�E�ޟ��Q� ̖r:W�fa�S�Y�dEm���_6�۔�AV d�`�_����ځ�M�4Y�#��<+-/�䜎�]I�1D�Ϯ�aL&s�\r����]�^��5$}B�AS>���O�-с��j{%a�����h��9��f��i�Q�Ih�-V7�ݿ�+l�̩-:P������R##�0���eZکΠ5�ix�7ڋ��ĸ%�DL���|Fl-:9������R�j9��rB� c�Y13�4�r��z�7�(*^��.yL�oȩ��Mk��<����y:A���O�^g�:]�u���wM�L��ꡝVX���A�!㩐��o�=iq���O,���Q|p������+ ����g� �ԁ�iu�����u�["�x&X���E��<��kg���������])�49L�Y�l��0��qQ���.E�E��Qp�@Bn�\D+����k����\�.d��?�a�g�Ҹ=ֻH�:P�����:ەh���h��u�z�#M!����*\���k�l�3��L���3�q#��&Y�����`[=Kӄ�A��f����2J�X����j���*Ҏ%�x"!hۧ�"JC9n���K��JT@{/��O��#�����0Ec6�e$����|E ���GCӨ��5�W� p���!t���3Ĝ�����@d�ͽXrۭ�?`�~�HГX���}����H�;}��}��=J����1i���U.c�M0�/�Q94'[�?����BX�� �>p*q@$bar��� G9~�\���5s.��mT!{B�j tZ���قX<*I�l]]�K�AaU=e.��̺�xa�}�4���Lm6~Aj�,������n$(zE�A#(ÂHJr�u��~�� ��f��V3b���I�K#ߜk�唧�:֊�I���*$�J��(����N.EJ#N�c�9�C��^�I�l�iEi�l��s�yY��?A�Ţ��SKR� ��]�������y`����U�'��0���|a�"D)S��p���|��U�𡽧�5UڨXÞ��c���f�| �u�{�5M�����ȓ'���`+Q���K.���x)k�Y;�*z�"d2]kKv�5�kݿ���G�3*���I�Ē�� u�e"�^����օ�G��I>�Wj<� �dv�� �J��Ʋ04��[����ю� �<��D�p*ge_����G��w���(g�߷5q0?uSى�'2딳�SG?2�+�<d�W7�s���ɏ�C(U\��K�v:� ��D���ij�i�u`6p5�� ��.$�S ˿��\�,wwV<� �F� �{7-qB7� ��u��M���HYĝ��-� ���)�Kx: ������Ƕ�2���#���$@�_� �F|~���>9B/V�H�-1B�R�G=��w���rs�Xf���*�?w����0t������t#7g���?fQ�5FU��}}:�O��j&�Y��$�F�w'� l�+�o��� �����'������b&�9�����(��l�v��eH�hp�?N=������8ٗ�I��H)/�-J ]��?\+�������������q`ݧP���σ+4kg�+��M��`B+b��5�Ւ�e�P�E��n�$F���%��1Bv��*���Sx_~�A�@3���1n9v��X`�6�V+��t�)��0R8���iZ���#�L����֧@�_^"P�������=���1j՚�Tk]�D��lTP�k�����s �-Ku=$f�ʃ����������㣍�sT���r���X�n6�=|�+N��. ��cH�KS�)V��:S�L��6�"ms���R)7�Fl���v�c���/[�j�G����*�So#�(�ywt�94�>�M�e�㬍> U�Ȃ���O��u��k�bk�3De?�^��;H��q��Ui�Ā^���ı��b��A]-�,,*�������]��s;֓����r�%Q�R�eY�/ ��2>�<2bg`�eb����y��(!|U���A�����"Ë�֓䅕n����GV ��w���M�Y ������:�쪙E��YwM���(���"I�Ĥ0h�;�M`��Pq�]{u����h"�U��*$���g^V���D�.�{Z��qUƥ1�B jT�<d���Mר6�i�w��g��φz���1}9&k�C����""�ZOs;�_y������o���7�ns1��Z��ݷц֛.�Z�Hc�w��1ti�8���5�=��/}��)S+�iE���iǰX�Y��<�5��ڸN�14�8���OCG i������(�[�Y����}f���>N֞��,�ʳxAǯ����\�/u�Q�����H@�pm#G �<v����&� pk���\�R��}�u`1�љ�]��aF�{A�:1�:ַ��R�IbdÏ�L5B5�OS����,� ]�2�4;ؤ��8!z1�ݨ.[�#�m�Ԅ�#팾2����8�7���u�~\� ���%���v7�؝d�iy���n��G�"a��N)mQ�I1��F�b�Y�s����E�*��x�3���%�lj�N�f�<��9��em�O�K�y���|�1[���Mq�� �����(k1�g��]����Q\����̈́հ~o�cÊ����oKR�Γ�ȋk�a�c�bK���E<����7�8��5E`u�c�~I照E�Αu��ù�����TFxG��;� +x�7x�[K���\�Z��������֡ ���*�峀s�����êAae��}9����hz�V��0Q��~�a�������z�j�a�������I�&�k�Q���@4�d�QqD[K�Y�1�D�ȧY�Q�t�~J�&�X�?5�W�e�n�R�s�T<*ei ���ͅ\]\�����*�i�ESJr���6]q�zPw���)mY�>ϓ��VŹ�$��x?-�����s�����0C ���h�-���uQ�\I�{|:Å��S���5Ìʜ d�\q.Z�t����A!PM����� ���r�K����{���U��������}@\3nB����^|�m�|����62��e~���E��߃!>��^=��o.��^�y������5B6y�� aw��U'�U�̗[6��`ה�ru��;�ڤ^d/����\��!aK���U*2|���=�o��J��� gYU���f��r��2��>�p�p��H�t�w�S�07��yM)F-~1�ãKyu���]�갹˙EM}Ҳ�X[Đ��R��VT����"��R�xN����n�u�8#������-��uv���T^�F&6�*|[P��L0�n��T��6\�q7t�Η��!�[W�^$Vpv��d�X&_Q�%�s�f�f�̙�w����=K�qU�r�DY|[���D~(S3��P?�i$��7��:�;}�r1�#�<;2"�{]�������-��M�A��ɀ���G,><�����p�o:q��g¼c�m �6�-Bvݬ�!�
Static task
static1
Behavioral task
behavioral1
Sample
4af0ba080a7ca6cf60c1e544950f124e23af8028121fb635cc1556c515d5d86e.exe
Resource
win7-20240220-en
General
-
Target
4af0ba080a7ca6cf60c1e544950f124e23af8028121fb635cc1556c515d5d86e
-
Size
2.9MB
-
MD5
93c8472a43cd778edf94b6528b31439d
-
SHA1
7f087e52e5f5b19ef3467780fbe79f7284a0cf34
-
SHA256
4af0ba080a7ca6cf60c1e544950f124e23af8028121fb635cc1556c515d5d86e
-
SHA512
1c0f516dbaa91a0c70d124a907818606b724c194a83bff507f23f87e5f7e0b4b651e276114b6a64fa6b0a784d50edc98e27e77dde3112037617bfdee5dd0d552
-
SSDEEP
49152:OwTVwD302Uo5oeHPDkOQf9Q47NTzu3aw+4A1H1yZDoQw012Ut4lP/isUx:nTm302USoeHQlQ47pz2yV8oQl12oiCsU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4af0ba080a7ca6cf60c1e544950f124e23af8028121fb635cc1556c515d5d86e
Files
-
4af0ba080a7ca6cf60c1e544950f124e23af8028121fb635cc1556c515d5d86e.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 461KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 72KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE