�;�ZqJK�pd�l��r��)�g��gKX�j孆���U�������j�"�N엙����r�yv����U�6JP���9!��d�t~�5#�/O2=�9r:���!]i|�-�H�^uf�.�U���p��i����ܬ/r�4�9�+Uj k����_KsHx���M1�Lm��� J|� %\��vc$� ��k۸]�M�xm�����h&a������r��.�Fԫ��\��6���!�[#WSL+�-k�o'��Vc�j���聃� NZxTE�I݂uLK\����X4���=��K�ZG�f��������ᩘ5����@s��s�J'�`��*]2%ߪ����|�����7[��Ӊ��m�����o�f�x���>���Z�W�\}��6�1����\���8���d�</H� �'n~��Y4�ٻ7j���I�y�&�#&L�< }1��/�`�� 1�8ڑ������ه�>[��2�����Ӥ�Tuc ���2��R�m��؎X��\-�/Ō�.���b�2�8I�J���)��D{� ta1�=��,g��Ք�6�L�e%�(H���ݎ��$�(�˹7�'X����6I'?B-�����C�YEZ3�0]���m��g��H�mo9�TKc�t%����-��J��_��R�#����Yv�����1vXB�l�jwv[��俌b���= y��e��Ü.��)2J lsXي��#?���9q�^�u�#�R�BCte�I��3O�y����Q��y���7�}��O��G��� ����,����M�5@m_�o�����Z>@o �;x��Y�5��y�oG��=��fY=B2��ʐ��^�056O�b��(���Q�kAy��� *K���� ��<�[��c6˭�=���;�/3����k~�5�k�5C[�۽@���ʶ�� Cbks�f�=W�K5Nw�N>�gc�46IA�~�^�ۮs��0�yˇ��NMB�D���������\�8 u�d�][��9k�BP��2A��ң+���Cgnb��\V�����p��A獤.��T:J���~5Izw,B��_Ra=�/N�DԽi�'���y����]6�*�RT��EU g�泈du�qI��cd�h��q��$Pap�bK� �n��> r>�o���@���� �A"0�~�!)�C��~y &x9,-YyW�V[��Xt���ެ�|ѥf�l��BW!A�>���J#8�͖1�ԙ�8ſ=�ޖ_���ӥ�9��� &�C���A��U�9hG�p��Զ�!�WaY|\u����;!�/>�oZ;%�L~�d36�OM4=����E��˄p5�--��%�Pb��V>qqߐ�7��M��&s��/RȲn-;Z���Y�����e��a��;����*r�0hD��I�%Q������!�ȨHd�WX������i�A��$�L4���I�_�V�Q�PuH���T_�I��2���J�e/�5��I����~���غ@H���@F ��r;�9�s{uv?1��G���&�n L�gR�M�63��*H������7�Z����|�̛K���^]�̳�&ۋfF�!.d��5G��K����gI8���S]J�>�����?�}/��~��]=o��b2)Ŏ�<IE�Y�j@�ѸCí�4���7+V��MN&�R�:a��9ު�����#��H,��|��^��� S.�9C1��{B̹7ե��*�{�}7���w~F}.�j��TdcM&RJLez���������E�[�˛��>o͎�^�[�w���[��埡���m�U���c�7d�Q�]���1����JnhҢ��PCIv�A�J����P8�T.�8�{��v��}ʲd�Q��)44閌�vB���=|�,��pЀt�4�Y�T���n*L���"��kK�/V�umꬰC���Ĵxx� ���_0O�+9s�d��%�:��Y��� �K��:WR��2l��t����-0��ہ/G�_�c�}�~� }�NC������iȯ�Ex0���Kh�l�o�X?gM����uN ��R�%�mU0�e�w13GfP���y_q]dy}�'P��|��6�8H�,s� 8�y��7�^7�c�9{�,ؠ���1��13�����3�����>��o����KG�r��������������vɢ!x��ȟШ*�Oi�\�PD�b��1����3} ��~��u�����N#u_ml�̈́:.B��fA#�=Fãj-��(C�,*�A�����&�س�Rָ����*Ԝ+w#�B4[�^Z0��n���#���7uTc�:�x�����X�&rs`�����#]��� ��fK�U5̧�7T�ʛܶ+�.�LtW��c�,c.ht#�nJ̒��Qv��`�4�k6������0g��VyV@�w{�D9��i�FHod��x��R�U��0�<P�������o>�Z��&�%��[��s.���De��{@6�-��>DE�x����_��Ў�A�u��,��o��B����p��U���0�lP��;�!��� HA.�E���*9{8/-��c��mZ��u$� ��.�|���c�h���fՑ�0"I�@�� LV�H��,:���:��[��y@���������CY����]XpLk�.���m�C�������WUo4pE-��5V�&)HV�l�V��?��;�A&�@i��[�7����M�j�xզ;^�1� H��qm�@��#ZS���Y �=_���������LH)jۀ��~�jtJ5oc�����qoq��¸�p�~AiA�1��ȻG����}�3��@��%�P]o��%�t��Ws�{�VZ^�_E�$1�}�&3>�# !�j��.� P�{}�0'�qj�@!_T�ڬ!j��X�j�� ��z�Ȓ&��H�Fn�h�9>���G��0�[�6w�e�������+�8c��a�W3%��?Fȡ�}�\7Ԍ&�����0e6��8�3:{��˶�DJ[>�R�m�e]+�\�w�>�-n)��O�·�=�:'�v(#8c�ڵ��Z��=��*�p�&<W��Om�!���
Static task
static1
Behavioral task
behavioral1
Sample
39e0115812e2cef7d5770d8576c23cb23850d6c8e40896b3e944475ee67bb9ba.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
39e0115812e2cef7d5770d8576c23cb23850d6c8e40896b3e944475ee67bb9ba.exe
Resource
win10v2004-20230831-en
General
-
Target
39e0115812e2cef7d5770d8576c23cb23850d6c8e40896b3e944475ee67bb9ba
-
Size
3.4MB
-
MD5
69ca87f8ac7ce99c68aad0f04b04e4e4
-
SHA1
179a1fd5c6895f267bf9ad9bd12a72ab8acdec06
-
SHA256
39e0115812e2cef7d5770d8576c23cb23850d6c8e40896b3e944475ee67bb9ba
-
SHA512
8fcf3d918bc72b3332cb1065cf89c9e323844a29d10a1e094d4cca942d3161fafcf0f44823e38ac22c10264436e6877331eb2b6ee8e87c42cd7837322783d7ae
-
SSDEEP
98304:ZFXfLvAeuV4oULuHnfdtYj1Npv7AvTkmfnVl:PXj4XWluHfdtUF7AwmfVl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39e0115812e2cef7d5770d8576c23cb23850d6c8e40896b3e944475ee67bb9ba
Files
-
39e0115812e2cef7d5770d8576c23cb23850d6c8e40896b3e944475ee67bb9ba.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 725KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 89KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 65KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 265KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE