�v<��Ƚf�4g����lf�c�-��>���#��_fw"���Ұ�``G�z����C.����tD�ဧL�vKd\���j��R ��'��� wt"+g 8hM�������+��l�2���� �S����%G���X�-U ���č�:��1�{� HA@���d�f��4)U|�|g�._��L�a�ݎ�#�Y�=���h��T^z<�x�[�����q���u��\h�_�(pi�|6��������*9i<u�p���c�ygL%y�Y/�9ׅ�ѠQQ!�<1v�|&�����˘]_��@6,�߮\U_�4]$1x-��Z�_�����P���V��08:OFn���P�!�\â�ؒ�hY#6�E�%�8� W,����!-�m�%U lT��� d���ո�}��MVF�q"4i����,SOو�\�x�+J�i�-��+�3�a��/��}�W����������!��N�a��n�����}Ê�0��/��_ۗ�2ܦ���M����#B�E����Z �᧲A%���Q�io�pSZ�]h�V�x���kgL�W{M��xX*�2-#Y� �%��+I'�4#n���]��h%�W@^ve����Cj�TSo�cq�#�]+4ʳ�nM�7�X$K[�����s����j�h�Qo���(�rMh�ek���`���d��4UP��J �}m��k�2Y�=5u�>���\�N~���hs��ſ����YF��s3��0k�^(8�"N.'00�7��N<:&N7y���k� 6�,'�<�\2����,P�ݷr���X���>�;�:����kL4���ܩ�C�!&Й������1z_��v��;Z�� W�m��B� �S�g;�uA5��X@F#����]`J��*bsF�kS�b��&��Sӧ��p]U�^��A��Q���\>�c�B[�,�嵌\Q4Ag�F�<x���맇l~p�;k#�}4%a�$/���3�+/�IҮ�؊P�_���?�PC[Ϧ�m"���>F>Ǿ��kuv�Ǘ�ᄡ��XӜ�]�h��� BĚ^҅%��1`��ʢ���ʹσ@l(���#�<+���Ft�W��Դ�y'��a��EC�O�����o�N� �g�7*p`�r�>�p�|�QE���Ч�~�*�?8b�Ս��^ �=�l<5�/.���>�����k�w�Y$+�I�k�zO�ct%�TW�M���P�V�PXo-x�(ۓ���� zwHO��G��ϥJ��;'K��8H-s�Us��{)-CͼG��,���L^?�|W�9g�غ�*��%r0MQ���,W���ҩ�0��6vy��[,7*���tcF��V��2=�3�/R7���%��T�,��댩i��=&��M��{t�w����1.�[���E�"ʄ[��Odϲ�VH_�ɔ����e�ɒxB��v��_F�ڐV�n��_�#Q<D�JE���r&#y��kM�h�8�C��c���Rr3o���h�)m�WO����fj�҇��ڙ�Ҽ�@夬�F��V�y���-�<���Z�ez$���:�"�͒=��tt�e�A�s8����P� M�"�."�by��`��䒒�߅v���uK�"�-�־IFI��JӮQ陛,H`��k��N��_X��lbSť�ڪ��e0tS�-E�������)��՛��o� ��?�$�Z'�J6�hL:f�p��~0,�ʴ�دNv����:��3�̫rj:��:݊$d��Lh{�5U%g����,�Q�0x�����g]��uy��y�<�N��Q���J�����B�)g�x�G�U��{��r�����u������T|O���:�Zqs�<�v�k:?�N��E�Zto���eƹ�oD����$I�q0�}���&��t �L���L� �>� ©�~l:���bntEI�şcx��Qo_hoB���AT�����Ir����D�rbޟP�ٳd���K~�_ֿ{��~����AǺ���D�rP��A_(�#��6"�`����r.��O�Ӌ#�c= =��uG��DO{(�1�z�(��� �h{>����ə;��������ߡ� F����tsƿ�=g-���.�x��g���<P��tw���A��t:����v ��|�:�DŽ�F�O����}�)����� ?yKij� Ѽ������F�'"�YnF��⓫�N�a��v��* |^�z`��L���1���y>�˗�ν;z��_�!�L`|�A��"�$zX�V���JV��~�!���.�l�HІ��C�%h�+�<�F�I/��͢�� �x`�{���+��{��6�<�h�(7�����V�5\�h٩1v���iܧ �>U�"��M�w_B�����#n:�w=T>xeE��A����{�q��u"�%�e0�MD��\V��F~-�f�[�n٠���Lj-��qղ��q/����ζ�q�%?� (I��0n<���X(Ϲ��ƪ�Â�������NUq{�q��1��EQ/����l�����-�Z�������^Ԫ��ܘ�^�;W��n�it����so��\����V����z�1 {Q���r��%���XG=����� �7�r2GjM ��==(��`a=�_b��`G�������9>��yh`Ѯ���ϯ�IgR&��gu=�p/�no�ˆ�DB�[��pIh ��y��9B>�n�>$�L�Ћ �H�ȗ�Ig�J�@ ���:A,T\F�q;��D�Ɩޤ{�mh�t��Iw[�(�t��6k�¨�������)nI�[��S���u�!z��j�ӽ#~�^˯����n�c nI�� �U����ً6��h���\&]�]�wҽи���J��^A �a4���D��@>e��Tכ`���e���u���g�����Kq��M�R�o/��n �1q�|/��?�{�z��5oXET�$�e�m�7��lsb�g�x�<�A6G���q�G�;���z�/(�^�9~�����WF� @�����"��?�=ZV�"�wh�w֪�e�.Sԟ�dt�|~,�:�]����L�O�Q��]lJ"�ϻg�9ǎע�����t�N^²";3=5�$����e;��S���^d�9����ITE"ͺ���g)�����[����KhKV-��S� D7������%�����Q*�41>��j�6q�6(��HȘ���������˴���Ï*
Static task
static1
Behavioral task
behavioral1
Sample
cbd1ec5e26a7459682d5d6d70684f68f26219f94ed39df41686c8eebe69ca28f.exe
Resource
win7-20240708-en
General
-
Target
cbd1ec5e26a7459682d5d6d70684f68f26219f94ed39df41686c8eebe69ca28f
-
Size
2.5MB
-
MD5
f777335e027ac002bd2d77dfd0b5af09
-
SHA1
0fadf0405ff1bb0362955a9197be67fb58ace47f
-
SHA256
cbd1ec5e26a7459682d5d6d70684f68f26219f94ed39df41686c8eebe69ca28f
-
SHA512
4553e90db118eb9178b34d31a1df0ebe34051490abc914e417fd9d846f2ddc72bab34828ef73d23d9560bcf9de233004458a9b35b8f38e6bf0488b4084361b44
-
SSDEEP
49152:5FaaojbZc/5+6Rccg740n2+/kZbbcmOqnXu3NYc4JTskgLWI:5FaaWbicc44hwqOqXu3F6fQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cbd1ec5e26a7459682d5d6d70684f68f26219f94ed39df41686c8eebe69ca28f
Files
-
cbd1ec5e26a7459682d5d6d70684f68f26219f94ed39df41686c8eebe69ca28f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 131KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE