�+��U=Y�.��.;{!Rt^J>�r�_�ԉ���z�?1-��Ǒ2w?``�nd4�����ɏTa�.v�g���X�ܷh��9*��ˋJ|����1\A5�u0�gUЌ�y�)��r4�Ot� bB\`����=� m��B��C���&���Βk��g�':�|��ꤻm�v�P�dn?�W ���qXl�6�<D�m��H�.��܌���O�N����GÞf����<=`�9k�����,k�ʚ��,�Hij��]-:b�)_�Nr���ɒ�7j/��ը�C����p�q�v��zqow\�I��� 4��rﺩ/�jK�yݏ9h7�Crl\���hMH9Ȱ��pp�ED��!�`�0 q�䆤���J���0J:�#��CZ���U� 6������LT��C���۾�C7# $@�#R�-l5G��ˁ����pN|��J:��~}��7O]�Gr�� 0��`:?X���e���� ��S�����˼�, u��4}�n7ABf�%c -�n��� p-�$�6@��4���^�ˉ�s�y�����:|<*6K=��z�&����e���K�lmIS�����w��̭>���}�JBe�ӘD,�Z�wR��Ǒ��=��.����\��@��i%i�+ZԴz���(-�A:��Ų�������d�W��9Pb#w0Rl^b������&P�O!���O�'~.wf�p�5�X�U������d$�}YF����(��lH �� C��1�%�kwq*{>O hو�i���KP��k�A�VݸOւ�a�Pq��?�������\DL[`�ט��up� ��5���x������H���\���=:��(������"p,���D�A���ɞ���1�M�>njzT����P7x��9ziP �+������=POL�'�c3IO�`�/*8d���\��Q~��V���VBu������Ldc�<�k9����A�b�;mP�<$5�l�������y����>��N��lW��ӖUVH7LŤ��"+���-�b�7-��K>�������*aQ]R����z��pT��.9oqJWq�N(B�����S��UO�i��< �Ce�/u0r���n�g�c�u�y�":L���E�u��Fm;��*�թ�L ̒��VZΨZXk"�8`�������>Z�a,ik��� �ez̧�U��ndC����U�W~��(��L�r��� ���ȡ��b��as�1�q�i�O�� ����>�a���2��Ba�Lu�T�£�������!Z�%����(��w��{4D�̋[�j��2�>�|f�a*|�J5��S[�Ĉ�oD�C#kAųH�N�l��b�h^<Ꙟ�=�21��2h�=iI�ō�c#�;�P�V7�k��`3\W� |�VI�g�� LJ��/�����&�+=9�� ���*&�xGS�����p��� �(�sh:�ho�����x=���]5��S���5�Ьja�<ZxГ��?�-���9�T����̪�ꫛu���f���|��$byV�j��"��E\�?�z�_1��){��X��_ѳ���y c���TX���N�W�.)S�%%Aǐ#����Y�����a�'��Qz���j���}sEB-�@_���$��B��&E�YGU;�"��f��A�7à�A+��z,O��dz� kn�������4\�@�&$Z��ij j�#��@�ٻ*���ڎ�u�*6�e�[=����\���-�(3;�+��9JU�y�a^���������Tj���E~��x�d&��=wfq�@0�����MB�Ӫ� �D�D4߯F�*�8���� s��G�?�廩Vg?Z�.�#�q�;-S�!� �4W,��{~F�i���u(�}H����d�_Si�����m�۟K�p��Ώ�g�.���k[gS S��T<06a� � Cq���HnƯ�+$l�cRz������hҕ���2I�ut���B,����I�9��aO}�����j����<�j��8�6A)��!-%kx�H}dR��4_����@SnSU��>�D"���ȟk�>����9)�܋pj'����4V��H�Q(BN-� s��g�IJMМ�Zff�*�𰟳+6�|-S����������7��Px-݇��C����v�-ڞ,P�o0_������۹��} i �fc���} i ��?��Tt7��oyi�����S\��r(Y���$�-�~���zҶH�)UOb�H�x��o�9J�}β>B���,��Rvi���>u�z��@1G] Kd�����gzH(YX��3����t����@�ω��w�,]�;thᄻͪ�V��8��K�@�jhHW�W:����M�,����e�rnM,"�k��m绻��`?ڽa�L�-������:�'�E��!S��d�������ʕ���Z\�꩹���d�W���8�D>�$�s5o%z#Cǁ8�O.���p��?8Ӌ�Q�uij4��=��3q6팬�mD�aK"���[۶�7y�tכf�,]5A(�*��% ��3&��onȏ��&�Q�� �ŕ�p�����w�g���H�m �9��Cx6�v�d'!ֆ���������5�|��x��v��:�E$����Ϙ��o��FrQA�[���LM��m�ì/���S!��T��ӊ��v9��6�R�c�p����Y ��)q��Zt�ui��ى'�ǐ噠V�g�Q���K��{�%�7!˄3yj~Y|X� Z�S� �Iz�����C�[���b8F�3�j5�x>��4u<���ې��cMN��.�J�ا�,���<4v:;,�>Q����|)����l@_`�¸�� ���A���I�ʵ�Q.�������]lM���� m�Z���d����~��ƀ��� a��T��<S��S�}�V��[�z�����칗]k�۔̂H;���B�������[���vE�F�X���D H߉y+��B�\F���9��h����P���E ��L�G��ὪC�Vϗ�S|�����ӽ^�|_b�'���Ʉ�����@hLhf|>Ɏ}�F�����6ݺ��Mಗ$����0Xxi��Y��OK���E�5�����c�\~+q�Z�m���"�ONz!���K�_��V;��5Y2*��T�t��3�@1H�o��k�-/��=h�=�T��:65�\J%L;�2�� ڋ���4��s{��<W,��lk�����6e̜���-�KUK���q ����YY�>�Xt�ŋ=��Br?���,���C���ü`H�I�(fe���aB�Iޥ4�̀�@�dk����s?!�� M�q_���e��rWlvֆ\�[5�1��ML�=�:b!eK^��"� �<�=��'�!f0�cjn�ȿz:�bE+���<P>W��by%l�ڪ��&n�]��f_�Yj<>�f�g3�����+;����
Static task
static1
Behavioral task
behavioral1
Sample
013fcdcecfed10f8e5f88ae679e3d7d9a700ba211fa90f139e735fae86a8fa6e.exe
Resource
win7-20240704-en
General
-
Target
013fcdcecfed10f8e5f88ae679e3d7d9a700ba211fa90f139e735fae86a8fa6e
-
Size
2.4MB
-
MD5
47666448117f6a262c1aa15afe3c6c2d
-
SHA1
2ee0f0d99e980f664699d3b190ff9d9672231018
-
SHA256
013fcdcecfed10f8e5f88ae679e3d7d9a700ba211fa90f139e735fae86a8fa6e
-
SHA512
2be536fc70690cc3964da031297acea546a53922c0d7c95d499192f5476371cdbbd64fe62a543ed705b7cc97da3c288c09bf755ce81ca75176e20382f476145a
-
SSDEEP
49152:9yVXV2cfMVfX1uctt1Gg6hXrG6Gy98wRa2GsvXEgMV8uwMJ2Q/xQ:EXWFluiLmiK8wRSVlwMJ2KxQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 013fcdcecfed10f8e5f88ae679e3d7d9a700ba211fa90f139e735fae86a8fa6e
Files
-
013fcdcecfed10f8e5f88ae679e3d7d9a700ba211fa90f139e735fae86a8fa6e.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE