�����-5}�"J�vX�bwlݶ�?�t۲��{|�5����m�+����qHD�1�Z��Q#��$�����M��͑+�k�jAr��ybl�x�Z���2�`��;�A�9���k�vQd��4�A�ȸңZݘ�Ew 4��ā����Lj�ˬd���-YQ�9b&��O�_�3�9�3Ġ��dZK��Z[m���bmX��������r�˗?�)r���="�!Jwǻ^'�[>�s��삀t����u+����HDv,��x\}ii�2��g�(��ĥ'�f[m�A��[o76Et�}��$D" �㓹��i3)fV��A?��?V����quV�یO�o,~��i遉L2g.��ک(� �V�D���Y�DŽ��J~Bg�Rif�9����=+�D�n�P�������<�� ��s���tH�֑��9�-��ñs�]�k?{ʪ ���-�\��kߴzۃY��C�����TȊ��%�7�O�����w#�ec5�*C�[qs���^��䀡�ߏ~�n��Kmg_�գ���~JS"��*���!,��~���j��K�/ tVmRV*@������a�h�?��r�9��*�9L��R)�X:ޭ髀-~+�7@;�4,/���^��OBb0� �]�.��[L�&�������`�Nf\\�.���A�u��j��jV����AfV��a��fƑ�y�\h,?_���r4tf��֍��)����`*L�ڹW�aۉd���>�P!�`zG�� �i���b�Dlj`��\��͠_��8�(����'\5싞�{�M=~I�+Rt�2W��C��|�,��=։�����gݝb�}z���.ҰW�j�N���f�#�TzC�4k�i�xZ%��q��;�� �~��� ܣ���ϊ��T�h�M���g�K��V�J�0��+�iv��#��N���N�G�GR��o9YEs� a�j3��SU�/��az6)����YQ�Y�~r����J��#���\�� u���\�);U�)�p� IO?�)TV g�@#+˓��;�č*����トA"=���E�%��f�gh8�YcX��>-�"mGU��5h��%,SкC�ƕ��*�f.p�"��%�,9?����t�[/�m��+ g���q�v:�X����J%$�\���ҕs��"YoR���4�Z5�vr��Ӳ�ޱ��b�U�֦䖤�I�FdٚS�����9��o����*dK%��>?����+��Nc�xj*{|��{~3a���E����0�<�4��Ȭ�]JK��K�xҬ�9~�Z��s��0l)��KU�V��2��Q~PC�`۞��b��a%�T��} �c�@^�i9�0����*PY�(���$��/;��dIzZ(ؾ>�����|��m�< TI�2��p��A�.��������G����z�Q(���cU,Vd����e7}���3'+[��p�nk`6Iֈ�} \z/�禯㔕�^!Е��B���^���=����NrZK��>���M3lG�K҇��I<��Lb��B�J{���1!cLM�������c�pc`d�GT����ۀ��>gmV۸U�>W��1��A5NIǺ��<�����p;��:�h�!�@65z̈́�f �7u�k&��T��!T�P�͙,�e�#�����Az�*T��tĐ�~?��g�y㶣 �kk���gN+�p��}v(��r�_# u����O}ƍ_���@R+�> �W���C�hz�Dѥ=a*�D�r�F���-U�0@��L�Q7{g��*�����^��R5ڐ:���mv�}��#7�t��:Ql@Z�9ylS���F�$�3����H�j�W��z���|�y;F��R���A۶�v���|��%N�� UXB>Ѐ���i~�A����u��|p�g���B�GI8~����2���Pn�"�ap��&u(��8����[]���L��[ �cK�(���S�7jv�E�JS��s�7*%3�����0��2��D���P��g��� � �{��h����埦,C(7c���G���Hx��=5^{V6N���v���QB�s�A۬Sl�w�>P �nW�X�Z�Ӑ>o����� ��Jh0;{�LNwH.��:��~��;�?x9��a뻖O���(�.��\ks�����y6$2��ݹK���w�h�b�<��>Sۤe@��� .,ʕ��nd�a��!Q:v�d�b���;�U�m����!�W���{�u�:B{�����闼Z��/p���?��E`��G�ƃƽ#���`>���� 7��cO�4�Em:R��[g�R�F/_q�~��8|��9&�ѩ���)��E��C�\�X�� ��Q/H�썚��X��{�@[l-��.Q( e��$�ö���9�уG<�y�n�������#�MX�zK߳QIb��4U�����"�e�����h�ڼ��}��i�8e4�"�@(ղ��a bz�� �(��j(S=x��"�GP�TĠ���mœ�!�d��J�58�L��=��*�8jԌ�FX�\�[�WM��Ɋ����$Zʛx�n�-z"�R�z毫}�[��<���FC������Z�� A�&�ʙ(��Gh�0(���)3DPE���B��R7�ϲ3�+܃�I�����/����n��ڧ�G$5WQ�/y�Pr��`rV|挦������Z��E��s�@��~Y�*�a�tw��D�}�1�gn���鳛�Ȍ��zs�n�W�L��w�C�QPT�各�5��,��z#�����|�����p�_i&y\[�鲗\0y`Lx�*��R�&������2�6��R�g�>�jh�Ө!�JD���=���]FbV�������`�ؕJE��?�P'��q+�`ث����r�����b��2��?�w,�����Z�p2���ӧ_O(~�O"|��/�_���芟 �@e G�Q�5i�A!0���gt��L��f����8'� '�cw|U��z#�"� J��Z�شh?h:Y:��τ���Ma �#�p|��rȘ ����2���\�"����x�F�G��=EdcN��7��W�����IL��L|8kq����EZ^@�0��Y�����Y���uNS\גW���&٦�7$�LL� p�&����?�iơ7�]�����`D�!4k��;�_����p^��)C�'s��h��`�4N��=�+/&Ը���`�>u���K��~1�)����S� w6E��m�}���/tY�{g0:�`.�`�B�t��o�P �p���m(�(�����v�A��#$�D�l����;\�<'��$���Fڡ�Z��[� [�MQ���H�/u�(�����$������NYq��-[f]�xM�yy!�Y�I6t��� r����p_H�����Z�~ �)���!42�XtQ%�|w��,�~)κ�����J��1���H��7v�z�O$s�D����߇���M���k���g'��\F���]V�: Ҥ0�m��6v�K߶ ��T��)�!���9!���C���\bi%�<I���5]���W� W|���T@� ;�Î*ɲ�V�(�<������͟G:�Q�oS����\[���Mr�7K�l68��̿*&3�5�/W�I�E����^J%��/� ��ވbB}����܁�4�FV��f�P� .�e�d&��-��aJ�x����$���ve�B��Y ��j��&�Ġ)-�IWї�}8z�4L�MuJ��u�Y����gle���a'H��y�)�F�\q�o��z�
Static task
static1
Behavioral task
behavioral1
Sample
new.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
new.exe
Resource
win10v2004-20230703-en
General
-
Target
Malicious_057770d2aaa16f66a87fc860471fe95dd25c6dcd5fd29abffbe1d24585d23756.dontrunthis
-
Size
5.6MB
-
MD5
83e724ea7e0c6df11edd946e76f2344a
-
SHA1
229050c9117d8b1bf799f978a473aeb001b2d64e
-
SHA256
71384aa62fa660e6169fd95af7a62d1d1b4ad668e4dd6f7c0c1895a5a84f38cd
-
SHA512
1b58f61eec38bf6853ae0cd61f8c729805937c43b8693194d8930e9cde10382ff7ec22d42a102faef565b5bb2270cfadda02670c8b9f87fa16c3f7a73b5bef6c
-
SSDEEP
98304:WXnZJF4N1vBQcikYLfVnQZXPGL0wF2l/E97r0GhEKjx7aB5zeIVeolSdP:W14N9BQc9YLf5QZXPG5F2u7r0GhEKteO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/new.exe
Files
-
Malicious_057770d2aaa16f66a87fc860471fe95dd25c6dcd5fd29abffbe1d24585d23756.dontrunthis.zip
-
new.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 70KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 14KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 136KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 20.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.local Size: 5.2MB - Virtual size: 5.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE