H4�$�&a���|�Zߧr�o�V��T [����R�Mj�ny��9�5��&����M�6�@����K�x��m7��k�+�F��,�)�d��?Ʒ �vt��$(��fB2J��'���b�N�Ch�r/�=�GX�'bS�&}��ґ�4%ڟTާs-�T1�܄A��lR��U���w#���L�c|~݀J_>�g�O��}�7�Fi����L{ge>�e�A�j/,z8��o�ٱחM��� ��+_�UP����m��a��O�/m�e͍_A��� p��x���aU��G��� Ӷ�*.�",!5�tүג���sB��pףF��&Q�*. ��;U��2l 2���]M�O�o��Mճ� ~� y�? �6��6,��J=m3@�Ь9��Ӵ���i��Yx$�U�"��`Q|� .a���G����.�|��F����nܲ,nԛ�v�Z�l#;M�Zp�%�m�X�3e��*�o�ު�������@px�Qc7��uz��X�Q"����65�;�$�� �(͛����R��b���%��#7�'��wǑ����54�Kû��LuX��pdVs�}�V.俗SD������MO�ho���Q�넱j�Յ��$V��P?��#xY�0��0�ʺj�4@�K����AH��n-��֜��7Baw é}BmGO����#�S���(Id ������4�Q�e3������y!&CEf��ƚ`�P�' X]�n�ᰛQh�R��4�Z0lV��M�1��Y^~u1}N��]��"�x��bC�ɧ�H�%w��4�!Va���<�!,m�^��҄�-�:��&���R~ջ��������N�1M����,���dv��%Uiv�9C\!�7\��? �e�X�����P:8 ��5��8��gz�w$�2����5PT����X[FayȾ��R��A�Y����:�`�����>N?���&���~k,ߵ����g.�~�_����f�������(�1�/�6���%i��ư5�Sh����Xg6Z��@�F��b0� ߹�]Q�1������Ah��<� Kpi�8l�Ѕ,h��$ >-M��qe(���dMyY���� MB�DV�Y��( ��^倧x�Y������;�:#m�6=��5� 3�}ks� �V�9ao��?�?{�m�"ׁ�`r#}Q��>7_/1Ag]T����97d��ޚ3�>�@�ߐ�f�V�$�=~'S�~��b.�ōh��eR2��G����su���Ѳ:(AE8Lҋ<%\��f��ˮB�q}�"�`�c�Q�X�Y�%f�W�Z��%n�FӞ߽Ax^�����k%k�h�U�_��n$��;�LzZ۩"����釲���or6� ��Z�y� �Ҷ߄�� �B������O��Y���Ǯ����ht��Vt�*���9^K�j.�m�U }���a�%�x�8�E�t��e��U���R��ᐼ�����5���!�mr�TZ����T+!�u��>�C�X�c��3e����P�G�cLc��l�)�Fq��D����>��`��z��4r�N���A5�,�AwH���������%?܉�����7��g�\�\�P5�*CF��X�h�V�$k5��Wr�Lt��~�Fʁ���r��N���ô�fO$���(D�?(]=�߁4-��c~������W�����CG��qoMhj dj�.d���;j��E��Պ�íaN^�qJR{[�2��"�7t{K�xw9�|�E�)���v��w�O���!<��Q3U�9Y��5����� R�F�%�&ܮ�'�#?Y�DB�ʚ�&��^�Q�dzc��I�|���8�8�� ���,���X�"MG=��-&��.�p���y��C2%z�,FV�*��C5�����)i.?���d��iݥ��F&��� ��D������Q{��\tzc5�NK�����]-ɯ����[��<�6tܢ�_�"?|� H��ŇK�ZW.�:������!� m}d;����I 4ͪީ( 4"��a�/o^�@]�d��ݝ����Dw�rD=������f �S%�و�g�7�l������a��l��<�F,��0CT>ݒE |�/ɳ��`�p�1�� B�|7)\+I��g��(=gt� �4��H������4�XL�st�'D�~��@�}�!���zs��M*�_7f�-d���=A�3���H!] ���X��h+�:8�tl=YЊ����/��u�oUQk9-�3'�Ak���> ���'b���� �U= $�w츿���o��\�)�� g�PH!^C�V��Iצ.�[S�y��MT[����C��l��se�ڣ��������˴� l�g�o?�l�@NO��,�y)�tٽښ���6��G)N-�m$O�����&ju��)�_��yn�����])$Ĺ�~�C�������6�!�6HP�7�d��^gq������?������ѳF P9��M8��%i����*f��.����~�����>YL�x#�y�L�;d�몂.��m)l���>n5ݖ$��xd�IԮ�Y��KA^��]tI���f��4��%ܘ��VK=�n+N��Wtoz-:o��Q_�¼��}o�9#�����A��T( ��?���L7Kn���b�V)Ͳ�\H��ZB�M�R�gg��D���Y���n*�N��J�l���5�ܤ�"��TU +QB�j�7�7�A��m����ym�9� �m�)�M>I�����L*�ӯ��s@.ÝR"<�(�U(�D?o�ņ�������%�� -'���� /^"��d:�-�� � %8��)�!�?gD�Ca�?�q�!��^q���I' $�,���M�\>�PW�u��%[w�@նZ���Ȕ ��8 �y��l�T�㟺�"��������uO�MD�Wr�*p��%_����,O��u����ћ)���VM_SJ� (��4��5w%t6���q��Du���Ǧ���^Ɛ� ��&���uG4;�Қ�a��8՚��γyb��[]}�'��� �C�n��}�<!�Y�+G�����[s��j��1��(�;�(�2g��:e:�e �f��`� � H���Tga�۠�Sd��)� � �N%tE��vٞ�?w��nF��;��I�Q�?��}F���~|YpQ�Ϙ��ʶ�I�sB:%n(�)�ݬ`i�Ĕ�4��*�zJ�qcCiw��G/���-� PN���~��u�*�����z>�d���c}����B� ���l,���pX �y��&,�U��(��I]���s��~���jp(4����H�gdZj���1����M��w2�lLb��pǃS�П�Kj!TV�\�~^�,q 9E:���OP麦�|.�@��VІ��#�4�BV�h|�T�s/��x�(��/� f&�I[\�q�����(���~�:���� E�!� B�s5���愅�4߇w��W=q����[�I�t�4`u�.�j���_2����!���O�<��C/��59��L�ۛd�����$�� ���q̜½��H9=��=�7(��99���H��}�4?�\�.�/xJ�.��#���b������o%3�
Static task
static1
Behavioral task
behavioral1
Sample
31cbdcdb540d6bc6fbc616c288f6f7ad7c74fe74eff55a135dafc31853b76126.exe
Resource
win7-20240704-en
General
-
Target
31cbdcdb540d6bc6fbc616c288f6f7ad7c74fe74eff55a135dafc31853b76126.exe
-
Size
2.4MB
-
MD5
de1d8c161d81ba79c888fef77c75db93
-
SHA1
55e3b5e658d41d98779214afb48d34c66bf17346
-
SHA256
31cbdcdb540d6bc6fbc616c288f6f7ad7c74fe74eff55a135dafc31853b76126
-
SHA512
4d243246e4476555a4b018d2df63ae93da8c64096523c8f8b20ba616b0dec97c21e4bed7dced51da50c0908ad3da6b882b11de6d668b71852f2290850a6810ea
-
SSDEEP
49152:vPiQkQzZS8gLMKRldUs2oubV45E0DILOwn191hp/bGiW7Vsf5NB4n/FcnqbLi9f:z59XEM4dUlouh0EgIfTs37V89YFcnqbY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31cbdcdb540d6bc6fbc616c288f6f7ad7c74fe74eff55a135dafc31853b76126.exe
Files
-
31cbdcdb540d6bc6fbc616c288f6f7ad7c74fe74eff55a135dafc31853b76126.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE