274f607d8
-
SSDEEP
49152:IK08+UO8Ajkw2s5uNuuiV/0H31F7AqxxJ/PgWAOEIm9B1:/V+UTwDl5eiGXPNxxJQxIm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf5ba13df7f7549e987f77091823fd0f77ba7fd4514000e60ad9a4c28f949c13
Files
-
bf5ba13df7f7549e987f77091823fd0f77ba7fd4514000e60ad9a4c28f949c13.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE