�Ҥ��8�|LG7�+�e:^E��3M�l��>����*� b���oc�vuÊ��aA��b��1El6[���Z�D�h�¹q�¦������� 4�1���u��<y��ُP��<�!���dR8�-V�������vQ��6F�%ڮ�A�������W�HÑ������zE)x*I�����0����Z��1�����+��L��pU)�5a�{�_lx�ɦ�]�@(~� !3�"�z1g`s�u�(;���ܖ=�����49�d��F��rp�e�K�,s���w�����)�P4��������D �I��c�_�E�ޢS�e�Ƭc�h�K~�͋��Sи�s���,I�!R ����$���/T��cl�eN7٬�A��6@�ΒIj�$�)�\_Li�2D5�V�ѩ����so��`���E7����%�=�u��Jb�a=.*�JDF.U�C�#2A"� �~Y~o�K�9��b9�ݐ���71��+�v�έ��h�v�~�1�^̣��G�^��%�\�o��`�G��M��%w�^Xg��]��h{K��5���E <ԧ��4!1n����#,T��v)�c4�~��`��l�� �T���XE�V�#{M!�`�W�h:��a�!��6v}��W��`��z|:i]�!%Fb��*����c=�Z 9�&�"��y݅�Rw����i���pA$B*\2�bL�e{�dl�5��<�/�u�:���/��ī5�Д�v+]�+�d��ϡ'�cC�c��#v�J($D�s1{c�Vc�I"�����s��/�)N�k��A��6��1� ��v����2ph�V7gڝ�X�eg+r�;|=�F��=. Q_��ec�=� u�*��H�L4{m@*��cNj�{�Z��X���W,���"4��B65 \�d�fD7�ź���ġ���e3��ޒd}�b2[��.чy%� نod<�����C�89XS����@�_�D�AM�����D�B����>�����5?E�Gv�X�T@��@��,���n&�h��ؔ_�8�C�#AX�m^Ƿ+� 8F3�������#5�4~����[R�M�z��drjy,�rS���Sw�e�3`BI�?��aE{����!�<<��|�wy� {���7dp.�h�7�����6a���j{�?�����6���4g������v��aTڷ�����e�}ۋ�[�j�q�>��-�Sux�?T��A�[�E��)�S��a>K�R��(���(� �᧘�u���?��,L�@��7�]4����:3e�8��n�l��5eP�st��o�����t��t�`�&l�V�mX� 7X]�����Z�E�Z���KX����GR��T����O ��i҃�~��.�;dLH�} F�\ �ӓ�p�GTiZ��C:�"�����Ag[�R���y7jc��j��f��B�~~D��7-�:���{y���#dzz@k�(g�B1foќ �^���2��?�]���l��l,��ɀB���f968�UF����os���C���������d���X�|����������/�{6�ْ1��~aٿd�C����;�,�J$b����Ð�p�iLp���`P�a�G|-�����m0{7��]�9�x4��T"g�ʱ3H���WC�'w��o �6�K9z�cNK�c=�jK*�����<&��.[!�T$ ��|kz�#�%���B,�\���q0c��W��������Q�T���n���(���f;y0���7�m�-q�E��#�P��/� �yZ�!���K��]�|+P���,3 ���Ņ֢�i������ݚ����E������z���ډ�/@�n^�诓���D= C�ԡ��p.�� 3��SoE����#��}ux�#���93|@C��\�K�m��z��$��O�W9�s,�%�Fe2�r�`�{Q>;�[E���o�)y0��!��0��.W�Js�� S�pI<�����{ TS���;��sA!�W�2��M�u����BV�tku'�G�����k ��פ�_L8B�y��F��(H��/���;�5rE��Ɣ�n*��z��v2�F@����-B��:rbA;��]�ũ�aɜz/���z,���� ��/u���/��+��KR��Ƅ<�����!?�~��Q('��f�����i�g��m�r��>,�UIm��:�n��yHcA�����Ml\��j:��ق����n�ULw��=^�=]'�m����F�'��t ���J �C�@d�BlȈ1�7�*��y��jHsU":#w�t�Y���z �����'�ha�ry�ݤ\]I(���)-�(F�:�����=16�����0玗a���nh���b--�����O�j�KYC��cu��� ��l�=G����W�g����Й�3 �ɭ?�u�o��в�%B�l�����z���j�r'�8�t������I���p�JY��팧T������c^�(c�m1?�z$���q�3���rnm�M0S��������Q�~f� ����������=��^���B��6�?�'}��@�DU��NA�K����t;�~������(U�=Z����ɑ�����:;P{{���*�$w�EH�i�E�-,��� \Ig��iq�7�@LE�ճ'��Q)C�:0��@���9���|����ݮ�W�pmX�B�~E� �<k�ݻ����$��x�9���#K����L��դ�b(���-=N蔣��9��TQ��� �|�g���h`�wi��dq$��%x .�KvR2 �����#/e��*�JI�?( M���#�FȚ���u���y&I����Fc]v2r����t���q7ӷ��0�g�����8�2�a.��a�ͣ1���Pl�ԖE�A�j���EH�3� M*z~0�Y m�S���G�� `'��$��$�0�_*�=���y�LG�57�C������� �Ϻ���攈��!:�y)�rs��6:<�gK*˱�_����H���h�u�Fs�t�$r ��Ez�eS6 r��tg�,8�BYrk��b T��y��kp����Dn$J�G�=�"�+�8Sc_`�xѦNK]��5��kU�5��:�S�.�'
Static task
static1
Behavioral task
behavioral1
Sample
39961846fd6cbd3fee80abc78b0cc489964dceb9c77197608f4fbdb16316d73f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
39961846fd6cbd3fee80abc78b0cc489964dceb9c77197608f4fbdb16316d73f.exe
Resource
win10v2004-20240226-en
General
-
Target
39961846fd6cbd3fee80abc78b0cc489964dceb9c77197608f4fbdb16316d73f
-
Size
2.5MB
-
MD5
eca95fbb69ab3ba58f0f535c0e481d67
-
SHA1
82f2092667e20ef4992d13a428102d64176b4b9e
-
SHA256
39961846fd6cbd3fee80abc78b0cc489964dceb9c77197608f4fbdb16316d73f
-
SHA512
3646cf1f9a1fcd854f4ad63ce1bcd451319efd27c21255279add937a9060f32c15d944aa8b4df1712bcf600703614c66c57144061ac09afd4bbec89a4612e3ff
-
SSDEEP
49152:vhDZlDTeHumcu6x06hZJYtF2EGvxyhXQu8GqbilpEVWi26kAdSNl:ZVlExGT2tF2rCXrVlScJAoz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39961846fd6cbd3fee80abc78b0cc489964dceb9c77197608f4fbdb16316d73f
Files
-
39961846fd6cbd3fee80abc78b0cc489964dceb9c77197608f4fbdb16316d73f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 32KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 204KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE