io���� �σ;���,3�x�C?4Q�f�����(� O�W�|-m�oL��#�ax����} ����U K� �e�,Xfi�OQ���C�7+`Œک�i�����;E.���� ����C�w-�� 'D�4��zr���ĉA�'q�������eܣ����|�3���W�{�:"r��i\B�,�@�}�e^�M�t�ݞ?�,��PP[��#�=gz��R�[,8{�!�+ΰ�_1s��Gz��9�ǙXA!���E?�̣ �0�����������?ϖ�9y�V�'(e�-�3���ǒf�`],�����P D?�i]1l�j{����ɧ�Ѿ*?���{�y�?v�^l)6��I��&5����Ҙ��[��� l���G�A���i1���C0\zHY_"p�h���<�x͆�E P}*b5%��Oׯb�������j ����Ug��[X�i{�k�au./p!��$��y|#�����M�n��=cC'��ڻ"N���1M��L_f�h.�82����f�g� ��0�2oش����ң�jCK�z�K�UeAtȫbя|c$�;oG����r��k�9K,�'���<�G��o��$p�ܞC�:�g����7�&����� H6$��W~��d/�"��$���,���W�i�P/ �ݝD�Qh:\��Re��ݦ��˾Qj ���8�fD��Fo����6�/���q,�]&ߐh7�:L��W��5}# ��(ٜe��~MC�����4H��f�U��-@6C��, ��[C6_�u��F��Vi}��ҩQ0Y�ZW�h�({1���o��(ZШ��0q�G�`�.��m6{�1����6r� 3�_e��:���B�OQsg�������~�5�&�r>���W��#D��q\�Ђ��~���oҁ���'Z�*b��/��!�I��G?�닟F�S8��R�F����I�+�N�Lm��nQ�@ЗH[���A)�Գ{l�&鍺����:GމV�����~�5���OS9;I��Y�:Tki5}��q5:{L" /�G��/%�g1 6����Rc�9"��p^[z����;دO$�5e n? d�!�j���J��������S5ŀ���~6���D��Bz��l���l��;�]�34���j�U���Fb��/��t?��E���i�.Tబx"��D� �Hlf$�&�� ��;�����֖��2��W��*>��4^;J �=*�p0�h�oxy�]ڌOO�k�� �W���eq��(ͥJ���ڴ1�x����8���Q���Eq�p*(sPIe�����L�� ~`j9��X����m1bgF���8�ʲ�����I�;~�my��v��������y�v�*��(��]B�@�9���v��C�����o� ��6�8)��*�Z��۹K7��J���[(H�U��z�[@Yu�w�r X �kr�L]̌���V��Þ�(��8~��o��[���0��pL��R�jEp^��}�y$-�G�C�6~�W�A�Ә�՝�,4z:��Y���~j��<�`2%M�{+{�b˛2(��s5�nk6�Z�J9���g�N�ӡ���.g���T��&|���/]��*f*��;���+��ω ����vJ>`�>æ�p5F�|�� ��j�Xu*����U�=��&L��Ʌ�߃����U[�ڪ�1�ʷ]u�QX: ���Fy����T3U����ѿݢC 0[��<-���$%\���ڐ���G;>(Ƅ?��� �@Ń����B��S�`>�?���t��|�-��0�B����5ևU{�ZC�`��l7�U����I<�W��j�v0�ӯ���n>����>Q\'%=��_��<���A�g�X��(o�{�dA�\k���,ɏ<�4���jV�5����e�rvPq���n�y�@�I,����O�!wؾrEJ&wz���_�5q��m�s?W�j�� �i� ����q3��\�aAqb���_Q)Y���P�K�RiEk�9[Z �7�@f%8���@�����46J�t� ����9����`��B.�����3��ޮ����{$����p��G�q��a7>�"�Fza�5�b��a+��Aui7��1��)B���43��>��kc@�7�?7[�~ 8��;z���_X�f�T��/�Db��R+�4��ń�_7�-b��F��+��f����"9�h�y.?��7�h�����V�ܭ;>���7�f�f嗪Ah!O���)n,��c� Ć���gOf�t��3æ�Ѱ�(���$��h�;w �G2Z&������4\�$s�+_�Q��(g�S���>�D�hQ�m��9�J�+hz:yKf?y���as�����nK���{�D���4p��͝�/���j52� �{���m>Ań�7��BdEʀJKUJ� 6�/y4�u{˲�#[wn��vo���s �������#�,\��ʭ�\m EtJ�0�N����)0�,��IH���F����(��^D�Q���"[}]�pu���? �`s_/g��oJ��{@�]]�Ó|7j$�%tPF8���]�4��H��Uh.��P�Md.���!�Y%��Fd�Y��!���6�frEA�p�Q� A�aeݙN�;�믙��h����?y���獃���s����3Ԛ9W�SHd�)B�ɃV��5�O��f�k�3��=���ƻ���3��9��7���r�7�F%�5 ��/�Ώ�PL};n�,�K�&�H��Qܱ�Գ>]f�ޡ��=Y���{*ڄ-d�9}���Y���c.��Df�Q:&&_���o"�Ĵ&�n�tjJ�s\������VՁ�'�kT�c���g��8R�/�`~.�� ��}�Ƿ���� �/��(�6�ǯ�~�eVW���OG�����$h���u�1O�rc�Ϭ�;�����2{(����'G5V�nO�I���N�E6Wty��� vbl1��.�k0�����o$m��\���~FcN�ƆC{�6�r�!�m��p/NQ�Z�`�v���ˊ���h���<|=����|�����(}A��z������>���Q��P�����Hs�A�b)�I�父��^¡��i8Ѧ��E��
Static task
static1
Behavioral task
behavioral1
Sample
d64aab9e3aa0e3f707bfff0b1179a3d4f1bf4e7335c922a85181f8b3c05e7bd5.exe
Resource
win7-20240705-en
General
-
Target
d64aab9e3aa0e3f707bfff0b1179a3d4f1bf4e7335c922a85181f8b3c05e7bd5.exe
-
Size
2.4MB
-
MD5
16bf3fec4a6dc3fd98a032b500c5b3de
-
SHA1
299a6b404e7eeecc50cb6fe526e37f9c2b970ef0
-
SHA256
d64aab9e3aa0e3f707bfff0b1179a3d4f1bf4e7335c922a85181f8b3c05e7bd5
-
SHA512
4fbbc77b2f3888727c6f57d64a237c4cb70843473b5d955c35e63b679ede7dcb2edaf4887f8b6668238b1ebccf7959993e7d383133a7da1b4169517bc772de07
-
SSDEEP
49152:d+8uRWQ9TONtSKsZfxA3fIlgzXzJVWVF86B52/LHWv15i8prAB3SBwZVT8:DOnCXzXzJc86+/azZQCBwZV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d64aab9e3aa0e3f707bfff0b1179a3d4f1bf4e7335c922a85181f8b3c05e7bd5.exe
Files
-
d64aab9e3aa0e3f707bfff0b1179a3d4f1bf4e7335c922a85181f8b3c05e7bd5.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE