`�{k��Oi�p=�~���ΉO# ��ϰ��2��q!Sk��>���i�$)xMfӽ.�_�A�D�Csz�*�~�5_G��������TG�9�F}�4�T���y��5��u@���ᩀ(.�E����>q�&|D��9_}n�մþ)t��^[?����0���Ϣգ?��G����EL��[k���!킈��ZY��=5nk�uŤ�n';���w��i��j� �O&�G4~�#y�0� �9�qLA,@w�ź�}b���"��FK̤B��s;�c�2����ߐ�3F��L��/<~�0{*�|qQ�Gr@���R[�@ l$�����Oy㰈�su��O|�:ʢ�0��K0���h��ɧY��l�N6[Y◡�OY&�}������e�*@QA���t*��:��41��D���R�2���SZ2��NP�9�\���3=T/�uՉ6ɗ~�~�V��9���5���j_�З����5���*���C1�z�g����a�_ע�� �Ϥە$~��!�GQ?B�����q�yR��'�|��~�D�Z���\!�(��Y�JkLuvT���2������2�0��D.�z����`D������j��%��P?[1P�c�3?���ZY�t�e+!Ov��Lhi�>�E�XQ_+ܕ�'���U{��72g�02]�C68PX]�A�� �%����my��*՞�~��~�Lg��jb�^�;Ꞟ�ZY�gG�K˔C Q�7: ��z��ь�*�"~'�J�QE=�5x�$�O�A�6��Ɔ�(A_�^���~� �6��j��7W0OZ���i��.T�G4�ߍk�s�m�&���b��>G��Ҹ1'C��n�Ea�b�䍕BU�}�?mŚ�ء��|���串���>��J�7{g!�c�]� ����a䂱�`���㓫�:~q��3�ym9�����9���Q���6o?�3��@����g�S<ԁ#z��Y==�����)v �WU�I�d�jP8����iO��3$���\zF�]d�OD�(0dX\O�8;f4���Є7"8w�~������(n�"�g,�Oge>���t46�rzɒ �f���g���uл�^1'Z7�4��m�0� �o�y��U7��Uƫ��.���(F�!3U����J�z@ '��w�|���f��T+-��T��S��k��`�E��jvO|6Y�yb��@OBCK���a�'�Y���86tQ`��i+=Eln�����7ֽ����E��f��cR~b�T��5PjP��������������������:��"�?-�b���O���$P�`�ѸQ����נ�dE��$�`P����tb�>G�w���{�?j�_+U��D2�Q˸�zK_.�H��|7H|Wh�rbd�`+��!���*S�R���ݩݠ)��( ��y�ڡ[��H r5W����Ǚ]�ܬ��� �����ZX�:IwZ���_s#~�j�wmh1*D��Q��.G�� �l�'��Ax�`����GQb[�L8����ϲ-gڗU�ʱ�������+8��Q�]��,פ&�B���T�<����g�?�¢$�=�3 �&��9� d��%?jU�6�����:�D+[cG�ڠ}�}���H L�0�<�������-Yt˝��/g�0�c��\Wk�2 @���]��j�8���=���b�(OU�� 1� �*j�Xt.�^��ĭ��6Ż7���8S�O�i�x���;gZV�D(�/�%��\�����b������Ŗ2~[�߂C�� ��*x����bGQ�<�����6�D��ѹ��ʘ����kk��n�1-�#Q%�(}�~�re�߸�6l�>ƪ��}sA��-����nX�&�����z�2���c��b����o&�d�FijK��H�z�B�����^�%?h�mxg����Rn ^�5u@��b�Ð��l�[�/c?����cL�����Ѥzw)�M���;E)f���>#�m�U�=1/��]�G;�l2�#��Z�L�z`Ŋ����F- ���G���A�0*�Of�������;���y�E�ӥ�coS��6ss.�[JU���&D���3�!�� �a4�������%�=&p�Գ(c�u�[� ��=����~#Bc�gb��l�n}�à�]�Ч����S�g`�zG���c6����OA�T�}2���#V�������k�(������ˌ��Z$��\���i�,�(R,>��i(�5���H��t�zÓs� �-2Ht;A��_�ڲd�*4���-6��kaP�t�K��o�p,�u$����$��:>*d�f;������] o�����G��R��W�Gk�HЮ���I�ݢ7=NK�<G��Q. b�C���J�^^_M�G�._Jo:2a0NVuI.�����Q�b��2����Z�$��e\!4�#)t8N�\@{+����C����u���v#��YۓMGo��)��)M�רwI��nڕ�����:���O�H�#Ch\ ��Ό�rƹ�>�; D��@��u^��N��$}�� 'j�J�Y�U��^��nR��8�;�lxf��g2�u���杯Mh��=:�@��`�/�d����>Cެp&:�j���V���$�m�����3�8�-���B�{l�!�z��%����O2h�1�]g�Q���,���Q&�3�A]�r���kB�a�1���&��$ʄ��.�Aua�L]WEY�������n��}*e�ht���܅�����e1������� ����XB���-ԡS��ޤ*����$V K���Le*k�L�!E�+ ff&�*%ES�T�|���60�4�қ,8~�s�.�1X���9@���DN JB�k}�c���p�Cq����k����r������}���$t��lC!>�*������<��0@�1dz�'��H�+������/��v?��K?�s�e0�����KϘ��֡�����,(5nK3&�� I�ek+sf���Ĩ@����ƶ6'�X��"ӏa��v�II_t��=��;���\����۳���[����^rG��O�?*ehk��rH� �!�E�3�R~�p���;y8`g5��������X��U4��6����g'{��
Static task
static1
Behavioral task
behavioral1
Sample
5f9e92a9850d65b789272749d37c63acd3804f49529a12f12b256d78ebcad3d5.exe
Resource
win7-20240221-en
General
-
Target
5f9e92a9850d65b789272749d37c63acd3804f49529a12f12b256d78ebcad3d5
-
Size
3.1MB
-
MD5
c5df476e068862468f66ec17256c4ada
-
SHA1
fe5390429cb831234909e4e529de0f4e676d8ea8
-
SHA256
5f9e92a9850d65b789272749d37c63acd3804f49529a12f12b256d78ebcad3d5
-
SHA512
7b611a0cc5e0191eefccbc48865530176a79723fa6215adeb4d363eb37538228ef19be36de4580cb991049691991bb13313086143e4f6f4df286123679e20fad
-
SSDEEP
98304:p4uc2NLEhrpDVPSA7gyPh1pn2Mhv2RFJ3:p44N4H3EM1Ywv2v1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f9e92a9850d65b789272749d37c63acd3804f49529a12f12b256d78ebcad3d5
Files
-
5f9e92a9850d65b789272749d37c63acd3804f49529a12f12b256d78ebcad3d5.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 586KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE