�Eх�>F=�4��F�O��o����{���sFG��Ť��QnNBi�'�т�6�����9:�x$Y}?�^ ���w,�IN�D�?����-����d֦9#wٶ���[|��&"����ť�(��T���D}��M����:��P ��9�i��7;$ �ƣx�$������v�ж�?3������ C}��wE�ԏY%F$XZr'p�Nw[=;yG -�CX�5Z��y��h��=5�j��3�ɝA8�������h�(��:#Lc�܊��1��(����}�搇y�߽om�B����a�D��s:�T&������O��O��2�/#�����l�H h9�R7���Vŧ����ZZ��AS�N46έ��~���ޅr�ʎR�I(#_q��9��+1z,��j��Y�0��!�]���tI�{����ژ`�%c3o�S+�~D,���Rs�i��Km��j�3g�=gB_�#kՔܷ�L@�Y�� �K����E��L���/���ų0{���O�{�zT�є�x���/��'[72m�������1[�XԪ��&�Hi:tUF�'���j��������v'�d�K�{����;��j�y�Q�8�*��?>#5, D����ɷ�[⬄*��Io{jة�4���[�@�ӭWѧ���ȰP%W���v�sS��=�ӱL�Upm����7'��� ���x���hbl�'3���� J�Y��`r��;1y[y�э���[]�UEe��Z�������g>-�������fxc$�[?G+ ���C&���f�eMܷ�����v���m���G��=�xc"�ϑ7�A~zU�\�o���� Ӱ������B����=Y�]��/{�T�����������J�U�y�����j��ƋXř30�Л�)�I�|73���<�V��ƟPt}�gQL�'�HU�n�O��噮]/�B��î�8b|��$$����(ͭ�l.�d&{j��*�w���2�!�w�ٰ<;��f]���3���$��L�M���=)ˈFR�û&�}$�KN��9�&�Q_ףJ7�F�_����b�-�f��r��LO2�`O N<��'�V�j��5�>�>���t�8T>{f���t��+^���@��s�d2h�&{��v�m�P�'ܣΓ�֔���t�%��h4E�͞�( h��,,v���Z&V��(t�+�w�ۢ�� �d��7��� ~�v�}7�n.#W��u�)z{xS�Ԗgz��ڙR�*و�p�і���fr����ǒ��"+�w+��v�~m�s�H�lC������9W;e.��6LJԜB�u��%���[R~�Nh�I���;3��4 �`y�Ӡ�j��u�2�>�P*��b�:tb�$;b~e��0�Pr�j�~�>:/� w:�+[\>u�$���o��C������*�i��v�~(C���o��w���ژ��Z(�3���}d�C ߵ��EƄ@�Q��h�����|�M���/����3���,Ѿ�Ӻ� qh5���|L���9X��\��L���*BHl�t(�M��%�!�+I1��jWcp�`_[+N�p��Lܧd.�d�_��y�̙M8��@�s;������[�!��O��9�p�((b_���jg��]k_��s�e3^��x��&v�����aX���\�����~��f"K�����V7:���z������Z��@^�6�l�1�hy�]PV�۠o�-��W�H3~�>����"�Ea1�m���bmY���.b`�KV�I��D�lK�m��4k�L1ra�A&����˶��@:P��R�<��?R���6��s��T�y&(���}�����=����U�@�X����#�h)Bwp�6���6��8R�Om�5�XT��N:)��)�M*��9e����_2���-1R#���i�gF��-Y�M̦�p�����B{=MMx)ۺd�T�L��&�h��Z��L>��� �3]�����aM�n6s�.����P������w�"����+b0<�����e�f�v����+�!�_(<�R�ԝ��Q i�ƪ. �������r�n0:�չJT�"�a��AB�]M��0TŹ�bʓ+����8]����AP�.ANy)�Q�ٶ���9����-��N����L�=��] ��9A>�?�/8NS�.]'�,���w����B���E#��8����0�j1���L��P���D�/㈿�\�����xr W��X5x�e�N�Y��wk���q2k�Ȕ�Oj�Z]���ɉ��C�Bp�l�rr�^59hi�Ò<}Oq�X���o����gGK��P��RnL�QU�=�3�aG��=�8�� �#�����)�oyx��R�<t=�DB�x;��� ����F�������ʟE9X�T��BCƄ���Z�����Γ�!�M�a��FTK�34W�Q�W�$��u���^�~�FZk��#��y�k�Yl���pڨ��b������ G�`+�3Q����u�F�b����b_vD��j�������u����a���ÞO�m��)Ey���#G��/nm|B����эVZ�?q����=}T�k������j�Ɉf[�O2���r��Q��Ȃ}�s�@o�-���5���KRBll�m���0�t�WGl��&���xQ�ݿ��E3n]�RK��dԜiO��iQ[ZH>��<���պ�ׅ1�����`P��{mT���&<��[�(�����MA�p����"���rACӠ�����>�*��6�S�48���sZꌕ�!K�G���<>����������f���0���x9o��g��<;y��{�-�a��=����̘�\�bB�ϯW�� GV��co��ĵX��t ſ�A����$ � w��NM��*ō��[�uxXz6WP] ?=�����#Va� pD�B���� m���B!��Hq$�Z��6����[ xi�'��]ntL� W��S$[��i�i���d MG�ߡG\�T�����m3�{� F{\��H��>%�>E{��2�2�g_''Pg�u�v>��4~cW���>"�M%�VJ,�3F8
Static task
static1
Behavioral task
behavioral1
Sample
7c39fd8864542a36aeed4bba476b3d26.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7c39fd8864542a36aeed4bba476b3d26.exe
Resource
win10v2004-20231215-en
General
-
Target
7c39fd8864542a36aeed4bba476b3d26
-
Size
736KB
-
MD5
7c39fd8864542a36aeed4bba476b3d26
-
SHA1
d859af81c8dded6df09ae133c67e5c8d4f23420d
-
SHA256
e7403dc72d625e25aa920c4708786f38a1754a92c780f5bc9199514313fac548
-
SHA512
2aaffe91fef0e755df3818227f986e8fbde9d9922cb4fc80c4b350bafaa2e34d026a3fa4ed531928b1780da441488d6fe384aa8f92639e8f100e065134b7fb98
-
SSDEEP
12288:x3FJS8v6aOi66CrQR1V9LwqwPdOrXcbk5p3wgJ1PYi5DTDrYkk4hIG5NCo1rXSfS:xWaOVLrQR1Vp8ScbMwgbVHDrYkk4L5N7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c39fd8864542a36aeed4bba476b3d26
Files
-
7c39fd8864542a36aeed4bba476b3d26.exe windows:4 windows x86 arch:x86
f17e92d9991907fd3b4c9c51d89cb7a8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
EVENT_SINK_QueryInterface
user32
MessageBoxA
kernel32
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
Exports
Exports
Sections
.text Size: - Virtual size: 664KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 434KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.se0 Size: - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.se1 Size: 724KB - Virtual size: 720KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE