?�]Vy��/��0������!nw��pͳ�ic�e%_vG���e���a�b���fl�,����Ip�15�W���ݖ�@�:����7�� ���}�(���*�έ�V�� E�� �a`5w |�%!��y�T۟�� � 3���{M��<]�=��9]���v�U�B��(����!Sr� �E�؋��:1+TH����o�~À��h�Tz��D2\*N�o:��(}F����r�s'�sEM����]V��{�U��Vx~�����.�O�|�\�E��`"v�+�pix�����������`\�v'V���}E�ɍ�:���U'������H�؍�@����0�Ȇ0�6]2Z���+�0c��2�0�'\��&�H�}��������dt��`�/ sV$�Q>15�) ��W$�[�.&��>܅ܴ���[3Ki�i3Ч��GaL۟���������tP�>����y�2�]q��[Ku���k� ��*����T�u6�����>/� cVWk�M;B�E��)O؎�n4Nd��х���]��AJi�^]�,�������U7�!Ax�!c�.�T��&-a��@$�M��F��j�|3l�z=�JʒI�Ө[��F�����1!����"��Z��X�U�a��'�_�����;>o= ���i�y�����������(�K�Нk3]}��"���8>�Z���t[- ��sS�P� KKy��d:!��>u�� �nV�f����/���ˬ46�N�r����E���j����1��� ����G�o%^Cdp���1�Cf�>��&C?�-"%l��0��M ��V��2J�:F�/6�t%ځt�t�ؿfE��T���Ύ:����^EU�N���90jC��|=�gX�q�壝s���cG��&s�s�ezh� {D����;�F8�i��=A��4>��K��,8=^��A�P�Ӗt�G6�1 Q~���彠_�0���ퟬo�p/I����g��X�K��#��+M������������B�h�h!0O�/R�ڟ��0�>�qc+6�C1.&/y�k���~�5���7~�&Uv������ki�h�r2)|s�v�)AV�`���bF(���3C�&��v�ғ�X}��"��! Y�@��w����b����\��.�t1�5�Ixf'�FΨ�vc���H`�ɐx)�Z?��ބwE����k����;�$��ߣ���X�^�m�O��2����Շ6�=�v%>�\����X5��ܤ��-G��F8�Xy�O��uc���>˝�A�v�=��x��z�P���=��xwG}����i���:7���o&��=#;���n�#_�.�����F�� ���pj:��-ƍ��n�� ���- oz���������Y:��-8LY���xߢ�s�0�X��po{��|��>���6H���R�h;���M$�p8:S�����D\�����H���H��H��U�!]��t9ڟ�/Bo���̱�����Eq��T,������w���j��/s���x��Fzy�'�h�1���L��YVv�l�M���zo����"�����~�OǬ���_�[d%��3�r�����ۗQ���t�gg����ꌷ� U���BŽ��nA��P��V�R�Y�hpqY�baA�vi$�77jP��*��G���y�Y+Q���� z���y9�}�ȰI��DH�6Ej�-!�2�s�b�̽��d#�����L��Rt@*F�lA f�-�h�A?��+���R�4���.`�5&��ʝgGig�Q3�㰩����foݞ��tav��~wX���( ʴVd�����X݆��U�KG���D#x�d= ��Π�k#�}wG����%�p/��$������m8Z���l�O�/�=zF�X5���c~�HSn�=��zH8��X�k��S0� �q6���.��7�d��j�XӥK�!�wۅ���%�˧��]_����k&O�ܲ�S���NgM6 ��<$_�$k1a��������Nw�H�,W(*Á��rS8������wz� %�&�\��x�y��tr�bw&�~)-�"h���A0�\XSڟ�HBU���i��\�Nz�{�f��/�dD��Y�HZAw[��@��-�Q(�~X�����?TR?%��Ýx�.�Y\˽^B��-[X�H@pM�E2�97H��Z/��� �O���ʌ�1��mH�~�gf�ȥ?�S.��gFT�kF�!f}xkJb'��Ҹ/��-�M��ɳ1� é���\J8���I�"��^��#([�N���*B�Q�"bn���SƋk�� "жP��(�"Α���h��__̉��"bw�V����P�=���5a����/��D͎yʞ��44C�x"?����z��Z�w����%�5�0+QleOq]$�� Tp��9�MpzY��s�F�h�.��[9�[�ɑy��L%�Z3�Fk[��d^�wPۭ,����\*��/>��2%;�~�ff�����9W�& ds-1�oƺ���^�ʰ�_!����6VϘ������l��AP�!������6]���K*��2�y{_+�g�2y���_��P�������~�7fXj]8]�'�����$����A�4.�o�v_|�A����ݰ�?�f���y"���|h�g�+��|m����\��'��! �D7�O��.`�(Щv��Fx�J&v�{�?��o� |`X�xv�g��("�l�g+�����# R>����r꣮�E�Y.|���BQ���ªa��A�s7"z���0���� �1l�j�8��f�L�R�*A �k)c�<�)'D������[�\�~>R�W�W�WIU?g;���bռ����J�|<R�M� ��� DkRԂ�����c�쾼,�����)��#�T����� ӈ�R ��C�uJq�zX�r��:b ma1V0s"��:�#�� �1��b�B��W� L��!����*Tj����H+�{^��*�iVCi�����<,څ�-������r�Z+��d�Hy���X �u�x�34uY�>�4���H\�`ݼ�����f��Y������4�" ��e)s�������h\"��=ܥ@����� ^m�M3���wR~@w
Static task
static1
Behavioral task
behavioral1
Sample
79f3c10b7e9924ce481bba06ca969f25.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
79f3c10b7e9924ce481bba06ca969f25.exe
Resource
win10v2004-20240704-en
General
-
Target
79f3c10b7e9924ce481bba06ca969f25.exe
-
Size
2.0MB
-
MD5
79f3c10b7e9924ce481bba06ca969f25
-
SHA1
af24c66626073fe8e1ea89296f1a2a29de79fcf4
-
SHA256
9894aa96932f55da3c02e4a728386ccf2e70c5c887ae50ff18bf5d63635201c8
-
SHA512
f182f1c8cd1db7e9475e49d2e95744fd7fe5c0304b5763b059b4c8e8d1bb4fb1a340f2d832ba0a047e442a0085bfec6ba7ea881e0a90fffe418d04f5b140c333
-
SSDEEP
49152:xw9AMPh+L1NgmhTlQBcTyHBx1dbIK3ynQP7io2WHOA:xpMJ+RNgmhgc0//33ynQPnZh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79f3c10b7e9924ce481bba06ca969f25.exe
Files
-
79f3c10b7e9924ce481bba06ca969f25.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE