|y��.����{��]��2��������w�&࡙9w��t�28#j�!�G&/��;跨�b��&������܅y:&������^Iz!@�m�FI�5`K�-��wϜ���v�X6VҠ��4���q(Hq��씹���j�^���PR�`i;4�(y�� E�Ah�R���oR�R"N�[��>����'�]��a:�0�G�9����tX"y�бQ��W�}�-m'�$�����-\��g�h>�+��s\�C����M0r U��a[�-k�z����E����n� �e��"0Sз�f���������X �E�r���� '��]�k֒7l���S^o�K`��̨Y%!%ގ���cA���B����f :�o3][�:�U�_O�~!��|����֨�o���:PDW4]M,ݼU�h�eԐ�=ö�%��&1 R�Z���c�]-�y���ˎ���۰2�{�Q{K��֞C[~y~jP�YF�薴3�2z���y�ӿle7�*�Q����f�!��V��!1�@��K��dwy��J����N:����~ZrXV�jC���������+`���H)�a�"�g���W�����2d���B�������*��L1%v�4��������ʼn��|�M)�����(\�S1�{���A�7|�S+�µ��Z@�d2'ȸ�f�*ԇ2ҍ���� �������gH�<������Y��zԑ��,������l�� ����� oD�KY�r�^�~�Z@+��¦�(�~]���<���}5�.�`k��t���Kwb��g]A� M����y�����$6G�1̲C��MA�X��|=������N�S=���蘶M��ٯ�7�����A�x�i��Q,t�M�P�wi�el)����@�F{�z��Φm��܌UTHZ1� �+|����H�]��+��ꁐ����0���I��=U�1�Řs;�xz��G���=�D�[v�E6����b����9�·�3`�e��I�#���iY/�}}^���i�X?����6C�⏚&� �ن�g[�]4�-=���p2귫�'��La����W�M���$�ϵ31�k(W�81��08u6]q�[����R��e��WN���O�{~]����R�Ż��e��1|b�W��+�ޠ�K���< D� ްC�g�;!,��Z�*����y���x�fl��K �^Z'ӵYsu��$�z��ϦC���fX�֟�MtXŃ=�(��_u�;����LG>����Y��I,su�7�b �;%k���n��G������w���� �8ѺBR�?��fT]up!�RLk5��mo�1ʄ6M�V�n��k8+z�����D,�[�O;J��������%�Ҁ�:D�h�v���`�8����އ�aq*KJ��䚟#�b'ʥeX�4���x�vO�_��p���47�T��@�XQY7'c3��?,7��= wf�8�j���B��A��_?T�،#p��LGk-ߠ��!�����)��&g1� 3%V��0c���F����L��"/��DD������`֪��\G��"$��O𘏟֝m�m�1�H�$�A�����S�P��T����%2+�ע���z�J>T4��_��/ø���c�Mj�g˾�CG&��i���^x�P�DE'fH�"��v,��O@U����3�u�"b]��[I��e����A��1�ϟh%s���.\1�,��d���]�fO��+?�~ۡy�Y���TmMQ����|_�R��,x�#+���d�#�����f���'�a�zjf����F=m�_}��R������|tK@�S�%�(*�0ґ�.A�k`^�Q�dN�`@���4#ʊfP9����8��x���K�([��Ѫ F&��]:�sy�:��nsp_�\��,'��N�����k�*�_����b�ЖF�S��)ؾ�%C:���(e���͠m��`F���.�����������1�/t~�WG����H�&�Ĩ2�Ķ�G^×��k-�zKS�ze��En��ΑB�9��rp!�W�s�[k?x̢ۗ���J�(�XE�gق�C����-��b�(�����>_uC �UO�Z�%����Š�� e(�1%�S]�θ�<XqNc����3�� �F1�Kv-��[PNj�8d�`a��������c�s���K�'2>��Nf��Y^��z���לB���,[�g?�����C�4��>��������?��疿��9�h�d���xE{g�z�p�oU�;F��SH��ؼ�uI_lM���������Ҝ�����\e�R��H_)-�����t���ky������XL=�Xꪎ\��zfx�"Ƙqx������d�LS��i��a��!H6�݀}�o�����(�-������� z����V��[S��!��¹� �v������U��E�����7����>���'�(9��b���/ݚ����/�g�2e�R,2�wo a#5 ��Y��IL�,������-�F��-u�� ��e�p���a�p���u����- 7A�hq�b�DLC����U[A!!ߴ����8`�A�!S����[���V٥B�`�H Ҋ��O��-���V��One�<�0��S��1<�7kಷ��橱������0�ʅ�(VC�+�:_緅��V�B�q �F�]��� ��y�뛨�T���Gm�n�L�}��8kI���b�CY1��E�L6�H��lCLU��3����&`��#�F�8�2�����8��B8^8�ȁ}w�n���<�+g���'��J�nY��ʰ��]J�@�=}�̿�����iG��6�z�� 8�V����T�RJ��Po�iU8$\G�����\�V��1�������.J���B�pڏR̗�=�W�m�D����ỹ�~���<�k��ݲ��� K��\�� X���M�n�}��Io��F-);s��-jq)74ࡰ�O�BG�X�&��L�Y��@��RX7HFgz�zPZ�)����i¾��̗^T���崋|�Sq3�Cݭ�y��@3��ĕw��ؗvS��S��g�Dڐ)�)+�$&LJ�{{��Z��qE1���B�!slѳS7I�2b�U�����t@�+! � c�*�@�%v�n���(�K��k�K��]�S���-ҥ�݅ %� ���3��~E���t��w$!�]� �W�Z\�3A'.+%�WE�V���M�Z�n����Bd���̡YF�@sL�UѶ�b�mDv� ���Y�:|p�#!�^VE��@���vƺ�-3{����,_S��j�GC+6W�t�^0�ɔ��ʾ�t��r�q҂{R�þ����<�O8�Z ���q�2gm��_D�I˱�����gۓ-���t�5��2����g�$�kL�� �=�`�Q!L�e_5W�)ԅ�I�W��>��E�Y'.и���8�|L*l�Vմ_Y�����d��/��X��0#xPb��:����ލn�����T�e[ӠWH��#�b.K�t�2L�,&\�h��{�'h���p#���/C��,�Fj)�nha��}�)1X��qly�\������Z1&�T�@6�\��cboA��8��wp{d�H�x���u1���K3�;2��X�g_�;�������%ۦ.����U����'�5�Ղ���hL��"^� ���\������/��r?���X�3�H��Q�K]�������O�(Ҫ�)M� +Ta��Q@)=���Ho���QCϔ���/�qژ�q��R����H�'| �k���kI�l�qN��
Static task
static1
Behavioral task
behavioral1
Sample
09d23a61b8e7c98a39571d5bfa827b72c6563baf88d76da1b14fae01644d360c.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
09d23a61b8e7c98a39571d5bfa827b72c6563baf88d76da1b14fae01644d360c.exe
Resource
win10v2004-20240730-en
General
-
Target
09d23a61b8e7c98a39571d5bfa827b72c6563baf88d76da1b14fae01644d360c
-
Size
10.5MB
-
MD5
d3b42fd7b029d08c63382d3b85851bdf
-
SHA1
0c37bcc19eb3936fcd39315734b7e3fc2b23fef3
-
SHA256
09d23a61b8e7c98a39571d5bfa827b72c6563baf88d76da1b14fae01644d360c
-
SHA512
214d581945b3ad24ef5dd1e1e6b0a49f476588df50a0bbc5678cbcec3858c079820be8d6f3277f5d249ec1bdb3676faec281d95cb56b165968a2c8b2c38e115b
-
SSDEEP
196608:cMh3c5ExOqoBFplkJYTagsrnL2uE4Wn6eplg3fR7+Z1kWDqqjZ8pA+8:cMh3ckroBFfkJYTa9rngbvgvo3xmi6pt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09d23a61b8e7c98a39571d5bfa827b72c6563baf88d76da1b14fae01644d360c
Files
-
09d23a61b8e7c98a39571d5bfa827b72c6563baf88d76da1b14fae01644d360c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
Sections
Size: 1.1MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 49KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 197KB - Virtual size: 676KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 184KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 16.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4.7MB - Virtual size: 4.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE