�I��@��^Tȓ�I�7 �&�����������(�������͚�܈dw`0��Vݺ� +��p��'����A� �d��^p�d!�(���Դ��hBuP�R������E8�;����J�B���t����ܡ�[��M�a��H)�5���+�L������r�ܹ�}�k\.H�!��� ��')\,�M�}(a\�q��k3[Zn��z�e�G1��g棭Vר�*�O �L����Dc�,���(o};Z�L�>�I�z�-�@!�"���9�����ğ5ǰ�\@�zFn�K/� t��S�2#����}�M��ON͔�MRm?��1f�A�9�e�w�d�"U �^8�ߌf�e��&��������B�w6C!����#W{Z�wGc��a���`�d�J������"A���~y� p��Q��,s��+/h��<2�:P��d��( :�ag�y���n�1����i�l$��_B�LK��UN���;�� ˻[r��w=�o�~�G�@�f�����\���FRT��L9�O�y��x�T{a�F+�]�DjlςL|����%08�rk�1"Q>M����1�Iݗ�+��Q1�A�8iZ�zl�*�7/|+C_r(���k\/(��uR��-9��I�Wl=';'t�N���VV�PR^�Ұ�dJ(��g�R�#?r#Ժ�@�c �9/�M:5�D�d�+ A�)���Y�E�`��z�hA9�[�`s� ��Ov�ր�9�w�c�A�w��=Vv�c�/�Q���N#���'����D�4�4�#�T���-�ѫL���?2蒥� �UO�Sm���F�'{�����j�tyRERH��M�şL�j����$?�����@y�}�;J�z� '?u&�(�����@� X!��<����L�)�3U�1���-,�.����E � &�c~�W��n`��7�{���p�Dܴg�k��qz�t�� ���`��f��d��l���,kX��.;�\;�x������^� ]��ފ<�GAp*i��߾ֆi��a>�8�=����.*�_�0��u8.Í)2�M��*�{"��m M�8B�.�t���2p����j:��G���6��:��I%��6ؐ���"�pO�K �mZB�1�b���^+;3���]|�I��nn\k�$<��|@�V����|43X4����Ark���B��u��յ���U˺��^)UvMN�ҎK7>��@�WĈd�A����99GI[�‥nmt��Q�����b���̀�ͬq� ���ܒ�Ӵ�z�_%��.���>Z�S,�]3횻B(�e9Z��+a�j��<�}ְ�@"�U�� Re���|�[V�@s���{5Y)��!�-,�^y��$��) �gұ�B�X��pC1g�>�n����̕D�.�����`t7��ZjR*9H��@r�`w�.w���2�����t�v���t�$`�����lh�Pڽ����H�Q�ϛ0#��U�~!k.����"ަ'� �b�Z|�ZpN+/)�#%sp�I��l�%��<Tl����L��=���'q5������3��9�K�A�f�D��X�#����DRA�˩�$��6}��հ}:�<�jd@�BeH���j(�[��t�� �7���| {�-g���P��J��at���!�U��R���q1�n�k�6���i�\Ȼ@D��s�(�Sn�����@ ���(�A�A��X8a�Dy�,ѡqְLV�&���Br�e�k 6��2,�_�� ���X���g��5A3�:C��V����jL�Ȭw�RC��v_�Xv��Y�wߕ� #�(�)F�V7���N������3�����uɩ��>&7�Kg=Y���Rj�w���T���U�r-�'x(Ї�ʓj�(�#�K4��h2>��sS���>��:�O���l���^`��)hgR%���6�M�cy]t}r�hI���6�r�6���D�JN2@B�ds�Kٟ���|��G����LC� ���n�C������NO��W������Ҵm���P����jKS��8�x� ������F���ԗO��@Z����(-�pZeHnXkJ��#=8F�m(�fD"|ix��<����b��k�2���C��Ĺ�1��H��7r�Ţ�R]�WY�b*1�M���_�LV�c �A���_��T��XG�����+�~��R�z���E샰Q ��s8\+��>&c+"X:�vP�w��E����tU90L�=��ӭc[�7���Tp����sϺ����U�:E?A�b���0����k2xס_NS_��3$?��p뗘 rtg\EHG�f��^�dz-�}��_��*:�26M� ���Ű��a�:�'�O�Ə��E�����9HV�X}��EO`�����J'y>Z�v~Z�{?�e&�!�a���C+�83��E�>�xlH�7�����a�^�v��xW֧ ,��L\%�Y�z���i3Z����t/SR�um{d�QB��&����ģ�y�����b��\�����=+�e�re6�Iin����J���RvpE�d�H l�oS���kA;���8� )B����C%�l�NcF�L��kc��zW�#v�=�p���z�w�Ic��C�4%�����/+�+?mc��? ��J,�m���?�4��!{��G4:�K�Rp�\q-�� x%T�sGfw��+� ���\공���I�A�ǾOZe�>j��M �9P�`�6���`�s���A̚4�$u=C��91BTEP�(N�L`x��j�?dRGS(Z4u�ǑJ�@鏦�⌌��+��g���r�78���7YCڇq�����A�kH��ۼP���uS:g=!. �0����Oq�*��y�^�^jNa��3 [P����ݯ^�L�&�%E^d��3`�� ��P|��Hhѳ<��=���V�{�ls�215+��B�x�B�ix�Ӎ� =��M�\/���K����1��[8�2�OXࢦ�?���r�mJ�pH�G ܧ�Z!�ꛎ �}�Aؖ�A��3�J� � �PCݏ�^�ӻ[f39�w=dX�S�.��I��C��o�����{��Ԉ #O�,�}�� d���n��Tx�7�����i�3+k�=N��n��������m@7`\.����H i�,K��²�NĒ��Z3nE+�3��ɿG��O��H|V[;(.������]0;���#��:����9}>�&Y؍����� ��gva:f̝�g��sl-�ɗ �?a�y6Y��-�[H�`�tө�S���ϛfPA"u�%7��zƌQ��^�=�1�sc]����/^A2���!�U;�^X�Rgdș|���p��7-z�']vCp� =Sr��uƼ�0�D�.$�NE��Q&��"��7�� � ��+��$D7���ȥ���%S+C���^,�(�N�Я눮N�m����Lpi��c+E��Rȗ��b@�@���!z�Ǩ�-������a�ZT �a���0�rJ_���栝YPo��ؠz1� �v���H�i��TK�����+PA׆q}
Static task
static1
Behavioral task
behavioral1
Sample
ace_777.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ace_777.exe
Resource
win10v2004-20240226-en
General
-
Target
ace_777.exe
-
Size
3.3MB
-
MD5
5a26f804a9c98519bb786ab9b63bc47e
-
SHA1
4a39cfdfb269532074b615941e736af0ff8b8a45
-
SHA256
6b46457a89dbdb416310c14dfff4e9723416d3dec9881edec00727ea0c757e66
-
SHA512
e2c24c79e4ac51bb988e73eef2e2ed05c13c4110f6188ec641f03b9e49555a3f33fd63dad350dfdda46594a0adc51340b2d62ab25e747eb42fb90bff4b433d44
-
SSDEEP
98304:Ow7BQ8nlyFFnjC0xDB5cC0+yhmF+nytf/:OMBUFG0xDB3Byd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ace_777.exe
Files
-
ace_777.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 755KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 10.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE