E���#W^�^���?�z�i�7�~�9�!������5;SP��ˮ��9��D�Q�g�i�=xV�̍���Aski�giָ�������{]ܻ _��($�}��R����I��!�)@ ��籍� AT~�pa�z�·E�/��Q�+�w�3��T�q���A���4_��1R��X]�"�Hd��z�-W�7T���w��o( 3���f���V���m��4�ٕ��pC����r�d1�;�S��wb�ЄBV)�d��l3b���Sw�s�"Ji��4(��4i��/::Q���DT���.�Ӈ�Ut>��Ed���Y�I�' @��a�J,�%e��F�Q�zo�����N �jy|�x�8JĈRن�,��E��l��V���z�\x��n�I]# V�ڕ�� 6�ݩ<��3���+]�́�&�7��Q�������s���+ґ͆3���檂�k�E"�K����nl\+�X�5�^\":�~6dd��{���K��G��R ���$�<a������N9d�bq] @"�.F����h�&�HXH��<ߢ<����[�9������3� R�6�ڃH�g�`:�i��v*l�diwd�������t�v/ʐ[6u�h)��z����{��L@PP��QrBe�_��eOH��7�V�8)�0-��Ltq������g�6��A�E)�V�װ�WZ'ҎK�o��"c�����ͥ�������� |B�����\#������ȇa�F�Ue��`����u���B�s�7{(�������}%\�Ay��h&K-�m�;��p-h�W������%T1������c\FPA��xHUx{d�F�}�J�Û��$?�nU�E�RrUC���WӖ�Cw��m�dA}E"m�W�8�H�;C�ȴ� ���2{jdS��S̑H�x��O�T[��,t �R�xU��Q�|s-d�n 0�u_��ɴ��^�;���h1�k-~}�,X�bM������^�,0�;��pJ�w����Fl���`C�b}<��Xy��k�O��/�*�R֊�Q�8.���Tz98;�k�\mJ[��&�� $��k��о R����{��Ng�%�Y���� ��(u�DT�F8i?��� ʍ�iҊ��ߤ�a^�(o�q�RY�!�#�17��E4��C��Y�M5)X�����#�$\�o?8vӶ����Thi�jw�;�1(H�z�9΅��+MQu��p�g6V&�q�?�w��}�h�h^!��v2lQ��2R$���Eh3F��D$�F�)D�g�O�&#���0���J~Bê;s� l��zZaՏ�(,x�u:v�@�(�� ��=�r�?�K.��G�c�# _�}���w{(�U@8$���i���#dAgy���5��� s�����L���~'�i��Ao��Z DM1* �(z����9 ���)�S[I��*$�;���Ŵ�I?�I �C�w2��ٗo7��7�(X�8{���{<�MYؑ�l98�6� ߟPZѼ^�p�>�Gݎ�xU���f%{�f(��`�\ޡ"���{:��;&����|�!H�] ����,X��J�[�kKL��?l��L�r~ϰ��L���7�o)�l�Rw*�� �$d��hq���u����5^�����U=[�8^�_��/X��GBs�a_D�ͦB@� bd�A�v�V�a�8��Bu����ty�SZ)�?��B][�A8<2G��S n�P,��o�_��X��}����\�����A��oi�����M�E��>dst�C��31{/�!�8�����I�Mtg��;���\\]�vΣ8���s�E����I>�pX���( �@KT��J쯳I��8���ʢ'h�T��zڇ�n.�/q���KEw��fN��Ws ހ�& ���z/�����S���oCT���'���܊TOj�����b��ۏ�HP��a�m�k������ĩ����!/+Ɯ�@�phg�ݟ$z���Wy���ڭ�e���F��dB/�����n�e���u�������b<3��~ ����4W�#����ij�qi(�_Eę��KC!��U �1e�J��u�����bR2o�z�p�@p_\2���T'��7�y1$q3-�gL1�9�ڰf�S$'�L��B�]�1��>����1�U�Z�\/��,`�����#���xm/d �;���@%0��b���I�uĈ�L��I�c�:�K0BU!��{k����O���e�YB>_��` >��|@��5֎�D����ۺ�:G����՟�a9��K�������]Gc�� �R�qsʑ[�J)��Ԋ &�V5,.�����V��[�WIq2eJ��Kie��� ]s�� ��A*Aa����������Rp�(�.��*O���$�S�\r��i��K�P�K��X.��t�-Wۀ�y����ga����0:vz�/]ѿ�:B��Ko1̷���q���r�%�#��������{��F0��S!�iJ�R��W�8&Y.����{|>WǴGH��Ac�~�B�4 bڜ��:="�z�)ʀҵ`ĈB&�]*��u�?��)��jr�[�m����Eys��fwF#���٥���{���[n����8��zݫ��Y��;���á쌣%5�kȪ?�c%�xZ����C�{��8bƥ#�Z�c���\����4�흄o�*b��.��}I jblLcl��%����si;?%�,����aت��L���+�.T�Ȍ����%Z :��,�2!�C����|7������}�]�v���^��v�DQ����w�>��Y�ڍn���T��'���>�j�Fz��܊K��t��X�*�����N��1"#�Q�?p�ѳ�%h:���Ѱ&�sb��1L�<��&B����M4�,ͭ���������,��t���ٱj�~m�p�0ȳ��SIy �j���h��8~!�����sM�;�@ȱ2�ܷS�y ���S������vmM�rݍ�T}^�N[c�$u<;���c�eŨYϩh�o��/�@�P�]'����/�g���0J�5N���㶍���������\��1B�Y�WS����)���_� �)��{��H�Я7� ��~e�:{�S�k~{�a��Ӽ�'�,aG�#���~��<�����b�,���6n��$������K|9�S��= ?��[Q$'{@�mf<x`�}I7���+�k�L�=e��\��P�S)�C���q�A��f@�����Z���W)ux����iz���ۙ~/S�����m(��3��w� ,
Static task
static1
Behavioral task
behavioral1
Sample
e2338a274e82649d691b4aa6503870a8900408b99a29af96d43bd8fdce058910.exe
Resource
win7-20240419-en
General
-
Target
e2338a274e82649d691b4aa6503870a8900408b99a29af96d43bd8fdce058910
-
Size
3.0MB
-
MD5
31a025659ca750c300ca1792a053f2c1
-
SHA1
843f7060ffd8ab9f606b0e99e15c41180382d30f
-
SHA256
e2338a274e82649d691b4aa6503870a8900408b99a29af96d43bd8fdce058910
-
SHA512
993282f3169ec628c77b006db1e06e5c184e78c2a9c7699e933e0ee2d702e5beb62902f496ebbd1346b55760fdb06244f0dd6ea3a8a171c587c13d84adbaa837
-
SSDEEP
49152:k/kCV1qDsh+BNp8QZ+VS7YVHxi2OHHQvXlaObjVVQ5yTdUxDvuIt+TGR9AQOMYSU:WV18hIQCCYi2SwvX9pT0CjGR9A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2338a274e82649d691b4aa6503870a8900408b99a29af96d43bd8fdce058910
Files
-
e2338a274e82649d691b4aa6503870a8900408b99a29af96d43bd8fdce058910.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE