�i�`�����-��I�����!c뫦����-U���+��R0E���˿�Ӳ�ƫ�Vp���݃�e?!fF�n�̸(W��t;�Q�=���� q��?5�O�ޔ**���ox�JF��7�/x�]����9�A����}s�C��)öL�#��+Gg6e�(����j��Ζ������+��@\7�g�0�p����K=�TZ@+}�F)O��*��S����V��%SA��@+�7���.��+b=�����'� ��s�)foP�K)ڈp�X 69�U�6�����_F��������ƌ.n����fK��Co4�>g�ą�Mx�S��.{i�����&y"x�"�0z����lG=v���)��6r�� ����V>=-�2�ڽ������s��KGO�m"Ԅ^��?6ؙ&RXC�d�;�. L�jh�ư���%�h��<�sd�U���\����@���M�ƝV[m���'5T�����ʢ�pZ�V ����?{[?t���Z�������E�,�?i|W���l������ �t ygi��Z� ���K���Pxmw��Z�Pid����O�gv�g���ԕ+_D+�p�W ��o�����R�o`$����(��:��w�U����V���ŋ!^�m��b%ݺDݻc2���#kʄO/�s����,C������U-�* ���T�̘ģ����{Z� ��m}=am5;�X�G��s���g�"�O=%�T���П+�`CU�m�� 4��d�8���ϮX���b-Y<��)"�JX����C�l8�q\�2�Q&!AK3W ^ �V��g `@���?A���aU00�s�0��J۸Yy3����N4yI�� ��r9�2�b�M�-�_ao��(pf7}P�H���KY��l�T?_|���*����4�q���|�E �Y��(����lT-���8��"W�Ju�c��8����CI��y�6��,���%���%2��2�IbB>1�i���ogvrT�a�)�4��l}a� �#�.=��d��#5�M^#�7 .ېh�2����r?���� NO����"��Q���^��y�~g���L�7�S�}��,�3��6*RJx�۴������y?δ�e ˋZ7��b�ڀ�)1b-���XKag��z���!�:�)+��I�4��!��'��W��^0�zFe3���qQ�P����%�֪0�{����7�-��;*#q��_�4�r���*:�{ܗ"*��v(���wJ4�Z�}�� j th�ɟ��+z�\�<�k���Y��"z"�I$�4[���"Z� �"� QPJg!#G7�lE�P����'ri�����R-�~�-^�F/��=^L1�>yw]��dž���º���E𥧺#������Vo'�j ��z���ͩ�tȴ�?)�)�(�QdGv���x��?��Z玾.�PB:D}�݊�����xj�/�J�����aC &Q+�pcc�:d�_6�Q���B�u��|_�3���*�j����kc��M��9�Z_B����@ڂEKk������U�Q�/R�hǫ'GOp��W�"��Jƈt�K,�r����J֝��h�sE���g�'h���/���`���k,�X�S���۳�Z�lB��pǸ[�a���*B3�} ;k���漑���xFG����tC�w2V!��do��z�����ڐ�g7�-e.b��(����(b�uq��7)�^��p�w�����\����'���Q�2�0;䉵���R�ײ�c�O[�Iy��q���z<~ة��[��A�7WP)�a[�����&���B�K����w�W�I���Wb<��]�&���cO^��.����l>��3"�X�+ �%�/ �(KA��{��<+��v����dC�� �.����Y�+�����4g ��/76��Rؒ�k\ﰠ������YCߢ};CX���9��R���L2[�K{e�;yN�e��O����<+�P��O����X�@���i��Oh�^�~��U8����.�fc��Fj�e��*�wW~䞞���>&�/~��@�����j��0J��Ϻ�\��(�c`�-V>�3��ҝ>�6)}?�`�g�:���Jy�0�I���/l�����ܡ�X��^a7�m�>VS�|X.\W�wn�U�v��&�i�ah�7@-]<N� �߳$�� �訠�Z����x�� ��ɲ���C \hj�T�m!:� A��Η]<lF�$�q����o� ����<��;ld��fmg$�i��WX�e{�eK������*e���@N��Ob1����.�J2i��!ʈ�E���ю�)���Q��b�o��8����T#����!�GGq�ȮVH�Ϻ�Zn:���j�1��KM Za��)�l��YW��Ҋ�y'��e�^��Z-Ū $�B�-F\�;u������M� .>�������O�!��Mĕ��O��&ܰ���#&�=]����w�;�����o��u�����~��(��0��I�m�K�A�C��o*��`��x���z�,����O���дǻ��J��Eع�r�9��i�5�в;�Y2@�2N�a������F4��E[q٣��'��C�������3�)�J�'��>���4�vP�L�j��m �E�o�� 0o�q����L5�98P 6�p1��� ���ņ5)z;F�,8w�ATO��dW�O��� s̓�.T��������ꈱ� �0��K8���SIS�I�3���j���q��%u�6�GO��������7�_��-�2Z�>���E(���C����)@�˒ܘcl�/��G�0�36l*�������F�T=W�b�i�\����<�u?�����&��A������+�4�?��d���W�x��L.��/s��.�R���9{�o��l�d�R͙`��g>����\:� pɓyH �Lש����}�j�2j�`X@�wxM2���C�}��}㵟1M�H��L6��]�p�6F&m �>�%��L~#�Zl�n������v;��x٪p��R�U��r��9ϩ)�p��B�H�S�Y�,ME�������,h���@��R�������IN����bd� �~�{��Z���^^Wɥ3���.oD']Π+KY���ex��ƒE���ϗ��6��Wf�>-��w���Y6�4~��]&r <���p��vQ,�C��:���3o�W��K�x5-2/��K7| \CUn��U0e�������#�i�?}��>���P��NŻ�x��2�-''hC(�X���]�X�1n�(!��`@偭� ��eσ��Ӑ[xU>�h�@U�D�$�p�u�0��<��H���l�NT7�&R�J ��Q95�ep� w��]�.c��^�6�͢�D/%1Z"�̾�K�όJC���4��3��Q��Au����W�/�^|��U�ql���X��i�誂<u7�˳4i騊����n F����L*:IM��=�L�\V�q��� �/~��Yw�4t�_;��C+j���� ��c�q����ȃ���VCg*��(�ʹ�p#�h?�}��3���*7�xk`������5�� }`<R���W$�ЉZ����#���ήk�c1�zv��R�}M21{�&Yw2��
Static task
static1
Behavioral task
behavioral1
Sample
e7c22342e14b0bb5f31b5b7c1c42417ae31d108c4ab7a251ba156d4493907274.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
e7c22342e14b0bb5f31b5b7c1c42417ae31d108c4ab7a251ba156d4493907274.exe
Resource
win10v2004-20231020-en
General
-
Target
e7c22342e14b0bb5f31b5b7c1c42417ae31d108c4ab7a251ba156d4493907274
-
Size
3.5MB
-
MD5
f9d8ed5e485f403a69a0b1b94c6fce5d
-
SHA1
d131a69cd72d45efcdb3b7b6518e65864689a325
-
SHA256
e7c22342e14b0bb5f31b5b7c1c42417ae31d108c4ab7a251ba156d4493907274
-
SHA512
7bb5cdd670f79d1a7e14ec2f66bf1941dab14329d88c83605a84bf65ecee8d0604947a374b05d6491c33e6e9aa47697438a76eec6423528956bb4295315f2d23
-
SSDEEP
98304:RPZ+M9qNK4kzmwbJb7GqKh9RWYgDNgwFH5wBCQT:RPUBAJzmWJb7NGJeJt51k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e7c22342e14b0bb5f31b5b7c1c42417ae31d108c4ab7a251ba156d4493907274
Files
-
e7c22342e14b0bb5f31b5b7c1c42417ae31d108c4ab7a251ba156d4493907274.exe windows:5 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 10KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 319KB - Virtual size: 896KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 106KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 272KB - Virtual size: 11.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE