���s�0�Z�/P��S���/��ʹ�{L�=�� u��i��N���1a���'�t�%m�z!��&��@c�&��y�Q�1�H���Nyju� �E�n=�uԁ��������&��tB�w������[�.D�2;#����A��^��/�_̿ų!ws�t�»�$@ ��1�,��6M[nl��/U(��P�A���k:�$ Z3�UuK ��i>[S:b�aF�/�Z?�Y"�EY^ʞ�N���,UZ�>3A/�ä:�ޤ~-��5��H���[֧R����\Lچ�����~ķ*����?��Cj�&�9]l��Ɂ�c2��Kkdi9p�<�"��b�o����e3�u���SS���9��� �,Es��]���|��Qpl?F��B�w����(�� w�V�����LN£���<�����b�8�j�z>�h�=�5���4��n�$�Ȭ*KT!��w��L��S�>��8�a��а�.�������|�k;^M�K��]�-��]��R(�X�����E���Pt~�|�_}6{l�X�&�*ZY�zUH*��ۥif8� }�a�qQY0���X# W��U�Z��s/^L\��/d�����"9�[Q���0O�Ku[��G��Y�6��:Y���Pğ���bc6�|�I;D��%xL��q������%L9"�WrZ�в����^�P���T_?�I����X3."=s��'�V�1Q4��~/���F`7�I��G� 3�*�U��K��xХ�Or�*����6�����n��e\ݝ����=9)=��Z���]�"�r7P��\�&+F}�Y(��w��Z[�UV��*��lx�S��`�ATGλ���6��J�lUd�c��OI�L5��E���8� �I14�/Ƚ�Zv�*�[]*m�W��\��:�H��m����^h�!�lDM�$�D���^H�n6G��%GJ'�3~��"gS牳� ������!9f�aG�4F/����i�%������9M=H�\�k�� ���H7=�(H��T�#�J"��,+u��O��p��N����%}K>W�er4�W ��H�*�>/<1aa,�v|��0�!*���������&��s�#Y"�h�j�h�=]W�㻨a��l�Z��j_,���8 ��� ObpKd�n���>����zJ�I4����'�����}5�y�2������Q�qA04&wQ�0�������qe:� k�ݦ����.��AWOd���g�(�h����x�IA�T�t_I���!VBF�x +Ů�\@'<\?�d��©�ɛ �B�b6�n��c�A���:a ��tL�#��u���ɴ]�*N�K�q7��6=�{�Er�ײ��R��'F��?������X�=Q̙�.����.������[~�D@�����8�I�Z��a�0��i<w��qp�l��MU�ߒ�*�u��{܀�[ɨ��fR0t���^�oݪ_�^1�D�m���]]�";n��i�Q"�9�&�=�d����l���$~ n}6��YV��fct��槊��ul �Rr���ڲ�����C��WxZ �`�y3������?:��<���g��������nD��]����i����h�2��Z��d�z���m��$y���\Jl �}�������J5`yn�Xh�� ���;�#M]u��$ B2���~خ�U� H����=I[�'�ϰ.�0��.��w��7�V�-/������l��ME^��ұ ���?$�� #7��]~�^�)gW��z�� �ywf @+���`D�����p�!_@\��x���l&l��d+D1m_�5�6�����6�yt���ܷ���6��{~QRd:s��s��e�-8�*1i�m)�F3����3w�I�8���bƤ���Y�ξH�'@�-���5�� ߁tX�$�������� ۚ*�0��q���:Ӥ[�@�r��0�q��|Ɍ��;LEV)�V�Ю�?e��r�3�^Pj��� ��� �J2�{�M�1$�w�� �b�����Y����s���n�}�� 5�8S�ֿ���Fd���z�Q����S=����\"/��ovQ^�nD&�2M�H��T��\w�=%���f�^Ԇ����دXߵ��$��jj�)�Z����כ�g�Mb��,U?|�)�~��HX�X�B V�����5m����5���n�Â��Y&g�N�1h�S�V=!���p~)k��7���2~:��mm.N�S\� 'ld����%��`�i���ʝ�d��I��7�,��c|q�H�)���䦢Da{�����UY��= 3�?�kt=��~�+�ʜL�"i��V1��28/���� ���W��-�on�!�P��Uo�ZI6�K��\�=� A�l3�R����\!�!���k�#��J$� �$����(�J�����S3�D���J^>y�9�7����H�0߀�<p�ݖ%�7�Y��r���]z�ڒ��(3��.d�t �����,�,!�8��뷝����.#o�[��?��{����=%<�H�o����$�=�� �|:NF�������0e��suT�G)q���JA��е�Fe살���LZ����wْ ��~�R�t�/ �0��Bq%U�$�0��Q�RlN���B��C�.���٨��:b���g����6���[M ����N�!�ώ�eg����?���t�nԧs�5��i�v5����x�-��qk.�ǛR�eШh���C�]W�j�e�<�!vU�ׁ��\�XUh���Ae�0�J�Q����y��]�]��M{�b�p)�wW&3ek� �P`�=�#s�����%�e����'HJ�F�2��<�OQ�L�"!�OyƳ���Ļ���-Dtw6�WSA��������/c�����s�,it��� �@\`��A#� �0x��_��#��4Y�KU�ˉ:Έ!�ɱ�����$�3f���s0Q;p�7A�re!Q�觖���//%8������TWT��.����QBQ{�,,Z�{�Y�� �g��b53��K�ti;�u��?�|�������{u�S��WH���g5U�[:�dd$�:}¡�v��9h�~�^����W�n$Z��(E�1{�K�5-�Up|��Y�o��f�nI!C�b�����*�������Ge�ˎbВ�:�O���z��R�=X6^[�!\[��[N<��_4�S0�y&��ĵǭ�&�[j���W����C�����f���B�(��i����Ҁ���α���=�)�W�Xn�j��4k=`�L\�M�#@��3L���}��p �N�& ����Џ��M�GO�eLW]��{�Cޠ~�j�`&�ʃQ?�WׁL�;����P~��?��b H9��)�j�X�7YBA��O*X���:*����u� ����{w�����;�����7����1�k�����b����:�K���L��mH��$N3"f�&�CB=зH�T�x�[�A*PnAvI���'��3~Y�y�R�^G�F��;h�u�N�f��@g7w��\l� R����e�ǀ*�3Sӝ�#�~"�h�0���n����s�H��-�ĖkLΦpi-�ނ�S�g��ﱊ
Static task
static1
Behavioral task
behavioral1
Sample
96a32d13cd84073e06f1b0c27c7daf3192bbce58278fbf5c1270bcae4c0eba37.exe
Resource
win7-20240221-en
General
-
Target
96a32d13cd84073e06f1b0c27c7daf3192bbce58278fbf5c1270bcae4c0eba37
-
Size
2.4MB
-
MD5
1323616c7b4228edd3735c144d4632c2
-
SHA1
34c45567ebdfcfeeb9d950aa527bf3bac2709a41
-
SHA256
96a32d13cd84073e06f1b0c27c7daf3192bbce58278fbf5c1270bcae4c0eba37
-
SHA512
d023ba0ec57b3a80fdba972c259b60f4f3779a0d9692317e3e009507b8adf9bb66b63aa09214677dd8294750d7e8d6250722b5687fcca1e9eb7da16718c6a079
-
SSDEEP
49152:5mWiArZVhBRQt4VQxDJ3Mj6WvvDlpEqWlwYRGAxSFkjYo6YJt7QC:cWhByCyhJ3Mj6WHpHswCRCs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96a32d13cd84073e06f1b0c27c7daf3192bbce58278fbf5c1270bcae4c0eba37
Files
-
96a32d13cd84073e06f1b0c27c7daf3192bbce58278fbf5c1270bcae4c0eba37.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE