�k� �9�dH��.&�:��P}���I���c�u��������o~r� �����H���}Ki��nu�3JbQ��zeN���U���o��������6�u�Z^z��c������ M{���VD|b��'��Xπ���z�]ww��q���T��� �t��D��6A���L&-v2���{O��>A"��V�(��ޥ�@�c{�*>���Ql����|�9a�qA��&9=��@d�Vy�1�����.����+<�h�p��'���>.#wu��ё�t<u��E� ����������q"�<� ��0ܘ<�һ�y���#�뿞���zo������4p�~qo;���+�����^�Cj��2��9�c�}��.����CCѠs��"h]Q���с���I�%?Pq��i�>���òla-v�ˁ�P>�<$r�C��Ȩ)^{�����_����7$�T����ܹ.�8�)�-�7�G��B����wF{#��S�*�ί��P3^^n�wb�AB"�C�Z�*��|uYy���[���k0�����h_ �g� X(����ɢ��eʽe4(i7�4S�m���{��=�o6�ָ���e�r ě{i��(�������Wۘ"�h�����;#Pa���\�+�t�X���?փ��� ݙ����͉Ozz_b0��z�ԇ�L)��x�=�68?��0�AZ2��������PMnx�k[f%��Pa+>�y��G��6�>�$^Eh<�P��K�6ݟ�� :��,ƭ`� �G��Qd��Ϥ��{C��:��N@E}[�ȸ-B�kP�mk��?��雼sl��5�r���U�u��]��MS���l)X��K=��]#E��B/1j�;�k-z�1x { ��Ǧ�3 (<�yz�j���(�3Ra����v���vwٺ6Ro ��[b]�j;ud����"�O�p��;�Y���oN�>B��cD��v���� ��A&�f�7h?}��o��hSM,�0�T����z)aO078�M�+��zY��m[���u�D\B/�T�VDP4e�O?�jj����lV����q�u�YЊo�NXC�3��w��yAw�Y���1���H��BKl��*�WI���R��<��w�?ԯg�"_�g�N��k�0�]��m��洇�9�b�dGC'�k���ò�����_�O���XJ������.��ӥ� ϠQ��S�W^4�/�yJ�W3��/�*_�����̓hC��|`̗�ռv�8���?"k����v��"6 Y�CU�.#$W���Y�i�uX������d�� ~��ց��]������џ�$��N�L�K"��P�:E���qS�m��~Ȗ@P5ӅIOB�����.x/) s�"y�x;���y�:��͌���0tdߐ'���K�h����Qw �W��Y�� س�ocSBf�zU�}Q���mF���Q�c,�*l��2%�u1ȑ�+y��Dz'z8������9=;m��C�3��8�� q ��)2,�Zc���Ӕ[���&���BXE����y��ŃP3@�o�0;j�o(��a~�#'����ёԓΉO�<88�WR#ȱ���>�jJ�� ':Э=�8z���Pk�@���!RE'��g������6�(�#�}*���do{@��:��l]��$������� �����߭\�&(^=aQf�X����a��g�|Dc� �7�3�X�9�_����4Z��ˬ��ru�;0 O�/��kxu Nu��P���/�ʹ���D�,³�� ���G28�(��UU�_��=�{N��i���GN�߿2�M�����P�p5XAWAbZ�p����F��d�<@]�A1��|����4Jf雴��Kc�m�{q݂K�i� C!�� lc��d��A=Y���͛q �̂҂I�H�F�Ivg�eP�j�c��F�[�ʢ��\�P��lK ����?!O�zG�r�c�1�r_�����H��-�F���[;�uJ� x���B���2��.�#�g{H1��tT���)ؑ�_VE#�4�Q�;:#".jl�nA�H'������ �5��j��^vtd���4VX��!.��Qr��ں�l&���_�h����4a�>� ��3c-�믛8>w�+u���J̛[�k��.M�;e8�{���%��$LB�^N�P�C1��ᘻ����-��*���T�Z��mҵH)%�e��~P�p����1J��Eэ:S��HJa^�yf�!��'<}Ğ�M�+���1��IL2<b��U���B7��#P��wm���I���o1>���M��HG`[>�A����5�����:�=��� f����`R�b�3~��"�suppP-S��� �� +�g*ܴ2� 8��q�"^��)��W�(���C"G�.|�ԧ*b�Ļ1. �p����D���P����ޣ���x��^��Ae��KJ���Z��h4fI�s��2��+\�v���!� P�Sn��Ư�f��m�ز씊�%���d�� I���*�Mu@=��@��"��X��ơ�1�*�c��� ��j��V48F�˾�/��RN�mx[,�N��dW��0�C~�R(��! 'P)���<� k���I~}�d��&?���Zn�%��*� ��3���_n �MՁ2}<��|K.0��^2���a����3���*��<* �.C�2[���=�����72A�h���k�a�����%g�e���Ђ�\4(\3��j�<�@�H|�NȒ��N����̪���EXBOۮ-Ш �R^�]K5{���H��W�o�Jy����~"�8��u{g�Q}�D%� ��\X�Fe��俛0��,b�sm���]�D���(u����w�_r�ޒriyƅ��qR1�3Rw����MSGz��7�����L�=���8�@W��ϡ{��^���A���aZM�����4����x��o���O�M����뎢�Ta�'Ĩ�z^�Gp ��'�=g��Ѵ_�w���h�q�܋/͋DM�K�S�� ��rxT��o#������95w#��/tL�}z0���W��������-�L��Ę��%����\{��T�B!�ހ-D���(+����&na}������C�[���沂S�)�B���u�{��v+��9�;�Vv ��ڷ��U��/�/Jh3`[��M��d�Ȑ:��i��kF������%��ʟ��y]��}yj���L��Z����I[��f�IkW�꽭��n��B�A���z�+р#�z<��������_�9b��1V� ���Nբ���R�w;��z�Zp܈�t�Vp߁3����}��ie��o�w3�8�9n_y��z�h�K���1����u��Vw�����=X��%*���ԨO3�-G^4�,�F����vR�Wg}�ef_��`�>-4E���ef��S�����
Static task
static1
Behavioral task
behavioral1
Sample
90746ee47a256cd2db4341339f7a7b034c5006c4d1f499c562fa358fe09f7659.exe
Resource
win7-20240221-en
General
-
Target
90746ee47a256cd2db4341339f7a7b034c5006c4d1f499c562fa358fe09f7659
-
Size
2.9MB
-
MD5
b8aad285d854c29b787a15274aa1ed32
-
SHA1
1188028f39f86d4669126195a1fa02010740de5f
-
SHA256
90746ee47a256cd2db4341339f7a7b034c5006c4d1f499c562fa358fe09f7659
-
SHA512
40efd7208fd773adca7a6c6165125c3beae6ae49e8e054ca12ecabbf95b0cd32f641d9cb52fa4f1619856053758526951ce79fafa10456870e1900dce3c3e887
-
SSDEEP
49152:lkJSV4QvKQU0feUNRwv4sVYKmdga8ApGpF0YYB2jDGumos7qKSYrJEJT3ne1b9ms:biQvKmfeMRBsVYKD1NYBiaooqKSYr8To
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 90746ee47a256cd2db4341339f7a7b034c5006c4d1f499c562fa358fe09f7659
Files
-
90746ee47a256cd2db4341339f7a7b034c5006c4d1f499c562fa358fe09f7659.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 461KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE