'>�ۥ?�'i��J�0(�0� �1t�0�R�b����)i##cD�Cq{q�-�Y�[)$�D�6Tm�B���u�Sk,�����&mE��Dݽ��i3ݜ�);0 %��T��)IX�o�����;��tGOrRe$���Q���?��ڼ3��v�)��W���/�w���(�����������~?�T� s���j���{��C�w/ZOυ��f��8���^B������bE�C�.��L�������} 4)�M��k7��6��M��s}�Y�2�%�Ґv&�~2���k�����g*�e9Cjs��o�\�I��Ȫ�4 ۱|ӧ��w���R�����Ԝ �cܝ�G�Nq�xB�O�*��M�$rL_�v�2%���k�����o��O�����mg�̀��y��֒��& W������Ӱ[)����N8}˳PAm>�Y�0Ba���%�Y�0#��~?$s�fȍ���9�y��U �edwI�pAym���lOB0][�i�>M�w��Ͱ��+�9͛��ݷ�Ub��hfÒ�s��� >�ˤ_e�M6��s�ݴl稇�p?9���cN#)K�WIsdg�Fw�Q��v�S������:z�R�<P��SW���B�hV�.\VϻڦcW�������E��FE��Gb>߮�,�U�$;�wq%qB����� �����XU���\��y��1<q:��˫� ��Kui�S�W��9 |dH�4�Ö����`,|�����n �+:^Ya!�����]�H~������.<�'�{�Ӗ$I�%-��;[5�K����o7�i�>Ed�A����J4��zfLIFj����ә"bZ��EZ[*h4��Zi��y�v-T>�w���vKAy��%[�q�D; �i? �&��RJ�p|=%� .\WM�=VU�K`�+�X�U�I��0�jX<���C�_^��O"���:� ]S�:|�R�6�>��&��j�����Uf�t��T��n0A0��`���S>)��5 ���'������Yv�� AU� ��Sf��n���lD`7?!�9��/��_/7�+Z+S�i��UԦ���2��A&�b�QZ��?��DQ����g�F�Jrd� B �@�;���v�y��E���aЭ���χ�JE�҉�Vf9}�o56�A�0D��vdO`�P��U֊E�%�ԏ��O!R�O�����en�&����Wo�e8���a,��`���l���_�U��t���).����r�I��e���㝥\u��^!�� ��Ċ��5���I���/��������O�xq]�t���'��IY�78�'�E�,-Р�?�gȥ�yP ��-X1��&\jC황�kN^q�X3���z�����#R\E^�N\uz���n�M��Ş���� ��/jVJ��B.����D�� �=�ѧ���g�у/&zI�끞*������j_�4<i��)��7�V9��n?�A��&�t�-��j��F։�O�1D�N���ȧ����ת��od�z�D��X�.�������O���L�>��NW���v�@5$]�O���o֖�6�4�='��ڜ��@�W�,k��K)@�mF%�� �bP �BU���W�#x��7n�G2Y�ة"�k�J=Y�n�<`���nsU!�{�@L;��>�B}��a���[(8��6i�áّ�a/۬�{PR>�2&B�|S5!�Xw�O�VA���s�ӯ��0%-�������j��q�>?'�9�2�K{4�M<��Z��ǃ8������na�@�%1�k�D�Ow]3�}o�cI:[%s��oIH�N:>���! b�p� � ˾�T�#u� ���{�ݵ~�����ε2�B �G ��p�mG:��|���yH��т����&�.��j�P�x��l���rK�qp���a��������!}1ݝ����7�|E�� T�y�������ߑ�T�_>�����U�첨���uq�W{��Vn��&��G�V�huܷ��#J��@������:�V�)R�H��d�յ������sR]� ќ]7ȣ�j��&8�F%�k��]2.��?v���f���4�����>;ː�+Wa;2L��5�,�泌���6�-Px ,�H����eC��� �e%8��)����94Gv�Z��mȒ�'^���]�W+-z��E�P�!!xͅ�~��i� ]�z}�q��� �_�`��"X�~�g��)[��ef4?/�+*���yzޝ2,�s,aFr;���5�}�]] �z���p��x� �p���H|����§��fb���a-�v�p^�@nKF��p$��mT��Rŗ�}�9������W�t �J��=��;x���J"m�2�~-��i 碃n6���]^Ǟ�a��u���j�����ou�@����[�!X@���&���sd�e����F��Ŭ¦�]���$d�&;������ί��F�]�g�eO(���d���X@���Ww�z�tyu$��yQXt��2�g�#��F�d�i"�r���1yb'�e����cd;�|��U�Ш�hӋ��b�l?:�7�"z�0U�,�����g�� b3j3��ӜB7 &���dg$��� �=���Y~x�B 7���m�b`��οv��8�6��0���Q���xӵB�%p���Y4��|�3;&�Dt V��� �4w�b*봃��`_S�~�yQdd�� ��� ���1��B�8���V��5q��p)E����8�k���|��z� ̄������4��Ojd�o���5�N�.?/�7$CH���]r�?'J�9��G�y^�pCDu�V�U�B���������\��]c͠z$Ѳ( O��y`<?�� �|p@(�t��f�� Y͜��݂��yN�\J��G�~V��5k� q�f�߫�Wr���(�\{|�>�$�����������UR����&��6۫�i?mٳQ��-FS��\��6���������v[��]��N�o�f����FfN��Lg�������q6�x�-V��;��#dO��<u��J����,[!�H;�x'8*�`p��13� ='���a���a5SE܍��1�aطt�Sk����;ܨպ� �Y5G$a_��v'7˧���e6<f�D�Tٟw�Em���:�3! &���:E�͑��T����pL6�3Xj?�T��)S�3�����\^{#�r֕7qFH33�`�n}��.���B[���US��q�B7-��n p� �j�s*ݖx�jh���� ����E�����@ �*H���5#������#��۾j�+����W%��3��ƒc�p�=.+�]���L��Fg��/��[��I�c�:L1�^��k,QR���K5:wg������c�0�Z�Ӑ���������a �nj�G��7�'ο���u�����^�$*er���dU�И����7-����x�W�C<���3'�Q�J����T�� �y�U�zu7uh�c��f�Q�J�Ѣ�6QO~F�RkQk�]>:�t8k�.3 �I�?1M����SaE�����K+��dZ����G}��PaD" ������y�h��'w���iϨ����\�1q�\�h�nݷ}�M�����A�%�h�P�4+�Rz)��D��ք��I�x��
Static task
static1
Behavioral task
behavioral1
Sample
3a0732ee740b943c45268759289182c690e05454c7f8e6b3c14cbb5fb07b91e1.exe
Resource
win7-20240221-en
General
-
Target
3a0732ee740b943c45268759289182c690e05454c7f8e6b3c14cbb5fb07b91e1
-
Size
2.5MB
-
MD5
250c479b1bcfdb2e69335d80ca5e1d75
-
SHA1
1dc2b64daf1f2b9406a17bc406a66a15d7470451
-
SHA256
3a0732ee740b943c45268759289182c690e05454c7f8e6b3c14cbb5fb07b91e1
-
SHA512
e91284f6c2068cd76e38ee795d2a9d674ba54a356d7a41524df254bd9796e6e7063d71df9893223d8b46bf23829903292111f320c1602ece0f96084f242e6dc5
-
SSDEEP
49152:vi3ve+IcWDirBj4GUH/jbgFV1fuZpN67UULVecJRgyOUKhReyfjfqv2ci3:a3vcc7dQfjbgFV1gpg79eCh7LyDqXi3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a0732ee740b943c45268759289182c690e05454c7f8e6b3c14cbb5fb07b91e1
Files
-
3a0732ee740b943c45268759289182c690e05454c7f8e6b3c14cbb5fb07b91e1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 84KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 204KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE