��s�7 c�}�BoA�< ���B����1�&�|� \�5�;����7}������=�EB?�D6@�oM���,��&��T�V�i���7H��Ý�A�.��}��7 ��6Y��4@v����� ��=.��*��x�mh�������rJB�l�_�[X;���H4����rb���p_9����MªS�`T2.9B��'�g-��b��C#ƈ�I�����ՠ��m��M�H�{�Jw��f,)����Į�����f�Go=F` ��k(G{�ʦO�^��1߆�K���"��d��A[??Q�K|u�0�DF5ʮ�y2�S���fV���H��B�q?���"� Κ�=���O��9&���WDMT ��M���j/]�a���еL��9����n�w0�B/B�#7��z|S��U�B��0,܇D��ʔ>�����Z�멢�"�,W��h�r*%l~*[pY�(^�Z����c��厓Pw��|\�R��������"�{���x�ED� �;���~��������<�L0Oe*u*3���䂰��F%B)]k~Z�%V<o�Z_�E�Mڧ��L�}�t�bY�Q�O�� b�&_�(a���ܠb�*CdqC8:N�3}4Ï�;r���S!�d��)}��\��Q>�Q�I�B],�-f�ȷ+%s᮫���Ky[� D�h���&!��]9��TL�T*�Q�� ���h�;���$�(O��ɤ�!�'汵 �����ۭ��_ ���Q��������*��i�H�#���pV�B��Z2OGd��E���f��9�?U%�_~a?��1��b|7�����cpM��u�ק�B��y�y��_-v��gh���-�@�ʑ�[�* ���a��D��Ve���Oy:x����{J*���T��~0 �YBz@}[#h͏m��a*����x�V7�3�R =7b��j=U���x�j��T=z���W� �y��PL�-�`����CG�L�u���a��\M���8 �oK�y���/�Hp��En�#ϋ�e�xVKl����b�� �yG��J��_+ሃ���6��A^W�0?���EB��^$�����r���N�GU#)�rU�D?�4�a���u0b��TH|��X�L� ���������)�:0@�O�b�yy�e{���*�� =�zK�q�v����h��sʨ���WCN�aw[����|�����Md#btV��cc��!��������SZ/SB�(����){��.�5ݯ�J����s��?F��!���"��bXkm�F�G����@�.����6(�̔|��?�S�x�A:�nIXu��xQL{K:���� x%eU�A�'X��W���8=a�}��|+�J�^���/��Xy�B�ٛ�V<$��$�x[�K�#�$%ۑz��Q"������y������7��΅��=��ߕ�'���&�u�BlM��:��v'�禙B�n��$!����ΑSٔ��HΨ��F�77�{�D��y?�mA���W�c=����)��ϭ���`��{��������n� �F �^rۆ�Ϸ>�;K& ���ώq�ai�!�V����G:a����������Z���VKGa�i n�I�q��3���]2 �g,j����y�Y��1�)�Ve}�s�T1�' �}���d�o7J _'�`�;���X�8��g��%[�^��'b�#��ƅ�#$h��U!n��vm(�����\�*r��� }N ��u b� ����:�ϣҘ�Η���F8CH�(D%���"{i+��p'�5텱�e ���.���v%�/��Iץn��e=\>HX�]qH�,}�U�ׁ���TO��`I����ç��R��T�@���X���éx�\�8�]fJ��,]�8���8#j��ԂZ���_80��M��R#}W�<�XAY;�:�S��+�A .��x��bNHf��HI�����U����7�6�} ��&y�zm��Y c~��픙"�b>���P�����������0�z2ls��C�|�/��F�&Ą;�ҡ�2�n��-x��+�O���t��Eˀ5�CS/.�A�������Y�U_�6��6o����2\�0:��|f��Q��ݔw��%ʦ����֊��{�C��BH�yKsn��9l!�BbZ[�q������p ,�R�����!�G5*0��G�V���Q������JO��+o��U���4z*�L��&���ݤ�ju+�sXI�g�����-��ӚH�}���8�&`��g�&�,Vux��9�C�d����aL`���Ua�6:k;�z�ϋ�k�{��a��kY�5��f)�+�f&_t��S�H��� ��K{�p�|h��?�5M���@��5���"� �w��ŝ 'a6�qd�`�\JH��SE��ެ�ދ<��D�%m����%�F Q2��<m���y%��6?Mdl1۱�ȉX^�?+���_ �v��y��}�g����;�՜�㵮��s�J/n�c�#�B`2y �N�R`�d�M� �oM����������W*�)鹧�.Gu�e���%��o�7���yV��$<z=_9��_>�7@mj��%zQ��Y��ǵ�,�s��,��{Q��Ird�R8���@���<���v�7T9^�����{�N;��� ���^���ߒ�r]'/Ld�3�{�j������9'��^t=T�.|G�R�*���U��n��礮"�s�H�0]�[�[���T�F���|�MU���Qptɒyͮϊ��<y]�m�������S�<��fȾ~'AM�#Y��D�t�����tҗ��^"e�q]�j1�u�������+�a��,9��v�>q�uA�Du� 吆�����~���sv���t�54G�L}�~&��`Z�������B|��5��V����T��-�n�iD�Ԅ���cV\�沌�+<s0�����p�ӽA�MQ6"˞�M ����ʈ����鹡��:���d��!��d�ڴ�N+�[m�pV3Ǿ!������Q!�����z����5�V�k���R���l���BK)���4A:F�n�Qh�@�{p�p��,uQE�W�v5��Y�\�c� �ӣ^�,����'�3hc��ej;8��� H�0����H���,�A"^�����X C��](0��)� c��n�� ]#m|���¥�i�H�]��=;гV�pV,�� J��A:�q<�Q�i#��0�̗h !jœ�r�al�3=�!�v��u�`���nz�cC��G��+�9+'�0@�3��G,_�ͅS��7�3���@o)���M�;uM] b�+�삲�К�_�L�^�n����GC��*�y�m����>���eS�t]����j*�N$�MגR6��d�ȁ��3X��BZ�Gd�^E�w����/��S�k�wQ+�a�T�J���|)%�K4D,2�BO'����O˳���I0.�{غ���V�^5-e��l�g��Fr���+$ E����� M�i��K�DJ���gu�<$ē[�<tÛ�y�4���2[)��b����n����|9������ߺ��`�{��.�ԫ7 �TbS����v�n�Z�$���3���08�����m�I�.��2�Ɏs'Q�0Ț�n� �* �� P�`�-~B���F8�Y3��߬U������������D)O�kDP'���0�w�1�/l�Q��4�����G��oϸ�F��==�f�Ȼ;�fS�"���@�����͝T���8��f��B�j�`H��;��Ԝ���=˥�pc��
Static task
static1
Behavioral task
behavioral1
Sample
fcf75f6bd2b7e6bf8009812d55eee157c8c811b9bb51556a4f17701402fe7191.exe
Resource
win10v2004-20250314-en
General
-
Target
fcf75f6bd2b7e6bf8009812d55eee157c8c811b9bb51556a4f17701402fe7191
-
Size
8.2MB
-
MD5
4bd1b6bec40f74f4aeed764fe4913a74
-
SHA1
99b02e4745a72050f8cd363373a662250c17b595
-
SHA256
fcf75f6bd2b7e6bf8009812d55eee157c8c811b9bb51556a4f17701402fe7191
-
SHA512
fc911ecead7d5d39cbfe3ca14109d4f3ea5c9ef5f17b4b13bbcd1e27dda25ed0ec093d7ea040a3557d0446b3b246a18eba3a9f123cc09cc2db1d5c8649a8f1cf
-
SSDEEP
196608:5KjlIC/QuFH4O6f0Isi4DIqu1QTk05N1EOiXY81t92vdg+L:cj1oKH4Yfu2VN1d8YStmd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcf75f6bd2b7e6bf8009812d55eee157c8c811b9bb51556a4f17701402fe7191
Files
-
fcf75f6bd2b7e6bf8009812d55eee157c8c811b9bb51556a4f17701402fe7191.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 260KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 5.7MB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE