�c����#G����y��Z�������>ɷFF�����m%�3ݹ*\w�(�W ��H�#)�怷8�I�P����v��=��t3�#�b؉I�,�֙r,�L����p�Vfj�:?ҹ<'.�v��{Bp���!�Њ\��-�2��ͥ�T�ri����J�pzZ>��^����mƦ퍬���|d�I�&;�b�7|'s�c�� 4n4�����`>_)Kl9��R��'8RL�w�C���x8���g�0�q ��Ͳ]̦�d��yrD������,>߆�����p���]�J���t��k�.�c-v���/�-z!2��Vk���=��0�&�|"&����I*:�h =���(��P�B�b�\~>��˰=$AZd�x�����y��[�:��GqmK?���g�Kg��gǴM��] �����o��\��Bl+�V%���K�U�N��MH����)���o�$�l#��|ՂA��>+I�Mf9��`isvz���!�U���(���_%���\����J�!:p��(���%*��K�%� l ��P�T����Q�vtR��lB���][]��ȱ����߯�;x6��*���J2xqۑ&Ă� ��Jː�Y,�G�� {�CVx;�i��q}%�����~�Z�~����,_lgt~3�i5�+�A?d1�Z]w�ߠ�Յ����1osS"{�dR�1ͧ��� �~�4��ۅ«���:�� ��A�YyD����?����l��u�wlds$r"r�)�hHAP��ؗ0���_�bYI���;�����(}����Չm���hA$�����S]�<�6��o.�ؽ�?��� ��f�����g���� $L�ީX A���0#��2:�O����d�h����EՌg�J�WF����/�����5�E[]���J^���������F3JJq��ʮ�:V��W�x��*df?!C|�p����� ��;���;�����,r�}`e�^�t�VQRV�K@�����cx����t`� C��끶��8�%6�(��)fr��}6�lkU8{�0W4]g��<R��C4���U��PZ���0�vCn'���}T��h�f� �}Z ����B�ڕ������d�̮�/�T㥽��Qp�2䩒ϧ`&(�T����Vz�짥Fj��Z4���m~�!����,��S�����P��#��6����8�$�o!n� ����qN7l�Ó� ����9:�꽂�k� �����z�:�;RfC�M�7��g>�W}oY�$� @TP֮�WT2 L�Z�i�#k>��� 2C��H\t2��<G;;���5Yc*�6t��(\=B��p�+0�y���/�9ښsu�h�˛R�2 �o��Ƙ�]'���t�nQ��A������w�\v���O�w=�|�3.| g�*�w\�>K�V&�x����>��~��]�-�]�ɿ� �?�_=�*Tc[�������GQ���t��P"v>Zq�O���d�����٦����,���J��ZC�]��-25`i�Ȑ�P�dNg�($�������"�(�Dq���J�넖yɃX��"�d�y��aɹ�6������k���32>B�i�J���{!��~S�S����`�>S�MS�`qN�aI����U� n��Q�*�:�^��S��t ��Ʃ/��9H��U�0 J�L�0�V���*��>�SQI��=�������n�2�.�TMy/��D�83Wy���a���P�@K��@<�8�\EP'��dN7fI�z��9�\a?�X�q1�і#��'_yLI��tx9j+dzbq�G\۩�ru3�n^���G�v���-Ͱ�1�������_//�e�L�=Zt�UP�$O� �6���;��WGp��(ڇ�5>e�&T&ؠ�" Xe�l7_AL- �q��B��1 T%��`�MPAB[6Tݴ��d>���K���H�O��D7Gb������'T�X�SP.$bd�AL���3����`BM�::W,%�5���5����%I���H�G�摁%a�;���L���j�K'p���`�-�ʁ�F�����?Gn}eV��G�HƇ�����MufӸ� YCP�����ҬK����O�'nk_x�!��a�����4����_� '���>�z��d�ǐ��¤���=�GMf>�HF_��nj����}�md�Q{A3�%�n��7q�����Z�ΐ'�` ��#SD�SX'����z�r�H�JWE�Y�U��W<O S�h��pK)�Z^)��㈀���݅LP�U$ϟ�����Q����'k���x,��6M+^y����BO�T2�6�:ߤ�\����Ep��� ��W<�殘�vHu�wΠ�Ɓ?t>ә뒞�c*2ZQU�e ��bsKE����R�n�S��E/a����7t%���e��x�B.���v��`~�߽Dh� ��f��qވ�:���h �_+w�>����j?x ��=v�xk���@X�۽1ovx�(�\��C��ϔ������� �N0�O�I|��B�j=$�a6կ�w�C�Ψ�H�F����)�",�iv��bT��:;��T캭���C�2��UO���`_��T`i�Ps$b�G�'��?k����#��qK�z��>�?O�w�`�#t>i�j��_��q��sw�ya�F{��C�5�̨e�.C�����9�ag�"�Z'����4K�U���Z+cF�_� ��� ��&���� T�'��P�v�8:���Q���=VQP�4"�M_�:��M�0������� ��g%��>R����a8� ;�rX��kD��2SA����is�u��ܑ�l)�4��_�xeJkӦc7�<���1��S`Dt�<p�>`����a�� �-����>�uE���bP��pFz�.�VQ�uA(������b����<sH���]��:���e��l> �6[}e��W�̀�h�BS$�uT4NO��#-|�n�~�z���GG�n�� ���I�D����p3;x퐺w����_�[N�r���G���5� � E� PF�t�����pd������!��ܠ�@d� ���E##t�vN�K���YނӁ5�Q�E��~�I�86]�?r��>G�paU�?��\I�fd�7~�)Ƞ�|�ןw�sg�8��~������_Ģ�����z�I�f���sЅN� ��F��w����N¾������7�'�z+�f���.3�@v7 �T��������7+��(�ɠ�͒������6tX��e��f+��Q�.l�ݜ.�ojG�CT���QP[3�S�j���^8͞�m�Zi�2)���C�_O�b���0"l�]h��-�I��Bw��b˓M��Zç��YZr�%��RXt�)���'?��L��A����o�nO����AR��� ��Z$��Q�bE���=���l��J��9��N���+�8 D��̂���Ŷ(u��2��;��q�U��H�V�\�=�O�Å_ñ�pv�z�X|M���2�AvYQw{�'�n���l讱�҆�I(p�ym��܌>o��5�fH���R��n�WQ�E�>قт m���.��ݎ��ܞ�C<{�J�,_�Z�$ �W��\��<����E�vw�9YS���t��P�y��������]t�!��SA�Dh�g��)\
Static task
static1
Behavioral task
behavioral1
Sample
9a501e3c19a488ab6672598e26af59a019c471aaf67adcd1dba4734d7a2b9e48.exe
Resource
win7-20240508-en
General
-
Target
9a501e3c19a488ab6672598e26af59a019c471aaf67adcd1dba4734d7a2b9e48.exe
-
Size
2.4MB
-
MD5
05dda1c444fe4feda4771f75598d55d7
-
SHA1
3369deefd76ea12c621aad635547be857720d7d8
-
SHA256
9a501e3c19a488ab6672598e26af59a019c471aaf67adcd1dba4734d7a2b9e48
-
SHA512
01c7897fa5995332c466035f62e45faf12ff0cead90655df53c0b493833656c177b53594a0d8300c792fc43d2f6daa577e3f949f6e9118c950472d1a85ac6160
-
SSDEEP
49152:rLZkC1yr3UfAdY31fHI7/IBIf0qHKSrynh7ncz9g+rVbKE6psgHC3:HZkC1OUS2ZowBWpBrIcCpsoC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9a501e3c19a488ab6672598e26af59a019c471aaf67adcd1dba4734d7a2b9e48.exe
Files
-
9a501e3c19a488ab6672598e26af59a019c471aaf67adcd1dba4734d7a2b9e48.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE