���p��(e���~����4���DVV��� �1��aQ9��_r���1�;ޝ�.�鹮D,Y�mj�w�!\{��$Q�%AЭ{��v (>����Ŗ���"W9_\�=��&�d�ǧmv;sy�<0@*k�S~ic9�𢃍�y��� d7 V Z�s����Wn�<��b x���z�+V��Уh�`�W���T���d�s��I}dp���������� V�MCj��\>Sg d+`��Ro� ���J��:˻��ab������vsx�ii� ��ƾn��ׯ4٬a3�Q@S���. 뉹��\�����/m�d�;ÅAj�j��������������{�v=��/���7[ư��2���!d,���aվ� �Ym�5-ncuɖ�@t��B��5-������9yF&XL̠��jD�5P�otq=�ue�F�镘�� ��Y�����+�Ј���\��M�`z��V��'T���](�ŭI�W �/vz�3�ӔSu�iPV�����:#����zQ������&���4^�O�0o��`j� .������Gi��7��274�yθ"��@�r=�]��w�V��i��wa��ZB��:$�M����uzC �z9(?Z�?�b��$�F��s�D���O%���E��H�-#G;k8��_�Q����WDz�A�E���9����W�A����^����<�W�/��44N� ��M��fV�>;��N���n1-��`?�@I��g+���?���t=��z�h]@�����"V�H�3$�5E����.gF23�Fr%?�����[���O�������|0��ڭ(�xX*,e\�ʒE�\�� �g��_��0�� ����A�)wd�+Hn$$�#�p|AC��n{p#��J�=D8~9�ԡ=��Y�R�<ZvMo�;B.�=�O���<�r'�n�����u�F���,��<�����(�Č0�8���1�b�xж�|�n�Vՙ4<��V����*��LOJ����a�r_l���.�[�ӞB�ڻ@�����j뼎��6�.���)2�sCiř+����m]��MgL6�#f�'ʷB�"S�`�>r#Wv�Ed�@��%����ԫ� ����4��j�~�?B+2���.j g��r`�.\�o�O@UV:�c���BJ�6�{��ƶz�� ���*�l���,T�DϞ�+��W��D��['�F��`��'��9s^�gB�o6��}�$�����3V˫�$��Z���3n����2G�M��qh0��@K����`�%9����P���Vs��Ј9TTaH8`o�S�4��R��X�۷��'e^{��,���p�2�W\����$�26Bp ��T?e��[9ܗ�s�$#>R�<�V����#�/��)�y2@=a�� �e���L�p�ǂm^�0�������$"�b����9�����~[5�O"����P?b��z�+)dط��ŊȞ2=a�|�������)&���h����*��թ��.���!X�mH|x yGz�%�2%��/<�D8� �7�c��8��f�IS'{��p_a��� ���I����h�� kc��@t�rt�V����u2>��*�X����{x.�0_|h�2��b��[&p�n�C���/�"���X�M�{]*�2���I�������t�J�Y�O� ����B�qL�4���v�^.#�/P!7n��JݜL<�P�uB z�h�Ds�ÎO��:����f"��0 4�y������ji�����SFq�Ӥ�9��-L�SzQ�F���'(>�L���ad>ʝj�o[�l ��,?LW� /nW��!'���!� Ƥ�f�5[�CX\Ae�ވ�Br=��Y;���v�3����U��z�%��N���Lg«⯼��=Ƀ�D/� �\�.���i^��l�\�-���!"��� �xA��[?���.ȠNV1$-���W����)�ZD��&�R��A��������m6H��b_Kl��IMٟ��Qq�:���o]7~�(��8���5Z���ĝ�w�[B ���m��s�)d��B~�̦��}:=���y���h!��1j/�O�?��2eg�l[��b��66|���^�*���>��70�O��j�H���0z�t!��?!=[�|^TH�Rs4J4Ɗ�%�õN���Z���~l�$uH�0 ��7�k@�Fۓe>9��i9�x>�'wR�s�*�,h �"��f֭KM"�S���]��`��/�g�|dq��R�_��,辯:���F�G�<�do��J-������u(����-R�������F��@S�&�F6�_���U��G�D.�R���W(�D�L^SG.܍)�b��w��ϡ�O&�W��� -|��:|>^��p�$���0q��%�� ��,���v Z<?&)/����bX��2���Sڨ.OҢ~]��i J�*qТb� �ڱ��;���V_8^�ڹ` �e��3��x���T�W���F�>o�_�ה`\�C^�Cv�d�~}[������l��vt�z^��������?����Ì�|L�{g*K"�HZ�q�پ�b������;q�@R���U���R\����J�����9��TT�;��?E�Y�a �& ��\�!�f_~)bV &�Ү�`Q��̓� +C��[�p�z����˪��=7��uoY]��r�u%q��Y~�&?�K�V�Wc��jx����*��lU�p�,��'asm0�fn�DJL6�T×`��a�n��lӪH ��I��Hߒ{n.B�Q�V�du����ޟ�iމ����J�T�#(h�jaN�o:���=}��: �:������Q�^ hp�v���|X�����+v���}[�7aJ� J�'W��l�ߟ�����0^��� ��]+��eme�v�0$� �H@X���05�˕�u�o����<^X>����Ɲ)��T�:A��z��V� ;])��>w-�e���Iu�^�W��mį�yxȡf�n�[�cҔ7��-P�u�_�v���EE�%���?��yi��8�x0��y ZE)W61/�V��şod���V��m�4������/���)��c$����O����F�H��-Q��\z'?��Wj"&��<aB�H�p3��Z���x� R�p䆗���&S��M�z���f��$x�l�M�i�ᦛ�;����ݯ�~-^�����}.���fl�;:���<����4rdHN�pt�῭��,��^Y����qS��&'QV`��y]�4@�blZ�<���k� fw��`e&�d�<z��. �N5����ߧ�)��鐺���� *e2}�C���(�s$�
Static task
static1
Behavioral task
behavioral1
Sample
248d0a48068c989868535721f8f65e5e86d269646f617b875e3c20c5e5303f09.exe
Resource
win7-20240704-en
General
-
Target
248d0a48068c989868535721f8f65e5e86d269646f617b875e3c20c5e5303f09
-
Size
2.4MB
-
MD5
603d0e88171391cca5153e6f600c18cd
-
SHA1
9b1ae04fb6519d79c193451aea922adcb51899b7
-
SHA256
248d0a48068c989868535721f8f65e5e86d269646f617b875e3c20c5e5303f09
-
SHA512
76008cc3eaead7b00dd78bab2d6629143aee495bee5df187fa93e2e89d7a504ffce0a07c7e3c4fddb57bc75a494152fd2552ee72dafebd0dd64493fb5dfcf157
-
SSDEEP
49152:/HMFcCAz845z5sJv5f6hlbHglq0C2hupGOyENHNLPBCSc/cN4zz1Mk:/HMFBAz845z5sGNglq0C2cNPH5N4zzd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 248d0a48068c989868535721f8f65e5e86d269646f617b875e3c20c5e5303f09
Files
-
248d0a48068c989868535721f8f65e5e86d269646f617b875e3c20c5e5303f09.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE