������E� �}J�(.P:�e&Co�� ���Q��K���ə wg<z�l�D��K��q���w���Z��O��7��xק��E'����d�����aK1@����R��-�p���1f�}������K࿕A�~����)��OK ��u+4�'��ĥ��4U��x��c���/v$��z����b�bLn�[nV�g���1�2d��Լ�أU\PLp��US0�T a�6�|,�{��7�H���bi�c�КwM�83DY���#ϏnӶ��.�M)����y����^������;<�����UQd��k����(�㗙���V0�Ag�d��+'�+�P��$�Pm"7mw���10�m��O�O;�, >2M�Α*p 3QA��ݍ�G�-/<[G��Jr����g���9_�E���Z|��1/mt$�����N����ҎF�Q��=w���x��]�,�8����V��Ո�Q�K�E@me2��zB/�q�������@�O4E��m���9@g�*��@X�7Kܖ֊i�����<���)F3�ۈ� ��hqV�#hh�h�(8qT0�7�-��P��]���!$���\2���ko_2��4#�� ����O�I�0co_WU�j9����S�i0��{s�]��'��oR͗��S��1�^b1�qlD��W��}��A.{Ul���T�,;יuIM���8��'?g3$�AL_K����bU�������n�v�>�v���&n�s4n-�9���� ӆ��j!yk: �(��8�!K���u����~*�6t�7o^1>Ds�.��M���=��3\QJ����"�Y(����e=�rK�?��>�����oczJ��}�L��IӔ'��d�p��J]�� �I��̄D�� 9g���]�{� ��!�w~��:��!cl`phaRM�3d%�S���9J1ޫ�� ���'����CK}�-��Дr����{`��r��Z�W�m���oL-���f%��6��*������3�eP�NՠD�Kc2����{p>4H9�yG����;ã���<�<��H��*G� ��Υ���{$'�p��r,o���`f��!K�L U#�wݒ"#�vv�LOT����D"��d����V�Ƕ�$�K�!B�*��/�_.� ;�1�0�z+���ک##�[7������v�{�0Oα�iW2ʑ-�Rr�ui�%Kd¦��ȳ�<�)a�NBĴ���[:�˯{��!3=��z�_�+ ��6|FwQ�d�W��a8F�1�W}��zW?E�\��w�NL���U�/��FQ7~�C8���̲)IS1"l���mɥiHf����<5}v�zu���2��]��f��_/�2^�(x�Ԡ)��]�iY�\�v1��զ"��3(Â[��)�B���]���*!5�R�"%zi .o~T�c�$},�b^�^;i���r�.ʬ Q��L7���/j1!Be�}lkG+�}�`���4��I�=-������e��s��4������ۭbK��l��O�W�?*J4쯢@�|k�� w�_rö�xd�Y���~�V��#� ��[ؖ � z�|{��ѽ\����PH�S�p]�y��U���؊m�]�ߨ�x<���K� <���M�� ��(ј{u�}0o��I�k>� o9F�0Uy�p�)����y�1�7��@���\�����-W�e�j��!�î.l����ݪ�KA��)`�wM�N���W7�R���~��=���!TH>���i�{�e(`JͬLs�b�B�^{�c�87_ ���*?�O�?�B�gՒ��Xj!!ST5B.��O��J?�`�;����(�LZ_F(�9ZX7�����M}��fvJF^����P��O�B��<ǭy�s&E'�$�~Q�Qv���k����g[�-�P��p^�l˕���y�����f��A G���Q�Cr��T�n���"�|�'B����Y] u�3�Bb�0*�Œ6��j�X�Z���ziYz���?Zuo��#Q �鐫��leM{���J������gf`? !��e0�d��]T�����Umf8<<�ە~K�ƹi������cMVy�P'$��)Ke��Z\v=���T�R���2`/v�����)C�~k�����x%���ޡ���A��_�����a��5���s�����4[�2�IJ�3�E]��>��́r��L˽ͨ{���3BZ���?Ĥ��I�����V^[���Z�*+F�2f !`̷%�2q�]ٓlth��,x_(�0�ɱpa�[ޅ03͠nl.����_��(�at�Pʊ�7ϙK�>��s "� �ύu�;�`�~Ӣ_�_��v^ �~x*�s�2�u�m�`��G�o� '�S�t�%&��/c����e���ܼ��]xd����4K��W�YY�8�� ᭈ�N�6�⅘k��eQU+n�%���@��"'��W�28�B���X^x�$P��Yp7D�m=iS㵪�[�Yi�G@�%*�2JW���%p瘅���8���`�'�Q]ü7��~yS��r�����u�hm���Yp�K�s��L�JC���0�{z5� �����v��ɹ���-�0��������y�˹zn�(F���P�rż�`��?�l���f ��|d2�����'Fb[��N���6:��Q0��P�e\L��n���J_t�Jʗ�$���{g�.ڄȰ����߄<YtQ5*���zki:���`v��m�|S��q�g��A��p��gV�l( @=�l ��ZSw6{+�8�!*&�ݙ�%�hᄹ��w����-8!o�Տ9�ay�'����vf�h5���%�[-��u1��-,lzRO��p���?V�~B �y��>W��B��9u��(Q��jo�}���`*�Z�t+�ֱ67h�L6�Wt>��&6�T�{2 %Q ����z6���Řlm������`}�\�� S37���u��z�m�y��9nѤ�.`/O��ߨ��Nd��t�:K~dA 䃩zs~[�N�3 �0r�Bo���w�x�ͣk�e�$z���Z���#XN$M!Wdn�R���X91r���f�ʦ�:�炫�����G�^�%W'P9�w�.u�\]����&z]�,}���Ԃ�?cu�ٗ����\ m�4k;:�J�-l6��J ����Ҏ2�#"T"(�s�<3(���xT�D�ti �^���oƻ�锁���X�Ѯ��(����*C��b����yj$�F� wu�)�h��[�4S��e@���)=� ��/x��k�{���Ϋ�<E�\='�f5kP�1]�VΪ�eL�������:i������g6�䅰��4�eq�Z�4�ѡ���E |F��;0�8���������u��J�.��E�7�e��ˁ�u �������0�N�$���rs�RW/+#P�B�:� P�z����i͡F:��F8>4�� �+:O���3` &�]}5��r7~=��w�Tm������[��h������\�$N:����9]��mk�5�FSQ� ��'�����j���t2����Ǟ~q�ԝ�8�G �R���!,�� �-|��|�j�G�T��xA09$$x�;��Qy�ۆ$l�PЧ��������!��e{J{�3G�����@W��h�O���"���o���6�� 2*̰~>������S�m�$A����;ۑ���o�e�O͇�!���������K��qX���?���+^��uM����l��Ŵ�Ȓ��j��XG6R;flb���\w�/ ��z_av�M*�C�>��P��e��)�kFF{)����}/~2�hr;
Static task
static1
Behavioral task
behavioral1
Sample
c5bd507d607a85292dbd26e9ef87924d525680eb08eaf489f5dabb46a15a8ce1.exe
Resource
win7-20240705-en
General
-
Target
c5bd507d607a85292dbd26e9ef87924d525680eb08eaf489f5dabb46a15a8ce1.exe
-
Size
2.3MB
-
MD5
6a86015f6861255a686e50eba395b43f
-
SHA1
59d347d84af863e1184ebd06a967a5bec7b860fd
-
SHA256
c5bd507d607a85292dbd26e9ef87924d525680eb08eaf489f5dabb46a15a8ce1
-
SHA512
acef8012797e815cc2cb63063cec2d79a4a14bdb827ba57def6c090fe002f85b5e0d786ca631eb055379564d42c467af4ca8dc110ac4e084bd12749bb077a2a5
-
SSDEEP
49152:aiYO25YHCsKjTI1Qjh9uX7zs+2X3LoHnVv9q4DWba5sCdHe:VYOmYQKQjuLV2en/vtZBe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5bd507d607a85292dbd26e9ef87924d525680eb08eaf489f5dabb46a15a8ce1.exe
Files
-
c5bd507d607a85292dbd26e9ef87924d525680eb08eaf489f5dabb46a15a8ce1.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE