ފ���[���W�bߑ�-ܩ_Q�! ���ҕ �m�)�0�_����k�Uw5S����8��ja�Y�3��[5D���R�6�!��� |,�F6L�YR���0���Ua�SF��o�~7�jt�� Z�T',z�,�g����kzJA�~(Naj�R�;^θE������/|��ᮗ%���ꥻ��Tr1��)=�T(���ď� �Ez;H�X��.��k��5zOk�����*i�k�E���;�E�Q�D�L�(7�f�<�Xz]��iY�t�I^�ww>7�_d��\UYAqA������&0&0dؽ��*:�!hk�o!���`=W��?���"t}���S����o�y��&�`�5J�~څ�4 Bڡ��D%:%�e�i �@�)�a��Ӝ�C6^�z �Ϣke�Z�1n��������]J��~��r ����co �����ឳ9X����q��<��}4x�"C�ū 3 q�l�=��e��亭1�C���7\|~���71N���o)ɐr��J�&���ɏ����4���N�����_��i���g�� �4Gw�@�Z��f��{�ޗ>���Ѯsy��M����`Ai��>��:���ϭ�AT�))Wu�o(B ��Ӥe-YG���G�~2�|��M�6�qQo���@3/Pe8~�Ҹ<k/�٦����5��ѕ���?j �tg�6�*�I�ǀ8~��)��̈�a��#q=��|��������+6~Hm�D|A'xFAIA+��LCk��p������qt�<㔸b��mE�|��0�t0������&��9i1ˈœ~6�I� ����2�������9�Y ����� � T��;j�=�~~����8CW+N�0�2y�"�orIy�Xα��D���*͟���> (�:�⅙�LЍ���68h�Ͳ��-[��6 V̇�^n%A���l��.�yJz�G9���ED�p�^:w�����V���C�� �@�z]=lQ� �n�?-B]:?������H�+�r�3���2�y�'�lE�X��E���X�i�m� ���'��X��ft����wMnF���l� �v���JG�m&���0���� ��j�F�t4ǘ�F�T�E4��n����Nk\2v��8�H6>E�:>��6+����_����?�swL���T�G��=����%���W��q:d�p2�v@����hz]ɝ!�9���M(z��<K�O�F�sr��-���{��������k��H4Át*au�_l�W/"���K�b|�Q��"�0B]���|���t~�F��vg���ŷh�HG\��L=�C���6ۨ���nÃ���E��@Q�ݭ�J��t�~��Ϥ�y�����y�0ē��#oh� �Z�uz:Y:m.<��vm�����ܦ(���/�P�ja��T���1(a3����]^��)�I�ߙO(�ݛ_k��JL�zwu��CN�t{}�������j8���Q�~��Z�8�&�9�a���B�B��U�+��>���#K�/2z���+�eK1E�az���Cݜ��� �!I=kWcO k�� } -q�����{=W�{�[����h�#eR��k��e�ݼ��j��kc���H�m�v�<7³O}78�V�<�l������f���Zt�+�*�f@ث�����Ġ �����;��g�� �.q��"#Ph~ �7�̠������3��1�F���+ݵ�(@5@���h�^�����P�����C�g��F��yX�U�=a$��U&Ut�z|���^y�Z�jL�'�����=��?�<��m�o_�����I��$~�j`��>�JJ�f�t,�W���H���l뒻�G��m��������#� O^9�$P���Չ��L0�<��AizKS��7�6V�(>�z����=�=$�c��>�����ND߳���D���Bgq^�]e����Q��R]&�/$����v���a�i�MS�W*x��[���a.��]t7'�'����n�C ې��3;Z�w��FC��J�jt���u����t$�� ZM�M����)�T�o�ٻ��\hIm����"���ܺ��,��&�3t�[� ����LIᬘ�n�#'�/ޕa+��|�Vo��w�oY�}?��O��-�t,r�dk!���,*@��l��,�ߦ��ذfyV����)�Ldt�it�h�d��!�����\���{W��&�4�2�ᕼ(��K������H�Ve ��&���@V�@����k�ֲt��J�uc;�{�|d��-�:F���� �J2����o8����Ҟ3l���!���c��1�4����,����[�Zgt8��3(���W�۸��E�w"o�"C��s� �X����(��,&t�����,Ն_$Y���``�/&�G���I���$��L@����-�ʧ��K�ǹ������(8E,k�K&��bh��HO����52�����P��rw���҆^6�e��Z��o�\��`��F�P :�qT��s :���S���$*;��KP�}3��n��7��k<U|B$;�j�i"L=�U��b�������ſ�JŞ�!�p����m&���r�It�t��U�˒v--!�T߆2�����5ٿ�a� �Ρ�ƔX�S������d�H6��x�3C���?�m���;[�����Q� � �r{�4�������M�2��Y�����'�TH5ߎ� Y^�-)�f�s�8P�J�Ė0;�h�5 �b<➐De��N�H9\i���b� q1�a���TG�y[q��Z/�l�]ߙHqR^Vvn�g��v��^ATN���}�/'�v�C��,<�|��e]L��C��>�2/e�=����N>h*�<��2��]�$�r �6H�v~¥}q�l?`��W��>��'�o�ݟf��j��8�W0m�Y%�sF�n��s ��_ĵ㘳�z���)���ޑlω��b��GH��<.|��8��HC#֝E��@� # ��.:nH��{�!����w���Ǯ���c=�9�M!�Б�0�o#7-jiR���C��(���)V f)NԖ�gT�M���]et�SXMs��Hwۙ�z*_��e0��Z�&x�8}}^��'�f��͑`��߱�~8�{��J�P�*s4Q"��V�=����=�<�L�HK�N��S�bef'������z��g�2}??�;��ث��?�We�,*������Ӂ&���U��N�u���)/�H`1������]ۼ9�3y:L\κh���+ے4�h~f-��g���9������v�-s�Lk$���F`��~Ƅe���ޜg��~��� m�kY)�@�����;����_�݃�*n�9���e"�;k�������C���k�φ��gi�n�cR�D>YaQmF&�@���$_|�S}AD�m�n�P-f{UY_�c:w`��a\�qx�V�s����q}S�އj&��Vh�K;�1��2����6Ȉe�(���k� \��y��kI�#�g)?�G����jY��c�J�?�"%���������]]X��Xš�.o^���Kw�����u2L�q]�Bt �dЮxaR2ط��x�x�����6����Q;v�~H賣8��7��zl��Qʹ��o��s��a�[�_a��Dj�lQm��A��sx�Y�1C_F~rQ��<��&3�$���}%�.��9�s�w�u�&�U[����ST�Ϲ�[Nb5�>#�>��Z���]�s�c!] G_�ڽg������̰�O�ț(��[@@pf
Static task
static1
Behavioral task
behavioral1
Sample
fac6034c2e037dd8dd41d78325b09e2f6535ccc2c6c3bac688841eb705574576.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
fac6034c2e037dd8dd41d78325b09e2f6535ccc2c6c3bac688841eb705574576.exe
Resource
win10v2004-20240611-en
General
-
Target
fac6034c2e037dd8dd41d78325b09e2f6535ccc2c6c3bac688841eb705574576
-
Size
2.3MB
-
MD5
297713cb5780c5c19abdef843cee9ae9
-
SHA1
ed6f132f9ca4626ca84c2111dc952c3a218120bf
-
SHA256
fac6034c2e037dd8dd41d78325b09e2f6535ccc2c6c3bac688841eb705574576
-
SHA512
9b0fa516180f43271ef637e60578f196d82be8e4aa6aea72814c22cd075a06f8936ca0dd3769fed5350365ca99435ae8d215cdd4c9ba1e982f56168b5ae5458e
-
SSDEEP
49152:EUuXFAE/ImEGgycMKou8hw/B8VRDzmYdAFjLk5Y5R5mRsqKZYb7LaC6L1jhuSjdN:C/ImEGmMKohuB6QFjLBP5mRs3ZavaCw1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fac6034c2e037dd8dd41d78325b09e2f6535ccc2c6c3bac688841eb705574576
Files
-
fac6034c2e037dd8dd41d78325b09e2f6535ccc2c6c3bac688841eb705574576.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 36KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE