����99�Q�Y�{����O�Y��1Z��=�9F<�K��=���*�)�j�N͐UF(O/T{K�TG�;�W�>Jv�$o�%�������ȩ��e��_32ځ���m����3k�)����+��"s�nk��q��"p��T�ǩ��xH��R�9�'v"4bh�K�(�UV{��ۦ֊�g����%���c��1B3�嶼���� S����P�e��?'������d���rLPY�Dw����JH(Vq�B8��F�����Ϝ���B����>�'��cy^�C��-� I�=��K�/TW�(���)R` u��5uL�"�����6��\c��� ��[Z��m�T����_gV���������.�W�/+�1�3WMߧ9}:�P68�_��uN5!�$ȱ��#.T���4`mU]���2P�O���M�5�Z�_� �.�!A4j�����nft���=1�]G�?��5�({ �V��I�NȩC&��1ޚ���T�4<1��h���\�Y6ds-l�d� �ǢjoGE��gH�o��d.d���㙝C:~�[�R�3vY&�,�u�5���nR$�)T�����ۅs�>e��_���8�3� L/�oP��� JE-QFڃxUI}�/��É�����{\�}=kpKc�f��w?T7�(���lS�ˡqEO�.���CU��+n:n:�.����uZ� �� ��|4C#����D��Z�?�����4^�f�U�Mކ}$������3��6̬�lu\��mͷ �~�C�1�ω~ /뗰�H�V�,q���G�3ɪ���8����ר{�#�spپۆ߳S�����io����ߡ���v �U)����؞Q����������(��ou xt��7�V4�zIN��W��кÞ,���g�糳���_sh�S1M�0�43�su�y������f��K�<�9K'BK���V�����V���g� =��ŵ @��@��si� B1dș���B���D5���z)�=T٦�\k��9�y���@�9��u����<Ƿ� �V�}j#�4j�4O�@�#�f�o������[�HAbMN�8I��a:F%*�@���� ��wl�V��-�[���wU{y�/d�h�n����g9F�+FB/@�+�ϝ��1�}�F�`;>r�1���PɁ%��&�?Aª�>}�������?#�3ldb�~�����)�u�{�M�$�]���+�5���e �$� ~K{�0���2���T�YCZÜ�[�lj|����E�TѰE~;������>6gJ��nګ/b�I�Iq.�Y�*7�ZF�&)ebNanyikճ��� t@���Q�r��7�;�pq��!�2�GLPHddT� G���z]�Ҽٰ�ls6� D�n\�����!�����2�����LU�����E��b�R��(�-��uf�= ���!Z��� �E���RkQ��c=��R,g��^wX�^�$ `��dp����T�������q_����AS��{� 8��imW+��zFh��L���i6���E�f����2u����bA*�I,��A���7hA߃vf�k�t�̿h#��;ț�Yӄ�X\�@d#��x]s���C]'-��!��_�nF~��Z���h+��'���8ru��ƭ����jQ�\��6'ʤg/'r\b!������1vulc�&����ʫB�q�4��Գ��FC� 퓣-���yY���މ���3x�$��~+ρJx���)5F�U��7Fh�v�Nu��s�wh{�Z��1��rį�[fO�;����$jEU�����w�*��W�>���HT:��{�����C|��o��:Er"I٣A���عg��[������0��W<�:O�`�c�y�������φz�6�nY�C�G7����-��i�!������� U�=�̔��������Ʈ�P�9A�"�\�cO���ධ�n_�uYg�佊��_Nb�<�t��/��:W�.��;Riu_�Z�Y�(�z��'����P��C�s�(x �����*Hғ��J;��s��Ϣ�x$����B�f�J]��i��*]�����_�@�a�ݎo&���$��p*[�pF0!mzv|�(ˣ��sT2^�)���;t�#�~�t�t�Fl��Lc����:����U!3ϡ$�p��.�&��B0����*p�"x�7��W?������t�)A+�3{�l�~B(�嚚�X��ի�������Ec���o0�9j�\�|��B�1����������<�E~�X�vr�.쪣���]@{*5[m��2��O��-嶎L<����l�2٨���_��R8��D����0�uy�?.����X ʑ�A�6\^��t3~�-.b�@������w� �Z*T�9�$Խ� L.����d0��h���bn4(� ��P��\ �+%�����\��VC֖�ࣉ,,j�<gӕ��Y?N�L ��nN1���yO�,��@G%gTQ%���Yk/���Z�]ا��ނT�f�["[p� ��a55A������� @#�����;r���ʮQM/� V��h�豋*U��_ʓ<���ckt���D�OhG�ɡ�Mfo�ݮg�̝}��/8>�c`�<5bhyD�Cy0�h�0uj�1��~t�ʱ�9�q=�X���A�`l���Bت�Y';�3W��\XW@��xක\�o�=J���ѧ�>X|ӄ�Z��~8�%��9d7���?K���S�R� Ye��fs��XГ#���D@5?lܜ=qjV�1)���9�- ������ <�N�gP�R9�~��)f@Y8�&=3|�qY]1B����TØ�a���}rJOV i?L�-^<p��6I����Qq�x���b1f�Z�0���o�&�5�csg���.��XN,Im_�i��v���;��[�fv�[|LJ�s���j�X+aq�Q��=�.���-¸J��;� UQ�(��u��D8$6Pe�E�[:�xE6���2^�~�T-�NqHV�>.zm��Gp��O���G�~����^�(��VW�ei)�v[��L�s����d� ��4~=ZA�î�A~l���w��c�*�=r��<��`���㰻v��ә�9��]��D3����}ag>V���ᮋ+ #clj��UyH6����]�,��0ϡp{���zXB;� +�"��{�NM�w��C�Ř���z�' �q�E������F�m�L=���078:���b?����f��'P%M�"\��F��`��!�s��.�426�z}5@�_��n���i��k��_��@��2�+a-�ޝc���r���:��� &\2�R�Y~@}�� ��qܢ�ՠ:�����0��}="N+ ]�����>m/4j�mw�!�a��^)*^fc���k���/V�������4*YF=2û��.�5�*�x����>pZ��/K!-2bW���"j���E_��5͙���\G .�UaJ �'��L���W�w���k$9"[��9z��\ ?7՜n�3�+�HL +���0@Y�NQ:Ͱ�W���h���gtKl(��l������U �/b�����R
Static task
static1
Behavioral task
behavioral1
Sample
0f9ecd90e3d28e4778352b470096d24f54d65d4273e60c3a947ebf5fa77d41f0.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
0f9ecd90e3d28e4778352b470096d24f54d65d4273e60c3a947ebf5fa77d41f0.exe
Resource
win10v2004-20240802-en
General
-
Target
0f9ecd90e3d28e4778352b470096d24f54d65d4273e60c3a947ebf5fa77d41f0
-
Size
2.4MB
-
MD5
20e024c3026d9fca1980646144be0db3
-
SHA1
06804227e7f7a36d5976aed693cf9c4174846f27
-
SHA256
0f9ecd90e3d28e4778352b470096d24f54d65d4273e60c3a947ebf5fa77d41f0
-
SHA512
1a63f8dde2d0f9bf0423a5ed81eae938c86df33af561401ad82a4f851b14a000bbfe531a7173d07eef412973de1d727906fc35678af5bd02487eb2ebed3c42b2
-
SSDEEP
49152:1k47b5v+2me2n7tzYRnIXNy3Xe98MwsUUTiz19c2AtsNLELahbIfj5qYl:1v7bl+2yn7BYGNy3XFwUU+Xc2A+uLahg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f9ecd90e3d28e4778352b470096d24f54d65d4273e60c3a947ebf5fa77d41f0
Files
-
0f9ecd90e3d28e4778352b470096d24f54d65d4273e60c3a947ebf5fa77d41f0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
Sections
Size: 82KB - Virtual size: 576KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE