�]�=A��5q���o��7��`�E�;)�E�LXg��?�>H�Wo9Y�Vb�m��:k�:C1O�3����`W�@�k��Y���6�9L�]�@�C���h �w�X��{�s����{��V����'-G���}ԋ�KX�Y(�ը!���+�����_`}��n}�|:�y:Yc��z䜞�C_#`��ذ��N"�5�{42b��5c��m����,38�i:�)�*����� 8Tnuկ������N ʗ�L��m�*{l{g,�(���;2|ɡV}�����&w����n��#^P�� ������� ��? �F�k�A���Y�� !�_荛 �5��o/�� n�Yr��@}(i�%�u�����E��ご�1T��n {�m���8)[�2����e;mћ*��s�T����y���_��i;.�P7�{�ٺ��^W=f`P�������A�,�e=0��N,` I�x+o3�!��@3W�E�M�3ና_,?� X{�L�$�pmR �TK�?�y��U���h-��_m���D���'~¿�7x����{�8{,H�_����Ç��y���6� �K��(U�0ߤN���-My�뼊��h�2�D����P{숼C�$� ��"�A���2�T}�괵�^ \y:����_0��߅�Z��3�1rov��an>)݁ɟ0�����Sz/��O;�� NXu.����Z�� L�O�?�Q���7�i�V��<rA6����]Q����q�����^2��P�qe8.{����bL9gq��$����?nѽ�W_��&�c�:\|$���a�^Qt��a+R��85ה3n�<�[q?KRiL2�R�4�V;�����4�3i�aV�pǰJ@h/*�=�a�ڗ��FI�k��Ε�D)����z��߷�;�9:�Z���[��?ҭ����A���h�w�;�i�yBtH��7��(� ��(P���V|�ϯp���� �X�N�����*���L p�qR��J�j�q��N�g���Ɏ����3�䣆�k4�N�H�J���U:�3�wa�9�p�oMk�J��S/#8�Z��8��nb��2�A��b���u�x=�_��^�1ý���l�&��=��x�k1�W�7t���@�E����!��<a��z��KǐJɢ��+�����P��D��n5�n��H�J�=�)m �F^ N�Oh�˴}s����z�0pBD�t0��}��{8��F8���&�X]�n�����n��1a��LM�AsDg�qV|F7�Q��5�}@��<[��[�(�ן_��!�H,]:W�엠�u �'�/��t� )���X�Si%D��ј��k'2��!d�1_�l�'��"�_k�ˣڣ�6��Jm���z~�=�� ��'4�$��Ë+�)g���3�;%$��[�ʞͻv5�UA ����<C>�;�;F�a �T��^'r�C��B �$��,��i;��o5���<�=U1��V�@�_�_c�]�����J���_17�J���� ,��A`BegTE]� �d�{U8�H�Haf���`V;�Fm� �-���>�w���>b�'Ii�m� �u�ñ���{M���a��i�o+e=�.@y�>����>�}X�_.����1�1����D�|&���)����HJ��p�=99N���E�U3(�H���+�C�0lߝ�6���.`�~����D{Jj6Y<��U"�R���J����*+$K_���)�[�!5�,��Ge@f��5�; Y�A\�X���y�@���K^f@�i�G_[����uc��(O��Q����W���|���g�������l�H�!��8�8�n!i�YJM�n�s ����$� �넺����b��v���2��ӓФ��w~6ۇgR\HE-��4�w��l�-� B�ȇ�v�/o����Η����bC��U�c��Gm�4�gA�$���FSp��$������� �w��75�2��7X �<�iJ��W:��S��9W�뤁J�� �t���Cl�^��G��ّ(�]�u;��� #�zz��о D��t��G���o����:�u��\c��˓�����̅ �s�~�bj�Q4_@�K=�L�%���gAA?9�1�s}��|�^���^���t���P�ybq�it�\-Tk��>:wQ��X�,�ڶϜ�h��k���Vƨ���-�9k�VlR�����"�wG�$�-��kg�?®LX�+���glE�j���� ��е��a�+�~ V�>m�$ �<��N�)���OU�( V�pE��=�f��/L c7 ��5������Q�ۆP���-+��Q�7���D���ZYNSl�/�X�} �a�Ḻ�"���Kغ]��T�,R����c������$�z���q�V(]+��ݗL@��X� M<x ���r� ���7V�fB+�<˓#���cNZj:9Ɯ�H_� p�v��qm���/z��wQ��&a�ܾO-�AfH�q�ь���:�c�S��?�߫G�Z��z�����U���u��0��Ҟ�y���a�,c�2��kil�z)ô��cI*�|��ϓ���V�O�����r�4ɇe:�Ա/H[�j��,5������JĩLJ��Kq8kx c��p����KX�.r}�g,O��ᖦ���6(�C������"*��ޢܺ}Q]~�����hƆb�ͱ�5[�6c�l�~z3U�ያ�cv�N=�x���j�.���7��Pw�:��]�] ��yQ���W$i�44/[l�����9o���)� �ս������ε����ȹ+���Rw�KuP}��r헢w�z�t�U�拍� ����( O~�W9��'���T/$;�jQ�o��5�n>����|�~�y�=��\ a6�Ҿ�}�w�Cc�s�0��`����D�7-�ݼЪ����4�b9 �+=e0.�~��K�3�l�,�B��˽W "�A09�`�gH�Fq`��Dh����X躊��_Ƥ���;쐰�$il�\� \L��̄��tvH�K؍�f�2ti�G�֩��]�Y�|;�yr��0������d ���he����u��dwo��dƧ�*��h{��`�s�sF�ݐ�1՚p�`��j����:�60�K�p�J)�|������r��k$u�@߷VqL����-(����.R��������c��j���Ä�� �79�_�w;��f]�"��͐�ut�ߔ:t > �OO�''v0����鎫^<{���Hu�+�F��pd�0�ӓ����x�+�Sv@������]�nU� �^�ee�i���w7�g��%?��E�9?��,��e��^P�Y��8��f��}FQ|�i�� �����1Cf�ak��9��n���O���������[��G�x��%7�נ�ƿׇ���9�Ϥ�:^5�y�ցY�*cjY���� �1�>\�'5���m��v`��8��H�6T�5���I��ר=x&��L�S�*�&��,2P���=��4ӟ9� ���Cř�7�n"a7o6(���G ܷ,���$n!S�O��e��KJf���|Hh>�t��Z���_�G�� ���B��o4J�9����[�+/Ӵg�Qc&�Y��c�6�h���Ԝ!w����h�|������s��h�pT)��҄7 )�6��\��ؔ:������� ��&������/� aJǾ}��=�)S��u�Ҫ�4��s*�1�>8�`R`����w��^Z���}]4
Static task
static1
Behavioral task
behavioral1
Sample
d59afe5467335c1c8f56b3441dc2c048.exe
Resource
win7-20240221-en
General
-
Target
d59afe5467335c1c8f56b3441dc2c048
-
Size
2.1MB
-
MD5
d59afe5467335c1c8f56b3441dc2c048
-
SHA1
4754a5844434d4a6fe9ae1fcf180bba9583702b0
-
SHA256
6b49e9ae27ab0020a9dcfe5322c12907c3081032115b587d84171ad029c62ec2
-
SHA512
3ccc382027fef60446df73ac0fc0c9dd2069431a9fb6084e7a76ea5f7d506f6ee7441332d3176446184e4230ed61bda6b0662185df2c203019e3c7942564a1ae
-
SSDEEP
49152:Eafq/2ApIUhQPbmkjuNn2tCWQfzh2b9UQfQY4DfT4fTL:EV2ApIU/kjxtiK9UQj4DQT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d59afe5467335c1c8f56b3441dc2c048
Files
-
d59afe5467335c1c8f56b3441dc2c048.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 42KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 7.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE