�H'�zL��/F �#=���ʘ�A�Joj>/:-�ĜE��Z9s�*أ�cf���3���t�p��V;������TA�� )�/)�o;��8����;wӲBC� ����F����{_���g�z5��}�͉��x5��O���� `.��P��P_.O�Z�����1���2ںuWlk�^�z@������1���o�s�gC�� Ľ�FWx��t���Q�A�=��J�d;�XE*i"J�;F�[D~@�NK�p��O#)I�a�� ei�=��u��E�c�ֶ@��W>��4��D���o�@w"%�����ل�OTW�Gb2�7k'���jB=-���̎ݽ�ׇ��j�>����!y�F��-�Q�{OQK�uAW���{���ӎ��XB�V���4$�0��"R��-���P3�å��L(^Z˱�D;���ȏf���<�H"Ӷ�UB%�y� ���1+P��Ƶ��9�o,�8���^�"��t�b>����&��<=��y'�(o �j�Xe'�Vd�KB�JU_��r�^�����4�hzn�4ݦHl��CL�@-B��u i������t����m�Z����Yt�H������_��jq1�������4��!X���k�;{���0H�Cv�)$bg�F=4Ӊԝ�$Y��Hj�r$/�I�7�ܼ�Јk�ڗ!g�K���xṬ���f)g'u4�_�u| ��/�D�b��iNd���&�=�X�T��T������cC{m��3{���d=�1a���va��&�>/ ?�)vB�N�U�!�NbѺ�����й�q���P�\�o�m+�me ��LW�����f�)!{�3AP N�eX�����>����s�dQ�.zM����&�C��|��I)X����8�ߕ��Z�yRG�OLAy���ѵ���#w���H�sɻa�r����H�8�9���OW� y�0x�"�f�����B� �x���A-�:Ԉ�I�ݪ� ��r�6ӷ�k❏� xZ���>�8���0�� �>v������F.�3�٥颊[�x�g����Q���d��� �� ����$N�*Y_����0`�:��T]�J�Ah�Ĺ��_b���slr���qE�oN$��sg(�h-U�4#�3=�F^�и�9}����Ǜ����˪�����F��Gq�]Z ב���Z��AEN�{�N��)@���K�C�:�Ԟ���풢��rґ�d��*��� [Ǯ�Q}�S�'`���]��@ڰ#h1�W��]������Pm媟�*U)�Z��z@��[yoM��6we�/��ՉP]�(��TH&�#"+�3�n�Xْ{��%�P1 ��ȁ���y���ج�����ƅ<Vj��/|�zְ��SzJ��A�o��;ns���{�U���E����7d����y��ָAӇ��^�-:�t��Ľ���p���T�w[zH��H��UW���{�� 0��H�"�x�7�X��@�D�`9��/��Xf�7��S�T����;(웡]B��Қ�ң�H�R"sB�j���Z�7}�ģ�0#�Q���N�=�5��@���6��䒹�,��+�*o�U��N�AxO|��5x��Z,'���bEW��ք0�ŕf�K��c�G�%�l����c�ı �"�;�&ξ�`� N}��{w �7��=�c��ŪC�TΈ�H���w���Mr:h�¸��J��J�M�cb��Ͷ��t vs�h���G�uzo�������q;6�ˉl�!�m;�x=���۞�!��������Gt/CC�e��eI��)p�>~��"t��e�q������"�3�) XMe�I���ʓ�E��lȺ]�d�g��-.����� ���e���&"��$��Sݯ����stACn)�X��}���mB>���������o�O���:�A��>�P7`o����I����<��U�fV*0���m��w��d���Gw����*<��<J�,�����f��NR�V�q��5=�l����<4;�SB���s����98:~(R�mF&`%Jn�����Xbk!�)���,�\XH��gX�'�C������v�d$�O<��w�(X~�9�&�� �eE���Pw�R��)xIwW�`.����5�{ZK�}��ཋ 3��Q^�vO�y@7��6Ϩ(��ç|�<(�ׄ���E���g ���͂eY�7P���r,��c�@�$��������� �/i�:K7>��hT�P����S$�P�Ύ0���_o?[#3����b��uD���������� rg\���X�Ub8-Ȗ�3T���l��Zs�G�.[l�{�:��4,�@��]������h���fU����\�G�W�CGpS9�[�(�����\+�yb��{��xvh�TG�+���KMsU�͋�x�OTh���g��̯k ��b� �홷�XnIU瑘Y����wl� �7m�-'�_�ŗmj��.��j�NR�I����D����m�) �"%����sT�&(���Ghb���U�n--*8k���@Qv)9�"�����!�R6x3}��#�1|νչ�K�]�w$z۬��5@4^1v� J�k�:K.��T�M���䓭x&>������Hk��:�(��9��� �ӥ.o�2z~/'/������ш�Z"R�7�L�v��h�i c��f;��5�Qa�ts�������X��,��L|�$Sls� YKJ��q�_l ���@��,��4�$� ��GI2ɲ ��Y�+��Z��p�pm�\A\}nr�Ap��]�-`O�3�qF�I�gq.g{����uDڭn;Gb�q��H��H��O������b��g���M�Ӯ��yl�urn]ڟ�����m��Q�����۾(�nXUmR=;X�}=<ׅOn��R~�6ރ��=�dC2#7�kj KK}��_��:��A.���g�-]�h����ҧ�� ��%���1�r}/��Wm{��K=M��<h���FZ� �Mv$j_`(�m'iN��:="I3����M�";�ȗ�#�W���*�e0�m�jH�yQ���<zW�����}&��B�ފҔ��S�!�5�2�o���ϲ�n�[dl%s��D��(z{�a��E��9���n �d`r/!Gw�e8�,b*��n7�;§a�2���ТYT֝Өخ6^��k�;b�mxC�9�bTE->�T�`\J7ۻ5q�=�$���m�'b
Static task
static1
Behavioral task
behavioral1
Sample
789730e3510c604c72ad052f4b0d4938b6e82f55ee30146a8b2230caffd7333a.exe
Resource
win7-20240704-en
General
-
Target
789730e3510c604c72ad052f4b0d4938b6e82f55ee30146a8b2230caffd7333a
-
Size
2.4MB
-
MD5
28ae41fe744405873ea7c84a09805a02
-
SHA1
0174a39aa1afc8554064fa514a3db95f1ddd5d7f
-
SHA256
789730e3510c604c72ad052f4b0d4938b6e82f55ee30146a8b2230caffd7333a
-
SHA512
cd4204a2fa5ba771cf5da34fae5c91133d3877360d5bd8c88eed24be35c07a460f75f1330868135011c1252127501e8c75438015681ec0e233af4b8c39aebd12
-
SSDEEP
49152:9JLT2znnG84eUiq4x0B98fG0naBEVHNXUF/+z/l++8OK6SVUJLkuD0sN4J5Gl:vLT2znnaiq4xpQBStXUEn8Wg8nfN4/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 789730e3510c604c72ad052f4b0d4938b6e82f55ee30146a8b2230caffd7333a
Files
-
789730e3510c604c72ad052f4b0d4938b6e82f55ee30146a8b2230caffd7333a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE