W5���}���-7"yE3��< ��Q�� ��!���� ��t���FG��ވJ\[�H�@��S� ��[X>���D�8����ܕ�"�B&FtmF.�\Ao�S)`"��N�??�MS�����(�/0�[�<f��"�E>T���!�����(�'y�^5rP��������.H,u�S��s���� i���"(��3��b�~�����^����{�$U�%L,��Ԋ���㣦ǯG��U1EN?�w�k��iJ�Dp����GĆи��+�?�`+�ƨ����O�������b��֓$�5��^|V%S?��3���� ����I[�m!�DpX�zY3ܤk�R����'Ю��9uU3�dވ��X3M�� ���qC�T�[� ������������^�M��� ^H�����@�����ܾr1�,��X1T�GG�����3������o��b�.��Uz��+�Ԋ���m��&�p���̩���b�X��y��)�h���1�H'��-��0��D��i�۰��@�U�sK#�jCЦ���WZs�q(8���boI����(Ȥ�{`0�|��D*������d4a�h%�������;F%g�%�:�����J�(�+Ε�o���g8D^�R��:)��e��aF�qg;�B z������������s���q4�j�u*�&E�t6�q/D��X\�՚�Vu�Y�t�N���ʟ�c7��::(�`R�-���ѷ��F���UX�Q ���CY����qro��:��������e�������'.<���D)K�a��nW��Et�w I쫮ͱV��WE ��c�]D��� <�}��XF\��ih�Ӈj��p dG��k�eY��X�l��X�q��VD��跒��y>z�����Mb��"�D�6�@�7$�p�G��''��M�+<�����}�F�7�tl�Y{!��w3�9�cPA�Scӳ%f����b֯=�"�a���m?�"�&˿sO�o0L*s��7m�I������Cm�Z*L��ǟq5E��ɗB��ch�-���O��� z`I�~}r�hV�µ'/=әt�iW��SE�ƛk/;���[箵8�ơ������� ǣ��>�vq+W� �/x�@�g��0:v[W�ug�T~����"t3�F|�攪�Z3��-�!�A'��w2�٢Z����|"�3L@v�5m��|8�|��K��s`�M~�fF������A�;0�g��ZC�lq��X�1�_X�@�|�H����2v;�R���Q���������/�<�]�+���{ ⷀ�/����L`e�`jI�����K�|�����J�j����\Ʉ�KZ�d���^E�lNLy����_Q���G��lCmŵ�-����Yz�V�Im<� �gre��`���ī�����P�Hm��*)��i��c�'&�9�Y��!ؽ-���ۃ� AgEo̊8u�3�-1���B=��p��?�~6�m! Ĵ� �&A��i�0r�����v, ��J �z��1-}F��^�����QuP�]Z�"j��/�o���$��Z��f 侊��{�~d�m\��sR��{���V��/P����ɂ�|�j��;�H�z� �����Fv�Վ(�7���Nm�e�3i�U]��~��m����e&>=�8�5�!�� �w��V�<������W?����%+~��>ę��I �ֆ����p: `V�t=�د��q���ӧ��%͢���R��mO�XH�T�����)����!\�k��m�������πބ���u��B CM���ރ���μAS���H�,հ �Z�`w�Ě� 'ȁ�;�v��́O jY�������S���ڃ���8M�c��@��ƨu���#���;��!������]�n�?�J4�����`)�MH��L�`�� �+���Zh+�����?�Nº]�"f����f���h �y�B_��hb�a�5z���1 K#g)�ՇU&���z��z��QWm�Ӻ���F�e�L���0�v3x�A!H��x~N��fNh!��Ȅ5+;�P�o�3�V[WIg�=݆�q��A6k=-�y1ZA��RB.ԹY��I�dG�.�*�����L��$��cp�N�3�K�ц���P�:�$�����RAn!�)A���T���cH%�&�J >\"�s'U8D,r�)�����Vơ���䲤f�L��~�OB�ֹ��������=��v�&�֑������>~�x� U�A{a�Gb����y��飘$g�n^�qTiMT�@HA8�)��0������UM�0U �� �+�b�^b�Yja�oFK>G�Ձ�<c*iE����d�SU����k��A��ل-�b�X��|�%��~џ��%8W�@7��~�������v��w��p&<�?��D�mp0�-��~.�g�Y�G�(�j��A���I�v�^��C�ת�_���}�3]Rn����4ñ5�zr{���r��5���9ܥ��]�nc/����p'<�[*B���+�D���h'�۠uW��`]ڀ�YF��YPމ���x �P.���_Oל�x��ۡ�B��C���˛�{��< K5��X���W�@���k�Q�Gz��ɏ}*,�"�ܖ3O4d���Fj��^ѡ��z�Ӿo�BH�x��|Lu�%b�;Ğ���B���(�z��m;�B����^Hb�G?<��.V�y���!�,��:���tI�M���S�1��]8_X\�� �`LV�Sx j���4i��C���_y�\O����IZ�\F���:��Z��a;(�UN`�� Q9.�2�}�a���ಃ�E��e�RI�p��ij1൴"��K��ſzol Y�1��֒�Y� ����eg�>��q&ٙ���fd��8�=�-�� �ς��q���s�2��9z�@�W5ͯ���k����x�4�L�:RJ��otYg%��X X՚,e��>^�"��V\&�Y���e�˩_n�^d���^���r�`v:_�M�l�w�93��\��N��8� ���UO�v��b{�t�q�ؼ�m�(b���w5��fM�V|M.�SZV�RѰA�#'!�;���)B"������l$�XA
Static task
static1
Behavioral task
behavioral1
Sample
70caaf30d8598a304eedffb73ccb5003028b977c7fff9abd71adb19845abe762.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
70caaf30d8598a304eedffb73ccb5003028b977c7fff9abd71adb19845abe762.exe
Resource
win10v2004-20230831-en
General
-
Target
70caaf30d8598a304eedffb73ccb5003028b977c7fff9abd71adb19845abe762
-
Size
3.4MB
-
MD5
6260d1002f1bcc69c49d7900db160a39
-
SHA1
f929a7381105baf86a1c4ff990188ef6ba51e904
-
SHA256
70caaf30d8598a304eedffb73ccb5003028b977c7fff9abd71adb19845abe762
-
SHA512
95070ec99f9a04ed870c489d4f8e2e13d58a610648740f3caf12359597ccb2d489080d3ec23500dc3f1f830628c975c7c5e381ece70cea0b43d78a7a4c9bdc08
-
SSDEEP
49152:v7J2Hw+Gct69fWR/GOjIHws/1fKzbohm8M5RpR1TgN00eiCjGvVU7D/+n4W:vt6jtumu9/vmXnxGMm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70caaf30d8598a304eedffb73ccb5003028b977c7fff9abd71adb19845abe762
Files
-
70caaf30d8598a304eedffb73ccb5003028b977c7fff9abd71adb19845abe762.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 340KB - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 32KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 828KB - Virtual size: 940KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 192KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE