;�w�����A0�_M:M{�����K:;��վ�5�H=���=,��%�`O��Ta��d(�h-�F�.j�KG>�d$��M���*_���>:Ԓ���kc��v;�"��k^���<��q�&�֓�9������J������~�Ι�N7 1��R՜t�6y�D�B\&���+y���ߖ}��� ���x ��QX�`{����z�/��ıK�[Ys�[�W�4�u�E|�z_0���M���z�/2�Cb�+��XrH����Rߎ�~N�\����!E6�w˹`��!@���*־���$����y�V:S���u�z��������ČN����^˅3���Rܛ���8m0Sm)I�2�gRE(J̚�ғ|t�ڪˇQ�����"��\�l^!C-��y��v6}� �q47&�$�,���I�[b���s��p���M9ȇ�v��.��Ӛscx+RrW�B���~����Q�w���()NTBw��#�&n�{�����yzL�6S ��aѡ��w!��% Qya������%�I̓�|b�.�ӈ��$!���/�l���������St�}�j�w��5���V�[S��%�Dp�E�Rg�˥,L/�ױs:�Z$m�J��P,�/oI~��UZ�"X��|��� v���1�z�Ez�9�['8�h{7省2z�vbÀ6��} �+2�8�ry C�fR�,knKNӑX#|� �p�/֮D�z.�J{�yz�6c#�fÇP'W�3a�6 [�O�"��e�Ԓu��٪����2Ȳl���g�>ݖD��4����������Q��� A��%҉�J�Yz�����������5�ڻ�w�84'�|�R�?��1�b�;���>r�X��!u��ɢ�[ħ���CU�_�|U,$�4��R�X�_H��ܱ�YbC�=����JV�6�7R�3��C��^��4a��N���T�g���_�RB�,q� ������� ���-��d��%-�uc�ٞiA����f�*��y!^ތyX���o�w�;P>�����΅QF�Z���/����M��\E$�lxk�}��>*5��7>�W^h,�=By���;X��`J�s�c'��z`�dk��R��M�p{��8N���L�媗.��������R�rI�&�r �����I����x\�1k����pیP����#hsِ��w�k�W� ��:c��E>�]�c��.�ù��� \�<c2��]ξ�~ �w���D@�����y:����� ��A��5�,dy g������)�w��@D�����V�6�䉤�%x���� $1�qۦe�/��nS4��x�eD�8��u�S��Nc9��n2�����|W�^S�I>ـ�ہ�$�?�_NX�ǃK���_�������[����8���V+����ǼR(�d0�O�m�W �8ڌgx�,;0D<�H�N|�ڈP?�<�t3`���YҖ�쒯�wI,�����?��e�!w4��t�'�����P�$�Z� �n$�r�m �ǎ�9B�j�[�V'�r������̹ڣZ�)�N�%��v!�f�UOq���h��V�7]|pqJ1&��#e����6L.1�LBJw|��.�������?�/���}��[� �% �RF��E�QM8��"�& �j@���(5~��qio��CHkjZJKS��:�_�L�Eck3��%�fb��;s���zy�;m*7��(f�vCW�ǽ��|!X�O����M �e��(��N�J����v)< �#�p'�]���h&^ՙ \�������#�+�fO�S1�h�!�h�����ףJ;Z�����a�%�)���P��R�L*�0��(U,���H��](�����B2eNe2W� �m�$@����+j{�����jeD#�cT672�Å���rB��e���kl�B�*��Z��}���G��z��8�!����P������b��N�Nq�M�L��&����^����d��i�M��5���=-����:���c��VJv��.�� �D����HDҩ�h�2x[c��l���u�F̭�:������ D���=#����2tM�v�Pƛ�����#մ�#�g<y!r�@���L�$z��Fs�b>����fZ� ���l˷�J�\�q�/���{n�����5v���^��]����|Y� �K�n^7�������DVj�즓mqޯn�-����X]����t�����&�O�7��&�谨�l�n����p'�^���;4���Kh�F]*����%�&����t�{y��}=��Iҗ1 ���Z��}������㦔k9J<n�mJJ߂��oѼ��rჀ�0S�Q��a���4�� S�#��V�5E�zz���a>��]�1�({E���~'��bcF�h�{F�� v��C�5�,%j���v�ceL3O/��0V���.Ssw�dȎj��E�=������]fcז��)�`���<c�� s��r��\%la�nD�� ���m��O�����d!db����f����Y>90�+�hyȀ�ʢaeg8������X���7�v#OL>M�^�`�f��ѩE�|�G(;��b)W�� M�!��_^Z��^·Zgt��gz���Æ�F 5���Ȋ��I&����� ��g����`�;�� �����c(T��������e �B|��%���p���z�C�ɨ��Pͨ��sr��=`�b*�ߞN����3)�>�tw�2y�s]@=Mqc�M��oFI8���0�����c�)�!��(��Ĩ��_�ax����������-�;Z��I�b��B��K첟ԯ�*4�D�����"�ȘB�|h0�zƖ�ޅ��Z��R�)����}1��[�QP���;���^���8�((#�9^��4���4I��dyc�aU���!!���$��bB�{����NЃ��F���x~SDk�{�Oe�Ȣ��>����5�A%�(��ހ�������vU���;Æ���-� �o�Zd [.�I�$ �O�[�0��~]#ȆvE�S-������ �H0~��b����>�ھ&7hT�=G��B�����ml�ƻ2-8h�Y��j��%g\���C��%L�'S~�A�Bx_�3�M��';�OFn�G����D-���4��+(����������pz�Q��C�����d�QQws�sS4��`�g���R���~�q��㗋l��ie7�����4����#����pp���B1dhH������B�͎�ɶ;lJ�5�7�z�<}��V��#z����3f��ˮst+�?�E� ߸8XF�D���k����A�&}ܟ��)���$�l�Zxh��X�Ͽk?���.�aD�^��I��B���)��!���)F��TYRK���D��M��+}l��n�דwYSl*����;ڏ���C�u��(���s�g�ee _�L��T{�DC���
Static task
static1
Behavioral task
behavioral1
Sample
b14eb9c7350333f0b44a92d5a3144fa5c553b66d234ad04a7a106fbeb618ce04.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b14eb9c7350333f0b44a92d5a3144fa5c553b66d234ad04a7a106fbeb618ce04.exe
Resource
win10-20240404-en
General
-
Target
b14eb9c7350333f0b44a92d5a3144fa5c553b66d234ad04a7a106fbeb618ce04
-
Size
3.1MB
-
MD5
cbe02519b351e0728b89c9b898722baf
-
SHA1
4d296583cccc53c1b52b18df3e71ee625f26ce4f
-
SHA256
b14eb9c7350333f0b44a92d5a3144fa5c553b66d234ad04a7a106fbeb618ce04
-
SHA512
3edc72e07d9a65af3d8f7111afbf1b8895efd4afa99a893e8d4bf3a7339057181cee9f154d53efa7b6f1c7edc7c1afeb01eea47eb51c5fc97c4d03b8fe701bd3
-
SSDEEP
98304:xiVV5/R6GbiFVbs+64adA+vsyW/DPkY7BxKs:sVx9biF164/jkYlE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b14eb9c7350333f0b44a92d5a3144fa5c553b66d234ad04a7a106fbeb618ce04
Files
-
b14eb9c7350333f0b44a92d5a3144fa5c553b66d234ad04a7a106fbeb618ce04.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE