��]��֫�k�/��t��6��.��$]�c��#5�)�x�@~mw}���ol��?����[fpL@�%�Z����G�1` ����C�EQ�YZC#55!1���ZNf;�`e��2�� � ��Yٻ��d� �!(�g?�r�-�;!( p���r0�����قC��1]�7!�SK�:e)F澑�Qб���FF�T������h�O��&<� �$s���c߆^eQ�'��,��Q���q2�&җ��Q�Q�k�&���/�Rg�C`L�+]����*oG!�߫G[�e�{Ų@lϑ̝�_�;�63��-0>�� .%*bc��\y �HW��)4�a6��AɁs�Ǫp]�QQ�@VǀB8ۡ�������Z��i�cH�:�io�-$�����U����ʍ���b4��+�>ؑ�O7�FN=.y3��7�8c������f�KG�� �I<<|Lw�:P�؍�=��RL!&ⴗ���^[mCd8^�9��S��Ϋ@��y�����wU(�������˳9��P�8�Lk%dbp��b7�oY�W������g�=\���uϺM���a������Q�����g�D�2��t�7 �.9��VNe0�`�\֭ ,.����Ȉ�r,GB;U�4�\.7�cG ��S���Ds����M��x;��=~�%+Ԋ�2c�SH�C3�@�.�|�Nuwx ۑ�*�h���E����hu�t .����g�3k.#�c+µy�R��#M�6����DX�A:��A$���^�3�i�I��� �r���w�_��r|['��/"d���'��W}L�&��Yó��������4Ku��w��آ^+�Ũ!� �����*ſjVׁ���&}��М6G���~��jļ�딿s����j�M�Uވ�����T��gK���a�o�UH���`��y�4v�������zM��,�kS17�n��g���H����� hU���};ݚǰ��#B�%\�=�C��ͷ&��AQ�0lֱ�<��+�V< ��tJ��+��4.cFw��`�����T(f�n�-�Q�j��4͍-Q�t����M"@DoB��>g����z��@����J��"DG��/��*��K���n�B#o�0�K���B��)qj&�d��V?�55ԉ���\�7�C�_{��J +��p-~E��Raj'���������,�y��ŝ���r��ؾ��8���n� �Md)*=V!Ϥ�ޢ�� L��?Z���H��z��l ��Tl�L�)��A�����yk(�R82/���Ĕ���y���y[_��#�MD5��)�{��K�uᄹ�i�Jƌ9S�����ѝzݿ�T �%�V䱯�*0ª�L�����nsE������"E9�h�N�6T��kezB��}����L�nPR��Z�-r<��o�/�,��1�+��1؍�'���.R���6+<X,X-�?q�U�G5`1K�9p���"�p�T�O���R:=����\c��Yr&��[ N������퐛�pj�")�<�G�v���l)ɽ�$����`B�9y�m��=J��F���P��A��Bkx�"Le4hl�OA&ڹ҅�|bb �D|�v;���c�7��1�>�!�ƿ ��o�d�����\ِ�9H��ntB��э?������H��%L_m��yD�9��n;{o/����2����R���~>`V ŋT��N�������:�u"#��! ���� ��ȑ:�Ě���~w��B��if�hF��S� n���Aм��1���*+��K�p��-��I�����)p����zQ+�#��}�4���X <� K���V�uh*���N�)�}i���h��E�n6ɍos�y��tgt\�����l�r�")�D���˝u$ �W�^��3����+��=�?���pI�t;���SOUZ>���������Wd��J��h}*�� T�H9'1OϿIW���t�����%�K�\��^�����F���`��+v=����^#1�_X�S���2���>x��a��c����D�]��M�~��n��n��ص����w��E�������P�����9�h*�He�\e��î�xS�yA��陆AxHn 9Pi���0Z��R�Il ���KS��7j�ql)ʁ�ۉH �'g�������"��˂1��=䁗 H]]PcX�̛:P����T�D�a��t�.mb�S��� ﲭ7A"�,^�-����[.WQ#(����c���9�=|���֡@�����\��C,���H�1�|�oY2_�-h1)����=oOA0 ݘ[Р�P�o"C$����!(��3�+�-R������o��ٸ-���p���G���?馍�kZ�xR<՝I�����CW�o������r�ò������t2� ��&eX�k�e$�;L�y=t9� G�1 �5T�l�\�����9��o��"�3<k�٤$i���XL_:�X�A!U.(T4g���h|>զP6n6 �hK@�Y:QA���a�q7�h��Cʒ�;{적����.I���M�19J���w ���b�X`c��жs�:�9����h��9�I���Q���'�z��������z�Y�u_�Pc�֑l��4�4�!H�0N�aH���k�Q� �m��<K/�E逮K�uf��w%N���C��>>��G[Q_8��NN�Zvx��֚��f���T�s��R"^l�!���x�d�ۇ�Q����u���M�'\Z&{d� F���LK~v6D/���C��D���2P1 �VcK}T%����A�]��N���؆����w�&����~�iu���L*��U�) MY� '؟ɵ��K2�m��n�Uk�*C/�����"ۖ��z �v&ґ�pWe��Iz��h�x/��hR��2J�Djf��5p�y��*ϯa�H^o��>5�"�0u*�Gq_��i�l���7��f�%�cʨ=L�U�\���o�uR���Ԏ����������K/��� 8n�.����i�Ɲ�F8���Eڇ ��9G1UN<pmzɖ�}y^���z�]�@�ԣ�M�"!5����5��!`���( ���|�R�����N��x�=��������'?���������Q��bB�4�4�-�|%�lc�7}��v�W�N*��%'���Bv�~ҕ����R5S.l���Z3�a994��$&����r�Wn��Q�h Y��*��7���P�t�r�Y��۫��8cO�O9cX^F�&[�1C�O���R#�������-]j0[�!W�A�MSf ����h���ylQF���;�*QUя���� ��.(5ҫ�P�p�祂���a�~��Fܒ�C����,:�ʨ��r7$�5��Eֶt-���)c�� R��ǡYȱ6����S�Z��g�����=��6_�\ي �c5x} ep�ޤ�+�T�R"��X�},��O���s� =�i���3��v�F.AЅ��I���sEECpW�u�F#�8�-fzAhm|Iыx��=y���ty�����������U�'��|��a�2������r��#e�<��2U�*-N\;����yvD���@�E��#DJ���ͩ�����1<�O��lY ѻآ��*���۷�f�ľ����'�Z�E,%)���t������W�PrrJ����ׂN����NY@�]�Z���-�I/���8z&��=4� '���>l����[��%iL�&��
Static task
static1
Behavioral task
behavioral1
Sample
9bcd9e7b8d3962b9c7e916adbf6a3607d5896fa4ddbfa93f66d2936c7bf4028a.exe
Resource
win7-20240221-en
General
-
Target
9bcd9e7b8d3962b9c7e916adbf6a3607d5896fa4ddbfa93f66d2936c7bf4028a.exe
-
Size
2.3MB
-
MD5
f67955cfab8640045aceb6164bdeb97a
-
SHA1
6fe39115b905c9e0f4e40194fe6ec72992866968
-
SHA256
9bcd9e7b8d3962b9c7e916adbf6a3607d5896fa4ddbfa93f66d2936c7bf4028a
-
SHA512
f169ba40d33de8aecb4070282d8e261fdf5c9c643fa5a7d5b65f53b67ac8728772d27a62b76c7b8d56f2000ff51bdb3946242ffda0eed7d6e98a9ff33715a01e
-
SSDEEP
49152:LoAHhITFGrJruVMN0h0W7XQd86VUEshuoVMycQ+G3HbE:LATFWJrfChn7XKMVmQ+G37E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9bcd9e7b8d3962b9c7e916adbf6a3607d5896fa4ddbfa93f66d2936c7bf4028a.exe
Files
-
9bcd9e7b8d3962b9c7e916adbf6a3607d5896fa4ddbfa93f66d2936c7bf4028a.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE