Dc�_�?��tJ��@����z0����Kd�b�q�u3�jc�,������?��rˋ�?@(o7Ű w֤N�&��ܨ��WB�PS��̥�����e1t���S|��Z�������`�_/2���5Qd��TRy˅m�P�8v��Xm;���~���r�&�W=����폲�KjY��Fac?]��X����;�H���5�����"��3[�*�[�p�|�����zA�����T���Eu�C"���̟) E�c>ŶQkaة�X�=�a�eB�M߁�[s�g�2Il� 87��d�L�:�7����R�S]�����~Zײ���ӿ�x��a Z(L��'Ei�>\s�*sHsa���{�X�=K.��I䙌n�dռ!nF���I���T�������$m�����"��U�����~j��h�ds��sI+�f$VM�b ڛ}B��$�x���6�C�Uo�<���-������/�}�1�f a&����>5B+Olϲ��(���z(�g���W����h6֞ޤeu��(�<���C�W;��1?�Kmn��x]@?�{�Vu���s��Q��|�w���T�Y����p��P) ��8M�Ear�I����m0�'�1J��9�Y�J�"8/I1D��Xr0���J8�� )[��=��j�si�=�w�I����T��{ؼ�U��Y^�Ieu�ZM1�=/Z�Q&9�5�a��űl��|��H�Ig����)DsJW�Xl+�>Pk��<�sd�g�@�`;_\`� ��Ő%�B0���C��8�շ��;գufM|�G\I3��$ ��~uf8X���V���&�����Z=圵��Ut�1�.t�p�O�x�qLK�N�6���/;>���`�햾0r�� �����~=Y$�+I �p��E[h� �:`�L���\ÆrAw��H��jeE�p�$i�Joq�V�������_Y����v�+�1�2�L(��"�|K� fFc6��8.vI���G��ѐ�9����j1�o @���|ga��偌6:�x����6o�����d�]�s�I���Ei��yTd0Z��YG�������O�1�8��" �ͥ�y'O��ܰ�Z�̝����9��mUds&�s��sP�^�!�0�\���T#�dZ�L�"��Eii�p�"��M0�7���8�����g�����ݮ\�~� �{�kƑ���HpU,�B�f(�a�|t������l�8�4�"�� �M�7~v;|ͭAy��廒 ���HƁ9���\�� o MC��CUdl9��������r�����t4x�3���SG~�C���������M��pA:. ��to��(�_b-��Rc����`�Q H�I��b](� l�C%�����W�="�OQ�C4�"�1�%�:���8�^�;\�XF�ƨ1'$���|st,�ܺA�0^�̯�t��͈!4fJ�3�ݞ�(=�&�t�z���������\F��n ��m���3 (��?����0�bE9��k��t0,���ۜ�D�2��tϨ�XP�x��Fb�7K�����[F #2�ݙ�/C�:�f�(�:�O�/���]Z� V��� �� 0֛f���ȩU�qg�oD���NK����� ����3��V �>Y�� (��~ve�k�ܸ���� 7�ʱ�-�BG(��/9�@h�Ӿ�=��si�~��V�؛�.��CҸ�Qf���e{�I�#��!K���A�O����3T^�?,��A�~��=1�>(7J�{MD��(>y ���אh�C�&�"�`t%�Gw�O��8L~�Yb�<&�8�.u!e_��AG��+���{���Vԃ2��V�q�j;�&=M���w��ТNֲ�JW;�"����'�ñ~(AR'-w�t�B &e�|�\���)���Zڇ3�R�N@ۮ������������q1�������@�/c I���������ƝP\.U6��z�ϩ3��[�-���edlB�"�R1��jv��ns��h��n1h���5��dAx�'�f��X3Mѷ�j�#�ܻ���f'#.�s�����#ܠ�w*�O�R���G.�d6��o��I4^��4�g^Z\ ���d��.�{���./��@]LW����)�XwH�aC�ȥ�Y�g��,�N������6�R�@Kt% o@�}.�>� ����<����z�c�Ô�B����j��Hݛ�z���x_�����",�ǝmr�?�ci%H�Q�hR��p 6�rY��z�%F.~�kl�uj{�*Ո�2��V��(R@���<�S�j�a2C�Qx����/S�~���=m@�Q�rA&��P��ʐɯ.O �ex�co�����ŕ��G��4Q�>�&��� [����j�t�oR�/�o��U��m���K�^�PR� _��۔��wv��[j�6cNs���H�C�Tc^|&&]�7hx.*e� � �3~�퇞�q-uw�S��[��F�|c~���_�{���mŢ�Ӝ�z�}���4Z,�כ���O$�Tx�Wf"���j��s��V��i�φ���ȯ� 2����ve�7��;lߗ{hIs%>K��a\�L�@�/ջ�v�i�X�T��%N�ʁ^�$�o���cf-:�X(��1mޝ�/����{��%��N_R��f�=�+ゎD��5�]��$��\pP����!�ϸR���.SQ%E�H����Q����7��z�[��|O�[�v� ��M��.��u��=*[�M��/o֝Nt1���j�ް�o�ѓ版�)@�\ 8�>��Z��9����斒�GGL���{��<ӗ����yV5�N�)@!�8������3G�Бs$���(Ʒ�0����� ����5E�C�/�^�8��쭫3G!�1w�P�)j5t1��� C�=��8_��Q�~tݓ�:���GS�ѻ�_��������5��[Tsr���#G�s���QLkp���U�3�2��(eQgNnƢ��,�F��f΄���`��F7�U0b�4c��M;�nbh�<XKS� �[<}UPR5얬O�Y��ww�V�N�m�k�k���|,۠�����}_��%���P���p=�*��3-��;�2�<v�p5��_q^�g�8��v�<R�@�S ���c��K�����L@�͵r�E��W��8�Ne�1,[�㩡Y^I$�������-`�e�)�R�纪yt� �'�ԫ��,��s���P��%�w�ސ��*!��5�� (iF���-�܊�Ͻ�PYY���7���>��nu1>���Snn��3��S 4�)@Ĩ,�BKw�l�j'�4��S}T������)g;����0M��N���u�_J����7��D��
Static task
static1
Behavioral task
behavioral1
Sample
078e3f17ca784ad69eacf16c1142662042285ed1d92810529696f613c9bf2b34.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
078e3f17ca784ad69eacf16c1142662042285ed1d92810529696f613c9bf2b34.exe
Resource
win10v2004-20240426-en
General
-
Target
078e3f17ca784ad69eacf16c1142662042285ed1d92810529696f613c9bf2b34
-
Size
3.6MB
-
MD5
d4eef032807526e216f03c849ec02843
-
SHA1
0e78692f2b085c3eb73745ab65b73cd444efa1bb
-
SHA256
078e3f17ca784ad69eacf16c1142662042285ed1d92810529696f613c9bf2b34
-
SHA512
5aeca842dbb810cc51988fb06440ad1b32407bee2e76f7b678a8ad858a6bc0bce383788ac98ea925ef57680ab78fcef7de99374e7d6c1db4c2b8fce1cb3e3983
-
SSDEEP
98304:MNLWQNKSLiyYkD1RKbJ1BBg623f7VcNXWz8:OLWQnuyYKcW685GXW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 078e3f17ca784ad69eacf16c1142662042285ed1d92810529696f613c9bf2b34
Files
-
078e3f17ca784ad69eacf16c1142662042285ed1d92810529696f613c9bf2b34.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 488KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 776KB - Virtual size: 852KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 580KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 192KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE