��]N{ F#�&�#^��DZ�=�=�v9K�sOU�>�j �I��T��a�mۉ-ܠ\x�=���F-� ��#4 r��Jiv��z��Dxr��� =�`�����P�C8�&.D��R0��G<P�<{b �GQ���2��Ƙ�&�³�=�r��`>2/w�x���R��O�RWr�](�V+�iGp5sއ���- &i�=��3S�"�u�V&7�{o�BӺ%����/}�����߷@�X p����=�T�v�H�g�{��]�1����zB4�5���kM$;$!E�"�U���#ޥQ�s�b�%�Ih7�l&t�����Z���T�Rfa��P���6룪�ztA$h��5z�q�45�'%��E�F8��bmPE�k�/g���/�e�c��_mD;���V#��.���k���`�1����c������)�vŤ�`RdmZ�ҁ��͇�˴��C��Qh�'lŊh��Q��!s0"v8��n*�WT���_bN��[��A�fT��է��ʗ0��Q�kd��JrA#�Ǧ'���ݵ��WԐ����ɰ:T��'6�,խ�M���?����n����r�<��g/t/��E��w~��a��&|q�z`���ۖ���\��:��4p�a��[�������-��g5��{c�yJ���[���/��~�Fu$n���d?{&�)[�X���!���w����_��ǹ���XKLF:!��W�T��1��sN*ډ%!�!5h�}��ku��R,54C%�o��D�nRK���%ᗽͥ��4���!�%YA,���'����)m;��S2���e�\�Z�lo�X8Zh�N�OTi+�hM)]�3��tog���ۅ����Rs5ر��k��gxu���FNN7�'S� L�EE�K&���\9�C��c�5�R��>ET�!1�o��:�g��?��U�8�JY���_�I�-�NbeE,h �sƈ�(��Ivlj6�v�S���>b�Y�K �*.��c�'��̆���0��CC���I*?�����T �a�Eˠ��"Ia��`�G�s��7"w;.r���� A'/9�N�#�x�xi�V��*Q!A ��z��Mˆ��T�$5͵n�x'VJw�eS(�+E��|H�U����[�< �V��@� �Fݒv�M=����cJ�o���Y�o`H���Zr�4� �%���|�Նl�v��9��2��HR����U>�Q�g��[��UsDva��e��_�B#�On$.�:Rc#�5�[}c����SRTy��9�[�y�_����.�"buej�U��AnH�y�*�$9�$5*�-]�t��7{aJ���;J��� ]���YGƆ�(�¼s]��t���� WK"�+�|���u�R0V����c�=�_P��1p=A�Tt������/v��y��L��_n{w�+ұ˯�v��ߕ�eD��q��r;k��g?�aD<b�EeU�4P��~��V����:�^��p~ypG����� ��ˎ�4v�ދ*~�{u�~��d�A�^���qk� �f��13@Π�� �ʊH%q>�I<Q!^��L�AӲ12%i��L����'��_1c��e�������\�0����х z�c2� �y��&]��G#�����8۬Q�LО�v�����Ond���e� `;B�ۃ�UE������Ħ���~��C�@D� ۑn�����i�ɼ��� �����8�,�ګښD`Evv�z�!�Tl���+tX�^s,��F����~��b!$�j��x�5�������p�s�b-^�� �m歏���a�l���(�S-���hZ|�������gM��V�+����Q� 4;��Q@�P�e�:����f�!l�do|��{[������{�@�D�Ccm��X$�VyS��� �_ȳ�}dx�[,@�[v��I\«,�Lx�����f�gI������:��H��h��q���j��p��G͙�P�4�� !V�?�7�c�7���ص���R�6z��3��~S�Ia �x ^�l��/�t�rG�(}56�wh���Քe�����\O�3 '��[!{[��]�:29���]���B�W�D��M��Ӥ5 B��'R��ޑ����g,cx���Oq�@��s�x/����F6<Fy�v<���Ss������Ն�:E�����x�0�'��r�u����3�v��}�{=TXk����������/Q v�x��wo_�1K�����;:����ot �����di�e���f�! 7�-��5=/�qã.�;����q6;�/�ޝ@���Jta��%��5�v������و�+�Q�A�_�1)�� `�t�f��s��@1U��pO�w,:ߐ�L�����ס/��-��{�{}4M����b�h+.t���ȡ�A3Ŗ�~����Kj��^�$��Z���en]�\��C�"����2n�R ���$���+p�3�ڃ��X�:p9G�5��B�5 >� tސ�:�˝6��P���ZbA(*l%Z2�um��%�s�2j�Ho�(YH �6��-X�q�N�,1v�X���&��TS�5P�L�N�?��_�[R�d��La6�V{�E�ؾ=�j=kT#��lԴLl�������D6�i��R�K���e�QFbN�-Kw��fT yf�Z,`E�0U�s��R98pׄ�g�_k�N�v�N�Oz��+{�lu���T�Y ���;�P�E�S|��Q ��C�+��T�_�,���|S��Yv�?��a����(����tȁ]��2����1Z5�QGi(/ܞx�{C��7�je}��a�k��Ƹ��@t�����z�~� /�n}�y�һ �@a�����<���k �g1���r�ݷ̘��:�<�٤�mi~?r�Is!�S���U�ͱӿŽ�����X-B�í�<�Ҝv�rO_�5^���S��3�PgK&�r��y�� ¥��W��e/ܠ/�B�������a���ʊY�܁)��1����-u��(��v[uH�o^r�rè`���;��*�,[�ˡ"I�Q]���K��U �y#��4f��R�q�qI ϳ�k�p��ᐇ�%0�������Ɉ6Mhj�˦-�R$��%�����U}Pc��(7$��Xs��'{7����b��m!Y����
Static task
static1
Behavioral task
behavioral1
Sample
c7c4a31259503b8406427672ea4eab4298f71989558c8a8aa7f94b22e7583649.exe
Resource
win7-20240221-en
General
-
Target
c7c4a31259503b8406427672ea4eab4298f71989558c8a8aa7f94b22e7583649
-
Size
2.8MB
-
MD5
f9c34a16f787845fe335e7eadcd7f07f
-
SHA1
a272a8341cde1965dcc28339033311b19bf248e2
-
SHA256
c7c4a31259503b8406427672ea4eab4298f71989558c8a8aa7f94b22e7583649
-
SHA512
31236e7a4881dcb7190a46c07eb0e4288ca6c1085ae24e636aa7c80b703fa6293aaa42ffa3ce73f1809bfd07dbdb2ac7b2e796b8e2d12c2cf0d74ca05dbe6f19
-
SSDEEP
49152:7DmSlEFqYWaUBQ3DifhNAXVM37k5GpPC4eh5un+7+HU7GjEmHcBC+IhdJ6yk:nO3ywwAXVM37k5GpXej5ijXcLIhSd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7c4a31259503b8406427672ea4eab4298f71989558c8a8aa7f94b22e7583649
Files
-
c7c4a31259503b8406427672ea4eab4298f71989558c8a8aa7f94b22e7583649.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 461KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE