8L�!�:�: A��2�p�3�5��X���[�@8X����}Y\3����S>���K��4 _Y�Ü�%&,i���OU��DR�Q�f���]�Β�qMn~����h["�0b�L��� �N�����Lr�gX;��5��M���Ȓ��|l�[�;��U/�]=��Sl5�Z�㵦�JղŜc+�(ֳO�C��ns�l7�(�hu����T / Ab��A-��Up2�VY�z����m������L�Eh3u��(�Ng�?*�.�O�;PMdt܃�5��-�kx�����~���.րKI���L���'���R�Zv�GDY�~}��ϓh�c)kr��:��Q�A79+M����\���j��g����?�>+ދZѪn45L�|٢[F��Kƛfe�&�#R�Q�|�:^� ��B2�̒�ͬ��4�����z�ͻ3~ބ�_q��{�aK�������O�.8xd�� 7�Fͫ���F7����/�{�&��nQ˿��PtH�����`��_�v�ֿ�ţ��h*|,����� ��f"J��Ր��Y�Ն?���� ��5������Ч)U=!&�R���v&�f��� OsWKM��t�V.";�V�i��9Z ݕ��.Y�F�3C�h_��&y�)�)m���D����Ք9<r����,W��^��V�o��c#A��������qQ�Z�%��n��h���+���k�P1�ͻ��4p�|����� �2��d��l�|��c�_t��Ԓw���$5���}�������� k�a�PF�q�����(w<N�$�;�i��F���чwM@#��'x_��z�h��]�;Lu������X)��:�2W�c8������ֱ�^[RF��*-�gzm�P�Xk{��j��W9 ��Y�!�љ��TJY�"�o"o�B�mD �t6��&Η����sRh\�&)�����Q�?ˑ��)��`�J�2 ���4�`a��#�p�^�j]/^�eա{p�W�T���m(��C5>۴"Q�;���E���|jm��>g�Nn���J�*C��r�s�Y0��~7�"����v��1nؼy�i*�d_ƫ�y�"\��o� }\u��ҽ����F��$���>����YL�����Yu�π�0,ʱ��|f3�͔����p9���,�Q��q��0�&V�[����7O!d�)�5F%\������.��g��B���� HE%��$�MS�^���P��Ŧ�U��cC�w���Xx�Q��WD��nD-biS��^���OI"��,�()��m���a�B�C���~�Pf.rXEz;m� {p K��A�D��_��\���?E~"G�]~���P~%�V���wn��,N�ۃ����l�<.ay�x�;�+M�"Ƕ��W��6� ���/A��@O7��K�k�iv�J~��&R�������d�����P~�wI��l���L/2��@�7g���&����!�|x'#}{*��OPub//�<��Oˀob=��Üf@A�N�N�*�v��| \ ��AdP����(��a�,����VU�A�R,����8y�ؒ�6F\կ��F� ���|��uA�`�j�t���1f�d��/���k���u ԏ8%A�p;֢a� Hz��v6�>)�+D!��_�~}��F~��S�� ���:��y�X3��yƻh��U����mcӚ���[|�'���gb���5V�W�.MJ�Mr��gOG �����ؙ�>4w_`�Y��������X��Px�ua(�9�#B���y�禟��{ôTb���~_Ai��M����]����"2��m� ���� ������A�6�t��>2(⎾l�LjJa�پ/�U�Z�o��xNAܺ�75l��23�j���Ͼ��f����,�ȟ� ����%�����v$i�վ"q�*�*�J 9=ww�U9'(��?U��@��`�p�uJ���m��rC=q�� r.������캽����� �� ���S�� ��s�oX�$ 7����yαj"�<�n���:N������;�~�b�<ߞRX\��\L�cx`�W�d"i R�Cp�uf#��R�A��ʨ1�8@���xp�� �Sm����75��p���&&�!B@��U���d���`"�({ZWM� ���Ԛد���Ssu���hX��;_����rgh�zy#���9i�{��q�՝�P'$�`��X��p<�P���`�6�}��cr+HM�����*����ܮ\Ioo������a�� �(Ir!E��@��q䇄0W���?�Nݷ:�*�U�1�G�c���6�B[(R�ySǖ�`�餇�Y6�_L�lTѾY�X�S�42���v��i}߯��/=}=|�fu�N��ax�T�8p1ٹ�����_�b���4�29�����v�z9��)����z�bf?�T,Q��e����"_e$xӈ0��Q"J!�Ӂݳ���O?t�8�C��T$�aZ�Կ�V4��t� o·^�������,�4I-4<�(8�_G���f�֊�'��Z�G���,��ϑ*��rC�Z8�(a\�/&^Jv���e������ܕ+�����Q��m�k��m�n�z6�{֫�JD[kw\�K��zp��f�2Y�_�4������ C���NO%l�������/�fF�V�P1�,�ѝqKz����Fۤ�SX�juN�r�(��+��n/��XQ�����6|P{ ��͡"�P}F���?�:�a��~�tJ�/�l�$��ӡU����mo�x_jA��x�63}� 7Oa��0�(7�=���v���A��2����Z6��2!Py( Z�oS����H��ev�����c�*��*��F$��c����I�l猐Q ��I�Xţ0ߛ���'��q��� (TY����<o'��%'�c�]"�قkՎ"�g�Ȕ�J���^�q�۲���������z���H�w��cw�hY�[�h��`б�OZ�����.,�L1��oaE碯�w��T��W0�$��XX���z� �����i)� ��:�I�w4͎0{���U�}��o^>��������d/���c�!�M�NV4I5�E:�rl ��g�g8����!�������j�t�a��2Q�� l�?8�.�����4�J��vB��ה-������=rD��)���gl`��-n�d��'���:��7|SnF��Cr3O{~��J��Z%Sm�Fs����Y֘'S����\�����H�X*�u���}xe$*;���B�k�]�1} �%T���D�H���8�mAf:��&�n� v�S��?Pv��T�����UD(Hjc��m��y��--��s������[_� t�#����> /K3�~W��rr��\s�]�B۠�5\õG����5i��N]i��e�*E��h�Ἔ}��Fpޥ�~}ͥ�#�[B>|d�qJ%�" �6���U�K��0�rA�c�0�n]0VRi����58b��y��^Z��E�P��n�BI{CX ��`=^�'l � �q� C�ѿN�� ��U�r�D�*���R�O�{�""_��5���|"d�CBub�s�?%<���.�B{{>��g�Tъ�ܬvU<���b����zI>y��w�a�b���y�-bD�)����:^?�(_��)k-�$O��{��r*Jɹg�P���v�8� w_;�Km��Q[c�k�u ]9"V�/���_R���I�I��/��U��tq}��e"����_��ϑ�{���؞Nk�ʿ��O
Static task
static1
Behavioral task
behavioral1
Sample
08dbb1372fb6b68d2707e574456a6ff5c8f149a567037af3312ad3df9477f090.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
08dbb1372fb6b68d2707e574456a6ff5c8f149a567037af3312ad3df9477f090.exe
Resource
win10v2004-20240802-en
General
-
Target
08dbb1372fb6b68d2707e574456a6ff5c8f149a567037af3312ad3df9477f090
-
Size
4.5MB
-
MD5
7df58a6c614fb44a3bda3ce5b72c7c2a
-
SHA1
5a09c0c50cd8c2182001126274338414a235fca6
-
SHA256
08dbb1372fb6b68d2707e574456a6ff5c8f149a567037af3312ad3df9477f090
-
SHA512
0516011258c86499ad74aa9dcf6a36460831b26ced7b1516e5a82107ff8c741266a90a0af898d8d4652624ab69ff7040d52b91997a30a94b4d6e64c1a63dff06
-
SSDEEP
98304:ffW71Nl3GAQWQpNIFyMdB+BhSEDe116Bk5FmZ7tBI:ffW5HEhzDy6Bkjiv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08dbb1372fb6b68d2707e574456a6ff5c8f149a567037af3312ad3df9477f090
Files
-
08dbb1372fb6b68d2707e574456a6ff5c8f149a567037af3312ad3df9477f090.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 1.4MB - Virtual size: 9.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 988KB - Virtual size: 988KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE