Eu3|��\�P�����+�.>�G.ak:/��p�C� G���z��� =�u�foc#�e��P�'Ǽ��`�~�Nݬ�����|in���M�i�J6�#���9���Dx�W?��a�UV�I�9zp�+�<�;ەT͚<�����X���ucu�^�5vBb��(v�K*�dy��7�K��P�f��c[�)̍Q���X�LU��Fpk��2�55kU"�@���2��Щ��$-�o0�3GN����3lR�>!�6צ�ٺ54g�S\��Sb7{Pk~g�.g*9h[Gd+�����m�+�O�@ںz��Jۯ)T���A}?��գT�cU�ܑ�gk|�����[������'�G�:ώ4*37n�d��<ݶ�m)���-�p�^��q�yw�d>itE������)!����pӟ�k� `��OÒ��/V1�b.V��?���BΗ� ގ��J�����]k&���p���3y ��p�Ή{4ĈͯMD�b��W�M��ig&�m��F 9zSf�uH��ӮS�S�UO��̊9Gb�^����̧�R|SI�g~��Kd� �g }�$O(fѵ(@� &F��,Kw�{u�]�p�.�~����n0���Ғ�\��=Z�}`� ��.R��t���Y�E>R5���k-��lN-�t�AU�W��/��Z��O�k얛#���51�sH3���2�з����a�_Nj��K\ꐶ�!��>e��d���r��Y��� =G�|d���H�e�Mu���t)�0�<�6[q��N�Ꮿ2��խ+�'���<�`���W�3|�b�JkQ:��br�)6��V >��/ۣ��B�jW+0�&�ǜOi�˲���v�#�CI��r�G��^�_�:9��T�7J}w�aw�S�k.t!m��� -�ޥ*Y;�z�-b�(r�\ì���f��Y&]�V�W �q��I��y�35��i��"^�g�:\��δ���9�o��X��濖g���c��.�vƘC�(Q�X҆�k�p�J�ܭ�Rҹ؇�@{��BJ��=9?�F���#%x(���kw^7�^w-� �g�{�)e�E~� ~�}[d��Ϟ!8{�G&��D(K�z���x������@��URGE��ud���g��� ����M���>J��<�����͜|e�h%w���_mC�kzKO���V�5s��q$�JX�/X�����=�m�#�H��j�{�T ��L�0�T�R<p]UݦI;@�����2��e��H�b�0c���^4����Y�hy���̊�ɽ��`O��I���yP����4�t3�VLJ�ɯ�i���0q�mVWO"-8&/���cc�5(9��B�2���� �!�8>�e�G��h�]��V�+�z�ݢ�Z�q��(@�-4�xǙg�&g=�4 D8mG��� �I�A�����~鐥C��s&S�ݜ�'X���Ko�k���)�-!�ZZ�N����<��Q � �H�� �aِy�sRg��%/��d-f��;�S�������]W����x�\�=xlP��I��ΐ�����O��-��_B��eYJϾ��|Fۊ��#Ljw�uD �!�C�(W�L�w�`��*� �yQ�:^ڃ���� FM�i��[� ��9[�A(��/_����&�(j'�p�IطP�3�V��݄�`/�J�y� �Ɍ+`\$oA'K_Vk�.ĭ��W�l�CK�|{��i/���V��q}!���L���k�k��~"��F&���`�߃�MߌZ%��~<��;�4:�FG��I>�='���0 � ����t��VQ\,�\��%*k;�4�r�-� ��h�;G���ƣ�TY��Q_�ȇ��� s�8�1��*O�{�G7������av���\J������¿��|�VH�g�iXw6C�c&���.�&@�6YsO����<��b����Z��Xq�T1̉e����/�@�����y+�Y�ZE2�.��ˑi�Ѡ�� ʄ�jMP���.������8�Q_u�K<C�)�L>L�ǂ� �luO�Lᡬ���M��#SI�C¦���L�/�7��b��mϟsMEr�T��*�gs�9�gt f�(�����N����<0N$�|3��T ��k7G�aaT,@�;ۀ�ܰ0+�8�6���Zx2�(gdͰ�e�OE�f���m}����f�x�i�39M�Po��q�b��w�!D�o� m��GxiX���2b{�z���Å�-��~�',y���8��yV�����C��_���8�{k�_�:���M�G��rw���v�q��ِ��s|�P|���Q�xo_0����!O71����{���`�D4�� �Q;�:T��{�89�H���_?�;���,�r�Mt�H��n �>ʚ!�����T�#��h���;)�ѻ:�`W�r���5��~A���7��9R�M��l��wU$�Nϑ>ԏ.Z*4�o��gh�'����Y�/u-�[EEܢ�+d>v$aF,E�B@`/�| �N��qB�F�_�Nk� ;ϥ�~cW�S,7du��?U��HJ��ev8Q��h�_�0E�B�X��4�A��_��D��_�������ԑ��ݽ�S�6Zks�Լ���_�Eo���]�R6!��$:'������c,�;!���D����JM4x+��7�q��:�52Yy��y^_��wQ�0s��[�2�������L�1���P@��3�-ЍCi��(p��f����#�L6U��%n<���X.wg�S���jxuh@��=�n?�^X�F9_�s~��R�2I�m��y�+����ۯ������6_T��R����y�i�4�4�A9^�H�R;<�4PTs�h�.pz@r�Gn���<�PL��B^`�nGg+=ٝ����v��Z4�����H��[Y\Ory���_qY�x0�����{��XXT" ʼn(�Ix�ޮ_<���sj��Z��bb�)Ҝ�8 ������ 6Mb����6��Zm�"��u�W�j���� C�?��j��-�|��ۋ���Q��r������t���x���ݙݛ��&�d;b5l��?�ac~�
Static task
static1
Behavioral task
behavioral1
Sample
a7d933aa2c4d023a6d7733b3d001f66c6141fff9d4ffa4c832643710c8ee0ceb.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a7d933aa2c4d023a6d7733b3d001f66c6141fff9d4ffa4c832643710c8ee0ceb.exe
Resource
win10v2004-20240508-en
General
-
Target
a7d933aa2c4d023a6d7733b3d001f66c6141fff9d4ffa4c832643710c8ee0ceb
-
Size
9.2MB
-
MD5
5e85f321a3abfce98e6c5d6506e11406
-
SHA1
18af8cba3125316950e08cad51c0407c48a31aca
-
SHA256
a7d933aa2c4d023a6d7733b3d001f66c6141fff9d4ffa4c832643710c8ee0ceb
-
SHA512
1c3605ed836a47e3650949492c8ca03a28da591ecee0ea360d8bafa2900d417cc9debf99d498b2622a9325e76809959d52f6ab33d35baf864ce3349dc24afa91
-
SSDEEP
196608:JqTLNnUYXwfUiCh+u7Uv+rRgSnqbSZXoQMYeFW5lyJE2aN:I19hd807q2Z7M7q2a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7d933aa2c4d023a6d7733b3d001f66c6141fff9d4ffa4c832643710c8ee0ceb
Files
-
a7d933aa2c4d023a6d7733b3d001f66c6141fff9d4ffa4c832643710c8ee0ceb.exe windows:5 windows x86 arch:x86
5894cb80df9c6e774bfa3b00447159bf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
GetVersion
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
advapi32
RegCreateKeyExA
avifil32
AVIStreamInfoA
comctl32
ImageList_LoadImageA
comdlg32
GetFileTitleA
gdi32
CombineRgn
msimg32
GradientFill
msvfw32
DrawDibDraw
ole32
CoGetClassObject
oleaut32
SafeArrayUnaccessData
oledlg
ord8
rasapi32
RasGetConnectStatusA
shell32
SHGetMalloc
user32
SetWindowContextHelpId
CharUpperBuffW
wininet
InternetCanonicalizeUrlA
winmm
midiStreamOut
winspool.drv
OpenPrinterA
ws2_32
send
Exports
Exports
Sections
.text Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 533KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CK~ Size: - Virtual size: 6.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.(HQ Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.8w_ Size: 9.2MB - Virtual size: 9.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ