�y�ި�PԀ�vS�n�I�z<�,.�ͱ6ґ�I���߂<Ҍ�\#_��UU����X�⛓��XҒ'�MDd��/+n|:���� ��lhC�ђ�Z�Q;6Ai������.���9lN��D1��W�ͦv�����u�f|�J���Z����|������.D����8��PlX!�-H#�b�t�6}.`��o��b�I& P!��#tޭ������r��Ǎ��\���E{�u+P3��#����#�bt��㻚��B�G;�Ox2ȝ���ꏣԲj���|ZR�3��h�+&�E�/�G>m���RC6����@Jܫ���(�Y��τJd�B�eT�e�ݾ)R8��x��m�N�8��Fٍ\?%Z����"N�k�0)��V� V�����#��׀0Ƴ`L��l��ng��߲H��#�4)���p�kJ�f�V�����"����W���Y�;���Ŝw�@�2�����w*��x�WB�QT�\`%e�Q�D^� ��3- LB'����4}��F������?��?&)���8��LA1a���4>wk�h��8!ʧ� ��F#����0~��DL��'h1)�j��ꏑ�]j�XJ�wԝˡ���Q$��6��КھQ�H�t���E�������X{,�1��U����{��R����U����ӑa}B���n�B�}&3�� �]�x����s�ck��M��pcں��4�L�Z|��%���\f��Z�<k1�~�}�4%C�w^X�'{˕w��� w�aYӘ���z�v<!}�s�yO�a��裤���8�+*`r|7�R�ɥ��.H��׃�1�o����ʼ�Gα���*�4@52o��~�@e}O}�����`�r�ᗞ$#Yj��?��Mk(�H�22F�w-Nww�������� p���EL�8�W�5���Ok�k�jm� >�xӚEe@u^����xP�"V8x�Qq��r�6M��m�B .@x姹�냷=�d�b�0l���r"�, ��u�K����Xa����vf��B/X��~�� ��M�U5���8�y�zTs���-بP�H3��Xؠj�+ ���Ϭy���;�1s~��J����YK�=̌���`R�~r� c���R ���#��&��o�] �;���Ǐ;�\�,Yb�Q��H���|K?�}����0H4|K�#�Dz�+P^K���:�z'�����1����D��+[&�V��BE�. Cެ֔�<�_G�(��z� 2���R/{y�N�%x}Z�ޱ��B<:kj�X��-F5��f$Gc�n�M�%�;:���UK����!���;��<�jɋ�hX ��ٳ�!X�N��KI��Ð����&��%���>*��N�.k�����K*�q���6JHg(�rd�P���⨮�#�`���ݠTh.DZ'�:�J:�eٶ���������p�9��>�A'�Z�ۆ�@��}��zQ}p�'#����z��w��������Ie��jY]��:� ��{��L���s<Ywj�������1�����.�Y�j"J@ҏ�M���0���` :G3l i|!�MC��F,��>��u{���ծc����$̣����=Ă�}2<�+�B�#z���X��j9�s���H�gWM������U��6�81���A�H�c���t��X/�5^�M8Ѥ�Q���X%p'*æy'A!�3�e�P�H����I�}S*U�^(н��� ��#d9z���* ��1�F��@6%�{��>>Ľ/��/�V`����6�Щ��1AH�\/�\���T��D���>�T�^���yJ6��=/� �xM��6���n���+_c5ЄfQ�$�Z��h�t�RS���T�'8�.^��r �����+P�����B�Kȫ6 A)�~����3������vKhY�6,5����tP��EE�n���Dۖ���V��Xn�a6}�zr4�eo�W4��? ͍ ^ٌá�����z3�l"E|�C�ع�߂����߷y���j���~c�.��#(����bk�w�ȳ�d�K�$���oZ��f��_<g����㓣��`݇�põM��q�/[�ԙ]�ַQ?L�� A�B&�Y�_�厪;8K���|KS��MΕw=��#��]�����}c4�K��|v�O^��'���Ų��(7ӷn�)Q֩�RFO���&����}��5�s�~xq�H7��N 'Ny�R]�D�ns� O`��R��̬�$0�rx,����6�'����~E^Sq6������=]���#od7�[]�&W/f ��7YGr�=ܘ��l�� ����r;y�[���;��D�s4� -�<�Yr{�{��I*��Ƽ���������Ҥ\�1�5n]P�L!@D�ic�`$Y�\�#�CF����?o.D�W#g(%KL�n��W��e�#tt�(R;:���S�|ZL`kjS�^"����_�����+�w��� ��{����[��yH@6�0+*�1�;��adv]a�@1=��ob`G�/=�G�|�d&F���p�����#�~�� 긲�'�F��$jc�W��K��� ��vO����F�tXlV�G{�&6DK�Հ�㛣>��d����蓘�[htFߌ*R���qW6�4�ƿߍ���-k�g���E*�T��5������@���n�1�����9*�q��u���bf���r�/����g/��~ �1݀?g�y� ���y��n�m�zu+��XP�P̟�X���>�Fg62� O��rX� ��qV A � wڭ^A�R�z�=�W���P[��^��/��S��<��&d���b��@��������G;�r���g���Xt�Q��P��I�H�a g,C����6�hi�@HZeܬ�>]�������P���R,����)�rY�����t��+|d��an���o �Qݒ[ N��s��T�e���o9IQ}f���R��W�Z��oa=#؏y���x'����U����wlIpN�Ϫ�4��@�ū}ذ�W�߉x������h�%b�U"���i�X�X'��j;ǡҒ�% v��O���1�0���׳~�NM?�6`+Jb�����A�;v_���UU���] T|��� -���X�N"�]E8;�W\_��ŀIh�?����S'Y{j��� s�>��%��@L�����N���A�E"�{m�#�o��߆y�����sd�?�>5�E3D�@ ����ū�;���-��2.)�a��&����{��<��)v��C���g*�l�k d $�����_���Rs,kJ�p�u]<\��^��,7�@B��I��#~��K��ڧ�9-�P�j���T�b�P��)����~陱/�Q��]h`��3��9�ںg��� �p�l�&��_.� �0�q�]|L`�i�.��UWۗ��@̰89+d�b��:�M.p�]�����j�:E�͒�|ۼ�y� NU}xb�?$�����Q�����Ϲ]RG�+������aYV�EdSȲ���)`!�1J�k�V�2���S�x��(������E�u�3��v���!���h>�.�$ d�+� !j��2q� Y��U�-8��}�� ���ѕh̟�F��VW���0����L�9���ǖ�4�ѕ�-�M�
Static task
static1
Behavioral task
behavioral1
Sample
08ef87eb8165f338f6621200563043af11143eb5f328b2df11b7f356d12efc25.exe
Resource
win7-20241010-en
General
-
Target
08ef87eb8165f338f6621200563043af11143eb5f328b2df11b7f356d12efc25
-
Size
3.1MB
-
MD5
a3a945a2e8ba1d09cdd5f11ce7d41849
-
SHA1
47531a2d6bb11f1aaa6c2ea0d207d030533f953d
-
SHA256
08ef87eb8165f338f6621200563043af11143eb5f328b2df11b7f356d12efc25
-
SHA512
9fa48ae5f48438a604191e5223a4e6e905b61d3a5741505a440aa98fcd03d9d44f3079b81605e561aff984e468ee642d17bd25c8e6078a65533f0d5b1a648a27
-
SSDEEP
49152:DE328sJUleRxlHMkjQKwAV9JhOiHOpbQcPj6Dq6SV++PaPoLO1A9oFze:Du28ybRxlH0KtbnpCEyGDHymoS2CFy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08ef87eb8165f338f6621200563043af11143eb5f328b2df11b7f356d12efc25
Files
-
08ef87eb8165f338f6621200563043af11143eb5f328b2df11b7f356d12efc25.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 304KB - Virtual size: 616KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 204KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 28KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 204KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE