$c� f�\�X[}�+��2�<ƙ��~��g��yCX"��bܛK�>�ص���jG��l����E��)��j�-�3sdT���G�s�V?��F�Aܝ���Gm�&�E�{Ā� �h�- c+�9|h��v~c�#��;�}�2$�`�����Gf?S�9�!| X۶K]�� �������kڦ�E���z���_H\�"�Ep���5�R����v�?O�1̅6bCtD�¿ݯ����5�aRdާۺ�rø�&y��kX�~=>,D��#g�p��X��'P����N�����F�g�6f�<]��zc>�V���������,5��~�����a�T��]������.A*�f��v&��e��!vvGR��+z�0%�v��;�n�i���x�q�-6r4����R�I isNX(\-��a��������pҚ[��W��O&ѣ�4�4`z+7+9to�f�������mw�G��7y�9:�̹��O�O,#�`*��.����֎6�dt~vٚ�C���:CQd&y��~�Xt�d�h��$�����A*S��\MZ�}Ǧ��koG�Ih)1��4�QB�A������1j'm*���fg�\���09G�Ӂx�E�[���;�g�Z�H�6Mx���g�|�k諧����~�GX,b�zk�6��6�����Ei��%7��6,�[�n�8*���\o��#y�B�0�%DH�mŕ�Q�l���ݣ��qr�VD3��#�!{r�.�N�:hů�<G�����/�~�'���H��/w�m��sf=�8�D�T��Z؆1Hb�B|ذm�h츓&����{�Ig������7W�h�RE������V���*܈��D1���x����5���b��Q{��r�4$C���l�A�z�f�G�<�9VSz�� ��=K%K~��g0}�����:�x;6��B��v�1M��=M�>`�s��D;#v�ŃU�(�Y�>/�e�t��;~'C���,���M�����F ��[vܼxV�r��Nuٕ;e4�6�/���s�������Ș_)�p����; HD�]�;|�iw;���hjF��2O�Qc/����'o��I�M���F�u�W�"����XBkۧ^+|���i�7��U뙁\I݇����K�:���Қ�ET���1(M����תY/���+|B~?`e�P�Ny�h4x���[�3�k�/��ds�͗��lkqY����PJp*)���8�{4�������R�qo�m����22 R��$��-�Ϸ�_f1[?Q�%| w/��>�����m^mcZ�c����z��ݾ�qK��z*�'?���j�%�����g�f.4g���H������A��\r��"���V���\/�Z�>���P㛪E_�}"��/�X�.���Hx�;����#��V����u��-�U���4�#��.��F����D��+R�"�ꀽ���7a���S�?��~�f+�L��+SЪYe�)���x�(��H֥v ���dR��p3�Yk�ZB�q��)���F4�za�h�0e+��<O��_� ���7��"{(���k5v�u#��%�6b�W�N,�15&?K�;a!�G�m���PDNj5=6kmRQm�g �4�j��P��� ��r� �,�X/��ݿ�mM@P����њ��"�]|S�«O9[#E<�K�Fs�e���[b�uK� �#�'�(�<�1#��,��\S}����矙�k�9�>� �E�X0�VH_�aB�<jHǘd �a������k-<��1z�6���O�r ���Q�A�����XNK�x8�x���O ^�C6��<'�B��,��v��)K�P��?����Z�薒���Ї <�f� )�:I�S�����'�L�%��Y�֕1yO4<l�.��m�}��Pm/&�<��߄V>��ܭ���9�~W#���\#Mn��9/�ۙ��u2����Ī��E[�"������.�9'���@�Q� F�z���A�(��UW+����+<� 9�`� t�=����8��x�ZG�g0�+v`�Z�7�+�����s����y��^�ڑ��CM�I�lOz���e�����L�� ���0�F,��w��^�?��UU�x�=�Y7��t8N�����hSmU�����s��Ys:Qs"�0��(Mm΅�8DL��͜���m`��ƨUM����(-+k�8���*�ؖ<�����ʖ6u�K��������Aށ:\��g�,#���!�pV�YmE� t���ZT+(hf���A+K)6����O�0���v ~� �7�]��x���~�j�� �}��E���T�����r�S� ����������[鷪�Lh@�!Klv��z��߭�y�6�=VI�v�q��Y�ƒҢ�s���#}~M�UX��N_%!��!psFpPz�,K���s�/ȴ�q��������ZB�#,�x���?z��W�����l�\&��B��PI\*�Hh��^�?��j0���^�F��`Dk��_��<*�t�Э�C�[)�����2�p~C �^����Q�8����MyTc��v`�EM���|��1Ȭ6��ā*%��?���|긴�k��y��:�����R���C�4�osȮ�NcF bqq��z�%��R��%�W��65����Jz�L^bN~'l�T��"�c���:)y1|WQ�� h�m��e{Gܕ|�~0�D?m�֦�ڡ�����7�(�ZB��US�'2W�I�Aa�b����j쿆���g'� �����Ě[X2T#�^ִρ���]�KU2i$�Ɍ��o��?Kԇ��ulmrB��^b�}/"g���y�f���M�@�m��L�qOi@�SIU ʗ�O����Lˆ?⡏|��!K����5�8��6�Σ�t�>����\8QLAz��y�2��_���{�_�J�x����ς�6��vO�||��81*\L�������{xP߃��a�����H��5%[��� ���ip ��l��� -�n@ ���v͝d���#k/��i�g�.GB{�A���B���A����`z,犊<�Ѓ t�f(|P }��~��c��h�������/��0c�@0���7����)'�Bi��D����"�\z��C3Xڜ��A��g&B�.�E���Ԁ�����}0�4��q��*� ע���X:Q�����뇔A��C�R?��E�:��ު`yh+�g遄��q��y6�t� �WQj��B\�5��~g�+�W�!3�5��P����e�U��@7u���d1�;��C�}�d,#*����>C����U%@��G�B��3�D.7;Υ,�'#���� �*-�@\ЬhZ�?��Q �7���h���k��=m�(���Z�ѓ2ѯ���+p�kw�~�ig=�4un7��c ��:O�0q���
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240220-en
General
-
Target
file.exe
-
Size
2.4MB
-
MD5
4090bcb4c36bf660e37c44041456c55d
-
SHA1
b2c2363a5b69c1393b62b03bac15e9fc4557c715
-
SHA256
3729d0a825685cb3f1d22da6a41ad8f23ea9a44539f9e9f6d2bb9fcef1723013
-
SHA512
0ce916ff673c9dedbfcdf3a5b29a8c0e46bfb87995c3fd0280a6660cbdcedc997ea974d5684c79edb726a5aca6e2631d63041d3d392d8f861d9a9a5b4e522182
-
SSDEEP
49152:izS5HsWr2p7f3lDOErXH+W4BdeA2uViz9RRCyE9uDzW0C83M:izCtrwlDg3BJMGJ9u0aM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file.exe
Files
-
file.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE