�D�����)����jB~���~�ɴ�36^&֎]#��f�����J�ִ.G�9��Ͻ�7��aԳ���d#Y���1�8]Ǻ�?�8@I#/�����{_c��s��l&�0�.��k�ߘc�G�K��Sd�u����M_7ݗ:[�Us&���������0��&�\�&�ăR�)T�Ӂ�yq�E<���~������w���9�����%R���I��Mv� �{ɩyb�G�l /���J�=��oS�2����)��c��}[���rU��ϠW�[�xq��<�i�Y��lRf�����K��gp�̣ |�d(v�J����ɏ���t��z�z����lN���%6�����^�|���@�A�+��}��Ew�my�bY!��7O�F�i6�H���Ȕ�~� �Х�����7��\��w�j2��-9�8�'扚=3�R�#�kԩZTR�H&�_pJb|��v6��M2�R��#T�/:�I+�U'fƕϕk����0AR˪f�O�wodDS�c�����Da���a������}�G�N������bg �.����j�1���*{'~���9 ��,�-T���Q�ҁT�WY��Jqz��IL}�~#EySd�I��,]���)��}�q���W��*~�r'�ϬtZ0�8��rbq�I�t�.D*������2���pJQ�~��5�HI�}�F�+�C� ��G�C�:� �7����^���<�wY����-O[��;�m��l��u�?ȌU��l�`�!@m���6�<!J�8+�P��R����*s��f��0��b(�����_��N���r$Z���"\n��P��E�!��匊Z��; e+�C�I�讼^鲜I���>8�b�)��@�%������:����x�Gv�W���fC6�;�M�*���6A���=E{_�!Y��I���Z1�< Gۙ�:uyt*�1V�!37�+H0Ԩ��ӟ<a�J�m]dd��M 9���KX@c�.^���rU�HPV�-��C@���������� ��~�|D7!�.p8c\6�f�'E"�M���&�M���uo�0�����]&�G�98%�o���,�FX�C@'��b�c,1����p��Q��;K!ږ=� �=�Ƅs�/Ǚ����?��Ŵ�FR��۠����t��#ě6��e��cً�U�'���e�2j*fγ9h���j��[����D����Q�)�sMw��`\�9YWth�$V�E~��8��m`��)�1����Eu�s]S�Tխ:���k���A�fI�e3n�K���V-�%�& �屹�@�ѹ,yK�A}?0<Db�����w��UH�e�wK,r����L�R�ߣ+�l�1h�?=*����n�PQ��{���z\((%n۽�E-��P�n6��ݺȼ\ �4ڑ?ʄn0�����Mשq�hP�c���Sr����uT�j��7;�%<IS��&H�~������0� \>�f�p�'�@��{��tf{Ïaֹw��+�5��Z�V#R���<�t(�&9 N���d�������O��|���<���lw���k�����!:s@�G��a0��z��{��3��i��p�;;�N���E�{!�v�d�̼V�-����.� >���y�]��N��8Z3��z�ܑgj}��c�W�����b��� -]��k��ɁlS3��gA��0�hÚ{m�1�����f�.a�~Б@�$I�#vȍt�>f% �V���ߤ����-�.���Ÿ���i�]�!���(p��&�%!j�<��-�A�w� ����a6�� x�E!�B����V�m��Ԩ4"��t��M��֧�I��:�n�;���W��;pj�0�ٲw⼁ g��|Fi+���dJ��i1��?�:���#�4�J.��6!�D����[]/�c9�@@ �:��hBڃ���G����-a�|E�3�#'��b����tY�=�N�v������O-�Y���IXx=ӻ�j}3��I�xYT��MP��/�I[>�U�2[S��bzm��rI�+\�2o��,�ɜM-�'�#hߖ:�m/����V0�3=��ݯ�K|cǟ0 &]�Tn�~ {�`�^����$�T�%>|����]���x@��Y�%��� p�@���z�0��RX��#1 �ՔS`� �q+3��>v9�����C+�s�Z�_� ��JU6�q���N?���EF�f}_�o ��a����ԍ�!{UM��Hr��횳��{mz�#��7�!V���6aE��m���~ou�d�H�1���~\P$p� ��-��܄�!1c������a��^��Ӵ��Om�1-���\/��+�:c3��!�2�#m�q��-�fj����e4��3�z�E슓|~�wư,:�����8�-X�[��YY����^���[����1�ť�'6c[�^������o�n���{��J�A��V"e�d�B�_Y�bV�{�S7G�U��ұ�Ju�'�,�����؍t�M:������/G`y~F�*���H��<A��$�����2���ʖ��6��2&ΎoH?�g(?A�n`��U���.�滺3���)u���it)�X�qA���&�BU�]C�y�g9��y��_Y������*�A�U�8���Ok�){hxQ6K�O��ܣ���:� # &f��<��s�P�ŷ;!�xu|�&%?���l�uVU[C�x�ϲĉ�<;ٖ�6v�qn��d����' �V��Tɯ�}g� �ű_�� �;����ybԼ-P�����=ݗ���(AN��B��7nH����~��.��x�20DXd;�a��J���q�HQ�@�X.~Sk'ZH@# ѿ�!�D- �&("�mʯ�5��S�V���i�ڽ�\����nj����C����c}��e`sE�_;�FEqސ�)���V[�S'�*�k�SԴV+�.��l<����r3��Gm(k,��6�W���]~��ńGs]��E���t���9�j��W�s�ֺ ���nʽΩ�LVL� :D����V���zq&Ƅ�ȍ�?w��G1�X<�ǥmk��y��]S5 N��[���V�6����'8���[�ԁ"Â�&�����I�D�y�X�T=>�/+�*�y8��qm氤yΰ0��*8���6+=tQ��!;Y53�J57D����O�{0�x��z�2؍�O"����= ���n�-!�29/�"j������g�K W�ȿ,kx
Static task
static1
Behavioral task
behavioral1
Sample
8b31683da5e0a953a37fc45f013d52bc383067c2c8b32664d2b33e92075cd4f9.exe
Resource
win7-20240704-en
General
-
Target
8b31683da5e0a953a37fc45f013d52bc383067c2c8b32664d2b33e92075cd4f9.exe
-
Size
2.4MB
-
MD5
a3dfea00817e38d4203ecc05fd53dbb4
-
SHA1
0eee82febdc9e12af926376512f0db2c5e21d8da
-
SHA256
8b31683da5e0a953a37fc45f013d52bc383067c2c8b32664d2b33e92075cd4f9
-
SHA512
db2809c67d5972cd0ebdecdb6baf044728e3879f4d74e7de0fed74f726f168814c318c2bac0e7878a5e2d284387b17b628164297bf5aae83a851113dd546021c
-
SSDEEP
49152:DaCBjkV8PDGHgjz+T422bw/uHkauu3UDib47PZOwtaSPtx/HYoOWZqeG2:BRuHgj9bw/uNuu3UDibUPZObSPH/3ceG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b31683da5e0a953a37fc45f013d52bc383067c2c8b32664d2b33e92075cd4f9.exe
Files
-
8b31683da5e0a953a37fc45f013d52bc383067c2c8b32664d2b33e92075cd4f9.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE