h?��f=x������/X���M)�;m ��-[ו��}�C�]�M?�9�����Լ���@�؇�V��1���F�^�v�����ƿ>�d+�_�iCjЉ���u`�ɳ ���ۣ}�I8�!�o��~"� Nt�͎*�kp�11�.o��]oa��VuM8�m�Pp:6m��*��jY�Ɉ����y$�{������.�ckp-|�3F�����c����Z�@��|��� ��fYB�]��xw>.]�}�P����=��|�$j�H��i����$F�����9���j�S���a�P����脆F���YF�9_,s�o&,�\� �B\/22.���I{�� @\n>������#1 �(b��bg�yM�8��+����'4=�ŭS�W:�[g �}?abO�#�U�Fb�@��4�b��g�����:����S@+��S���(S���#���<�h��+�l�;��ci�Ϗ����)�3������t��������Ƈ��D�J����Z�ZKo��S��D�Xҙ-�3��i �\�@"�0d�l���-��V<PI�W(1�~5�q��\�]�����R܋�O� �.�j�,���E ��&'F<�İrw����D!�������<~2�h"d�`z�4e�O�_4u?V��.�+����q��<"���x��:BRߨ̝�em��iL9��,��8 ~��^����4�.��~���r�O�K5�4[��M�pos��{ø%�uPC.�u�N���j�ǝ��c�������@���p��#5Q�6�C4wl��ݿG�\���-��by;;�LP��%��}�����E�����\i�o4[@���N��k8�A���-���x��[Vk�����A���jL����F�R˶o�=bٗ��'��`j�T�S����膱D ���b��͚6 �Kk|w�4`V�C������k<<AZ8���sUuگ�:6�jt��mx�Dߵ�FdZd��y��y+��{:�tu���Ԣ፲����*.Y�[��U�?��'��]�/VD���O0,O��;���@e�q��s�*]�.��z#����T�ڛM�IEVN�+P��\S��+?�*�v�%�|ׯ�Y�ޒ�4Qt��,{U��p�S_����� 5BV�#ݎD����< �16�t���Jy�n��ƛ~N ������l�Ƥ���Qi�<��^m4���F.Y�r�S��{���E˹�qi�0zFI}*�]�(e>��Ԯ}m`s��@D*�����l�sP_��!� A�"{��t�K� �Z:�' �/�P�:��SYk����b�����Q��#³�%����<�4t��f�W;T��d������Ͷ���Ղ�s�A���ZV'���7iғ�.?�Pm���%'��&\���{���R��x(=0���� dǘG�{)����{�1�m5Z?���{o�=gSSV�����Y�M�z(:gzĠ8*��o�t| -��nȻ"gV���Ja�c�I/������|�o�v�_��T�q�{�y��}�g�$��H��6�I��ژ4�膲<�[ԀӬ�+G_VN$��/���{��'�H���k'}�m�E�������9&HDH� �= ��1"���*�b�?{�&�ĝfVeL�?4�I[�va��N�hX�� X����o���$p]�Mb��%U�*zC�vG߶mO g���m8��.�K�Ιnph{: #J�/$�56,�K��^����0i|�ܯ�,C�؈�φo�u�s<�����NuU!�@(����֔6p}qzL_���� ��Fv:3U4Cb־��ɓIȇ���6]4f���ݐ�A�F���^Ϡ2���G����^!����c��1I��^��y+-}�'�,`�\��_���K%C��^@�� ���!k��� q~���x�a�,\�I69b���j0�*6���K���JU}��h9R�ƺk�����U y�\����cftڤ�����t�njf�t��n�qu�j�I����tMl��4H%ͪ7�Z��m��H(�l%�����'�;��4�b.��ȫ��{B�BZ+��tPFXU[N�ƽ(�r·��bU���٭k�/G����e�)�bp;�7Gy�ؠ�K/�IM#G�v��#S��g���z���X�t����ջ��nN�6d#R���rT���H�(�ay!s��C��A�˽��H�v�L�T�<����"�<����L�~����K��|46i�2R��#\t�����x`L��Rz�;@�[���q �d�^��.��\�ѳWp�@�Ju������"��g�b�(6�KT����ߩ����s�r(U����^�]a*�]ZhXR�#ʵ�Y�pAeX��^���O4�W�F���c���r��9�J�X<芵k�J]��ɓ`������5!m�VPV>��%e��}=ғ����M�t��p��@"\��ws�=w¸�᮳cR�ʡh@�K�Ү��=����'�� �k�+�������p�X����x�G�_ԉ���yIt&�tr�.�L��]\;��~�3��G|�w��sV��F+ӊ+��B٤��rTV��;+9Я]� ��L���w݈��#�q�Ky���Z��ć;e�\�4�K~���J��~�[v����Ѥ Dhng ZB> ���Ѫ�Xe���$2;���]��M0%���|��b��EL�6뎞��pJ��59�E �R'� e��@�,��a1�N����d6�8m4?/C�¿�^��@�MNN [n�cZA���@��aN���#�cJ�>8�5G�7�le���,,д8������(Yݒ��+L|QR���w�w>C2�я���z���s�߃�Ԃ�@妧N�����~�+9al�P<�<"���⃬����V�jANI/���w�=c���/��fD '�*]����Ɖh��!Q�`A��K� ;w�#�Gڱ�Ѵ��:z�)�cԶ��0������k���1r��Ԝ���&�߮��>����=�,�/��4L�����&�L�v�����Α�*K1�x�[��k�H[�n0��T]=����d7�Ԁ��Q&�Z�o� ��g��ߦOP,�Z9�3��� �����@�@=Q�w��\�G�� 1��/��!��$�˕���wKG�/�����h�����+b���Żdu���V�\$��Z�%(���gV���F\��0�Kɣ)p��V���������V*��c0����hq"�:e��� K`ت���-m(��2�1� ��G� �� �\���}y٪��ū���Ê�QB �M�٘�g�tg�L�����Վ�\ژ5��Mli�t��~�<O+Q��������|^ ���ǂ�c�Xs�; �Z���Z2ZH�O�p���E�lF=�okE/'��4��w���E�sHx�]�)�Q �����Q"Y}�DI��Ky��Q@F8�=�5�`~�{$��%L� [�`2�����R: -����3���(�J����m��z��l��C{�"�w�t6v?�YH{J�8�]
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240221-en
General
-
Target
file
-
Size
3.0MB
-
MD5
3acbdb001a0be2555921f0361189f9b5
-
SHA1
1c95f5b66bcbfac02e4a26cbe4fd59fcd5bfd310
-
SHA256
577c882863773dd3c84a219133a967b6354e89822e871d6ddf954f0c3a2976a9
-
SHA512
cfb782d126bab2c85bbdeb3bcd4224cdd5fb6f89c03b7fc14afe44a9fd64e84cd7bb85c176d633a04087429d8a22d32acd037b0ea925f4cf1441070038df5158
-
SSDEEP
49152:/YAdQItwwztvgIBRUPgafOKR9UUVlNKnwGs1r/6brfoh93o0CjLGPFHeaz5BpGN4:/YAN9YIu4KR9UA0wGWHbyqN+azX8C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file
Files
-
file.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE