a�b��C���<�6ͥE�<,�n�0��l1O���K�tY�e_���-���X��YQ��4%i��F�2yaW��p�u�A�����u�t�Ѽ�v��mq �j/���o��/�)�Ī?�p>[�q�Dt�:����5�2���j�&Bd��m{p˲@�d�����R�������&:��4s��$}��!����-�zW0m�Z� �&d˔�U��y~��K�h������7� ���n�8��v��9�rj�.�R�,�|vd�Q�K��B���-w�v(��m+�v _R9ָ���e����=���< �:��c�"�7��TS����!t fґ�^/�D9�e�T %�#w�9t|_Rt]ç�*���xK{m��������Z��ӽ�,U?�.��;���%Ө�#����Z���I��:.Q��J�i�#����G�Q��Q��Z/g����ۣ*u���;��?d ��_��� v��%���� D�P�{����Z�L�t<H��?O[#��B�����i�Wԛ���IzzZ@�t�L���a��ȴ��Y���c���e�P����?n��'��n%Q�Xn�z[eF��7ȗ:���p�5@@�?���ܗ�/�^��{~o�#�mxUˤi�Q�'��$i���Rqsf�)�^xN����>n���X҄�o��/??h��zkM�"w�T�t ]�ˢ�@μl��|�l��]\X��S�qD{��S����Pm�z:S��� �pձ%�3�7K?9�NQڰ����2���ݑ�<aٌ1������K� �@��2��5����Z�����σ_���r���̸%ب��m�}�O"ו�e�e�)��X�� �kN���L�� b�c�s�d�>(��������W�6��8]��EMzxi���� �BԄ���E��E]p5Bh�]YQ�w�ſ�Gkz�(A�^F� ��B��*�ݍ(�ȵ���y�8�W�� �d[�����+������E|�!�*C��.7`a$��b�G�a��&b8��St��D�w!'�Ӡ~x�U�C0|.����1�TAqRVQ�w�}��*���S��T����7i)a|��L��A�]�� o�p��ub��ϥ�� ���+f���2>(�C�Y�?����=��9,a��K��!O���UL�"@�&[��s��9u'��"����E.�*�M,����%ZMW2�\Å[�.x<�#��"�Δ(� ��}Cқ̃�iֈx��r�@�e4���З�>��Ǹ8ɯ3Ʉ҇��S��Q�㪰�n�髩���'�2�͂�d�5ں�y&����ox���WQ_|#�A�1�(8�}��x����֞I�@�($� c ���P������K��I�z\��p"� �6 g�p#`q�:���Ñ >�`g]3�[OhG�Z-�&�CB�n \s��z��7L���]����e�|M�#�'A�a��C͛W����U�߅�Q�҄��}�P+�6,��C KҚi� k<�9:2W �����rUƁ�X��=�Ħ_���J�,-��� �?M����M˖¯�͘c̨�֯M5l�mR�m3�(3��圆#32�0�GUu�.����+�@k[g�~��;S.�ۜ �D�j�^���6أ~CJ����}&T#O����o�j�2?ٴ��ߊ�^�A�u��r_�q'_��z}�4������o-,�9E`��c����dG�����]�/��?9@}ajF��r�6��ao� ƫִ��9Ƕ��KSҗ&�5=S�����\����<�7�H���(�m7}�A��k!����/,7�\Ƅ�fV!��م��m�-�ުȬ]At������mo��O5�#C���ˑ�4��\�ɍk��SY����Q�_�>q��c�t�FTWF0K]���dG ��DAو� ��r":)߰���)�l�tݰr�s �YJ�g"cl�2Ҙѿ��Z��G�)0g��4� ] ]��EJ�"�����x��o�����qj��P/���� ��'���T1���n�&�C�c�t2�Lȁǜ��B�EUzBFK�[L�zP ����d:c;{�N��ow=����3+TM����b�P��x*��C�S�0���5���q����~|!��5��w�u/�d��jA����D@V� fڑ�wa3)h��Y��9��\��(�G8}� ňzl����/�I�Y�_=C���d2x�]��1�����V���h��QцR�NX��Э,��&��:KU�s$N��)S����H�]������N-,��� [�t,��e"��jd���a6��EMDB����'�o�8O<�(�fl�>�ՅT�.���䄶S���G�B�4�.>��I�L�XR�#�;3�q_$�sc�!u��Z�l�͵V�����ڻ���Б��(_�-(*7vO������]Y�֮?����˼���=�7���-Q�$��5N����>� ����~�eW�V��ٗ��|�4��S�V��;���~5����13!���T��ϓf ���cX0�fU�����)��`tY�G�Q��;�9J'�=D68�S!6�5��!�(2[:U��!cq��������d��h����q�sf�V��$4��O���N�tb A�G��%�t�<�d˿=�붇t?]�Vz��j���=��4*n��0���E���l�o=��d� �Z!$��hh���;;�X�H��ʠ�Y7p��Ba�;��H�w�Js��U�N&..�����7_����"-a��&0�VJ:��c#�S�}'�% @^�9��nN��}�`a9D9I�����m�Q�1�ާ��'�Ꙣ��SX BY�C���.N��:� y)�7��?��84��j�����#1=�'�V!��������/���{�&�#c����j�5!Q'�`C�4p�N�+�c�?kfK��.�`���9���pD`g�#��kC�Zؒ]� �v���<��ֆ�@[u*\v�)&u�{#3}E6�F#�S�d���QCT��D�2��I|+�3{�rt'�!Rg���L*�� <��Y�PKk��}���N��jZWU*`0kG��3�����4�}$]��.:��/�K��2ˢ����������<�O]{���701�1L~�d����/��i�fy"|�&-Ց�~N��d'?�6V\�Mo6�@2+����i� /���}�y$L����3�֖��4`b�Ī��9��x11��Vf��nѠ�D���y��J^6o~W���.��XR��~��~=��G����/銹�^k�v�}
Static task
static1
Behavioral task
behavioral1
Sample
16d7507b619f3dc3b48494cc9b8867484c5406caea5f5c2bd94a4b6cf5b2f437.exe
Resource
win10v2004-20240508-en
General
-
Target
16d7507b619f3dc3b48494cc9b8867484c5406caea5f5c2bd94a4b6cf5b2f437
-
Size
3.1MB
-
MD5
40e36e8b982915101f9f39b5d956276f
-
SHA1
63be66b421f639fcd49ae3f4ef1269a605c5e061
-
SHA256
16d7507b619f3dc3b48494cc9b8867484c5406caea5f5c2bd94a4b6cf5b2f437
-
SHA512
61609079720f86c2ed7d8cba827fc0537ea544cfa0745d1ed67650f4366d5f9779fb68a89a0be2f66ef94da08ab59a1b6013cbed270f76f22d4218b1b931441b
-
SSDEEP
49152:4Pjql7fVokDR9R+wgBhHUh052ulc7l4YE4yfojIO6jnO2Ztaen5:Ojq5VokDR9Rvq0hgdTupx2Oen5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16d7507b619f3dc3b48494cc9b8867484c5406caea5f5c2bd94a4b6cf5b2f437
Files
-
16d7507b619f3dc3b48494cc9b8867484c5406caea5f5c2bd94a4b6cf5b2f437.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE