,CK�H��iV���r[�$wb'N�3�P߁��U��]_D&ƹhJ��� 3g��E��E�%��V�~�6��a����v/ڈ�ϗ^5|1�Ә'� ~?Ş�̒���d�������+wr"Q�k�g�K��|��0�3�J�7# �V�^Gޭ@�>�4 ���>zQ��|QW�ɗ������,��5;��3�G��@�<`3��j�D<���'L�zU~�+ Iq�̷sh���2~���P��tv�pX����Z�8ۯD�̠Ӗóz�9�$����$����.��:��@)+�D]l����J_�kQӖn$� ���}*���P������)n��1˒-q�Q�"l|�`�$ƚu��;Zo�&�P5)�3�K}�C�^��U�FW�����`z�#�*��!�{5-���5�n� D� �XG����.]I�I�&�x��-g`��Px+E�JlЀ�C�.��ķ����Ѡ�QI�=��������^��S�wʍ߂�� �±����E�p�vj2)��Uʏ�p�����õ�nć;�m�ޔ� O>l���\�Tq({EEU��� ?����&�D�=t��=�w�m��X�T���{0ƼT���$�>?�j/��ɀ���3%� Eu�����&Fa��צc�[,�i���}�������+�ᶜ����\��OY,��Z��{���'������f��u�b_&�ߛ�>V48��Ȫ�XtuUn���"�$z�G�zXV�udvro���)��;���nC͍���S#P�Y�꣗�bWͲ��~�����S�DeT^M�ʚ�HFU���PP7l���Ŋͥװw ���'Y�'ik�>�C��;��)��F��˚��.��^�Uf0w|��Ա��U�w���G����7�I5��� �[�h@�X����X����?A�q�$8<����r�Ps����������UG[��{8g�����h�K�l$g�߱���s�{9��h�K*�!~*8�Yd�t�(�Z��{�� �3T��d��Ó��:.�n7�?����IJ��� &ԋ�fd^:l�<���M*����\Z��|5��#����;�3� cUf���>����i�����3�=������e̻��ܼs�0�rSn)�a���?�7d�5tz��0�2V�Bu��L����<S�w�E�'} �S1R��)�0��lg.�T��>�����>O��t}��!�_V �U �w�Iݥ��mF������4� 9Q�Jvr���Vl�E��x�?5�R2Xo��k�v�� �:'.���dV9���@��`;yIG띉��sR� h(r�?L� -��wW��� ��D��[�f��/Ԡ�*@%�`� h9hb���;��ø�7:��:ʁ5�$ݼvw������F$F�+$=�؎�"(C�*��r+����Y�Т4�L=Uɰ�� (�� ��&i���D��5H�@���v�|5��z�!�ɾ3A�o��|��`��ߴw.�T6#K� 4�W��5����1�%��9���x�Ft�s�V��K�t�힠��ѧfTq�i���#{��=���"�>��,rຽSz!bڕl��r�u;)� ���`�_�\�8���Ԍ!�9�[�hFn�D`��"AG�JM x\���)\eoIڲ50.G��;�!�E~9����l�Fj#���h��g�u�))�_�/x9^/���r�"x��--E�C�}�����MO���=�ɟ��9CXʏ?�XFc�~V�(�(��o���x6:���1ʾ�_��Q�+SwC�Sፖm�Lq�*�����-zͿg0N��}Om���nR�q҃��~������������p��w�~w����eji^��,j���i�� &��&����n׀�ѥPG2s��-/�¾�g"�bC��,YÌ�-璬�C�;V�B6�G� ۑ���x����f#�G`4x�ƽ�e��F����\�ss>�P����8$ժ�+�)w���+�0(�B7侊mC�O���>�5%Hª=��M�� �.�ߖ�-�E@!�I0҄�ǃ\P!�F��`�NF�J.dNx����؍�����o�T�6<:鏿OZ��.Z��M�d�n�^[�i,�s���9����٨[��G���x���}�h�Ggw:5a�f��\BX������Ofy�ꛢ���!�>>X������N��>L!��s61��)vHd �LW�zkSh�k0�m��q��f¶�a�hI-�c����SL���ӈ���¿I���s7�*�*q���H���}����1������0/��P%�/f�o�{���_r=]y���kA+���mb� �au�-a�@�����z��B��ՈY��ҵ�*堋�B�N���$�����v����P*��H,��);E2�Bg?�M5�I�K�h�^ ��d*�O��)���$d���~-�g�� �2jW`�x����W �-K�.��;P;p�D�5������k9�2���C��I�MpH�}�ϡ~G$&�dUƇAsl�x �F-���!�-"�1�,�Y�Oɦ�su ?�l�"�������4���.wU��S��˟�~��=|�HQ�G�3JhC�L���#Fw�E0�V!�T�H#L�~ �ѢLn���e��/�fP���_� k��Ż�2�;�?$�[ҫj�"yU�:�h-�����h4n �h/D���n�(M8D4^���Aк�Ŝ�[���f��ŹM��cб|�f��&��u�j��z(�7aU�z������nC��h��j[�V<b�1�VT�Z��9��W:ď�Wk��B�>�0�d �ǽ'^�v��L�H��/�^Tyu��z V�9�c��6f�d�آR�c\��im��n7x�R�pal%Q��m}G�]����X� �g���K�� �ۉ�(o��-��z[f�y��� Bw<{�� �U �,,?�?H�{��L6]q�z��!9�����<�&���*�7JP�7U]��Ԋ1ϓ J�9�F�������)�o��7�����`�˰ s�}�Di/��Z;�D� N��08���>�Xʸ|݇��^�Ǐy�z�%��Y'���_3v����@�&���[8e�W��f�87�cߜ�zL'>;����Flq��ZW�?m�pHupx�밝t#��A�x�>�� ���Gs��.�>�X��v��S�w�5��i���BH��[� u�<�o gNU� ҄��G2���A��gIΡ���gx��Φ*��>���7A�q�� �U���<W �̰6�n`��89���MwA7ҿJ���|?g�Vzv�I�8b���͉�x=��:s��ȼ�7��T}��Ʉ�S�s%db�4�H�����ڒ�)�:ta�%i`���njc�9=j���r5�U��:z �^,���1}@��w��"%�`̦*��I� K�nׂ_��0$��a=[�$����:��&##s����Q !�f���dϑ�d�l9�y"4���gй$�6m�p�盝�RRB�Z7��-$z3�E����u4p��R��.X�1�8g6�:RWA.7�i��I��y����ˊ�,�p�{�inӣ���iqb�������5�E�h��p��2�8���n�4�s�&���W���V6�5Pg�]��A&����b�=6�d( � ��-.�-:������f����J�Hm�~w)қdu�x�1�B{�����#4���p+$4�kP��g|���
Static task
static1
Behavioral task
behavioral1
Sample
340fc5a9a1444065860e55b7b3f46147d6469edfda81e3b7d31cc30461b67f92.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
340fc5a9a1444065860e55b7b3f46147d6469edfda81e3b7d31cc30461b67f92.exe
Resource
win10v2004-20230915-en
General
-
Target
340fc5a9a1444065860e55b7b3f46147d6469edfda81e3b7d31cc30461b67f92
-
Size
6.4MB
-
MD5
1f5c35dd6f12fd6092284192cbb6f710
-
SHA1
eb9bef5269631d100df72f6b42a31349e82c3de1
-
SHA256
340fc5a9a1444065860e55b7b3f46147d6469edfda81e3b7d31cc30461b67f92
-
SHA512
7ca6d96842ce5a075d69b28863826074ff00520d7451ed63f9d88aa92bea08d8d1cb208ca8184e3c1db07da1319021697074ecff1a3ef22c79915a7ce5930eb9
-
SSDEEP
98304:PoH2lOc5rlP6/LnXpt2mPAEea42xqNeAkK+zbjNeUPbZPML/PPiulHhElT:PoWlO2l87im96NyKoNPbZQ/PT5hEh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 340fc5a9a1444065860e55b7b3f46147d6469edfda81e3b7d31cc30461b67f92
Files
-
340fc5a9a1444065860e55b7b3f46147d6469edfda81e3b7d31cc30461b67f92.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 2.1MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 258KB - Virtual size: 1008KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 13KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 359KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 397KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 198KB - Virtual size: 10.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE