�@Q��"�� �7.���B4 ����{����e��<�o��<`@�^����}Rf���J�]b���G��9gp��E(C�a�v���h�w9��%��:cJT�r�s�B3F_}?"HF$Jj�3^XH&j|07�����doF#�XT��H�h��L*��xB�\�.C����ۢ��0�TO���=�����E�eh]6��L+���M'�2�!����OD(��Vz4 [>'��S=KX*#��o?+��/wU�ߵ[Rʗ(A�� �������<L�:�K�m�!C��s麤E��\��Ԅ���r62en�S��x0�8�٤��4hs��n��Qy�E5�#w2�K�,W��yѶ�VZ�|����s.��y���������k9�����G�B�K�Ƃ���2̘_��y�f>aZ}ƭ|���=%� �BCc��dk�l�+��5�]mD>Â�#(�eu��bz�W �G�ۚ����x}�=�ڒ��o"l��q�z���뾪��~}{�c'���,Ol"��:kj%Ǎ�;�z�I��t6ѤQ��v<��������Q>�����a.�N��8�$�_'�_F��2��V����u� S����[? 7\���˺uQ(�^��\Ҟra>��Q��� i����͑:U�~��U���*�W˽Ǣ�,Ry��-'��ǫ�[�4_^zo��+�U֊��K�_�`a���4��D\�NB,��1�*��(�����n�g4��=��~�x�I��#C����?���:��w"fM[��vl��j���J�l�ȾQfu��Â+*U�@������/ܲ���C|qI�^?�6���"��CyBDu�ǃ�( �������3�"_^��Ֆ�hOO��3f�{��� � "|�����r���{�(�'�Dn��%�_��K��$lG)��Ln`��d�����D�#��d���=�V���Ah��ڑy��� GU����Mi�1�>�%��\��X*6S?�ZV>���@�~�I�R�z�x �m8��p�Du�0�;�)�L�/T�A��h!�|�`��"լgW ���8b;��%7�fhz��&-8��2�!OEY8�#�ϝ���v�hg`�/��Α�Uڼ�d���n�VbMOLS��͡���EI���c�);<�� vc�����Ɯ��{�c.��&��d�\;��H��UTWe���5P�����r�>��i,�������J���;eF����|v�x��I�`� �26T̏"���3[�����&�B ����jA��)F�����_�;(,d6jP��?,���VUB$�֏yA��t� m-0��b���d�Z��~+T?4 iUM�i��'��R�Y'��3�����F�͗ܳQB�o�y�{pD7��,�y����� ����p�e+�LN,���fi�m��Yݍzd# �����9`� ��xe�����å���Οt�j���3���`$���!���̈�EІ��>[�� C�T'oA;��3�9�0����A�����Xh������)e��t&>�e<�YG��&#�c��~/� ������/�+˂�p3�a#ޟJKǔ��$����:�]��M����]�~���B��q��9<��:*�JE� ��6ь�Ր��&�bI�%�8:�������2j�ΒiG���D<��6߷�Hx0�kn5,]�!����_̏m+bJ�����I?O��S6���9�����R�ڌ�ր�Q˥ [�t�M�>�^�RTco�:cAOѬe�<#P������/hK�ϼX��qz� �}�����ŐY��=�����N25���#I)��E!�|��So5k�7k�����6��l����� ��yNT;��:~��.6�r�-L����ELz��?��/�Or������B2��~����B�cg�T�@��)��=��,Z�Q�F��Ad�)C��8rK�rЎ\F��U�m�jѶ�a�����P[a\���J��z?�_��Fr��t����)�>+���ɜ���T��j,+s�g�4����1P��>��ݭ�}f�BUi�F}k��ظ��Q!N�5n��M_ץ�Mybt�)�S܅�T˚�W���H;�e)��l��j�w��[6:S��Ծ���5R�����#�.��Ț`c���L]6Y9� F��[�����0�/�v�@���yXu���h�S�B��FEҠ��jˮ#��i��-�j_�m)�R-�l+���� 7��8o|t��D�=c�b���I[�ȳ�I ]�s���<��V�-�����z5�0F:�K/{ё�碅���h5n4z��T�Mō�J�K�扃K�:���M��*�j�k��U�����_)�7������.�S urx?�d�Ji3����pYE��U����ö��Hi�幧հ"� k�/����Xo*�0@�{�hg��|Y�u?��SgRnΤǨpy�,F��6�[���l�A����*!��n���[�ؕ(u�$F�����x�{��� �^���`��l����Ry�\T�ċ_?���f6�sO��Lw#���r8c%�53� 0� n����q�t����[=�VV1 ��:������濁�W{��@~!��czTP{���X� �+���X!�&����bf�\�$�~k\�iH*�'����(�<�U����\�<&��s7���j�5;��e�!��My}���h�*��Uv�vD$��v�S��/�#؝a�?����O���a�.Ō\;�@/&#���{1�&�Ǽy�{_n�_<Z��D�"z��Ԓ"��Ԟ �! =OE������8)8�m�j������-mt]�}���:ʱ��B�)���,(e{� 9�Ad�ġ<_��Bq�`G[�myeŨֈp�V����_�����b{f"" -d��Q�q�3�� w�Ad+�&��k�0�����z�L���e���<��JE�� ��wRW�Y�6�il���3 ���Tu]��EV��d��%�k=ļ��KΔ���?Y����<%OH�����pC��%�0�|`�O'Ѐt8�eT������ń�ɪ:� s�Iޗ\��pD5crk�W5ӹܤ���j{��G��4N"0��G�~�y a�sMnZ�X)4�^����]L�e�<M"�����Ang�R� 7:ي��%�g��=��|Ǣ6��l��y��J >��5Vi��9�
Static task
static1
Behavioral task
behavioral1
Sample
TS-240408-UF2.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
TS-240408-UF2.exe
Resource
win10v2004-20240319-en
General
-
Target
TS-240408-UF2.exe
-
Size
2.7MB
-
MD5
de8a353a40794daabafbd5462fea3571
-
SHA1
e8e962217d9a6c2201b495e26f8aa147950e088c
-
SHA256
2dd2908007aba876198370110e5a69ec2b1abd95af2735556ea63997114af111
-
SHA512
fdd2b9fb4cf81bbef3ea02978b80b6bc900e497292e290e58cfdc076ffe0ed33ff3f36eddebea8f5fe2369b14f194fb308d0d27357c866bf6e2586d3c670d543
-
SSDEEP
49152:9+BRpOhrpNt89pLu1FmRR/XCJvfoTZmq7jTzc1OFBlfXTWVu2ftHZfd5qhW2czuZ:apcrpfyu1F4/XCJv2Qf1clfTWFj5qg2/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TS-240408-UF2.exe
Files
-
TS-240408-UF2.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 473KB - Virtual size: 672KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 152KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE