2�I�OP$7#�U�!�r���F� �=wi�'�H|hv84D,B��ɫ��~���E�de>�ݷW%Ri"�đ'H�N�>��9G5�f�C��[���3�1�G2Ϗ~�|��w�g���bǜt�m���z%o��lR��s��M�c�Vf��"�aa����˙�6ZL�����uO�u1�b*���*��k}�M�#ת�PJ�ѿ�PƱ��0��o7Os]0�h ���N״Em�Oӫ������ߺ1%�����[]$�����I���=S���T:Ru����s�4G�u.�5%��3&O����(���T���8�,��� ���� A_�^�����̒��g��S�U@�t<��ې�N(86��Lf�E�[�ŭW�X��h���E�O��?ťz�'@"�] �Ն���::��ڂ"ϹO�\<����#�3������@jB��`ͧ��[*E���&��^E��G����_PE"o�ߛ��Fk�c�`��L��r��� &���(���k���%�2z��n\6iv�P�Pˀ��<q� �/u��?�� �b 33A!)\q3���;�Z��\:f�i��b^6̃��|���������x�������ǻX���4} �TQݛ��c����*4���z�xj�g��8���p��!5��#C��$K��>�rϟ�.~��^f-�v�s�Eh��/��.ymk�?ȡ��q(�W^����=�a�$zJ���S3*�,��L/��b����C+�l��˺C8��˅b���U1M*�fm�b�l��D�+�0 �*� �j�m��U��.@��ݖt��d��h=$���^��͢�XnOLQ�c��1�g��d�E~�z��,i^�C�H6@��i��`��b��Q/6�=w�hx���}O0~��Ǯ�?L���jc��w� /υt#J�x�f���S9h��.�+�TH�ֶu��b� 4:8Zw�Wb< K����)������8W��̻7G�y v�����"�� �P�D�+F�0��k�"n$ƅ�Y��Hq�5�M��RJ\e�+-^&a�� {`h]:�� �}{�ƏO���*������v����!A��@�c���Dᡅ����1�qnu 2Bu�f�ҊXzF2B�=H����X9~��$���p��#a&y�g� _���0���Č+�S�sJYD�6rA����=�G�U�B_��?(���B[�hfc���+���HɢQ���b�?�����(=�*Ŭ�u�H����f�r�g5�D��� ����Ax�pDՌ<�֒�����*b�U��$9�Lv����:z! �c| H��Z����P�B�Ŋ��c %�H���E�B����&R ��3�tx�m� ,���sl� V�'>�D��]-d�^�ˢ#=�F�L��HPM���+�h�����o�ڂ�N�X�L�6 ������d��g��H���tkxf$�`sX��K��o�BDMkD>Ȗ7�fD�V�Y*�$��`@Rw%I1��p� 외�B ��=vfoki��@t�1�=0P!ښ��mX��-՟�ז8^>��H�$/��r����K�^ ��d�-�/}g�F����tf���n��4��}�Ǔ<�X��U4Ŷ���yaˣL"H.���7M� �"���3�n�87�9�xl��}�Kz߹c���C�/���3�-�X���{ů�Qcs{x��K��]L���T����ܚ�M:�FK�v������D�N�`��ۏӍ�g���yEx�O$�-����&�Z,45�d�}�����IӶ~/,OU�J���,XYd���,[���vtm�;�o��P7�WJXA��o�&N!|w�O�̻Tef�z>����v����b�4�m ������ps�:1�T�*2P�%��%B/�Ug���Sѕ�i��������}��74q�ԍ��!h�S�$EE:����C>���Z��M��'K��j���ܟ��ڎ�X�sq�}���k1Aq tY�������t6uif��h���p�p��E"!����Q�%~+�5u\�w(�Si�(a"�\Cq����!t�Ю�~z�E�0p�o��w~�w&������V��Kb�|�{86N�-;A��K��s+mb��d@$A>^{}<��IRV)�u�E�@x�`��4�{8i�j��3q4��A(��]y� s~4;�����m���$T3I0;���p ���������G7؏)%Qt��G�[�l\�G-����"{�����<z|C8��D�\�K���ׁZV�Ț��0e�U���|=����^����P��T%��p�{� \��������1S>B��ɹU��5��:NU������o?��A�24�Jc��ڨ}y�'D��9�n��5q�w�_����t/b'J�*B�,�r��ԩ23����9G: $Nk����!@�J\�x.m>��ͦ_�L�L��|���>g��o�b!�% �����q�آb��N�E���$�o�)N��Yx��_�oLR�;M!�F^%y���t�t�����/ޭ�$;��ܮ4.�)�����i�q��;�����d*TW�E�jp �u�^�vF%�O:'�?Ć���|���!�6y��������ȹ�����\�w�Ųu)�Է����V�4�����c%��\�L'o�2rU.m�����<^F���(��H�-K��?/�^dž~�z���*{����k����@�Q-5�5�f6��e�W�y�%?��F��W��֤$�~�o#��Q��&~$�fQh73r(���ằ�s^h. Gb7������܅�7�Ei��=_����F�liS�l���qϞ ��-;���t�6�;<G��A�}�i+s�=sc���k~��/ �� a>`h�� �f�2�B:B��9���p@��?��r��h#�_���,}�[x�/��~���=<P��GhCS��b*�}[�В�aZ4�����Z��tI��7K<A!���>�QI$d�㇁R�;�(Y�a�Nw[���1��ر��g�OE��H����V��=�A�{�Y�a�v������*��RwB�b���\V�UwC�H��p'*Zp[�k3�dk[^ ۇ��=�����!C���`@U�(�Q�X� <�G�̺-y"ٲ\Urn�ܓ�hSP�Ŭ��I���+��^|� kw�W� ��E�{��71.Rs�4�L��ls��F���A 1<�؟d�#�j����7
Static task
static1
Behavioral task
behavioral1
Sample
7164ec9c9e7d9934578bf7c321c7a5e9cb43c45c1a267e5167ffb06e1b69c8f4.exe
Resource
win7-20240221-en
General
-
Target
7164ec9c9e7d9934578bf7c321c7a5e9cb43c45c1a267e5167ffb06e1b69c8f4
-
Size
3.1MB
-
MD5
ed0700ad9042662d28303185f09176fa
-
SHA1
a836bc14a29d7ee1593589bb5b479712f72eed67
-
SHA256
7164ec9c9e7d9934578bf7c321c7a5e9cb43c45c1a267e5167ffb06e1b69c8f4
-
SHA512
ec9138a37cdf0a0b6e6b58cf401e06fffd484c52d823742830cdfb1f1d6b0abbb70c122b7792646003b74c1d7181d415e5ca94184b4dbe9c78b0f9c33aceda0a
-
SSDEEP
49152:TSCoClCEUFuQ55QDg5rqFpZig0its3AYZDfH7I4qLcsDlr2Zp71PhP:TcClHUgQIgqWg0QcJHZqTDlr23
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7164ec9c9e7d9934578bf7c321c7a5e9cb43c45c1a267e5167ffb06e1b69c8f4
Files
-
7164ec9c9e7d9934578bf7c321c7a5e9cb43c45c1a267e5167ffb06e1b69c8f4.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE