��Y�r]�.S��u���'��]qb���(��z/}�:����Z��_��D֘��h"�y�&�����!8:�h�}'+z�l�Ӟ�l`&�R�1�@�iX�Β�E�n?�jF��D�Ũ��vN���ުFh��W}]��Kh3�t�i�ZC8i�$�[��7�@Z�0NI@��ʄ3 [��&�%e�<S�l�5Sj����*�c-T�ZHHꩱ��<�r<;ay{����/�ت�X�5�����I�eY3ٮ����D_b<�A��"���<��d������Ɇ��k^�ң��9*����ÒRLW����A��b�$��7e*r�*u��Q[o�fW��Ue�n��I�ܾ��C���a���� Hŀ��m�K�n��<��0ߞo��y `�_q�{��LR�����G�Ε�(1�*���z�$ G��#����`N�E��Ti 7��"J�|]����7����1����ˁ~�M�r����>r�l\d��_�:��0�U�l°�%ا������ ���p���&o���/T3�б7Ԕ��xT*�f��,B H�0O�w\:n��������w�x�`_�������*0x��ϻ���?���XL�4$�E}�h�h��W�PX T�"L.^�t��]���Y]�M��6V�-j��u�'n(��U�Z���;P���9�ӿoj�8� gLx���4G�q�Dy� ���|� �Fg{聼'oF��L�3�7��%��M��YJq��G3�2d�ᎆf0�ʄ��>rM#z��tUߵ���3�u��Bg�LRxO��lYZ1���-؍,��Mۣ Im@ؽ��H�V폵 �#R���Q��rt� CdE9���<g��Ze92����8�-Ȝ����F�(߯�Z�E4�б�W|��n˅��q�0��FoO��/�T���G��x(ی���d?�]���zb���m���Na���r+��>*#o�Mʷn.�:}�7��|�X�����dd7��)hH6��cD}�� �r;��fl�f��_YX#���n���]�p�7�=^����O����s�x�&]��jct�s��P�zP#�� tM��=����V�n��������y��=��y����8Ѵ���č8����J'���[�J��6�b$Kk��H]�:�oR��a> �� 2�d��2�� �;�@{��h�8%!�����LVB����xܣ�1=Չv��b�US>�+�{_��E�=���a��Q.n����1�q7T������R#�d��:��dk�Ѫ�����[ۃ�+ �<��fi��-���5�M�}Aob��oF�J�:P���gT��V-Fft��W����Y(�ж�r��D��忬�rQ�鬼�9����������`�@1y��1y(n��J]T�B�i�ԝ�w��Dۧ� ��`�B�y%�<j�;�l�{����z:��3�m"�'ĝT�����������ɱ��˿ S�����k��Y(�Vf�^n���,kor�)�mo>T���)cX�E,& I2t���4�����@i��8V'�;�[�������h8��-��`}�5N��J���A�b(�H�l�9�б�ߴ(�J�,n�oH"���x��H���&c�l��>���d�4��Lt������`��<Dȩ�5I-�טp�i� K-+&W�a ۧ�n�pR�=�Fr��Y��e��|~8Pً������"g�8Dx���:7r�{�SI�dKQ�⬻�j�����m^CUy���|M�w%�a��+���'��S��)��~Ff��s�F�� � �b��˖|w{?��"h��H���i�THh4i?�v�a^{��B�q3��gk��^�U\G��O9��Q�c�F���D��G����Mp��at����s�@<IjݐaU �>�ZT��ר��k�fn>���������L�D�)������E�� Z��������$���Ø֜,Y�wp���ѱ��y8��z{;#_�IuG��� f���6P�f_�r�������}oZ�yz�5�����(��8r�%ţ�����~69�膵����7q�p�����8�2ܨ��"��>ZوvB�6�c���HDl(�y3�q,�� ��.d4o��7-��������Kwd=%�j��@���x�&q��kO�R�n�����x��d� E_����+��F�a8��F1Vט&PI�}�X��=�"��N̅�����}����y7%�����;��>!E�0��R_�rw~�0��@�syj3��l�`���%����I��?����ׇxI��;lHWqބ����\�+8�����rv�qk�7aL�_P[F�g���ʆ+��G��Q@\c�>��[�*0r���2Lz���|������T¨dp}m-źc�r�]S?)�d�(��|Vq�����?��Mv�)-%��H��8_�����Y�+��N�ӁD7@���:�K� 7�Owe:���A^i��.�R���=c��4�C���X�vs�'|D��y��(2�^,�H`=њ�M��A ]� ���CX��/���|1�z�`�M7l3��vJ��2]��g������~����Q���ni�b��l�*����� �ɞё���#�^�U�ǜ5���lW;��O�я༲�� pH�К֔�V��u��@@ a|��WҚt���u|U�w�ٺ�{E�h�E�/��"O4�{][�*ҹ�o�NS{�c�'��I�������"�y�&�bc5S���?�g�"�w���7��}S,��g��<8+�~Bm֩$R��'U��L���\��MP��HfR���8U��>��D��[�T�.-Ż�������t���kU�d�<;H�kF�nH�mg[`�~<�I|�C9� �xX�{�^���O��MܶR��Q�����Q[?�� ֳ�c+s���sq�}��6!��1�n��O�|2trA>�L���p���!9���L3 ��U-�:"8j���['ɸ���/��x�m ���t̩X�8���Z_5QN1�T! �>�M�,�'�u����k������aCwD��K�ϖ��y m�M�hh;q@w�V���s���A%�f[L�q�k1�:�e�层dG])#�.��.��흡�j�5� �Ѐ;�Ir|�aT�^�h �>'�4�m/��i��eֹ3������B`SoFh��E3�m��T�7R���0/4y���('PH���m��p�6?RY�����"��묧3v{sf��Ah���ߪ�=�4��#���Hp$�W��B��~%�Ŀ�ؘ��N���;-��\���-�뎲�&�[ac�.�_� O �q��kX����Q��Ѷ�W^�l��M�AGv��Ez�]��d���6�1mWv���Qq�vF��Ȣ�:�Yi~(i���"����/!GO���ۘ�o��#٭�xߑ���1sh�hO6�9�ewq�fY�k�3يف=��^[�i����Y��#_Y���Ey���@Y }J��6�A+�DE������f�c�F%��O��b4�§����U�3��BU N'<jP�;@�ϟ��W�.!o�(c(���Er�֜�r ���9ՁKժ������#�����#��7}�K�M�|��+�����ǽ����^�!�*nS'/y-��h�=�M��Pn�Exe�|Z��}��+��:u)�/.��g��̊n�!@�5E3��� �H�I;��p�A,)ң�Z$:���E�xW����f�"���C\(У?C���WpKp?�y�i���K�y��R�+qc�n�����Y�B������{=���:~�bh�� �
Static task
static1
Behavioral task
behavioral1
Sample
39663343ec5c5a52e44fa045019d55c35a4c40941b13379cbcf1e3896710b353.exe
Resource
win7-20240508-en
General
-
Target
39663343ec5c5a52e44fa045019d55c35a4c40941b13379cbcf1e3896710b353
-
Size
3.1MB
-
MD5
05f06ad4643f23237b9e45f6f68eda9a
-
SHA1
b85011663a1d43512162fef52e32cdab530280ef
-
SHA256
39663343ec5c5a52e44fa045019d55c35a4c40941b13379cbcf1e3896710b353
-
SHA512
f4bcd8b5412293d02c7f947d7a5e13a56a4c22f500130178c49687d5fdba1c71130929cd1bc763d4e1fde760429d935cbed465b81a72c466d14d8a3b4ed8c5f9
-
SSDEEP
49152:W5rMiKyPpBGwPJNnr9ZUEnAeHozT5T7sukBo2BkyFHMTPud32ybvukwEYX8jd:erMiPpkifnV7H8lIzBd3LbvukF88j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39663343ec5c5a52e44fa045019d55c35a4c40941b13379cbcf1e3896710b353
Files
-
39663343ec5c5a52e44fa045019d55c35a4c40941b13379cbcf1e3896710b353.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 589KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE