e#$|�#ݤ&å�7h�3鼪A\`�%����1 3Y�,�E��ի�|��^�R� h>k��1nj$���A��m����!#Wa��Z^���C�w�����(!��6#���;7�f�C� ��S���y�%����[��-��|�oO`��6�2�����EV��"T*@���'���x�[�?� ���I���A���)��3�o`�H^v�� b�%�KA/N��Ƿ��{1�W�L$��DŽ�q�ՒYנ�S�~��ݯX���� ��0P(˲����h�w��ƈQ�t��B�a�� }I7sx��қ�.h�6��f��� ��GQQM�zf+)U"��>�g���t�����M+u��l6ɺ���`�'�i��SE��<�H�y�� zH�g9�$%6f�&�̱�a`��x����I�C�'��M�&2\ӏ[�f�%�j��2�0���-�N��,&����w#��lI���<? |Gp��0C��tK�W���<�+�)��6�3n�g��r-��?]������� �6O��@OUj��W|%���Tq������@|�g�)B�x҉��×�W�������w�F���&��9���D��V�B�=�.ʱЎ�h��-E&�ע�T�@�8T:��lJ�?�Y�X�ߜ�2J��8t�״���M�2���X0�6�N:����5���5���x��1��z#V�DW2�W�P4�Jɷ;�a$I�W"^r�'�� ��V���y��L�1�P�ݩ�so�ֳ'���)`���V���Y`��D��~"!��@�<H��|i��C���~�W<\�{n\l����b{�Ye����)�\�oN b)�M�}E�6v�~\x� S)��(Lu�����^� god�hB�'t�]��M�(���HR.�VFu���3��]t���UfQeVTK��5�$��&��Z_e�$ƫX$�M�%��H���%����4y)&��k�����S����>>M���w=J�Ω)X�*�������9D/fd]k�ƈ"�Oy�S��'��%�hߴ[��BǕ6D�@*��?�@�bȊ�J{9d�y)�I��zȰ�N��Af���)���x�������>���Y0Q����)ac(��r'���C_��[ut �B�� ���y�z��kC��GA�֊�'� �(Y�vy�.���ˈ �&�&�09��~J�/�T�ٱ�&��#Q���C�{>v�o$'<W�&�r��q�M\�'}���3�} �q��f7�S���iή�'yq 5���j堑c�;�-��E�j��i�u�^�:���]��C}ؔ�U�;�����ۈ=R��ȏN^�p��v�N��t����gq�9��A��]WX}�F��i���_��sJ����+�.߳�o�����x��<�\�8�9D�,�\u�Y#IEP(�Z#A\�#>��MM������<�Q���:b�nT+n��~����}�@���˫����P�AU��s��#��=\�"����iУK��b�`���O���KD�o�3q�[\^�Ǝ�}z��?p{o�}��@�,��-8�$F� y9<v��\wHv�Dp� �{�L==��������p��N�?�d8�ݜ�L�½l��K,���a���7#�B�#PJǵ���Bu�U�B�so<�ڎ5I|L27��;H�t�?��A�t���Z`�cLO�;�$�?9�~WO� f��*{P��`�Y�E����0�7��R ����}�ѷX($tExM6�D %!2�&#�ô� J�^U��s��kv�K�����w�A�L ����ƜZ��z��ڃa{"���$���.P�-x�S���P���;7����ҎS�q�I/Ðq�z��7M��@3�V�R��/Z7B��۾i'�JX�:|�X�]�M�y \Kz�BI�Z �n���-��� ��"��ЦQ w�`\���r��oQ��~���l���(�*��8�pX(%��Ay�)O�7��`� �Fcn�=b�ѡ>��:i�[��J��&������Ӥ쇤�����{� f���Zk���e���z $��4��b^jC����s�9AM��f9%d�����1/Yxc�i3W�3j@�����_�B����I�O3����'����?Y=o�ӄs���[#p���"7�;)N"��t�%t�-H�l�&�e�Γ�m[j/%�!B���X�1 ��q'�E��v��K�Xq�F����Y�\R�#k&[�J�1a�*��Z�#=���x��l�w��gB���u�f�m�z-�6�Ӳ��k�Ƿ�&�o�|��B$��B��?s�A�b=��Q�f�(�U8P�tĦcJ�>�-xb]1��H���|v��˛<WؿT�*R?~VE0a�~�E���箇���N �aƼ�������Qa�۹쿀�����--b�R嬝�RT�\iC��E��O��E; ��z���@g� @�'�@����s�s(���b���7�����S#�H!r�DɅڎ٪���35/�bm=U����i�u^������h|*��<k��`c����^So�g�O[.����+�f��<���D����+�U�p�Y�A����QR�t�bNJ"w�V�p\",]��j'�M,,��y4~�<��#ID� �U]�;j^ �^��a�"���.�fV��d��m:����b3�z��K�!�?��y-4���s'*�2����OY���� *�H�{�h���A��*饛7�3�7Zb�CZS���zYbY�.c2�^D��$���i`��Y�Z{����UK���Z[2r�ҭ��;��(�����Y3�Bai����BK�� }��g�Z�\��Y\�P�å�V�źa߁�5�1a|G�F6�멇�$E�";�e�����N���J.�I��w�C�+S��Y ̒t��n�w;*ნ#��o ,i�5��q�$������cS��q|�1� ���: �m�&��R���JJ_�����W&���ϡ����j!\cW��,�hG��<�,H���Ů�Y��mZ/�IiY@��zO���k.6��ܡ'&J���k[r�-E �:�@����j}D�_?���s��L������v囹�F���?���4�&$�������<����1�+7�df�B �Vt�Lu$\L�G����h$QG? yw��1�c.�G������t���s&5��R���-X�m�T���/Bڂ���y�Q���?����q[����`��8�rq]�
Static task
static1
Behavioral task
behavioral1
Sample
8bb7ce7b157a6282e22cbdb19616fff926cd387427f69b276dfe30a58c4ee874.exe
Resource
win7-20240705-en
General
-
Target
3d4f3739b75e2acac9201faac209a9cc42808629c6af538791e362228e384d1b
-
Size
2.5MB
-
MD5
13cebd9a31e884d95066cccda4f7805f
-
SHA1
764e54450a310028cd1f9751df546449cd50cace
-
SHA256
3d4f3739b75e2acac9201faac209a9cc42808629c6af538791e362228e384d1b
-
SHA512
5d9c33d1dfb2b85ea78e241330c0d325fe47020f5e2034e1f364c14076c4ba33f798fcac7edc25e9b556bd4fa3d08b17a5825a3deff1938c53e71d2a4df97c00
-
SSDEEP
49152:yb7x1CoRUVjsRVL6hnnxwXnkmjzr14/L0hPUJMiPWfRMZ00HLSIQ:0zkeVLGx0kmnraIhPgMMWJw0mLa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8bb7ce7b157a6282e22cbdb19616fff926cd387427f69b276dfe30a58c4ee874.exe
Files
-
3d4f3739b75e2acac9201faac209a9cc42808629c6af538791e362228e384d1b.zip
Password: infected
-
8bb7ce7b157a6282e22cbdb19616fff926cd387427f69b276dfe30a58c4ee874.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 131KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE