����;o�2s�����94o��_{Ś��x���q���WwzOb;Ov����I���O��u��i0���_[L G���d����~Ol(<��W��p��=�ou#WDSi?'�h�2j�Mj¼<��BQ���� l�����Oz����لR[�.��6�[��&��+�E�Z"|�����̖�I!�/���\v�C1�����(az�7��{ʵ����ue�����F��C��n���6�y��m��I���ea�X2�K��ѿ�JMo��S %f"�P�O�������9��=���� �^,��'����l����&�}V}\�%����}H�������B�2��O�m �`�~��c��:�o�� �LT���;E��`@�9m�"C�}�!�Z�^��Wc*���Ђq� ���'���?�[��' ��,���_LZO9��v،�\Z�5'{Z���M�k7��z�;�*��Q�F���!�*�j�-�$*%R0M5߅٫O>q���mN��8x2�ô�?�Lf~�n�8�=7��*����q\~�d���d��T4�����Ϲփ����yw� ���Oɷ��`�X��Ц&t���[��c�i��)�C�2��;4��z��}Q�8�B�9_KϚo�PLpj�ۡ,����譳���lŪ;�F��<ݢbK4U���W���������H2�:�E���ir�Q��IȒ����W�ݦ�����fIqt@L�S�4���qmC���eq^��7oÿ��e��>8t�#î�{(�*��N��Ȍ��7��tn)�N![�E�S��oO�H�w|�-��H:i�8:����C��!��^q�4�.+���8���"��3:�� �\s� $��-�h{&tq��8� �_���e��]ů�����������6�݉͝�7�#��m1�E��)�~�j-�?��-�U��W���K�*C��e��_�49��r~.)w�XMn��I&g��S������_���Ch+���ɍ�tm��꽢���( ��&��V�B�bqE�!�"�Q@�v�L���[����{��������7 k��³�p8T��������V���r�fT�n f]�g2,L������b�ѐ��ڤ��Z�t��H{7�ER,Ξ?������-���뛊���$�saQ����'a�"��[w��d?f���>ݒ�f���� ����S�8��إ��ǣ�A;����l.Ul�"g�������ԛ��I&/�R���0|q� ��OY�a�$�tUԘ��YƢczr01ޯ����<��j5�U�"{�.[�ԞJ-�<e=Q >��5ױP���2�C��5�~g˂8�t�/ �V��*�w���� �F�E�y�c�ge�M7��� K��f3pHŹ ���3i�a��:�R�w���,t�T^t�U���fR�ɰ� Y8�M�����+� @h�Ʒ��Au�)-J&�jf�#���@��X��Ny]������ޔ�_�@��@�(̤�q�����As[{���� �������e�쫌�mR�b},�ߴ��5�"��'1�<w�2��j8�o4kR�>#��M�,QT�+�5����� V��U&�ȇ�vXN-r^m� ��U\�:@�B���1q�<�7���o>]4q��Ƥ��Lz�E��I��P��y˙�"m)O�Q��LͶ04��ؖA���@Ru�7M5��h��ƞ^�M��Ǯ(my���Q}��Alє�L)�F��^c������o����`V\L���I�����K��O�n�P�c��;��n��:��#gBF��L�.UV']!(旔�Q±78��꛷2�Xq��h�+*� s�H�]��4���"Ǟ��0��3P�#�d���ei�O���^�������I[1� '��WY����iʌ�s��K�|������)��r���|�SI�&ش����m������s��w~i�a�&W��.���}{�����6� ���\ϐ��I)����q����2��QJj�]h~̓K�8����V�8��~��M�1�Y�l��Ln�eum��oYllp��~����ύDq�&z��DC�w��%���1(N8���� :�.! ����ב5�f0BI8�ѳ2�M���2�� G��u?$5�f����I����X�����ҶTyT����a��t��@��U.j��<:��Q�}{u�Y�Qˀ��N���v'2{67M?��'cƑ�Þ�����+pq�+�t.9<� �o�XT�PL�r7�����~��5?u��������"M1�G譖�$z��4[����2ǰ����&�u��3Xc�J=+��~�f@"���j���:�?���#rbj�`�����@S���{�E�}<��e>ߑ{&:`K^5(<��U�W��@�� �>���j���)�c�KoN+A��֣�~����>6Ȼ�i�����E4����I/�D쳀�º~(������� �>�T?��Oj �'>|Z�l� ℈I2:��x�tBj�Bվ����!s�vH(�ݺ�!��AC5\��1,�Q�E5��Y������.�Gm���K~9Ԭ��H��@�o%Ο�{Cz��o�n$�]v�~��K�'8���Yէ�G��3p*�)s��"�@P�-s�W;�����r4�w.�^c!�8�IE�L_8ȀV��T� ��{6�m��l�A��9�y�s�}}�,[qjl��8q��6Y�zޥ��C&��am��7x�Zf��A+U����W�� ���z^�<�!8��sċ��FCw�;�� >7��u�1��;��$է�r�xG}k���C�>�/��4�S������m0+s�~8^���0��4ހ�����N yR���!�2x# �����YC�RI;YYa���D�tmS$�a֍�'E�F�*�������/��]MU����\�/My��*�K��/�1���a��w�X%(������l�" 1s��-ʦ��1� �Yj�w���Q�H� �3�����z�f��?uxuS���o)����a���W�x���Ө��kނ���`��w�@m�z���7����W���k���P�#Y�`&5�����Ƨ���-���*�H�V��p@��C���n�%�!x�ڸ�k�蛪���R�T��K���+���� �����F��!�UA.L�7�߬����h�]6N���U��1{J�̴� "�˄�����B����?r��&�65�*1TU�y�o86.�ÖE��}8y���ٗ�,Z!�-����a�J�G`����7�c����Y����veݩ"�����c������������W�LO��3#H������Q�V��xb��Lǩ��q�;��4���z���:J��_�s�=�9ui0�)T����Z?�i�w�T��$�o���f��y����d[w�S|��p��,E1��D�]�~H�B�V`FL�c��4�T4y�'�B���zd�Kǔa0}����~���3Ox���M��/Z����\�D2�8h�Wi������Y�˿.��S��Q�A���Ʈ׃"����/� l�2��|� ���Dp
Static task
static1
Behavioral task
behavioral1
Sample
43fefcf79068cf7cb0b45426f60c89eb92943c652be486e9b9ecd7d5b92ce282.exe
Resource
win7-20240705-en
General
-
Target
43fefcf79068cf7cb0b45426f60c89eb92943c652be486e9b9ecd7d5b92ce282
-
Size
2.4MB
-
MD5
b618c6daef256eeded4cc8c92b5f7110
-
SHA1
f4775fb13f91ac4dede2f2bd24bb0170851923e7
-
SHA256
43fefcf79068cf7cb0b45426f60c89eb92943c652be486e9b9ecd7d5b92ce282
-
SHA512
27b526f5f821dc74f1a555795a14c74e5532898681dfebc4ddc08df334fccd60feea931e9db038056df28a509cfc813cd281db3ad382072d52aaae57ecc0f2e6
-
SSDEEP
49152:HIChsgHpNPYI9N/DsLps9bOULnDs4g3kGh8haNZ+OmFIYk4xO:oZgHTwI9N/oL8Osn9pGIaf+qY5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43fefcf79068cf7cb0b45426f60c89eb92943c652be486e9b9ecd7d5b92ce282
Files
-
43fefcf79068cf7cb0b45426f60c89eb92943c652be486e9b9ecd7d5b92ce282.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE