����n'������-we~�UH��LM��n(-����X@���,��}#���[*�$������.�$�֫�fW����,���?��jC2���.ƺ���*˯|��_\��S�X*�����ʨ_�ps�&��*{�.9kR<�:ڿ�B��c��%��C*ei�!)��{��|�T]����aF����գ&�l��������G2���EP�<0��xl�C!���;p�\w�3�����`�Y�\3�[En�ƚ�Z�<�%��Qto����ߵ�.�n�����7�'[up;"ddž�������O~a��n��μ��;T@I�M �|iO���g�1X�m O��F\aRʅM�U6P���¿B��t�>�V���J�3�tn��*4�`A[�R�),g�����2���y�EE;99"X��Ӱ!�m+�^8(A��y�ȷB��8�3&i�՝6��o=��3IW���Gd��&��bT�b��r���ʭz-"���́=��zX�(���:b��j圸y$vƴ����8�`Y\�����C��$ff4-C+�G�%��wF�Ը8��jg5IO�P�A�q�=�jnЊ��kj��<#dG�ڶ����>�r�.yK�N�����bi�a���:(}��Wc�ܡ�_q��U<!����>��!pP�1�� '������R+w�K�%���o��{�[���Jrk�xFJ1a�h�JF��k-�6��>��]���M��d\�gk�-��^l�zO�]��}L�K؝����p����!��M�d��������qY��/��m�����T���<��l��V����;�)��^p� ~���M�)�Q�����O:��Aخ=cz����.���]C�;#�>yG�C}_wc��[��¡��#crL����[*DAxT<x}�s/���eJl�w�Ju�V��ٞG����7�U�� �y�i�#���O|E.+��,�|����#�>�|ػV�u�M��Z�/�Q�g "�>ӕ��S�~߶�^q��3E�5(еi����k2�е9����-�m}d�P�7w\/9����~�5�1�����5������/���zC�Ʌ#���{����3��c�FG�6|�q�?��w���h!��xA���OR���5��UԆ�������"N�Y�Ý�r($C��4OL<ˊ>�ҍ�� K�"X�(g>ri�+���W�U�o���4�)$K�7�^�ZR,���,{���X�q�/��9�Xx���ʮ�G�C6�U|<,���X.�^�'���:<�Î+x���?&���o��P� �S'�+MD� ��hc�d�ԬWM=q oO�q���-��et����r��ѧ�� �H5��Wt���`DLJ&d���\�V�y��jdr����_�;1��*�1M!}+ra���0�v罻u���?z!�_U%e�����<��\'7b���ve��aN&�S�Y���$��������r�R�gB�����b�洶� [�����mʠ`�+�Ǻ����la�2�!w���R�<�9�dӚ���� ���(�M�cUyIR'tXJ�n�� d��PϪJ^�������D�&���a�M�Z����+��=�=����Ժ@:.��t~aO�|��JМ���{P��8�ߨ�j�u(��w�=��9��|�d=*���lK��b��](�������J4#K{Խ��]� ��H�i�n�i�E�H~&lK���U����Wg�I��K(o�gb���������c�i���n�����h:���u��3�L�t����ʳ�Wߪu���dQ�?���-Lю�����X�q�T���ʸ_�@+��r+�����ڇIns����A��xN�q�eP8�������x�4������w�O�dR��ie��^�]wa4m,I����i�01�qdg���̃����V^������d-QVc{C���/�����*DW�S�ZO>'�u蚽Bga;Iy�t��VգSu�"�� J�t�Q��Rnc��X�/�Ӏj�>cE�?�rf�������GN%�%������&���9��_�51�&��F��Vx�Y�=\���$�OB�D��o6�_�6+���BBb*b)]���TUg����^ �+0v"Q�v�x��3c�J����ɳ�����i��eQ�-\g�7E����'�0�٦0�:�4M�<�Qo!;�Fs�ZWJ��j���#���W퀘�� �:���l�1�B�j�5��U�7�Վ��Y��|�7��b t���2Ө_5a�O� '�ʳ�����#��6K)��0�t��9Z!���M��$�hQ!r�9�!��=����[P:ڼw�A˿�)u[=(I�$����X9�n"�M�؈���:�K�\y��օ�v�2I��^t �2.���䚝�� �T��k�_�g�j� ֆ�*TO�a��ߝ��w�[�� mu�H㾡u�p\'��w�܀��wXNw�sJq��i�Ά祁�"U8qA��Fԙ��X$�·3���K�B�����S��!"�%��Ά�r����Le�����K��5/+SW��w�?gHި^���ZS=��C��'�94�k��YBp������G�����qk��Szy��քbq�9.�ѧЊ��J�"��:��@N� P�`�F��#-��;���I�I�OJ�� 2-��S������fp��yk��7q��E�v3��u�>ϩ˝dXGZQ�_�;�;�4���O/�.2�fڨ����=t���TM�qg�Fc������mZ� d6kc���I!�f�+�[B��8���6�>�s��5�}���d@'��$�h���(�g�pK����W�����[qH�!�.��[s���vl��� OYx��Ls�2���TH���2��9��3��R�&����^��3w��dp�z�)i�Eb<R!���*_� �3Ko:��L�"���L%�N�����4A��dg<���ցJ�25��+7�Y�=��C`s����kE~��&�8�z��N�S0_.n��$�����M[2$��;1�$,��>s�l�4��s���(d�M��i����C�*I�M^��1���p�ZY$+�g�S�]:�c�9�UC,��ت��5����VON:7��+���a�T5Jd��_ߓ�E,6�����N�&4�u���`rc���Z�7��`�G:/��R�Y�X��r�-$�(��
Static task
static1
Behavioral task
behavioral1
Sample
99ed77594a138de377aa2f032a51ef44e8db6584dca85e0acde90d91c6f230bf.exe
Resource
win7-20240508-en
General
-
Target
99ed77594a138de377aa2f032a51ef44e8db6584dca85e0acde90d91c6f230bf
-
Size
2.4MB
-
MD5
591deb3212cb1720fa03640f6257b5dc
-
SHA1
5ffd579886eae9148141746294e2ee3ae922c8cc
-
SHA256
99ed77594a138de377aa2f032a51ef44e8db6584dca85e0acde90d91c6f230bf
-
SHA512
670374e657a9ba7b81d220e4105316707984ce7f5bfac04f97c473d8f8ef65c137f77fbdc9c889490e89d8823bc1c2add4adda4241f34ca64f27af5336e4e573
-
SSDEEP
49152:P9Ay1zb37wq+3GQQvFOsAMSgcCNvQE5qh4OLzooa2ZgEPmBTI7pJLOjq5:ay1/7wq+36FBLNvQvm9n2Zm1wp9Om
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99ed77594a138de377aa2f032a51ef44e8db6584dca85e0acde90d91c6f230bf
Files
-
99ed77594a138de377aa2f032a51ef44e8db6584dca85e0acde90d91c6f230bf.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 52KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE