[��)�&��'�u 6"���оs�!?���>ٟ3ouel�*8۾sٮ�kq�g���XD5YZw�fbD���$�!v5 ؋t�PjnۤpHE��o�J��� ?"�OZ�2,��-��6��;�Z�1:IQ�tD~�����e��wۗ�n�0��jX����N:�T�)3��Yu�湾�����dhޟ����<$�7���"��h^Eu������Ƨ�'��X=��E��Ӛ0�kR����d�t��yiQ�K~������BD���L������B�H�VOd3��H�;�Τ�K�F>�<&Lh;K�q�������m@9����� Oޟ큆'Wӗ��9E;r� M�g��z|*@p�B�y0OY^J�cda�w2��i��7��烃On*� J� o|7(�X�KP^��U ��H]YG|�ޗ� V<�2m����<+���ﰒ�qz��Q_ƑzZ��t7o�PÅ��]a��jgb�bmk{��Z�@}���U�~��(�o�ۏ��,N�~X0�o��"}���K����u�J����1A)MAn���E��J�I��A.0D���ٕ�5^�IaL"�����I��F��:�M������2�� o�7��O�����;����M= _�F?3����_$bI-�5E��uxI�f�(�G�u�RC��� 8�խ'bm�B�7�Xg�Ϋ����7 _�6���>_źbh)��f���Л��ߒ���������X4U��%��؏R� \u�#/�ޝ������Z�v%v��:�����b��zo;/�^=�η�5� ߧ�+� ��A6pu� +S���v��b�H��Ez#�N��O��B硫�,�7��{2�5�fz�R��и�v��Vn�d��̲ �B��*)w�O����J[� �j*j��%{����|}��d�$2�-�C���J}�o{�>z8sc�ą[�=D[T ��ߓ�)�M閔�v�����k��G�)������*��2:T��eA.�&7�9�xe���w$�5H�3tݨ�'6����d0���ƃ ���i�#���n�}����ȍX����RU�5"�����6�/7�@�����}aes3�F�V-��G[��?���2J�� <l��t���w�����@� ��W@��s��Mޢ�|-�(�LTi���bI?�y0�w����9�G��^*s��Py7C�}����ף�{����J�=AL%w������͈RAPð��ܭ����t�y�X����}��2B�A�q��x�k�Ђ5���apk��\�[kZ}4��{;b����A�����s^�܄��(b�H�E�E��'�iQ�-?1-���F�"d�G��#�tt�.�ʰV�fJ���VQ�-/J�7B"��O�."���x6c��ݞ�X�@1EWK���0��:��X��Ѭń8�`4�1%���l,����PdA�+l����F�� FH���F"v�r>uG�W�r� ��� ��?@�|�7�ʼn�q��n֙���1��*P�#E����㩕K�{�ܴ7^�I_2>¬p{Fz����h��%���g���y��Z��~`f�ks2I�O>��ׂ���Wo��Ќ�O ��K���H ��<I���V�xA�#XH%*e!����5�rr7���~�rF�9���"K*Sj�"UU�`5�x4Գ�C!�vMD��懬;M�O1Ɩ=w��%������t�@�.(5[�[ ����ǥ�������ζ�:��μ�^�,�sUD ��Ə��JP�N+��%`���|@����ݡ���H���$���4{���/4l{��]#ީ\�8^��%�e�������-��M�Kic�Cp�0��?���4z���2���@���f�df�Ȃ�W�Y^P��=�UV>��_�Q�A�I��� �;��� �_|x|�f~���M��)K^9��$���;��Ҵ���t�!U���������{�"��onb#��C�ڄ�n�����̳�&m��et�^b���Y�������V�RXI#ݔ]�Ro3t�-�Z�o<}�bs�moPT�Ǚ���#�R����+����ʫ� J�L�"j� �ڃR{㼮��Μ�v׆��c ��)�/>�s���[��}�x�XnB�g�����y+���f'���[k�Ǜ���(^э`r��埠%�Xo[���D�q1�-�z�^��#<�H+A�g�b��o���l�p����.�Վ��%6�^!��n�?Q��e?�E��1�4��o���c���6X������a��a�0�'�Z���m�� �f�F!�o���#\ˎT�i��a��������l����L��'���A��S{jB7բa�_kҁu��++�(�EA�m`�7_��|������Gt�EgAiRn��m8�G�9��D�l��3�����Q�jXt"����=�4�ڵ�Hx�u|���M�8{BP���n��D*j�t��,����К���Ϙ�MB�e.���?��>�Y8Ȗ��+$���p�8���-�'J�;,'�ΊdͲ Fܓo]'h�h�>ENC��������h4�9Q�c���*�<�G'�AD}��Uc@�=���R<Y6I�3�;&*��e֟�6:�Ҁ������z�*�� !��?��5�c�-�m68�L��/�Qi���qL.D�l���b8��q̰yf�]0-����ׯ��j����h���O���K=��2C03��;��G�^�,qg� ���_��H��7)yQ9�9��Sl+���L�ɼ�w�-�[o��r�KX�xz[�F�;�>��f���2����a5��m�&Z5���M�I��dpF�;�Ξ�q�U�,�G�lzWY�-�@�j���y0Q5f^^��MK:�R,��>s�ݳw�k��DO��Pc��_h?�ٻ������B#����$����0��7�M���IU6_c��kɠ,*������xf�v��,�8�S��]��҈�i���>�2���̑��� ��(������n�Pa��z���C�uEt�6��1c�@|��&PΎ�W�9��6�0��U����x��^�+Ъ����bÈ~p���`rb�!=���5�m:����P@Ծ���O��mw����1��a���Yg�1C���9�rX6Y:��jHC!��E];�}�"�����qu�@~t�����srE�3�]�-��,tc -�������5��(��3��y
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240508-en
General
-
Target
file.exe
-
Size
3.1MB
-
MD5
49c543aa7a5b505482bbec1a503f4a9f
-
SHA1
728b5cb13396e9729bdf155bfa7a291854f727e0
-
SHA256
c8ea649a1afc19b079103e6791de2b11d15999aba6e39714dcd9801011c759e1
-
SHA512
49aaed2e16f932a8a42099ef74f2b2ccbaa5eb07a8b7afa31605adf4800569d3a107325c527335a14e14a58d16e36076c3a54e5585b3aba0db673576c87e4124
-
SSDEEP
49152:qLF2nv5TQG5LL1q2p74eTE8x6GuM/dizS0VGpDrNonKGpZrsbqq2tpdv/XBkXiaE:64BLTJUqi9VsDrKtpxst2tp5PS0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file.exe
Files
-
file.exe.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE