�.,륁S���q���F���6��v!��½�Z�q��WF�z�$�!v��c����Y1y��>Z{y���])�(Ƿ�pU����lF�y\/�l'��d�X\�R@@�֪��r"��������Bc��x=f�|�&��X��0$?Y�W�3FD�̤���嫚������I�ub����*�=C�J���s��j��p�/��pLD U��;�I�Nt�<��Fl9\���wS:yP��^�6I�I���ɝ���T�F�TM�}0�5��\�*�n�j��B��b%��Tj��~�`�Nq��b�I>�N+�V,Tܠ�?����R:�,��皍�Hx�m�2�D� �s�6��?��`�s�X��W��&�&�#�&�;�ē��S�0��cR�g�bi�-�1�1o����)1h�S��,yV��anyC�����x��<ݍ7�3 V/"s+@T�8����)�xp��?����Ju�,4�cw��6�L�}�Z���H���[׀�W����A%��5D��g�o��}�X�s8?/N ��Dg~gowV:g6){���{�*>He�v��D-�*P���P�A��~%���U�<���� K~�ZS!r_��%{�́X/��*r|HֽI I��H�6 Ρ<�53�͑^y"Zov1�1�~i�M?=��(v���YEr���a�f��� .�n~ r �؋�{eX�l�\ k�P@�;��Ra�5����]k���& "b��D r�I)��o �㣼c��O %C���B����^�b������aT���ic������Ԫp���ӯ��,��B��lNTv��!��!ͷ(y��i�����X�oӂhc�9�`������ ��#������.LM[��s��@_hA6(̈́�"_�1�M~���}��GjAc�")!��Тn6�3�a���د��"#!bΚ-�I��Yb92{� ��������稏H�� ��|8�����ƩW��]�m�t�ۤ��gp��K��E���Q"_��U���?=6�?��A������K�VX���gJ`�=�ⴗ��Z�0���&'M;CkZ���k<#����`���'nr�5D]>���X�M���({����h M�j���zQv������b��m�;PX$��Lj>�E�X�Gs�z�9���!��ѿ?/Ǩr'�� :`U�_ߐ��g�}!��B���?f������������� 5�;r� ���A��Z�a!a�gy�`4�t��"����c��`��SAg��Y�H���1 0���8�D�s(e�x�9��z�7M��GJ�R>+n�R�k��V����j�pm0�zW���˟�~���5v�<�9�,�O��G��)����R�W��i�+�MK�_�rV�J�^����Jg+,o����V���A�����w ϴLʄ>�b����6��Ppi�I�'::,�t-����ke��ak���)��W����Xؤ��$���e�������Qj��P��g`�I8.u6�W��@��yæ�"�&)�T��`3�Z���1�Oѽ����&ְ��Y����'$S���(�K@P��*L]���m�sSn@S+�i���u��k����Ԩ��4�)#7�UW�z^J�T�-<��'�G�{�s����u�X4��=��e$R��Ӽ�{�u�{9j�����A�dC�g���%-Ǟ�jDcg�/6���Z 7"LqáS�=&�>_<l -U_�B!�X���jh�m&�9]�q��� ���Cg�����$h �,����E��,���GRƸ�Ɓ NVrhl�#y���[͜�J�?��_3��R��C?(�@�J��`�Y:h��2]������L���6�F�n��K!l�~�B8�9f7���Ƭ`$���Ӟ�[��Y?Xt*dy�>֟`�esudn�T/�iL�_��]��GSr����������[߷���:JO�ʵ=�b�/�*�����oQDmf�fϬ���v�I�?�^;��l^�bj�����z5��ڪJy���u��v_0��~��Z��'��Tz�yK����R�x`���a9��.��j��#�l���f�R�Bu�1����� � ��,uM���� �-M��yz乼��5ڌBܴ�&3�f�Nc�P��i��x)L������P�2�����!��t$,7�舸���#boC�lؤ�J�mY��[Oe�IAcrmfIOVڋQ���W�2�E��I�ғ�iMU����D̤u�?Z��կH?��O[���&�f{�Pƌ�����M�RA���K���\��5.��i����R`����"zI�њۈs�탅>�%�d(gG-�&���<�Hz�V�3ڄ�#\��P��&5�K����Y�g�~П���N����DTp&Hd5�L(.�r��%k�t�&�u7� �*�H�����H�F�z���e+"r�˩��}���3]OØ�5[�#_9��ϩ��ۑ�m�����g�� �k�j�x艻��63"�cjo�BSO���uQ5|����R��>?��c]����~(,�@���6�oνΐVMmD��"�c�e���%0��P��]7 Ʈ���H��](����������������{!�:#EJ�OiY���>9���p�Yo���Ȳ��ZܴZ�%琞%���s-(�֩&Ɔ���y�{��Vzs�v8�[����rk����Z��V�#�������ً[���ފ�O�%��^ꂝ����MAͲ e��wf�2��p�O\�[�������w���lF��(o$�����SG���?8�V���ݫ��&!�*怳2Ҭՙe?�(bN� G�J���5ϵnj;ߠ`����� K���`��=l��LoB ��k l�-n$�%]dN�E���ȳ0R��;�v�cyDUi�|�"�o�BG(�����M��A���ݎJ�kmcujg>h�<cW��=@�b��p�����ֽ)j窥�ұ?�nͻ�"�`�w��>x!�ܞH��OX�|dU�qໝo����N��J� 9l�W{�u|���;�L_0���� h_��Yr�a艍|�Ī0�6�s�e͵r��2��VF~�T��s����nV��*��Sw����M_on�����U؎�$U������,�D a��L���s9�O���ons��5�om���18�������db��Ѭ P�����1lPq�mW~��v4{�r`����٭X��բ���X1���xX�}��.Ί�E�og��F�;��4+H���k�.��T��d��w>��f�<+R�h�=����#}~��0#��Y-����x��Κ�~Z�DE���_��I��� �BjE1�C����W�R3'������cj]�w��7�>?ɞ��yÉ��:�9Ê�l���E/�9�R��M|<�ƒ�����d��N��1[�@7���]eK7�qCb+3��b�䟘t�R����p ���V�W���G����]�{o�9����n��uX�Y0@%C��olr0���~�e&�r�a�)���K�;|�)�WF����`TK3���� ����V}��||R�k������*���Z�|�Jf��Dfg�O�K[��ux��&Z��ѕ5F�G*�K0jn3��5�}nm�x��h� �^V�>+�6 �q \%|�*e�����IG!�J���|e���gN��6�;��o�XmLo�d�����[ qB��T�-ZU�ɥ��j�<�tP�6&��$\�y/ῒ������Rc
Static task
static1
Behavioral task
behavioral1
Sample
cffcefda3f31a6dbfa4687e4ce143a1efe5a7188d9770ace09409884ce731ca4.exe
Resource
win7-20240708-en
General
-
Target
cffcefda3f31a6dbfa4687e4ce143a1efe5a7188d9770ace09409884ce731ca4.zip
-
Size
2.3MB
-
MD5
3a669b2be397d36249d646419ddc1388
-
SHA1
362280f01e7ac83ca5d207efe2d2ecf9dc89d93c
-
SHA256
180b9f19bc409c711ae040b7d8bd1222abb5298f170df17fcaa6075c11c8fd51
-
SHA512
e552ec5964ab3eddf6af246b5e0d533b804fe4489600705c669aff4edf1a9409dbed45f98388b3feab75b1178407ae72c8ce00b255ba22dcb050cfb85205a168
-
SSDEEP
49152:zOGY3Wr6UFwyj8GdJZmtfVc6e0qGcjB1tXenE5LRRgOruS7jnhGl:em6lwJEA6e0qR1tXH5LXhXE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/cffcefda3f31a6dbfa4687e4ce143a1efe5a7188d9770ace09409884ce731ca4.exe
Files
-
cffcefda3f31a6dbfa4687e4ce143a1efe5a7188d9770ace09409884ce731ca4.zip.zip
Password: infected
-
cffcefda3f31a6dbfa4687e4ce143a1efe5a7188d9770ace09409884ce731ca4.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE