���Q�~Ȥ8���.S��A��W���m�&u�"ur�`��5CF���Ԏ��Guk��,Y|]��z�Ǯ*��Gۡ�U�k��&qr��������I�(��k��)��f��s��`��xVMG>Q��$ȝ *���%��p�v�ƽ�%���y�o�il����U^�2@�����[�z.ܳ�1+o@�&D%��nO.��ٔ�"���W&f�Pf�!4��w����û��C��Ώ8۷�� ����:~��z�� ����=e�oswϝa�`ФO��9�8 �i��s�����RPj:�9!�R�o&S}?y_y��kJ?�)v?'nM!��q���_1��h�M�W��)��J�BZ0��Q���Or-��~ߪ�"c�߷��D~q�phqP�ك�Y[r1@��&ýd��\��G�JA��.�k-�#�- ո�LӰ������Yߴ��3��G�V�%s�e �����ƈ�YH�L��Y�N��đSÉ��� b!6,��k �$�4���A�y>�o �����@Ya#�6.)뽘o�oK�b���gs+���E?s�,�q�iẸ����"��?m�"�1����"�*�,���yk�s���J��vq&�]�у��R�Y�����8� ��}��*�Yq҈���N���i�ߤ�p��X�I& thNpKT���Tj�D�Qb3}aŗSF������"�gg�JX���7L���>.G�ʈ�Ʉ�G�"g '��M����Z'[iK�4.�<�����������J���Y��[�m1�U�a����D�?*�y�O��5��$|!�ԍV@�r�Tý���߬H�P �&)U�����L������$�� �N�"�K�§�Q���^Ð�!�ʹ��<�!w�xW�z�1qxB���u�&�?��M�p#����{��������H������B��e��������_���H3��WĎ���< \"�K����N8��7,��%%����2��tE���-|�S�͑Tv�|�g��[h��1����WA��P�Ç;������K����LUP��vr��� ���N-HI�d(�4½Ʈ��m����c w='�c���$W�i 7I������.8b�˚.,m5�o�!B+��z�]Zmˉ%r�/��*��PzT��@)���/A��:�Y �w ~2I\O��j�Dj�y��l�F��H��Tχ4|m�d����+�Y�5�qt��Ҽ�@&I�Is�/1�$�^b��(��W8�:�.��nm�{�1 ^t(��ʥ�J�sk�.�h�������j��<{77���oOq!�#�Mu�t��Y{��h�p<�.6����W������|O���T_N�*��bЂ�(}W�3�aj����Fi��D�w2�]���褼/��2��0?�!��/���)�d��.���ʛ��n#�-����={�~��ZW�� �A���,�9��ﵷ���I}���E��Cg���aL�9��������}�CXmI�(ϙ��'���yp�f0o���|Y�W}{\o�R��DC��Z"ɇPV��,�l�hpN�+�xRdž4ba��)��`�D,m�b��7�b7�y*I���v���Y��I��*n1xq��9 *������I�%^[b.d]U,�=q���m�p�D��i�RXV{�z&��RL�A�.9��3����Ձ�u�X����P��K�K�wi=�y�߸r�0��=�&R�gQ'$0υȮ�Ǚ�k�P �3����<�ߞ�68�@�[��K�>�N��r<K��r(�����Z�gL&��[A�ζ�(>/�n�_���Y O�_ն��I�L�s�f_0��L�Ľ�&�{5G%|�k��=��&�)���W�l��. #�Y.G~1�o�:���+�-��j7�����cy'Y@���ȶ�eڝM����"B���BX۽���}2_SzQYL���8߬`q�,����|Y��ͅ;R��U���ْ�����CK�y������"�\���r��8�P����t ��1e���2!J�2GT*@S���W!�@O2����4��l�n%��T��8P�-iϤ��'L� ���2�=���wA�2T-:I�#�[�z2�H�#�о@N�o�}����a�~�3̀�2[n( �Uϫ}�����$���͝]SO�4E����� �f�`|pZY߯u7c�H_�����S���Ԕ�t�,r���C,3W��� k_j!�h5�h��k>���o(���^�դ��$y "��"��������R��[O2̅�c�����g_Dd)�,�K���Zdr��������)$ ���VԚە�(��6��kL�s�T�ܹ/��A*��Y��OT���PT�Np�I�N=h(d�S*�G��Y�q��̀a?�$���g��TbQ݈I[#�`So&���ٚ.Dp� ��GGvS���=�4�e���펱�������חq�T��!�N��X��DP]�8��̿�O*1��z9�x.����Ă������Pq�Wמ^ǟd�;�Nj����-������BNW/ ��k��,��w:$?�B��ht�ti?*��jX�����/��.5w �!Ĵݟj�����@z�P�b�:��b���%�XՋD�/{�{�m����Wcz))��Q�U�>���t�R�e�Jz�O�p�;?$VEE}�Oa�K"S��Z*����1�ƺ��Q;f�uj���3!H��3O� �� �xF��<�-\��ޔ��z某�̍)�������j��Q-���b���$�&�N�?=H��`G�N�|_Sw�b�6� �=�D�t�J��S���-q�������q@��,�~���t� �&P����#�;p� h����MM����JϏx3�Y��zU��X*$k�%�@�4��ߍd�z^��SHAF�4��i��:���Q��g��\�ڬ����;�j A���$I1k���#O��>ؘIB�&�UV�5�_K�{������ًh��Z�1�K�S���;��l5�騛X@̾>,X�N9n7�Ҁ�Eɤ<���c�u��̆���_9��m� 1`")����v`:�b*! Ƽe�ߠ9��
Static task
static1
Behavioral task
behavioral1
Sample
bd9f99907cecbca422886252d67765a810f23d420fff3dcb1b1eb116c7ecc0cb.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bd9f99907cecbca422886252d67765a810f23d420fff3dcb1b1eb116c7ecc0cb.exe
Resource
win10v2004-20240802-en
General
-
Target
bd9f99907cecbca422886252d67765a810f23d420fff3dcb1b1eb116c7ecc0cb
-
Size
11.5MB
-
MD5
baadd1645540606fbffa9433977596bd
-
SHA1
d1bccf3c74c9f60f9d6482b5e0b47973d9623848
-
SHA256
bd9f99907cecbca422886252d67765a810f23d420fff3dcb1b1eb116c7ecc0cb
-
SHA512
8f72a4895d8d97f2e8c5a61e0afa6691d07a57076cc58fd890e0be6ec00be87cf614e2f21c113a52b39599e6df6c49ba99ac9edae4f7d3f5f57476fa4cec228b
-
SSDEEP
196608:6LMoLVNgz2YFReHUiVxuxPzx9eCdtS827yj4wU20viBv25r7RdCuaA6XlWyF+T8t:QMbKOTi7ux99Hdtl27yj4wqmeRdCuaAZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd9f99907cecbca422886252d67765a810f23d420fff3dcb1b1eb116c7ecc0cb
Files
-
bd9f99907cecbca422886252d67765a810f23d420fff3dcb1b1eb116c7ecc0cb.exe windows:5 windows x86 arch:x86
a58c321926dc6fbf118744f8dcdc8cee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
EVENT_SINK_GetIDsOfNames
kernel32
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
CharUpperBuffW
Exports
Exports
Sections
.text Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.~Oe Size: - Virtual size: 8.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.O/s Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mP! Size: 11.4MB - Virtual size: 11.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ