i߰1�ԟ�fƚ�f�Z��JDA������KrE�#O�Y�{����I���N]�c����EW�����mJ&F�K�Q�J�H��B �EI_֦�e�Z�0��C���Gc��}�2Y�WN�3�-ֶ����S�C%��"�<� Cλ��K�"�{���� �O�4$�L�][�@h�R���a���dE93bӖe���V�����)��%�pv#_� a�5%�C�Gj�" �q�==�����H�Jn�!�p+g4�*��W��;��c����ײ>k��.�7a����3�������A���Z�.0�a2ݭ"�x���,eEn��捗��b��7�ԴyI�L{�as8��74�ȉV R����,R�S|Ћ�I��w�����M�s�f]��nMz�d�cFp��|�l��"�g��K6ֈCk=D�q;���@j(,��t��7���]��KJ�͚�l"������y��M���l㌤��ש�h-�Y:~�1jm"����h����9�c����n�T�H��'C���eS�(���|� s�Ҵ�2��1~Bkٰf����9����4%�f%� 㚵e<��(���+:����`��m��A@;���ߌ������+5��������1���'y�����'%�L3Ί�:���U��Fdb �O��H�@O�?*����f�8����a9�b�~Z����Ҁ���:,�, +_Ѷ����N �y�J �,887ew�K@�;ʰv[)��:������]���.w��I3)��Q�?��l�~�D�����.��~�ټ!6#,�4��v�Z��G/Xh�\�'$p@��ǭ���J^,�h^�h���u3���f�&0D�0��<��H��ϡ�$I�0\�t�(M�A�E�����^Z6#���q����r��V$���/�ߞ}��w ��9�����E�j��!��c��д�AcH�Z���B��_+�:G��6�2'��Kl����%ų�}E�D�藈��(ۂ���.�$(�*�y��rlW��Uֆ9��H�����ߢgg��T'��b8����=����I�]�L�����J�k1�b�/m�(��z%#�:�5��4Wc��4�O]�NK(���a�r�O˹�]��C��~��D`�x 9���8HD�8�/�̘��� ��0��� �O�H��_�t6XB,�Q���Է�f����I�k(�������~%��e�k�\�O_��)�a�]#��g�w�YW��Χ�v�ȹ����::@i$9vJ��d���'eק��0���e��`eJ�SɃ_��O{4*��4J�����3ԇ#�����"p�|#�C̑{h-2���LP�Թ��1��=�V��Z�s����<�Ǖ?��s�Y�/�YW�y��[Zl�����^w�U9�8�u�h�j�G�!a������W��q�́9���9H_`rH�`� W��sgx �7����P,��K������UX����Q^o=�"dMn8�����J������zA3�%��?�,��a�,��EO����<�"�6ZL1j;uձ��f��4�n���*Q���Jq{����bO�ງ�r�}�7?�*����%h��"Z��Ch}�CD��V"���ۻ�W��]�w�5%�)�s;ڪ�� x���ʁUL�Ė$k�P�n��O�y�P�<E �Y��V����K�ڸ"��zl�${�LW)BD��E�ԟ�!a0��/���=M�,���CH#f��]��L��2��}&�2�C!Mk�o�:�3 (�NG��!�c ��O�E�;ŝ(�%,�ƙ�d�ww�����$�D�^2�*�qT��Rx���u���4;�/�4�S�����*}�A���EK���$��0��?M(Y�#�OF�������;e么��I�H0�atI���MEd�"��D���A3I���=���6e�η)�p����'������Ӂ��ZͬW�����7AG�n��>O���3�ԆI�U�?u�E�6�/N�VE=��n�^9��V�d��rA�i��_� ��K�JP�nùI������y���Z��� � 8��r��]�y���-����^uwם1"�Z�D� ݙ2_�4��S0�k�eR�q;2�U�������@h�ͯ��Vh��������[��`��o�۲��u$�\�U ��522$��@��nH���u*��n�FX���<J.�����dz��J�P��.mKl����fc֍&�o��z%z�?��W��˳�w�ڔ����� f;>������#L����:���b٧+Ϟ���#;]q���)�u;�D�r�+V���g��ݔ%�?o�~�5v��c��t<V��������`"U�[Θ64 B�n�y.w��<��N�hVuw�Z���7͇����.=����`�WmP_���`�J�����(z�q%�(���]a��*�3PWh�&I��4��i@��ȃ�]��@��f���~wld�#i�-�l%��4��5nf�+GѪ�xnM�-�BR}Q�ߺQ!��p�%[��Ի��6�D`�T�q.��/X�=qӴ�a�%�t� �X���X?,�SnB*yT���V�)��+<�_#k ��| h�G����+Fy�Z�x��b9�M�e���`�u�1P-����pVe��R���p˹"�\�`�(ٔբ].��3و�ȎJ�N>�&N;�iPzpI����M����z��MF&�|q�7A��.��;��O��a1�x)������!v���i�*<��B�I��Qk#z�6�^y�T�d7��`~+G���شO -Oq�JT�͆H�+V� w �8����{G������ ,$���(�aW^�n��jp�j�֔ ��ÏU�̟z��;I��*u%a�ݾ��ݹ��N� ����/��oZ`�?�Ʉ���i����R�2���lWFk�$��( �a@��l�Ը�0���ʥ��ӏ7��5��gް�T��A��Rt�0�Ɩ�)���^jB /;�Ҕ�I��\�3Ub 5�t��+��t�;���M�;83�&��=Rb���pA�EN�%����"���@T�&�?sp�~@zL/�D9�a�{� �N<��ڭج�!�����w��G� ufo.(����ufς��������(��}"�'g1`��do�%� ��(�Fw�a~�(��I���"� ���g-9Pw��������%��y��>��o�G��ʺ��8��STq���#��!ȇ qY��U�����7spm@]�����ؑ�>k�{7��m!MC�ʺ�^t�$�Pԍ{��f'���Q�~�����3������(�r�hn�<�;�;�@���)e�w�Y������A���e�Y�9��_�E<E��D�n�g�x���y�����Y������2�%�r�m��s�D5�b;�����J]��Bw[2�m���A���{!q�<��i��8ש~���+%h��D���[�S���=�դ�����UټkJ'��q��MFHں/Rǀ.���������8�Zz�ոu0�Y���M���<ӌ�u�d#�u
Static task
static1
Behavioral task
behavioral1
Sample
39f42d5df8de9b72c7c9aa4f54133edec6a104b34d738b37efdabeeaf0a427d5.exe
Resource
win7-20231215-en
General
-
Target
39f42d5df8de9b72c7c9aa4f54133edec6a104b34d738b37efdabeeaf0a427d5
-
Size
2.9MB
-
MD5
6404e8ac61c4d864761b45c997e61be8
-
SHA1
950ac3f81102c28ff77216937b970aec5009f7bf
-
SHA256
39f42d5df8de9b72c7c9aa4f54133edec6a104b34d738b37efdabeeaf0a427d5
-
SHA512
a622642ce60d7a8f93e90b1f7eb7513d331c1b168a8f7807dbdc3d41552a3cef4eefdce28778cbef42ef56193941873ea0e32b461c844f120a97e695be323427
-
SSDEEP
49152:jXLocYna6yYoHCwrrMRVQNC59LDt4uaEX9XzTpNMfBDj1/WYNP3TwkGJuc:jX9jIRGY93t4uNDMfBDB/VGJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39f42d5df8de9b72c7c9aa4f54133edec6a104b34d738b37efdabeeaf0a427d5
Files
-
39f42d5df8de9b72c7c9aa4f54133edec6a104b34d738b37efdabeeaf0a427d5.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 461KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE