�ɔN�^(X�<%`����^�"���� ��9M��4�L��M��bT`Z|��zLv�Z@���@A�f�F�g����~�������M�(���5��Gt ?� ��,�nY���>\��j{5K�^� �� �G�=�ZS=5�6)���-�MmF?��c&�&�R(���Ouk��������I�ŷ�@�?�����@k��T!)�����2{k�T��ָ~��2�W�@�Kׇ�N<~�w����-��X�f";�����_(!7��O���R��|ݻ['wO��~J���H�q �w�c!I�$�r\A�A�\�&�6��n��T�mNS?� 6(N< �}�;R��2pS�x�e&z�\�x�/�)��}���#�cC�yR�D��@Ӛ0���V �.=��`�x�b�orz�֘2<�WJ��8��� �1��r��h�1��1�p��������S�Ȝ��~���JO�4.%�6�QiQ���W���A5��u���z�s��z�I�8th+��߬����喒���^.'�!P-D\ �Y���%�z`x�ĖnVu���8�z����?��,� M護G�Z�y��0�F.*%��~#$�z�p�$��L�N�R1����v�?h����) �_��/�yU�5��}jB��g�}�����/�' 1ŅAW�]3�QM~���t`�[�L@� �E4�t���N�����4M� �#�i���l������йC �������ʂ�[{�k!<w��4�5u:��lw�����|��T!���>[��ߵ���j7E4/7�: �������ٹ5�>���\���(�{g��B���4D�2�Jy���ß�HY�.�.�_�"�\�.W�֫]ܪ�|� ����a�#�=| pJ]�<E9��/e�u�hI� ��0'�ս�����"��k������Y��T�#=\���kQ��R�(|�9��c&ԫb*#�&����$"�{��v��%{�m������12J��/K�y}�_.���T�<�}q[�*�0�Cj�R����!�%˨$��Z�q��n� ����3��/��yf�Y��0xc�!�?Yb^�!N�����I��R�)��Tr�������X�Hk^xf����Gp�I����0p$��\���h̫�ˏh#�#�=��X�כD����$��QG����G)�C�]=�G7(��a���~�MvПb�I�-ɒ�0I���pJ�T�tO�Pgs�t��|�!8��&w�@O��ڜ8I�� ����̓��k�֔9⤘�ҏ���Ml�����eR5�2.�����-E��̅&zq#~���=���:B�NJ}ڗ�>1t,D��]ޗ���=iO^�#9 �o7P~�{ݷH��q�2��oأ�3V��y3��h����(��3q���_gC���9U~2����2�Y�+U�kS*�7L�͖�e�ϻ�M�g�J��F��U�oiL�t�$W����_��ѽ �H%4���@M�"�"���<���1[{i�������Ӟ�>.�$2�E�ώ�<Z�\!9�����"�Y���L�K_иdӯ(xJ}��p\�)��Ȝ~oM2�F������kerJe[:�v1y�F�j��F��{�b�+���hӂDQ`��� �z�!�q��7?�������ZՄ�n1\�NM"l77��4����㻕��q�A��)��,�S ����ܳ>����O2���(Έl�p���ʾ7]�9�,!4�}�Rǵ�#s{8/�=*��3ݫҰ3�ׄ<"�;a�:���6��I4�������`Y����t�{�i�,6D��c|�_'��G }�}�K�e?��5�_��P-�ϸ�$���ہZ�x����0�v���+꾇ج����q���>��`G7H�n�f�S-tkqT�?И�nǩ�1zQ-m4G��a���Ic��:��[1���:�,k]��Y�b(�F�d��7^h��P�ܔ#(�f�l��pq��1��vO$p�>�)@�����?�Ӧ������]�x�V���+N��Q��י�|�ɢ�� ]s��b����䀞4�3��ˌp+h����'��_.�~�����xIL�(�S�2O��'$;w����� 8g�}��kf*K�����b"�&xƭQ "'\��'}=��VBFj�Xv4����Ew���B����"��t��WkC�e0jg�Z����O5]���w8S�#�������[w��YIf��{�>?���C�{c|2�!7��m�qbw�8T�[�(h,��$��AuƩ|E����>�^�}۳76t���S �Kp1�D���`y��q�ob�c�;��{At������m���<ݎ P�I� ������`�}ؼ�d=�����vd��V�{H��Tf�rzN�VPSݤ�Sm(�����*������!�~N�S�G3I���E�F�!W�S+��� �e��t7��Ѳ�]Xl�շ��Ž�TM&�����n���_R� �ڈ�=�[I6$^�`��6N+v�bh��� ר'�(��u��J��Å�#?�נ���-p�4,��e��`�U���I ����I��c>ZG��ϸM�Zm�d���6 �p����*���a�Y�.<��0R�ڟ�?����;�E�Z�P{M���T��q��*�����Z�w��o1�iQ�V;�t���w������B����G�Na(o�+�^j{5HMϳv_S�Q߆3�e�b����p�\����^j�J�Φ��(D#��&I��$"�Q}����7"��YԻ���:)4�)����N��ǟ�z�:�)���;Z &��-��-C���'_$چ&������@e,���+�w���� b)��P ��<��0�����;{�ϻn�x��(c����#��̺9�%LV"�h5�i @1# 0X+����lQ����N$�- ���r(��������A^[�K�%�]�ShA�nH9��4�\p ����<~�֨����#�C��EXP��/�&��*���=~;�FZ&9��������kj�7��AL�?���e�0��*���2|�cU�BhW�dZ�����n��|���\}[mʺ��Vx�-���E�(Ň�@ v��6c8ϛ9�-���z�
Static task
static1
Behavioral task
behavioral1
Sample
cccfeadbbaf042eb970d0b2959e5a710N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
cccfeadbbaf042eb970d0b2959e5a710N.exe
Resource
win10v2004-20240802-en
General
-
Target
cccfeadbbaf042eb970d0b2959e5a710N.exe
-
Size
3.9MB
-
MD5
cccfeadbbaf042eb970d0b2959e5a710
-
SHA1
418b014d2eab00c6117a616f52a19ca6c24a8cd2
-
SHA256
214c07007314555386f337edbca7031e4e2d58a9dee5aa0ab8e23f58b246908f
-
SHA512
806e6d7a7f8f7e905d366b52d45bdd8e6d323e4ac87ee6c9c18e4ad445b82e8f76809db52d7f2f597962a4fde61ea169a0bc1fd39ffd731cb6137d8aa17a3897
-
SSDEEP
98304:RSptXL6pUrrW1FpuvDcX9Gdsd/DQ1C75vLpvd:4tbIOebX9GqBU05zpF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cccfeadbbaf042eb970d0b2959e5a710N.exe
Files
-
cccfeadbbaf042eb970d0b2959e5a710N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 60KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 40KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 176KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 856KB - Virtual size: 856KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 204KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE