U7O��ef�WD6���Q�>�@v��a ShC��X�Udm�c��������ؿ.�� ���o�-��xs#j1�2@rS�xBp��W����&!����Q��Bn�8�:W�.��~* 8����~��tf�RT[+=q�E"��d�E�_z�/]��i[=.Eƒ��ޫj���-��z�L��W���ޅ <C��"�U��^3���i�&2�ڝ�ϭ먡b�.��{}H�dң��Q ����k�0T��@r�H���l�NE����"��h��y�]�ťi�F��A�x߱e� K"D���:�e#�e�:�5aʮ��J������#��ޔ���I���J�W}���r�Ӡ�(����}�ចD1>�ݬ?V��|�ސ#�C��芝�i���B�g�o.��������j����FóR�(��+|=n��#���*�,N���-�MXVb2C������\���R��Ep�bR�&I�E������cv}�o�>7"�2�Q��,?])J�9XĒ��u1�����T#-�bcg�� ��q��q�: F�;�~i�.=��= ZR9���Nx�� ��(�|�?\�l��V��b��Y��aF^�/iW�Y:��5[�_ԫRGG�kt�ɞ��\���aDW3"��=���?�]�{Au���9�dS�� P�rʸ;�C��D����z�pb�gs�.�e�����[����i��J�n>sn���Q�-�j�Ղ 2U��h<��Q?y����$�V���C/!.�� =�+��+v�+�0�}ǷV O����͑k���l���?��'��{0���IS32�J@�������w`�;JƊ�� �����&���C}7�Z�����ڬ#`�M}Ho �Њ����������bƀ�y���������)��㇎qm��Zs����,`��s�6�Z^Ud��;a0��؊M.c6�rk|�G`��{�K�� nnvra�uI�zq�y�̄���TS�<)^&%��br]ٍ����i�pE�����9#FIx~VqtK<���Wh�ͩ����8<|�¶J��NzI��t�Qrw�>�t[��FVz>��RV�Z��o�H����d'O�&�����!����|]��;n��8ZW�D3�h�Q��(��쩳:a��<���P�QW<)3}��Y� &��r�k��_���@/���WʇBTA|��m�rչ��ʼn��!)������9�A��g8J�H�h$�������!��y~m_�V�_ܟ$r�rY���s/��3����������V�q�"*?�9j��P�9&��-�����ge M,VY�M�xĜ��Bhh��iڠ�����)�o�r�^2ux �s1�c��ӷr��C�֘��Pc�q�P~zzJ���]��JŬ�[D���3���֞��0��� ����,���l9�1��tI��R��Lgn3���h_��"n`��aiY�NZ4���0�-�^EZ��U��Ա�4w� ��"�\8��bπ��R?�3F?& 4<�I6.�Y�Fo��ida4Ȯ:�/EZ���S�G�U�P�6e���@ۊ�c�O<����-`jR�5W����;���>v!h㜡�U�|��x����_��ֹm?HNL��G�_@��Q����V�� X��Z�������J֖�����d�HF'�So���Z9v�a�(�S��1�e�3����!F���ޅ6�|r����z(-/��[#$���y]/ɧ;��N�������}49S����������D ��L_@�WѼނ����O�*V�I#���.�W���gZY���&`�ʏ+����]�G'Zs]/�7�M�1��8��X��-����i,ns�d��אqN`����]�L.��KڧxB��1���!�,����?�����APwrg�L�ѣ��g �1o2"�3l�Ɋ��L �_t�=�����"����x���Iv[�ZI��LJ^z6��3O��:['1V w#k����� �� f�Р��۽��^:��Cuy>�&��#`�9Y�ɛ��z �˒ac����j���b>�'�dmJ*�D�����`~1��H�d�Ŋ���L2���:n��?a}IHV6�?I�1���?�.�^P�9bÁ�`ޟ8("��*��wy5[����\)녮auX���o�?��Zm 9;o��u���§ ᦆ��h�Ȗ><~W��50��~�W�{RO��3C���9gNlg�c|:%�'F4��)Uѓ4�?�W���ds�I�)�A���}�)o~C��z�ܢ�n��SwO�a��_>��e٠�fK��s��\���?�d��o������bd^�UOۓ� �{�(ќ3�UY��^Pfp/r���f�MSӺ/�do\y <�^`�@��2��+5N���{LA��kґ��v��FW Y�{�is�v�2�jt��B��.�B��}���@��@�q��Z����+B� S�`v�h�|[��r�� >U�m^L�d��U���pz���K���[t��B��퉚����ee�Ý�@y.�Ъ۳�g� ��r`�bц�4a����T%�o4nA�N��-��IX��{�(6՛V��˦'��dh�O���y�����f23�3Z���oo��^��c9��;'ز�<��$y���p[t�%�$��b��R0�{�3���j�2��di/g���ׇїF�����i�������-2�x�'!N�|&���h{��b�в8B�iF�*��d��a�b�����/?ޔ�B����~�S��r=k����れ��[���G�m��46I����(�%D�ǿ��Us�[ّJVbvίT�v���={0g}���nE��%)s�M��D���?���Ry"M��\/a�>���m�l: [��=mk�r�w�����I��mJ2�^���m��ovZ����K��Z@��"I�G� ����t^�/p��.��.�*c�u.�;}d���, �s7d�b�Tps* /�H��̥�ڈ �B�l��\(���Փw ŸNR*/�����e#g���gxh�f��-rQ��=�h*@�E�i*�͵�Ν�m�e���(�ɹ��X2!݀� N��M~Ā�&w�JF�ɳ�|�^tg�L(eN� x˟0x̉a�@�%���+������i�e{4�`m5p���Q�L�sŹ�̈¼j9��y��Z�mxP_g�!� ��g`�:�FJ��{I!�(�����dOM��B�4V�I�$�����e����^�v7Xt�K�>�h��T�tC���u�˒y���m�W:~W!�>��<dLΌ�d��O�{{�|D�KNm���d����y��4�@n�qZ���hK�6���8�nbjO4�f����K�9y�3fM0h�<y����g2��Fdx�}�ј���}1T���ԵT!�r��~�'ݴ�M�F������t�\\��v��)č`��*K���W����jЍ�֥?˨�Ze������d�2��߰@i,�e�M�AH����F�>��g���d�\գ�*NS�{�~�(�� �ۛ(�3�=Z�E�d�2���K��U�î��@�g����a������C�� ���m���6A�%#��$��%�Z#d���{|���Ȧ�l-ȍ�
Static task
static1
Behavioral task
behavioral1
Sample
04f68eb1120634d8c14f27801a30e5b2118a09036ba86860cfe58ff8ea6548e3.exe
Resource
win7-20240508-en
General
-
Target
04f68eb1120634d8c14f27801a30e5b2118a09036ba86860cfe58ff8ea6548e3
-
Size
3.0MB
-
MD5
58cedf3cdb39b564eb8d746ab2dfeab4
-
SHA1
9db3b345031e009e64c6452b6b4d0d254f3bbef0
-
SHA256
04f68eb1120634d8c14f27801a30e5b2118a09036ba86860cfe58ff8ea6548e3
-
SHA512
f6ac762423e745d65f7e0c7da5d097ca12c08508b759a804ef49952410043e2787835174074eccc7eaa81a0541f3b10b8145ba0ed0d9681856a15e02d328aab8
-
SSDEEP
49152:AmgzRVOpECP+uAs/JHrFPPcR2vtvlvF5IM72s/ifOukiIxAxpshDd6lWb:Sre2udtrlcg3Moh/ifHvWADsb6w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04f68eb1120634d8c14f27801a30e5b2118a09036ba86860cfe58ff8ea6548e3
Files
-
04f68eb1120634d8c14f27801a30e5b2118a09036ba86860cfe58ff8ea6548e3.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE