ZGY��wt�xS12�ѱY������i��>�.���!���@&kȰ8�8�@������̾�]����8�������fj�O��i�v����l� ����x|H^|�����9�Z]�4-�>٧���Z���7;�QP3���h��:fh���e��u 1a9;θ��GzO/E��V⡈�PF\|��J�a���s��\���rQ�ܪ����9�s'�L��s�/IUTX�ኧb�2q���4)�:-���U�&��т�UB���"���]�<5�s��:��&��d���0�fx*�CfP�y����!�>��_�h���2��"�b&�^�B�a{�v� ��蛈�� ����E��e7�a�I�[p���Z��g���Wto#��,�0�d���K���/��( 7r�~�]���A�C�p�7�HY���&��*�.�%�9�m"���h� ��1�T&a������"m���a$d��!%X�`f��.���0\��Ɩw�M]���ԇ;sX.5��͌ ���Qbs�^5�)������yp���i��C�fn�E�ս5�.5o"�d�����!�AOO}Sf������������WB�!]��6�H�ZhV7r��6����9l�T"5�����JF��q,�z�R�_�xʬ��\��Ж����� ��H<�Y�J/�X��$�I������L��O�s"N�l��}����>��~���YI<�~�c��P��Gf���:��hND���р7���%a�)A/q]@*����$�D�� ��D��� :{ 5r�zbۺ�L��t����_�W��B�,q�����qyܺ���݃c�����tU|H`3dP@��3�ܑWlW����q���H ���$���4��2ѧ^0"�aFo])ґ�)䠓��o�L���W�YD��|�K����4��*ۈ&w�aO?q]���Q �?6H�6�YE�áǬ^}.��S�`��g,��z�m-�J+��J����T;�mc~ �V���Q]�I��Ϲ]�f�L�$�+ۉ���]�����9O����۔I]��� ���M�J~Y��30}���Pc{�ޞPo���a?�pr�P��f8�eJ�0֥�I��tc68r?�@�lMC������̬��Y����;����;P�� 5? U��Dx��Vc�-�� �v���=�%j�R�O�WM ��۩_3���bh�{>4(��rd6_}��i�RV�&DH\+��O`���-����W��W�Xy�J�t���E�,��N��������"(!��]��?�K�~���d瑠V�v����}�#u��CG� �S��o����s[�*{<3!G� ��n~~ �#5�y9*n�.�|y�:�p�Huh�(f�1�j;����R�ܒ\�a����GK�JF��rlrgX\�V�8�1f"����lvsTfj1����+�D7��Ga &���D"@J>��E�2�W0�\�����D�Y<�� ��e�m�#�ћ]� ���D`�{0÷�D�Pl�b�#�yn5�� D��H�$}�];.� �ă %o�z��_�M�E+����|p�5�7��ԍı�'�HOK�@'�^_ġ�_�m1��%�����Yc�}g!����y�W�3B���&��7���s��;5�W���3$m���3}3�l�`H�w������O�a���%����yQ�P����= �g��+��ǝl�hV� ?=���s��H���z��[:[�i�3��2�G��,�-������q��9G�H�����܉>��zƪ�G��+GF��Qw�ch ��R���'.�Pn�c�25�ɃK��{=��w�(��hG���O����?�[�e����Bӯi~�G䐈B�����ϲ���2"vG�vr�pOD�㱫�X�8�n����4���Ux�������7RNr�D$����(�Zo�@䜨&�ztFX{z�θف2 ���K0.͕���og��c`����W?�ǘX�R�h�c�F����[�A+�C7A�'0쀖����9������{k��6�";�{�xT�?��W�hBvՠH�������[��eS�����(��<s�m�q��S/A/zL�9��#�}�E])� �D� \Gx�{��H����������gX;u�O!�B�)u���^יm1ɗ��*X��O$S5�v��̓�+��i�v��E�N��XѨT�(sG�^a����>_�=��ƥ���~�\�A��t7�j�[�M�ZjP�U�T�d���}_e�ď9���o�㡪MO ��?���1q|Q��H'T�}B~}=6���:^*S)��{�������b�]"�^?Y�cb����&%��y:��\�9��1���H���}�Ƞ�k�p}ޞ�\����i`�fmܽ$��\O�p��l�Q4sX�P���7�ס O�N�V����ڃ���g��w�,yF��2-�^���&ؔ�)g��L{(sƉ(����})�^ˢ�G���v���T�nGP��،0����n;Tș���Z~D��>���-�|� ��Dn2�G��vjAǂ��VDdaM3s]�V��̩������Ȫ����|(������ҋy�;����9}�ϫH9�:̽���i�t��6s@�6��쐳"\�!~�����ܼ g}7<Â�V���ѕ�`����Ԍ��ʆ�χcT�K��K��A�ڂc�"8��v���̆��JԨ��5\�9���eĽ�b��6z�s`B��V���G��*�߇b��b2-���E��D}�m�}`�������,ƞ�x�T�$�����ȅ�5ü.{�����l[�@�4_|�����{���� dk'>@����3�H���Qg�#:��qJ��[CS�"�ל7�l+����l�C�|sR�﷿?t9z~n����{;��T�N���aR|�t\%�l ��8��_�U(P~F��uř`�佲WJk̐ګ�N��rwք�)��h#ϊ�qm�\�N��b8 }r�r��Fm %���K�FN�kV��MW'�x�n�$����6�Uײp�E���63 ���:C���VE���>I�)݁�>��{5���͜�Uz|�?�c_cbT��� rY�����g��b���yl{�d����<Ŀ��;Ͼ4�� �/�P�6+� ���tB`�ҺP����=�#��yg����A���F�R\o�`<*Sk��:��'�;<�݊�-�F�z���k� QM� �ޣ\w�
Static task
static1
Behavioral task
behavioral1
Sample
3eaaad1ab77d1006975cd064a3638aca4843b68481d9c8b3f9c419495d316125.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
3eaaad1ab77d1006975cd064a3638aca4843b68481d9c8b3f9c419495d316125.exe
Resource
win10v2004-20230915-en
General
-
Target
3eaaad1ab77d1006975cd064a3638aca4843b68481d9c8b3f9c419495d316125
-
Size
2.8MB
-
MD5
4eb8e936c956fdb7f28403d5c6c55e36
-
SHA1
aa3ab70d625dd697ee81169b92b2c4cdf405803d
-
SHA256
3eaaad1ab77d1006975cd064a3638aca4843b68481d9c8b3f9c419495d316125
-
SHA512
7ad84a34d66fd41b3420bdb90127513a70a60bb67415cd961b3a15002467dc6bba400d3fd2bdec01890f00e3b911b5fef910bbc6f3f3d04ce7afdd663f0bc514
-
SSDEEP
49152:5gNxiqlv9cPRGJkL/3XoLH7vXQH5KPQWRS/AqkIzhoZv5/gdyf+3UU5:5GXhqckLQHjUK48S/S95/gdyf+3d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3eaaad1ab77d1006975cd064a3638aca4843b68481d9c8b3f9c419495d316125
Files
-
3eaaad1ab77d1006975cd064a3638aca4843b68481d9c8b3f9c419495d316125.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 367KB - Virtual size: 796KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 31KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 43KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE