�����S;&*�� U)�f� y�ߍS�L~��ᅮE�x��~��ڪ�'�U%?!E�F��=3Vqu����&��[��/?���^\��6�_�L��<�-~�����o�údg�L�{�2O���ʽH�q!U%�#�-���ӥx�h���ȟ-G����0�6�k�R�ay�m�M��8�`�/��F%���'��GC=9�c�ڵ�W��-�[L(O �Ӊ�e_�3��UPv'�Yw]J[�oN/o3,K��+S���b��*������UO�p�7�QZ�~!l*�G �=�}a^�6�*�)��ˎt� �0QZ-�/�EnsE6�S�x�8���e��Ǘ �]�B���M/��Z�Z�Y�8W�sGUcP��>��X�#���k`nz\��H�sj�%�ɑm��Ӊ�����Ϫ����}F����)R����� �J~ ᖇ����0�13�q��0��s�g���(��R!��1����S��a,��f�Y�Xۙ%,�W� >7�j�^��;�����{*�^�[]S��F�Gg��w�V�A�J^��Av�;U��9����B���N 8����h� J�w��:g��q��/SaˉV����2���+�,����T]˙|z1��>�"y|6�)�7|�":��9 �T(��c���Y��V*�YW+��k�;'g�d �"!��Ⱥ����i[���e�9�lI�� ��ր�oDP=�}��V������mٛ���H�m��q���$0��bwxr��bJN9l��ؑt�7�{�ӥ�^���>g3s�Z���@6G4]�Vݕ��p`w���--%x����o:��b�;�����a�q��Ko_5���.9�-M&w�O�!�4�uW�,�S@��d�|A��Ww#����n ���תR%���t}��瀍еi'���n�\�煓�ҔX���=:Q�ς#W驲�^��W�QM���J��@�7�Iձ4�<��{`����D[ ������t�3sAP�I�����h]��+�Xi����a�(�5���<)H�������8� ^�F�[�gc��=om���̆�O����#�������P����!�m����_��ND���7S����%��24q��r�xi8^/��ԙ���4~a�������|� :R3����9�۟TAa&�� ���t�s��.n�5���� cܯZ���F<�9`�yE�����?- C�Wj�;+�/��������]WU�R�m�%�ilV���/� �L�PKΠ����\h1\BS[F�35+��z��,�`�E]�xzR|�AN�ʑ5i��-�����eS�� ��Mə�o�r�q�n�=�{����`�8OV�����T�5dz}�G�Rd�Y,��@E��1��v*�C��R�Q�v������hd�$f���j�}1���"������������z��k��m��~��rb��(�dP�K|�.��yF�xMEz����"y��=vn�pN�B��!B��Llp�{I��V�q��3@�O �PDy��)�˺���!�m�~�������l,K �C�bp�{����c��c�yt�[��//��*I��2X�yi�/�]��r��/���?�����Y��@<���%~%�5���b_�|g]�(�X��f"�&�g�A]�<���OQD��<�ğ������D:�,��Z3��>f�������9,��%�>d!�R��%o�[:Ɗ�h������y ��乌k(~A&H���D����{%ϐ#�?�`h��}2��!`�3��h�гh���G�!�� ԝ����>6���Ms��|��"�P9�6V�� r��!���w ,�� 8� ����o�|� "��R�&�1'���/�Gğ�d��I�0%ugKP���n�os�l�~�p�'u�����g�ʶ��Q�A%ɄI��v`�j �=��k����VL�Ǭ�3S��5i-v)�l��읡�UY 7f̀��{n�@��^�)m�"n���r\d*�,�7!��8�6o`w����+�� E��4��vJ�ew�ᮖ����k����0��5��� ��*���*�� ��1��HEYq�VC�Lf]B��.t>`�T�_0b�co���߀�l#YZl�Ջ��x��8�]�ci�^@<�� �fP��$a���}][���/|bs����j��|�qY4�Z��a�����f�T?~���|o�{������:o%}o��J�qc�k5�eu�frnM�!���'Vf�[;�q����p��ȯ"�mj��=~c�zA��!^�ΉZ}?����²I\���.���w {�K0��p�?�O������b�J��g�SZ�u�,�������X�&"eeﰁw8��%�]*J����;�ϡ0$��\C�?��$�m��άݳa�g˾YM��{���L����<��'�>njT�$¼�mr[o_y�dB���x �FpҬ�?8��Qk�B&wV��~�OuW���3�NԄFV�����jh�_�+���y��J)�Mq���F*r)�Bg�m@��u~U�Bel�g74�կ3©��MW|���;��p���H���;�Ǔ�������ei�ׅ����Ix��}z�کx�GV�R��r����w�����go��|�};�_�"ڝ���)�#�؏3,��8�h ��[8-Ͼ ���s_���.�\���'A(�:���S��������3�h^d�:���t�7���oϽi���~��s�g���)Tj������y��K4u����S�Ut�4�gfR%0�I &� ��5 Xd�=rk:T �ⷊ�_�00<�B�Q�q��6ݲSa�˾,��]�(�U�4�������M�n���Dd8���\�ӻϝ��C��Q�~P���i�lch�|�g��z��q�C�f}��i4�i�����Wx43(��_�Ҷ���s�Ũ�o�%�7��s�?�M�9/4�0����i!�^Ec�e�ʬ� %�̍\F��f�O��_�� ^[pU��d��/��]G��d����<�H�EA�;j� o�/��q�|���{����%��b�6�qO{� 8��H7ː�
Static task
static1
Behavioral task
behavioral1
Sample
Test.exe
Resource
win11-20240704-en
General
-
Target
Test.exe
-
Size
7.7MB
-
MD5
83d1fec1d36ae907018f59de843cae9f
-
SHA1
377e21f001fa53e3cf1d5a1f8738442ba78721ab
-
SHA256
7d317343ffac1b8811eb2f88ea4739083f68616a1032ef3aaa6342b3d79f0455
-
SHA512
9134740fa8b52a91cd3c4f4d37aa97f05be362c2cff10f3fdb4ebb65de40121651c537efedaca262e733c5ea44d608ddd7cef867dcd1c28a1b8296de8e1464e7
-
SSDEEP
196608:5Nn0h+sp0v0k5bp62RwanCxjU5x+baJhgK70HfXkqVgur:X0h+sypbM2RwanCx45Y+H+JV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Test.exe
Files
-
Test.exe.exe windows:6 windows x64 arch:x64
07f6da3e6fc4e2060cd319831f8c479f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
SetDllDirectoryA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
SetWindowLongW
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
advapi32
CryptGenRandom
wininet
HttpOpenRequestA
urlmon
URLDownloadToCacheFileA
wtsapi32
WTSSendMessageW
Exports
Exports
Sections
.text Size: - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.akr0 Size: - Virtual size: 5.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.akr1 Size: 7.7MB - Virtual size: 7.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 469B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ