���?�$ �hi��gs��BXK�sg[A��ϯn�o}�:��(_��b����% �]U��}�V��"�����m�[3q��6��&���nq��|����X����'��J-ˇ�u<'�` �也(1K�!�����X���dF`��1��O���1��R�m�na$lER:��?J,X@\ g���io^G*K�#�Y����F/����';�<��+��%�r�I��<!} d�����>\�vL�J�I.8�5,G|������).��Wa@�XH�6��i��=F��P7�x����!��#�< �0ƙF*Z��o9V��ׂ@w�4=�5KW��O� �K�P����E�s���Գ ��h��wi�A,ׯ����=v�1{�O��].1�6Մp�x3�3�>��E*��d����tti��߷��\�#YP'@rM*[���� �_����ʦK���N~+!T:�5{��|�tQĬ���v��[� m���C櫽'$ 6����f<�V]!�)��l�C?)�U���2�)��I3���^���߮*T��ﮦC ��.,O�3�fH�q���Ԇ<�b�46�d���ush�ׇ����$�N�W.�kf�\��8c�2��~Nyq��AZ—'%�8#���K��ؓh��[�V5�I�``��s� |I�Q=?[��)�-��!μ��W;?�9��0���*��#�1��ΔB`]r,��3mFW�� �Tӂ��98@t�e��D��(�Q���Sg6���7?�K��&!\vyIt�h�)�9��B�i�D7��1�=�������\A���,�LSi�>�a�Yd?�'����"��'��ow�gЅ��Z��V��"�G3�+��3M����0ˑ��f؍ei�n���2xd��kh �Y����7v�d��՟k�E����X��d���l��e|�:J×]��3�ً�01��٠�Z}Z�L�-�B�$�)[�} �����Z.=:��"�6�?���O�}pR��0x88��:ZK�����Ll�*\��[j�V.��\���p���Ԅ��+��B�D��Հ��yA��������iр<��Ӟ�r5�j�0��Dӣ�S�Sd|�@Ic�� � %)ꂗ*(��b����f����Ǔ�,�u���M��$_����9�m��u��E-���}���#�`�a,����mU`���*��,�4N ��h�����І��B�5|�s'���cg���%��� �R��5���L��7���\ZړR���O+��Ĝ��%���xxM�� ¥�>d���2��)�2۞�aĒ��� �p�$2ID�c�5���g^�8/ͧ��R�^&Y6��2O?J��C�R�`=ip�~ ����ƛ�tH�����]�S�{g�r�d=X���`(E����v�]E�ژaV���e�]Qe1<{ɉ��[�}&�l�$�� �`AF�yG� �F<z����|�o/!�/���f�d~�~%Ct_�8��2�*$rC�L�논�#�Bǣ�G{��[������5Zq��Z�v�Y�`!�Mvu��lU�dc�,�E�(��肪^~�-H�ݯ�C�l�z%x�zT'�.{�*:�����������j ���:�BO�؎� @pّ6 4YB����&`�d��r�|f�CJ�[�A{H.Z�XC`��i��o�Y���*��<y������"���������~_D�p"�-xDž!�ΏN�P�:;�H_U;����#� �A����z�c���岸�m��V�lstk��֍�g�������TMqq%���,���T'@�WoO���Z"�I����首�'��F-��{�&�qlF���@�A��Vto�v�28G����;�+u������^���aA)���O3����PD������Vk��l�ǸWl5D("sT�����R��� ?7ٜ�C �Sfh�W4�i�:�t�i���(L3��r����1��)>s"}�����~*�ԁW&��@���ȁ�����w���3"z�wT"�#��O�ɎyÏ���6�'T9�Y�H��n�'�'��LDE#���X9�����R�'R���^��Y�:��8�����f�,X�����n�/2ǻ�,�h%��S�nH�X��+n���� ��28p�\�+O`�`$i���V�ƕ͈�#��N����R��"���L.��ʞ���(�|�6u�q� ��<���.L�loՈl���𦰙�j�Ӏ&���n��`����1q�jd\s�źz��a�I��nY�p���VɎq4��E^bSfil ���|B�_�'.��u8=FSޛ���R_�@Mm����+)�)O���ɮ'���9���C�.c7�kШ17�Z�@�����W1o�l�MȂ�g�����.ތ3�'S'#��������� ������ۛSR���(�����y���s2���c�����c�1���%&[yh�u���}�rM����wQ �$ҽ7;�dfzқ��̸3�mU<�u{��R�h��U ���;ߏ���U=���d|�����1�AK��p���� ��n�]����6��tד[��@�=rG�M}~���yn#�#�t�O5O����@0�9L�0�G�R)���UVE�7�c�� �����s8�~��K�����u��8.kNgdg;j�(����k���W�8M^L�<�R/�V�������s����cwf=rހ�~�����;�3��\=Ne�����G�O ��y|F̀1T_F�U%�n�z���ؗ#�K���8�/���<rL3�,ڀ)j%kΣ��C?���\6j4�����9�����@)���K����������h�P<�Oy �"D��g�D��D���"6��Cw����W!�� N+淒L���߱Y�>���b D�?`jUR�����ZX烥ŭ�aAm�\l3<%$͟H+v�i���[��pB)V����*)�T��� ��@����d� ���;'�HL�}f����~_�MU9J�4��/�ͯK��|!U��������~�vC��s8�R��q1*��A)xt��� �X�ZPyRPr��) h1�j�lM�� r3Ie&9�����oY�(^r14���8226R�\�R���炤��X�롬�S�Zj�͎i��zw�ɲG.f��1�fW��C�͜��v8�VX.��������J��=��x>O�p�fW�_:/6���>K�Ћ�OLƖ���XE'l+�LS�[���hd�_�%�ᄹ'}9�w�t��hq��� �ᄡ �'�u�3 ��u�۽0Ŋk7ɼ���ڵ:L�-��Wk�j,�*]��y�����A&V�ɟ�nnm}DS����K�,����{^�L�S� Z��$��:����ɒ9d@V��Q�ͅ��K�TǸ5ƨa�tҨ@�'��tz�:7��
Static task
static1
Behavioral task
behavioral1
Sample
7703970396fc62cbd13cae9effc5454e07ec7e6f79c3b41b96dc0fb1b3e1c1d4.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
7703970396fc62cbd13cae9effc5454e07ec7e6f79c3b41b96dc0fb1b3e1c1d4.exe
Resource
win10v2004-20230703-en
General
-
Target
7703970396fc62cbd13cae9effc5454e07ec7e6f79c3b41b96dc0fb1b3e1c1d4
-
Size
8.3MB
-
MD5
af9f41f56c0d07bdcedf48218a53bb71
-
SHA1
9a4872abfb7b01e09016dbee6e979f1e90e60e4e
-
SHA256
7703970396fc62cbd13cae9effc5454e07ec7e6f79c3b41b96dc0fb1b3e1c1d4
-
SHA512
37760ccaba207b6b699d6ed6c249cfaa0c8d7b640b3b13d68fdfc9d327684475c1bd160ca05ee01951f622b3c8165c6e708352bd05971bd9bcc63809edee5c9b
-
SSDEEP
196608:Tv3hXQKBzM67Sk985k0GEwRY5nGNCvHKn:bhAKaXk9Ekhr2TS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7703970396fc62cbd13cae9effc5454e07ec7e6f79c3b41b96dc0fb1b3e1c1d4
Files
-
7703970396fc62cbd13cae9effc5454e07ec7e6f79c3b41b96dc0fb1b3e1c1d4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 372KB - Virtual size: 820KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 132KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 32KB - Virtual size: 440KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 192KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma1 Size: 4.0MB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma2 Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE