A8�^���rT��yn�� s*j�Xa��P"c[��{���?H`gf!��ʿL�;���"��Ytz�z���bc��7�z�J��Y�_az�x>�w$ޝ8{Ϻ�b�n���w��cu+`n���*�캙4,�"5�qK�7H�U��]%s��j��.WP�\���=/��-�+����4�MF~���W����drM���"����&���|�2�:��Q��BķEBV%�[�vì��ȅ��y�[0*��V-|K�7J��B�xmU.J�R�����JOj:��&��B> ��4��6�!X�Ԅ���*�<���k�0pa�lqĝ���Cΐ�C��a��?^|��km��P$�P7֏� * �1���w1��g� ���$�=����}�!K;��x��} t�N�b��"+k��&� ݈M�sz�h �d*Q�ER����3��Ư��/$��FEɿ �۬|�F>�Q�~p��1�K��o�4G5��->�Cwd��s�����06����Q5���iH��lx�؆�[%�F6��jݓhz�� �z5#���]���Lf�m��pX�;�˦�Y���i���� �p���V�����ܥ��~�����5'4�&!���]B�Վ��ߝ��=� �'�<H�1��v�������������lZ��?/"�H]h�R��G��J���A�d��<X��OҞ��gu5���x�8}�p����t�Q�*�Ypx��v:��V;k�h�췪�s�x\��Ja���Q�%Ht&� J��}���P�ۊZo���"��}�TM�OTU�ϥAf��|��QO,�����(c��Kg�B@V�*7<4v��=�������2�����f9��s�~1�J�1rҨ1��&#?���#��ps�E��Mb%\_9�ّX�'�!� �zT�������.�Ɇ='����~�D<�n$DC�|���G���������b�m=o��<@��,��y�:�o�b�e!˓�T'�l]`��eO�4((Gs��@��W�t����!���P��U��地�T�lFJdl|9c�VX�R��9����<��k6�4c(�f"�xJM�_@����da��Hf V��?��I&���d���Nj�~3��_�l�_��h�t��~c��b��LX����[^�H�|�{�i���"�%�-<�X���3Nz�یa��F���O d�w�,{2Kؠ6�^G6eq�K�yۥԷ�H0��0��8�=�{�d��V�4_�拞�P���Ř����`O�]D�Xg���v>��sl`b����;�V� ,�r4ۍ����s[�D����@� ai��r:R Bk�]�1E:Z�B̀`��U�L�钞Z���!�I�p�P�~8 �ch�&��"��$�s��[I9`"���̘�d,�)���j&(�ر�=�h!��f��ڗ�NA��EҚ�u�P�d6mS1����9���o�Sv��N1)ڠ��v��)2�/��7�FQ-��3�8����w�W��3SOq��X{��[��h�<%!����C��f��b�D��*q�����?������7,���e���D҅�}�ZRz�9�Pe k#�����IE���P��N7�27����h�� ��pn�&��������3,Q����=� ��m�����˹�e�@�`�\i��H����TfѶ�o�oVs��{���hw�̍��G^ηz����7<�t==m ��rP���z���R�-^+iV^�ٖq�U�E����9�\a`M�����8��S� �ʬ�1��䄥���f0�U���:���} X��� ��@ ��tCSi{.y�n-_N� S���6�Q+썜b%Ml�V5 ܈��榥s�O�e���9|&����ւ8�����J�z�LW�.�Bp:YN���,�vѧ0.�4�U���TI��s_�FZ/U] q�*�1e*.�ncdGL�n=3K�ʲʄ\0Ɠ�]��I_�5�xgc}��hM�� 6�����k�a��y�.yJ���{����,�Ԩ����JU�G���q���L��.a����:����#V����b��g�:2V�w��t�`��F&)β�H�'#�z����t_�]�*g"u���f.�}��<vc�:��*.+c�j��m�7�vB�n��<U����$p�Q�2�d�2�,Au.{�}��*xw=<K�;j��ɿ+�k3��Р�@CN�Ww�7��H-�W� '����#K74�ůM��x3�M����s�����6�q�OeK��Me�iuI��ou��G�҄���#�FeJF�f�E&-��E�u��;_�!�L�`�M&�EoV����TT��G9o�4k��W�n�����2"��}~L��� ��40 �l���d�� �+����]�� ^�q�7�b��������'hsMGu�n0��֘���Aڔ] U�A�g� ^Uf���|�6�OY�?з���l�Фc�̈́6S �cA�����o��s�5k��쯦�`N��=� KR��� $i��H���7#�Q��, �\���x�Wz@�rM�+L�k��G�{�<���ņ���F�Ƒ^��K2 /�������0W���^&���=={�NЮ�e��v!��W��=�M����뾯N�����H�G��:��md�>�3��}ǿ�l_HCS� ���䇭���yv�t��>�G���x�g�7k �����=D`�;�t؛%��7�urB�K2+W���{x:������y�z3��mK˘g���Y5����5t�- lͫ�-V~�r�H������տb�a���Ơp�&���Gz|�B�Bq��e�V;쥦e��%c���x�: 9ԏ:�p���,UdyD���~'���� §�=5in����\+�M)I7�,.�Y���b�o�9^Hw�F��_y�H:1���"�A�����Wu�����@?F6Y�G!OcdZ�t9Q���6(p����1��x���J���Ⱦ��Bo �Z�y���:Z��&�$�C����{ �>�m�}H%ʆ�����䢳�|Hp{8�� �W�^�ϰ���?i�M�u)(pVEt�-i!�� �?�w�QY�l�G���'��J��(�ײ�;��bM��ف��S[@���7��ΰ�
Static task
static1
Behavioral task
behavioral1
Sample
230280a480e2b4301c9beed0e5519c1f72f8c5a2d4193b5f69d7a02f6884bb16.exe
Resource
win7-20240704-en
General
-
Target
230280a480e2b4301c9beed0e5519c1f72f8c5a2d4193b5f69d7a02f6884bb16.exe
-
Size
2.4MB
-
MD5
fdaa4171e6b15af5628a055bc7a7bca1
-
SHA1
0f69f54846e26167777e3d56939adc72ddcb545c
-
SHA256
230280a480e2b4301c9beed0e5519c1f72f8c5a2d4193b5f69d7a02f6884bb16
-
SHA512
2ef1076ab306bbd90cc1011c60ae8aab8f626942e3ea2a53e755b60ce1f3865d88302d02395271ee184f3f787baa8b7febd3e9473351932c504f5c6f39185d7f
-
SSDEEP
49152:JWnoPATF3ed8uTO9u0boi9qD9Bt+wMw3tQKahDlZi5HMc:0o8U0bo80BtJQFNHWsc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 230280a480e2b4301c9beed0e5519c1f72f8c5a2d4193b5f69d7a02f6884bb16.exe
Files
-
230280a480e2b4301c9beed0e5519c1f72f8c5a2d4193b5f69d7a02f6884bb16.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE