���vN�����-����RR������YF )*[c��BePW,��P"�H��������)��#Y��`m>������ Rw� ��Ơc^I;��yl�>�f�?bbS7=V�;̷٘7%/-� �-���<�����*ޣ��8����ė��;9��9J�Y�G�VI��T����n��]����`��k��]�/��Չe���!]�Y���g*$�r&�y��5L��r�z�4Bݶ�����_M�yK�}SI�����*� �?��6IȢ�jj� .te�[�rb@����h<�nZ��G��TVҥ�W~���$���^pm �R�� i��,O�=2�5�˘�hiN��������h������_�������l:{l�|m��:~��2����L�F��59~�;U��k��&T�t^�ϧ�KKW��Zɟ}���I��'�� ��3���.���:-^�:�8�$�$���]�#t$_-�A�ճ���OV4�lB �����F��̥��X�SR`�Bi�J2�1�EY�:�]p�W�s�8�~�_�[���/1�Ea�Ӆ�ڦ��.Q��6ޫZHV��/[DJ���W�u?���N3�a.ؘ&a��/i��?��L��֙!��l2�']�a��x�R�92�!���� �o�1%�Y�!T�z�����*�n8,z;2����(?M�H(X���E$s'�}f�=ݓٔJW2�SNv��[����r��r�R�bc;��vJ��)$.�xmdޮK�������e-�����VN#E�0TT6i��>����W��ǒ�Ih�j���?f5����W�N�*O �Y��eO�w�:8�S�f��+|�Z�(�q/��&f�f��PW��������|l�,L7T��'����� �t]=��t$wօXxE��7�V���e����GI�ܢ���ݼ�����e��l��e���H��I�x8.-;w���eze6�Ǜ檜k���������B�����hr�������B�W{R+8DC�y�ЃըQM6BrW���X.�Є��,�S�y�q�����Y%`��ډ�*��|!��B�zn���{� P��v��(���uH+��KI���C�Y���A�!c���I�6> x}��AΆ.����k(���^n���4��A&�����*�o҉L}�ʢ4B3$9�X4�G;r����yW�[�<T�Z��H�@��dlV���m{��~�d��Vd�>��۽�T�ʪ�{��l���Md�39,b]����M#��y�����q/%hS��^%�����<^��Z�1�^�S���[���y�E=#gNm�1$� ����Xm4��l�??˥I��-�&ܲ�������Z�y4>���!�l���b����quHE�±��m���q�]+��������5�'��e�������h[����)��}ǐ7�ĕ�>�r<h����<�ᣓ��y�UH� �Z{�.�F�[T�E0}��c�R�c覟_��.��TL�4M���{ZRtT�J���7�ʟRr&����ꎓ��Ï"����^���뷋���z_aIόj�N8��rL�tч�yF������:��������Ձ��@A?y��%Vʱ����&5�}!Z��[�Z#y���]LDޮ7�r�#�U�������=��*��:��]�����u_V����`�,yJ���Onq���S�8�#� �8>�y��T$�$�I�}���4�Ӧ�� (<�P:~��D����y� @�,��گA��+���>>u��N�'s���k]}�ȚM��Z"��<9�$��KoFm�I"�NI�sb��&��W�����L�H�[F�2f~�/�Q���,Myu��'����t�A�����D��#�WWˎx�ۑ:V�]�%�h,����∀K� ��+m>���kR�@�y(0�)�z�8J؈�;T�y�C,=pa��г�XP��%��p#!�"�dϲ�1�+*���ЋO�^�:�t�]%�� ���������:q��D����\I�����4�ҙO�'?+�Ӭ|�M���D�@�<�7�Z�(_K-U�i�����A��I��c�1*�a�^E�܁����Ō'�q�e}kgw��q ��8�86M��Oٺ��0B(�WNHc�/097U �:P"��l1b�:`����$:���IضS1`�atS �j�P������s$֢�>A����f�K��wo���/a�DZ�WC�1��ڵ��es�:d@l�jǕ��x���q\��X��\�b-X�q"65 �m�v�Z<ܻCa�o��1@��E�N���d��5n!��$��8�-�,c}��g�'�2�gB�`��\M{�;�N|��O�Bu:'���f���<=X��{�E8$������#�o��x�����ɭ�����a9n�Q��܈ 7ӧ݉���B�N�YDi(M���~(.���� �j���Z!^�87��]���L YG�b�����$^"F�^$�ʄG|g�Y� �A\B�����xOw&�~{P��7�HC��q�63��9���[��Z'-FC:�=��ڑ�w~�5gou��� �.Ƽ��%:���o<C<��8|� =[kpr��:���f��Z��.>�3}�3)O�&_��7��K�E�N<�<Y��눏�"�}��k�� <P���*g�����.J�����g�V�`�a@��Xp�_K��XOA���FR�xW�kȷ����G24�l�D(xlM�(�GH/$�s0�ŃqJ<`��q*�XJ�Z��I�VV?x���:���^i w�<�z��hx*�c�H}�%l���wіM�`:|H�e�uo�^A}�k(/��� �#P���4��Ӄ�h�M��uzy������}9�=�c���GЏ^�>��de��6S����Б����-6��S3�7�=��a�b�)"��9�-o��V=:� 6�%p�R~ȫ��/d��^�����4@���j�<�|OK?�����4ˢ2���6����f�M�T[��<r��Fa��.i��/�|˳ݶz�>p��d��V�@c��?�Ny��}��(�Z/��W������������6�^�ۍ�� ���3�1�e�,���͚l�k�o�)#A!�\i���Q�w��������_2k��f�\�N�s�H�B���^��K�GT� �N2����c���9P�'@�n}<���b�����b�����������J��; �#]��nM�W��׆��B�}J��qd�^�*�/�O�M���mfK��r����H�|���a��7�+l�s�5 ]�,-ï�2+��J����+���'��3"�xM���b����/̃"�MPJ�6w��j�MY����+ǫU��؆k��?�h!N|�d��~��9�����9���P��vȢ �P>n�\M��Σs9�wq�Y�,���f�Z&Lb]~�-e!�@=�����l ��苒ٿ�[3�p_:�?72s�m&�-���,ւՃ�H
Static task
static1
Behavioral task
behavioral1
Sample
ce21a22b3d7427ebb8a02ad8fc8df36c07005afc359a5402a16a66862d91fc14.exe
Resource
win7-20240705-en
General
-
Target
ce21a22b3d7427ebb8a02ad8fc8df36c07005afc359a5402a16a66862d91fc14.exe
-
Size
2.4MB
-
MD5
34b192cdba8a579bf39af4aa49e7fa75
-
SHA1
cb242be6f7e91486164e2a2809b8f7d3cc3f3ead
-
SHA256
ce21a22b3d7427ebb8a02ad8fc8df36c07005afc359a5402a16a66862d91fc14
-
SHA512
9ba99d2d164baaab331a51afc5c8a33eecea5d09014924a3572d99cb3e06da9ff2b9013a469e5775eceb3f42d5d052711010844f11573cf5d2b65c8d9edbae5c
-
SSDEEP
49152:Qk1OSXD3iVJu7j8IlbGzSPRan72jRO78wKo4LKQ4lQpZ6WkackdD:vuu7gIwbQOvX4LKlQpPjck
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce21a22b3d7427ebb8a02ad8fc8df36c07005afc359a5402a16a66862d91fc14.exe
Files
-
ce21a22b3d7427ebb8a02ad8fc8df36c07005afc359a5402a16a66862d91fc14.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE