dTL�pR?���P�7LC�m����_����W�ݚ����/�Y#��?>�ǂ*H����ض3X�G���MH)� I���; ���dHT <}Cb�,Ty��E@km�K�v�o~d�f����7Q 噢����mގ5�.}�����)�<��Wp�h,2lb�u�z<�v�H��ʻ�W���%j��Ӳ������ϓ���x���f�{=�o���Z6�5�1�����q�Mlo����u#ٿ�ͺ4�0/�oxQƼ�%�Xb�.�؆�łQƱ�j�� ��YZ/�������lG!Bܩ�M��D�K�cВ�?T@Fx��������%���O^�O�ֈ>V��x���2s��=��V�<��ᧄ�'N����0��.�'Nh���/��!Ԓ�¯ֆV`��a� �]��x!� q���$��9����P�K�c�ߍ���jB�Y�,��,�v9��&S'�[�|�lR��j�ׅr@FUG]k���ࠒ ���Xa.�ը�c�CB����%�V����0\6�edFIE��X��I��?�(T��El�YVn���Q��BmVM���:�X��%�@ �����1�\=*����E����e�V�M����tn)?�j���2mFZ����[�Vi��4_�������)�̓ڑ�pƽibs�� �_��!��hǒ�ͩN.�9b�h�N�r�S5�ɬ�?�_��d�Fhfs3�s��� ,�4g[��Nuj�t���;�I������MG�������f��WM�W�kY�Ӿ#����Mx�U ��x�qѿ��s> �����*��VUit����u����?.�Ž�:�9k{1�m��-���[��R�&8��@��>�:}�����:�p!�`7�gC�F1�E��mӐ�ϹZ���v\�*I�Hʼn�h�����i1:�y��g�=۴�'��w��8ڏ��B�1���v.Ҥ���S��[W����P|�4ˉ��{F��&5������V���t�����uvgќ�rT��m�k��\��K��'��u%wU�;H���ߓ-xoKִ5���S������#����x�[.5����gs&�x��)��^y��I� �� D�o&��e2(����¹\}�ӫ`��9�im%wFK�2<:���u�Y����6 ���co/��&�V�rW<�}̇��K6�\`�Q�-$.�pķ���펟�p�M�������_�(���������Ƚ�y�zW`*����W���sc���a��b�;w]��uVo��a�N�:�:Hms4�el��2�����*ԾG}��ȅ��_ko&R���[��F^��W�`���IP#p��<�4��%���i:wPD ~���� �Io��I�<��|ev%����k�JՂvt�|9��?�`���M��t�Hp��;���Ԛ��l}K��^�T����´vD}6�,�����������{@L��T��'ZE;��L�G�z����1f!|?�}�]���� �,�7���iʥ�3�͛P1�ɗ������Sm*1��Vb�Ӵt"E��P�&cV���|T�3�% �E���j����#Ks��52����YPݶ�)��3|����y�+2�0�T�Ew��i6MK��|��}� ���~5; ��T>E���ʁ�l�Z��X������̂������cڗ�'��xi�t�s�>ӓ���� T&*|�E��9 @$l�>�¦ǘrW�����-*�Izn�b� �V��r'a��SQ���ٸx�]s��;a�G-���~ O��d=�����!G�7x�2�^ ���S)��������V��ؐ�P�v�t�\��U�\5���T ���cEd�h-A8��͐�>$}~������ �N�U�*[v�J��j�t���}�7-�~��C���mʙ�����+.� i�������i���%S�>��F��2V_u��ZJ�����J�R��`�q�����(�Bx��{�j���.c]�j�sr��YoqaK��ΥŖ��b�����^�KG�E�N@�C�ߚ��xz:3��ۯ$m0���K��Wk��%} �CpZj������ W#���K��#8&Q|i�SB�K���N!�ɑ�'�r_�r�F��?�Y��/q;ޢ������szl�^����[�ښ6ٸ�����(y��0E���oǢ�!�aX�3Лc��f����]�G���FĪ�u���B�%��J��f>���9���2���� ��^z��i|F�HGﺫ�Yh���u)��U1��5�h}��l�x��c��.P���ֹ�9�� �\2d��¶(���7�=��� ���cu���eV��6��oedOS�Ԏ0N#(H>�N�}Eg��]�!L(�����<E��3�4?T��5��VU��wn���|�U�m�e3.6+��� ���b4�ĝ�Z��[�n�z@�%|�'SD��gsC�1 I��]��[��0������%�u�L��$x�JB�R�k�`��a���/��)^Υ�}n��w"�28n�EsV��=���0m� U�z;b���|m�}���8%���������2�`�S�O#yI�3Jѫͫ�d����G��|��@�r88��!��l%��1��=@' �Y�s_=p�����ݪy�v��Q ^�pQ�n����s���y�$�_��w5X:|4�;��7��vn��h�f]G�%\����t��6�[��RK�e��#���e�)Ӿ���z�š>��w�s���L;o���{��_%;�g�wh5�����G`r��b�/dF���*^V�1� v����qh�z�-%�n��-[�<^�ͻ=5e�`f��fuHm����[�mm�6���yBU�y��������\�"�U��gM.�����4�F� �`�#-����*Uk���Pq[8���_ ���_A�t��EL?�����y�\�_��%��(X9���"z��6h).a���0ϻ{���Ef���h���ѣONWP-��-�@����x�S�-l 4L����v�v͖� �U�����z_̏�)H�Mİ�&i"��#b�T%��R��O�Āux�r�q`�����f�'q7�<���ѧ����F�D5N��I��������ƃ�}���~��<��Z�����Pٯ���Y2�bz3�Έ9o�i}���C[=p8<W���x]�v�YD��1d��%I�M̲� h ���OZ ��w�bN�`��a �)�l[�q�������i!����5���Qt��*�m���c�cC���+�2%���n��1s,2���!�<e��Q3z����#��K�mԤ!�n����Q6�X��\�[���u3��H;J?��z �� ��J�b�+�G��l���m��y՞jZ��x ��]"K$+yK�`I�j�/x�Y �.��N$�����h����x2ԑt�,n/�x�tή.E ز��T'���c_��m��(��A�(�>= ��u���[};G��5�A��|�Z����ݳe�q}s��3f>�b�@��i܅�J�'�_�9�e:����f@ ��f�"v��|�zc�D�+T��h[�>4�c���)�Z�t ��3�Q E�UD���P>.~+;�c���#��_a�?�f��3~�F��!`��A*��e>�t����}�@�𥔈ξ�x[�¤st�����,�Ґ)l�/����6�#?fuK�H�3�����C(Au�D�.
Static task
static1
Behavioral task
behavioral1
Sample
43d717f6aa2a1ae8bef569917f6ccb5adfd8bb965114196cc715d30e355268b4.exe
Resource
win7-20240611-en
General
-
Target
43d717f6aa2a1ae8bef569917f6ccb5adfd8bb965114196cc715d30e355268b4
-
Size
2.3MB
-
MD5
370e9decc41c2ed09ec8f40262b9e2f9
-
SHA1
2d5753cb4b20e5ce6822ef8b96f8cbb38b2b393a
-
SHA256
43d717f6aa2a1ae8bef569917f6ccb5adfd8bb965114196cc715d30e355268b4
-
SHA512
3212846affd8737faa4e1791b0dcafabb3ae15fbc329584e4318b14f53b248130ecc92836a2984d389a8a3fd37dd2429b4aac82586c22078e70897f282813109
-
SSDEEP
49152:cZGGkSVrgjsoj+RZWnxzsGF0AX6FRFuZgqb8RN6cI6u4sQYITeZH:gkSiZjxnxz756FPuZgO8Rs6sQPKZH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43d717f6aa2a1ae8bef569917f6ccb5adfd8bb965114196cc715d30e355268b4
Files
-
43d717f6aa2a1ae8bef569917f6ccb5adfd8bb965114196cc715d30e355268b4.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE