������Ҥ.��P��0��TNֲ������9K�_��5F*�a�j�f�;�|bG�K@FY�wB>r��1d��U����9t�'�^Բ����q#���X�m*��2����Pi}v�1�p�]���&����"J�~�x�qN��YRޠa������x_�8|�(�����z��U���㐖�?`�I�� �|aOy۩���?`�õ�{�XV���� �F��I��-t.G���WGo����m`��˻a�kV��YX+���+P�e\#��KV?S�W�W3�x���RE��Z�X-6�����Xȸ�r� #�:���� �Y����W���OXʀ2S���8�v���������;Hq���B<�n�W��� �;WB� �Rʒ#�x��$����<�� hv��s�C��+ ��c���;�lw�W��cz���ϴp>��^��v1N��(��B��n9ȇ�&�8�q�;��Gww�`�5�ɢ��M�G���^(�Ϭϡ�v|kwg��$M����H��`��X�Y_�H�l22\���g�)H[ۏ���К�-���(T]uɾ� GĪq���[��̡�e�h*�����+�L�X_S��|ǝ���`� v�8�������+��9������C��屔���L�!���7}�c֠��8ӈ�^��Z�U�AO���f��h��壟�o_���/����2�p���W�M��DcݞN��$����{�V��j����|ڸ�������]���I���}i"##��W�.j{�)�K���$kX8niV��s Y�����5�W�߮�2&X*���$��$�W?�w�^������al�J��3�9w �is����s4%�F1��Dͩ�-W�oұ;��>W���(��9��x������[Ttf5J������-,�c������!w��k���j_�l�������d��8X�P��rpAZR�aN:n)���;t���2�"���6 ǰ�ǥ�R&�G5�Xs?���k{ ������e���VD6�|��L6�9�|�E궑7�3[#@qk=�%��K����9o��_J�we٧�'Ga�L������]�d�Q+�p�4 ���2��HK�ޕn�+G�%1�&�Vzz��)/�1��g�T��_�@?õ���i;HPr��Q'j���d| �$YE�VN�t��-2�b��E$B��,ޱ�C E����� ��PGP`�*���^��RY�>�W� ���_M�1GBT�$�"�C,���p���[o�a4��0(������v�*#��D�g;םR���^�ol���*��� �ŋ%vD��kρ��ŀǍp� ���0Y}�q�7�Y-���V9��e�C���|[ .l�^l��B��瀆�c�b�q4�O�'�8��C�U�>:�y��'>��Gy�Q���@~�ּ�#Q�**� ���I���|��hu�ᾬ��+/�M��%���qT6��� $�(��~�hx�ux�^���1A)�$W8;���n)� W�F&��W�q�^->��S~��;�]�� ���[��^����~O�Σdv�� Ao�����℥NT��i^�sB�b��~Ё'aGo�6+�:�<�y�ueN��������vW�=ԈѦ���N�|��1+��)�i�W���$�1�҆�芡�7���!Z/73Ծ'T��|���j�*Q>�Ѽ���/�I�L�r3���Z\��9�/E�;���o�(���������. �n��,#�B<��߹5�� �hR勷%�#� \F�Lݨ�X��2҂�lٵ��4=ɧ=Ɔ�$L��E�~�\[z�r��ת(��w���;��#F� � eG�{����)�Ԟ�%rd��y�#<������tw�32���B� k����j�D��7��S�����������ka�y��;���m'P�hݞ�}���w{�^�B� ǔPDu=R۲����Q�t�Cq�i�*,)����%N;h�b $�."�P�*:x�D�����2�%�V{&�F��=�*���&N�t��Z����'���8���+���0�S;�X�����P:��&F!�ȥ�.V�T�#Nv�LP,O's�&����7�V�A��#��X�mҸ0��0���O�PvV^lY#눶����vM�����wڽY`\b������<N�b�m��|G~mEQ�ep�MM9�1�:�<�4=Z��}spq�����o�ϡ�Z�[?��{����d�$TfpS���k՛���n? �0��T�;���)�ߊ�L���J�q:�I��h��Y���˶r( ���V��JM�� �^�5$�Oy(���Z��E5�t�"^~@�kbrgƹ���gR:S���,3�b/0~�9`T�PLc���z�������'�'�4��$k�>��v��Y��wg��{q���gFmh4�� .�߽��rD �V|� g���O�����#�prE$:�P�j��PILc7C�c�{a���#ء^|�$J7�I��}�xBq����ћgc��u�� �ۼ�i����3�t����C�Q��~g`�!&dĶ�%�< ��j ��r��%�;��]���Y����Rۨ��-_�Ğd�4�����b̟[MS�n�=%�����6� X/��d��p�(7���ʯ�3,���FEJ��gS}���Ǫ]��k/���;��NóK{H:Hi�$���B��2V+Q�+yR>C#���T|ǿl�h���� ��OH1��e�v�ꓠ[�?}KC��ƭЈS��7X#ђe��P'� `H�N��\��Uj��64�7��, <���܈hX��[������Nՠ<�Oɑ��#���W8զ�U�^/��LJb�F�d <�����]֥q��+$7~3j���U������I���|������0������P�dQ�IlW�f5�&�GaGh�H}�;�*������Ou;h>=*� Mz������-�-�|��6DI�.������ VP���0�i\s��ݠ�=ʜ���v�)�x�� lB3����P��E���y�U��h�T~Zc������Ƥl|�sN^P�]8��Z߅�A�63�F�P��)�W�j� 5�F�W�<�m��kO[ʵ��T�����A=�Ξ�r���L��旹����$��c�,���W�D��r��Un�1iP�Q�!��57/�˲���^�D�@���u�̈^#��a��G�m�/6��ZF).��~�A�Z3J��_�B��� ��b b(���T"YX��<%Ty5f�E��=L�����4�2�l�JW^t��M;�ϵ!1�@�c���#?vל��jTو��
Static task
static1
Behavioral task
behavioral1
Sample
278754c8f6050d4bbf4d9a243f048429.exe
Resource
win7-20240508-en
General
-
Target
278754c8f6050d4bbf4d9a243f048429.exe
-
Size
2.4MB
-
MD5
278754c8f6050d4bbf4d9a243f048429
-
SHA1
7f5fea45aece28601ef66caa6d2174cd1657d60e
-
SHA256
d2105345952320d956616ccf74f73024420f7619f745c5c1e06a272bcd7199dc
-
SHA512
2c8d0f35449a0cd9af2658a8880a71381a117ffe1f5b654e73a5726e638e753304cd894641d5b6d0f31ba2505e71b906498d484cc6d7aaa7c1286dccfb150fdb
-
SSDEEP
49152:hVaSO67RllElwjXU925M3LrYr5V/iGfxuopt0w8olALw1U+3O:DK6llpMgM3LUrHf56Rol4CU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 278754c8f6050d4bbf4d9a243f048429.exe
Files
-
278754c8f6050d4bbf4d9a243f048429.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE