1����p����2�9��mCWYOPnؠ��#��hs�2F ��3(�U�Y���O-=�8bٕ�����ɋ��#���7�����X�DA�^ ���Wꋘ��F��2�ij�Q���7�?[m5���FI�֖� L>��`߬�������O؟�������5�|�uz\�\�|[)X{&������Ŗ$���6Mr�oM2Μ э�d�����=���%(���R�ו��/1���I���ʴ�`����i�̪n�M�q���I:*x�4*���S��طH�uAa��p��5��wwƖ ��ŶD:����敌�DZꊨ���� �i�o�T�"�h��R�h���&P2O����@@�3v�2`58ٜ`�d��R����5�!�F�͒��mm ��m�L �\7P,��M����|������U��%q�<-G ��R��m�;p//������\�Y��w�-v��_4 ���|�; ��1���a��r�V�0օ�ƺ��rISV?���zD�oUv���3VB� �S�|&sXEY �ë,Ph([�(���W��D#a�VZ�P����CP>�$��*kSIش�f�pT�p]�J����́y�N*EN�Ƅ��w��d�Ƿuk�J�y�>�V<�\+��x��4j�ݷ'���7��l�L��챧�5M�wTo��۶���-w��zq;�՛us�GX�l|9��Q�۹���/hF|�b�.Pfm*����M��%����$u�ߒ������3�\@�`��5V7� @��6�!�5��m��"���왁�ڐV����`�3������/�?A�y�`zXIs���!*r%�>Tj�`�Mn�8 Y3�P���Ec�I�5����K��O� -��y�(J:~@M�b��V:�+%^�� Wa��f <�IDpWK�: �LfI���z]9�"�U�����v9c��Q���@n@�ϰ#�������qjK�&��F�Y <��U�Se3��S&Ʀ� ��A,�@�G=H�����Q�jz�X��\�P����2�7nu�,�i,����U�l�nx8Y����Ĩpj�*Q o��Q��o?��%T��u1��*Q���~ӝL) ����t��@�9{ �����Ǩ���y�Y�.^(�2�)+�n�v�0W����� �H-I]�B�Оi��˱�F��5�fI���^Mj[V��� �|���7��.�VWn.�C�N|��y��4�r�gզn+D���ݼ�D��6`.��Y���1pb���b��[i�"����ڳ*������I���7hň}QA���Y�A䲪���#8�Y�( ۹'���0�T��\sS���j-!��8m��� S�R�!D����\�"+�C���1Z���~�Jy����K�lVI�̮��/_�)�f13��wU�d��r0��(�)����i���e������� -�9�C.}E�އ�O��N�U=���t�@�������= ac.��_b���%FU�t;;5�� $��63�fN_��>5eq9�5'�ޙ@E�,ٜ��rrl�x��Gtr|E�[�����n�� y�n��}a6G��B�~�������<��(M]Dd�3��u���>��z,��>���+]�G5cC"1OLQ�Ob�˻MuԱ���Y��;�t�έ ����_�����^���y����Ў{5���Z@E�9�.���J���-�Z�ES�������*Ym� ŜR ����x��8'4)!\�����ת(�Z�*1��������T���f��%#��p���������H?+@ɖ?2��$�����-&��[���/|�?��NYAm6�fZ���#gVP�I]��j�Ci*��i�J9B~V�G���Ж:���-�v"��w�Gz���C��3xۊny[M{������&+��-���]'��o([�b�^\�O/8h�,Ɓ��k�O�w!�<�x'�/����p�%��d�Ȁ ���jW�m;�D_E� ,�=y�0H:8��]JUH��W�0�p�W��_/h�-}Ū�Np�X�tȟ�*R�5��/<�y��^�p腅̭1�~ �d����S鼗R8i�����o'�k��<��hˌ�����u3#'��Y&T����/��v �_�܍S�B�;��I��t+'������W�uR��x�0�!����`�\䳘t��Pz\��T�Sn����4��BG���>p���V�)�-�����c�_���ɂ �f�@v��G�W�ӳɣӓa�̙=s?6�[�Qn�k>���I�����`t�sd �dA� Ϻճݳ���<�ג�k��O�YQu�gV*6�{Z5(�S,፣������:� ��������>��F�v��Ѽ?X��h��UԚ��V�v42/��(�Pv�pݢ�s@��:�5���?T���z/�~x���am��,�$:iO)�;��w8*���'1�9)R�a�ZVa�TS&5S�QŁ��4$r�T��������ۣ�#_)�_�]N`����>����f7��^ =���������.��p��(<��Uj:a* �[�5!�^���I�4@f���9JX&�O$���I�F�U�u`aq ��8��2ʰN]�����w*�*J0��3�U��qo��x�ʪ�^�)U�<�;�Ӷa�v��\�b�\*~I���z��6��Zr}�jq�u/�M�M�#R��zf� �\|��eE����S��gZ��Z�hgoM���{Hg��n瑃=V�zb,�����4V]�G�}��'wl�K]�qx��8�V<cAy��y�c{���r]�D���~���"6::h�:�ΈSd�(`��7@?�?�����͇���Kآ����08��@��k�i�^T��ǽ���������{��Y���l�{��PŰU�K��[,�,����Mt&�6�7�����Q>fNҧ�X�@�%Bbϊu#�2�U e�Lչ��xƂ��t悈� 0��c������V��۶R�3�d�hd�eGZu����RHې��1��뫕��ك���d��EL�j{�E��H����M*E�V���9I��m�W�W��Opl��<�H �t��^J����p@B�c����~H��D�U��b��[a3��q�������=�{`��&w���W�����▒h�y-Q![e��З$��s��=hӲܫ1��������g��f�R����mӨ��q�Q�m�z�����y���>�3�h[��# �]4��>t���~����
Static task
static1
Behavioral task
behavioral1
Sample
7a43f5760dca3ffaec4f62d11ba8d65a593713bb08aca061ca5820fa9f7076d1.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
7a43f5760dca3ffaec4f62d11ba8d65a593713bb08aca061ca5820fa9f7076d1.exe
Resource
win10-20240404-en
General
-
Target
7a43f5760dca3ffaec4f62d11ba8d65a593713bb08aca061ca5820fa9f7076d1
-
Size
3.0MB
-
MD5
ff21a8627d7f21b59a7cf58365301034
-
SHA1
6fa324419b9cf8ed811075888f9a62bd4c8342ba
-
SHA256
7a43f5760dca3ffaec4f62d11ba8d65a593713bb08aca061ca5820fa9f7076d1
-
SHA512
9214d45fdaf6a2e58372361b6249ead76fa12da91fa224212aab3d832707a1ca0967a93b255d62f24b9cda3e0937e51c2f39617f8e67d3eee905479d97c4431a
-
SSDEEP
49152:uNenqdZxEMGZkxApyDVPMisupGeJWH0McLK3qIFdBgBdymK6C0TlqHCKF5ZITUIk:u6qdaRp8uuweIH9cxdq6CmK3S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7a43f5760dca3ffaec4f62d11ba8d65a593713bb08aca061ca5820fa9f7076d1
Files
-
7a43f5760dca3ffaec4f62d11ba8d65a593713bb08aca061ca5820fa9f7076d1.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE