_i+��K��i�������5���6�CF��5���u����K*��=ɒ���Z�,:W�<B�����,��k�X%z�.1x��� Ҡ~���ڭ��oV�{>�ϵ�Y/�^TΠ� ��2�5�`��|�)����}Vj?如cڦ?lЌ=,�}S@�r�ǎ���h������؆|�>E�vwuqR�+R��3����c����<��Қ�X�Q.����Kx\J�-�F�iа�������Xn�,��v!�z�= %"\���ʻl�[��`� �(�O�[�7��$%����,oS�`���9����؇^\.�V�r�Q��������C�4K%Y+TC�%�˥��>8G��2�Xo �=��*��Y�tP�aD��~~G!6�g�}q�w���k��\p��o ,�`���W+ﱷ��5�81&$�vׅ��ոCj��rf���3�B���������3\��a�]Bk�DWPf.���϶�����pS�t����?k������>�.��?���:8����8n�H���)cAbV��4Z�t/x~R��b���Z�hSZ$sX`���6��� =���T�ۉ������ݨ�V#����N��h)��<*��.���{������e#�5�tsss� C�c��o���I�*��_�k��(����c�3�u�<��6���3���"�l �@�������4��2y|P�)����Q�����ksj��^̠�/��P y�2{Q):�qҒb���)�<��;�����Ē+E��Z���A� �+|i�����.�)}�t����$�Ҷ��N�Z����&]�B4�5=d5��tM<`�E��l��qt34�Y�-"0�:�1D��W�b5��Q���p�xN�0~��9�9���B|���(dO�Oy�H7���z�/k�Ѻ������#B�1��<P�0yt��'g������Q)�W��fR���鰏-�mh���>���(c��߉ ��o,���US�]�/�>l+O��M�B���Ng�Y���h�r��Zw���(z��eFb�?�7�O�Ύw0M�?�5���f�s�n:"�_JC�c�Ԏ0q�ǵ���vDW��qyF5>����ޙO����:YJo�_��&cQ~�{����wzhn�����6�k�����|U��Sr��2�d~�p!_����|B��?�R�^ϸ�]�M~_�|��Tf0q�L�Py�u(�&��,��>|�c-�C��N�_F�����f�9:h���RW���pC��ak4@4z 2�^��;����o=�{��.m=�D��(r�]?����~�E��7����r`2m8j��(���k"�v�8�ۂ�m�Cp����"}NM�-s�1��x~�.g�r��y��a�tk7�j)���@�x�b��4��٣�hm*�'���=ư��')�)=U24��eփK��ژ b_�)g| /�mk����X��CQO�T�Y-�Ԉ�!7�X����4�!�j�.���zv~��zլ�P�3 ��0�5���hE8�����,�W\+� �E�0u��,z=f>; ޢ�x�i�5�6�H촧���j��.�[^��ʓ�$}=���Q;�w�8g�0m]��]-�;���yp��a!h�d���ޛ:UZZ1�/��#���G�9Nݗ �+@����N�at���sk(ç�_h��A��A4���lTy�< ������J?�ͬ�B$2Z/jg�h�m�z�[$�̔=���[�*��IWr/�G�h� (�_�ZQ@���f� �_'i^(�e�;m�����[Um�vpj�/��3��.?�3u�R����#����I���>d7н�\��<A�U��x"�KN����&�L��Jĸ���m8���*N8�?�Q���e���[B^�D�{�����lq���(0�M-�/�`ЊC(`*�#E�u�\)����܂0����-��q,�ڛ�wD�ِ�=q�/7 �ԥ"w��mk��F��$�M��F�6ZȬP3��2E�"L�Y$�-�����OYV�z���&U( ��15������Z��){�H����}<-�+zh�8sJ�/.9��Λ"�u�&Naz^���@iV�|Q>��!�0S��;��@w�g������$+�F�O�D�J@��zf�X�����I�uxt�?�3�1u���~�̋tL��8bef�� �nϑ�wx��=$���q� ����l�Ƞ���HP�������A�" �+6KI�L4�L����B���X��ƕc�����V�;�a$ǘ#�Zm�\^U��Q�"Rm-������� z���q�P�=���y�I�0��~!+���r,�vxhR�]�iM�fdVk�?h[??��<tC�"GJ����}��>x�\�/���Z�T���3�F�С0��Tr�Es� ����ǝ4�����n� ;iE��U����7�05�SN88�z�b:6_�S�� �eP�)`�'��n�la��H�Z��؟��na�˵�]���e�\�qx�1F<�W ��� 4elq�^a ��;z���}�y��'�#�ۏ�����DF��;�s�y� 3�Z�(�1M�#3�N�'�7��۠3���C����f������� �]���Sr�}�>�ArY W�j<?{��r��tl�g��$ĩW� �+xTB��n��y���&�כd5��h(m�\%��q����_��PX2ӟ�/~���Y�no��w�奜*�Jp\�M ����� ��ѫl?��I�~ŏ8)���o'[���~[�zacE(��Zy%�tN�8������ͪYq�(�D�<��y� ���ũ ĕTU!�h�nW��Krop�ړ�@�,�^���Jtc��B&��9����Up)�+�,,i��79� �b�&.�3��=�ca|�}�\X�}h�$`㞄r�0sGu��e�'�P>.�L&Ц#7���:nq�^\�*���;�'O�k;k��тJ-WZ��)������.��e�2��"�!��j�d����Ri�d(�:�i�2�o,¼���y)�l~F>��z����e�Z_oG����r';:�� F��g����K����?|EJ�3����#�9Ćݤ��x���&0��\a�q��u�s�>�t��w�GhDz좺�����2�f���ލ�}��j{_���F| ?,54g�F�pdi��FO�s�d�ݽ�B��P :R�Q���|c �˂tL/,:_"�6�K�'�M}�X���F5^��h�`X�X��uzV��� T�g�n�p@�
Static task
static1
Behavioral task
behavioral1
Sample
fbb16eb62129b5ea166656b982611a4bdbaa76cf37eed8ff8bac7f55b8812e08.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
fbb16eb62129b5ea166656b982611a4bdbaa76cf37eed8ff8bac7f55b8812e08.exe
Resource
win11-20240802-en
General
-
Target
fbb16eb62129b5ea166656b982611a4bdbaa76cf37eed8ff8bac7f55b8812e08
-
Size
3.1MB
-
MD5
c371c7f9599c40d24b52622e46ab8d1c
-
SHA1
66de895b72b8ec1626b114a10a42fc7d6f919067
-
SHA256
fbb16eb62129b5ea166656b982611a4bdbaa76cf37eed8ff8bac7f55b8812e08
-
SHA512
c1b6795163ef6e42d305dbf328cb5e367208cd2e1516e958fc5d9216567e91decdb4bea50bf1b30f09af62ba7b57af667a9dcb3da3cdd5bd76a025e6c5de0bc8
-
SSDEEP
49152:PCjUdt/qCWrOkz/bDgQGpp0uaqPpzPk3vSUxNLYtHyvUtBRQh+cIt9/CmqCWZipf:6odozDgOuVAl0ZrtvmFE/tq3qf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbb16eb62129b5ea166656b982611a4bdbaa76cf37eed8ff8bac7f55b8812e08
Files
-
fbb16eb62129b5ea166656b982611a4bdbaa76cf37eed8ff8bac7f55b8812e08.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE