)֭%�8�����G��_�2ח���M�A#� /��63G�A]��c�-�S�F]��r��+�u1`;�O�$�����~9�X��&enU�}7���UAo���;��Òd9Q��C�`F",��D�^ ���&�%YG���������D� ,����Ϙ�V���_��ĕ�H�O�0 %����<�����&�VbNA��3�����n���e��Y�F5cܗ�T�UDÔ�sw;�ʸ_��CՂ��;Ie1�g�j Ə"L{A���M�*���$�yq����9��͚Ɯ�R�\�)N��O�ޥ�bQ_��t��]�N��X�ֻ�`���0�W_� [��u����4fe���Y�m�[c�e�7��^�c�1Y�F"�A7'¦?H��d�z�ewNC�������֟�0���-�Y�ѧ��+���q�2���8_� ���&K��8�� |��n�a�E��IL��-��E�,[��'s&��SJ�|��~�Ѥ9��� � &+ \v0��J�.b[�����zE��\ǹ<Ӊ���,�LO]_*�ul� �d%���Z�P��H*L�ZD��7>�H��|��#k&IN����&`��=�Q&k�_F�vTx�4ц:�x+S�q|j��&���I(=A�n�=yhFV%c �]�����f��.J�n�Z'��wk�ᴟ/M���&0��oZ��ܧ�����J�H�1(Å��|q�!A��1!��*m�P��,/m0 �����*��友�մ��y�9�U���� *��K� �5��|��r=���4�u[��<� ����Ey��бiN�wf���1���覩��ƃIe���<� J�!n��/��E�Hއ|mi;~߆�����"�$0��i7 �/�� .�=����/���8i&�L���`7T0�<�=0{,��~�ک�#XPn��S��`���L�q6�p��h3�#�E9I��(�bw�\pdK��?Y�J��u���Uı0+�.��n���r�?�0k"Y�]$�z�E0���B��Z3�����+� �%qq�ס,�`���@!b����>��xAs/?ux,���+*�sJGF F���|�g����z~�Ƣ�}�&ު����m�?���tX���<� J�5-�� ����ƌv�5��K{J���[�����\��A�� Y~����Pd���@H)��چ�����8y���F�Kʽ���Z��,w�)��9��A��/�J�K�c?�t����^@�O�ڗ��m ����C���v�0{�O��R��.��,Pr� H#�"{�U��'��uAA�,���_�+�7LV���r���4͆$.�y�=�H���J�H��|����O[z<��q�9����m�,�\����Q"�:�K� k�Ù���~P������$��]��̑ ��ٵ�=+��^.����K�*��s�(I�h�G��(�7�X��=�4�Z����껄�q��*�"��6��7P�|GL�f��Uf�����b'P]��pt۲�0A�����v�������v��k���ry�ٌ�?��)�S<fm,Xu�!�<0�#�+�?���MpQ2�'J3z�蒽w<������W\��;,_���!�f�ͼFH�8�����O��VU���7|�dhH���� N��[p�J`O��Zf��|�7U<_;>�]��m�o��x�b�����(�f�>'����0�\%8����݁k�L����x7���9W�?آ�nC9����Ff�i06��&E��G��&�9v�|�u2��?n�>N\�#��H��8�&[Q,&=�pT�iRdy�5�_R J\ӋN�,t㘴�� ;��T��H�s��b�U���#A�o�A�E�-�j�e����P���N�r�Z�<9� �L��b5������lvKT�%!`�x1M��ۋ�)<Y�;Εk���:�4O����ԫH����%.�a� ��\Բ-ȗ_f����8�_k����r�S��ۯ]|1x.V��83�ˈ��v�X�h�W>��A�+d�P�:d��t� �r�x+r�nq^R��ǡ�m�gK���]��b�a6n���V��6��%%����Қ��X�Wy��us!p#�� ��|(�F�Nɩ�b�UaO�r���_�A�8���`O�^�ѐN&Z��,�;�m� �&��!"��[�!�EsD�vT������4��u�a�9#��㟶�9��n�y������o���4H�HH����3��El�Vb`I��L��_@������%�+�2�,�>�> fH >R�.�`���9�V]�dhﵻ}44�~�T#[���ߦ�E($���_:���@H��Gלt�R1&c���b�8���*�"W�Y���� �kH��;i�ᕩb��l�}r��FI�F��_Ѻ�x{V8�h�k.@�F��6ύ��w�xX���X���.GR��DO���g���JY�$��mЏ��}{�$�(U|��� �O�m��P������c������M����t��'ߑڽ���%kCM�M�����2�0�0Q��jY^�M����"���)�\��� Ul�#�G[�z���/g����w?�^��8ڔo�g¼(��~��u��E{��EG��t7��[j�(���)�+nJM�G����=�����D���M�W��^_rb� 4���9r���T�l2��_�m���v-�Ţ�mHS#�J ��1Uȥ�Q�;0'kt/�gֺ��Ԯ����̝������O>� zo�)�AF��ȁs>�������E��R�����)q�C��ys]����@�;�a�$+��kb}�|�gm!ˆ��i��]��6�PjUB3Iy��"VF6���)|�pb/�BT/Fq+B�aW5�3~7fn�μ���v�]ˬ��M-�V��|���'A�toe9��д���y�S���a�ܕ�0_��̺K�3G?�[��2����Kk,HM�?�������f��l�F#����ZJ����r���!���@�K*�eJc��z�@rbNl�γa0lgJ.{�_��@�I5ˌF�՛��\�gJRZ�A��>�Ǒ�̯�n�@�\�6��<����=�[�J*T$�@ta�j����'|��qQU���h�����zQ�Y �L��B^x ?���y'���s}6�"�������L��&�s(L�G����kF��������������#ޤe ���蒟I\��O�dqhF�bu�l�-6'�=�.�[L"Ery{�C)���nO�Yãո+��Rru�'T]�ା~eցqj����H�<BX!"�ʥ�Mi��Yv��[h���@^�_)z� $�Ɠ�`N��s������b�=�8�+�!���>צS���ʜ�kE�B��K���&>�9�̹c��ԵZ��Z�oj��nZ����8��{� ���s��\SE&
Static task
static1
Behavioral task
behavioral1
Sample
7bd14bc6ea602f9e26ad3d72e54b3940a3e9824969d4c0b01de2aa902211c25c.exe
Resource
win7-20240215-en
General
-
Target
7bd14bc6ea602f9e26ad3d72e54b3940a3e9824969d4c0b01de2aa902211c25c
-
Size
3.0MB
-
MD5
84c4b463dd1f7c9eee6ce7ce79b60ee2
-
SHA1
18a253b02670232e5a352945426a9db1bec54983
-
SHA256
7bd14bc6ea602f9e26ad3d72e54b3940a3e9824969d4c0b01de2aa902211c25c
-
SHA512
fb492ae13c4e71fe35732c0696d87fbd9f2516bd0b64e6103ee67ea88af743d7e3730d2f06ece2e6b6aa5f41b458c215515fa32a158def9917bbf9f036e8dc45
-
SSDEEP
49152:oXV98QXUzXUPOu+m1y7Y2fy7VAB0Gzx09b8Z3AXyLBMtt0KoMDmx7FysIQZ16Zb:oXV98Q4XUb1L2fy7VAXdYkuEMtt0mErO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7bd14bc6ea602f9e26ad3d72e54b3940a3e9824969d4c0b01de2aa902211c25c
Files
-
7bd14bc6ea602f9e26ad3d72e54b3940a3e9824969d4c0b01de2aa902211c25c.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE