B#�*l������8E���:+qq�i� 3��HvyɈl�}zL�v��rx��Yp.�`�����_��p��H�}9�ݺ.#��о&\X��̦S�+�qϻ`�)(�U~y&���:]sa*^v���:��G��APq���`/��s�>��1�T�ㄛ�_rl��^Z\{���{qL����Qv���\7��R#�� ����k4��W���3��Z����P��sC���L}���cp^�4 [�a�� �;q���^�r�A$Cl��w���`|�RH�Ɯ~��֤�'%y�N-2h�]��j2���44*r��^�(���r��X��գ�ל�la�t� �'x������)��u�s��O9�<��3QF��:g,H��`pY�\�Ἶ�Ϣ_y�6����ep��i����V�U5�'+�Z�bCM�I8ŷ��K�Tm��+�x}�Z��5����D���mzh���<�kwX����1'�$���[�����z#u}iT���'o����*��Xi���㰻7�>���5�}?�V�v��q��}���ڤ(w0 �{��y����O9nt�g��'�D�Xw��n�������-T����{Nǿu��#�p�뭻�ހ(Ynj�� ����Õ9Z4y��!�CK"�{a���W�r+���ѝ�9�E�n���&[؆q�}�Zy�f�D���/Q��}�u� ,�ύ�t�O@��-�<f�:}����Ƃ4�s���4���rcu_5���(�d0*����k- ��Ϥ��p���Š�s8R����q��d��1����G��P,?�y�3韁��6����}9�{:ʓh%�"��.��E}�?9�p��z��W��Y3����;q4*�3̟�S���$��u�o�����wh���cP��$}�h[D�?K]hs����66�����)�e7L�zW�g�:�Eoo�cT�4�f�2Vg��|�'=��z+I�@��t�#�v� ��{���6)L�q����Hn�Ǣ���Z�e2.�sr��L��G|Fׄ��,��ux�]�:�!7�`ז����������>_N��ut����,�r*���������Rܝ-���%��KY��=�B�GY�i����:5�K"���W/m�P�!-뿭9�t���������*0�A%Jq=��%w��J@����c5����mW췆��:N=D�Eh�gy�`#��hE�Q������Ⱥ0e�$�XԴm���E%.���2<�As>N�#�E� 1(���i<*Ԑ��17�� �$�(�q���?�����;t ��Y���9-/)e�1d m�{d8�ż��6�G����^Y�|�gY�'{Ԛ(��Y�F��3��zR1� �&���77�:��N�n��1�r������g�Fq2$�|�D�y�����r�:�����߫�9$�����G���w&i26 �噁xv���(f�ٌ�ҍ?`����O�0��IѨ|,��܂��zǛl �/f(�^�I@��v����� �>gՎ1F$Fr�c_��n���~^�F��X>����VL��9XfK� `9�ٲ�R��b���T���:�&U�0G����qΖ'U�H,�_� ��k x���G�6}�<�{3����\A����@�v�1Bgdlx�:�Cu'e1C���:@ʝ����7d���Y{�Zq]��6���P�� Y�b=��u�=��YK���Ee��a����v�ap�`��r�~���-7H�q pa��O�С�L{x���>GN��9���/�R(?�>�{���<���U5�1�`�<�]��U���.f>`A@��ŝ���'"�ג���⮌�v���E���6d�̒��K�o�����FK�}�8�>����4�/O���x����h�FUm �.f���V�6@��!���p��{����|� �٫�3y�B���w$����jr3�*�7wɘ&'i =tf扮�+�>[sk�l�NY�����Q�� b͡�92v��Yܖ�T`x]���Y��J�.���m����镵�==��~ʮ�TD��`xC��K,E:���mi��R�6��!1�i�]��ơ5@�/j�� Z|�Rơ��Ly��]ذ �"B�9n����j������%�/�qD�7���̿��F��㕇<_3���AFOu�!�ʎd�u�PkR���%%�e�*k#%�����!���m��r$�>ޠs�*-�̏�� no��j�bT &!S@�NB��Q���^no���]#�I��la��d�ج��wp"�m��X��^H�=��i��[���҃)����E����P%0%�D�E�D�R�{�� ih�zx>�p��P�\�~��=�'3�Ӭ #���L�������/�2��� �@B���%@wxo��T)��n��D��>/L�����e��)դۯ?���q�h9��Ixu�?��`O�_�>g[�>.�t��G;I��}f�U����*Ť�!✘�/��?�e���7g=�q,��:������v�?U��.JѤ��rG��$1j��v�ޝq#E�=��@�I8&X�݀��|�o3���d���-�B4�8y�#l܍����i���Gvej�V��|)�neWA6`��� T���Z���zy���Ĭ�0�v�-{�}�L2���ܕl�����=(\D�а;���ȎԹ�����zc5��;���8���h�Y)b\��w����*�o#�8����nS��XfX���x�yk�'��,?��; ����mU�<��������SԘ��s"La�/i�nF�R��϶��l�IV����k4A���uGF<7`������ǗI�,-��e�]HO�"?����v��E�Ԯ�M�Ӟ�=�g�Z�C� >B���Y�71�����҂��0QhP FW6���tr���8|�ؐ��E��'(/ϳG���"��b�<AH�B�UP�_k��RX�D����P ꛮ*��=t�h�Z�`�M�z1�Bx8Y�и�%�t*�N_�lg�N3�#V%���ӯ����V�n H:C�х�����(+��r Y���Ýt+qQ��c�>eF����(�̍��[ږ����A�(dE[>���\-�Ȥ��ߏ��/���+L<���b0z9H>M튠F��V��eqV��#@�dg_ ���FE�/��q��m��k���*K���i��\]K�!e�B
Static task
static1
Behavioral task
behavioral1
Sample
765a42bc7cff6c294e138d70aa29cf5e2eda15cee16f9ffee7aefea5eac43708.exe
Resource
win7-20240221-en
General
-
Target
765a42bc7cff6c294e138d70aa29cf5e2eda15cee16f9ffee7aefea5eac43708.exe
-
Size
3.1MB
-
MD5
9eefd6a7ded126926524719593d0ac07
-
SHA1
aa0e23dc2123476d241d2783cc6887c2fb6d6130
-
SHA256
765a42bc7cff6c294e138d70aa29cf5e2eda15cee16f9ffee7aefea5eac43708
-
SHA512
d3bedd721354203ed1f526475ec50677da6b89747f2d556ebf7abdc68a6031764759b48320639afd29c3a8300f776900fea8f4a4f007ef4b65ef47ca018e9226
-
SSDEEP
49152:LLXoBtlzYC97tVSb3e/iA8Qa9Jq7jQO9bzjU+NXD5QDBx3xsw/hsezC8TWeZ+e:LLXymCzie/iAEj0UQsmT5QFjlh3zza
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 765a42bc7cff6c294e138d70aa29cf5e2eda15cee16f9ffee7aefea5eac43708.exe
Files
-
765a42bc7cff6c294e138d70aa29cf5e2eda15cee16f9ffee7aefea5eac43708.exe.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 589KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE