4�Q:�1��@;)-�7ҝL�65�K�.�s#u��E��`���0�7IIZu�[��B��c���5&4�O_�H�!*A��As��,��k!fW ��9�wBd���S/�o ����Q��<�䃐l� �`��9_���������^��'�d!�L>���K�-�*gr�\�^w�ТE�����}�z��v�p�DQ�'�Mŗȸ|g1��_�6B����[�լM��G������ ����r'�`�X�>Gv� q�L7��8��"��p��(m(��^�f0ԓ�ϡ#����g�fϤ�����h���k��A�Տ�4��!%��F6 K!�\$7�l�4~��p�S�2�5��(c��@_ˁ�Ҵa�E����s���pй�/���_h P��< ���fM��fR(���5��Oh�#�9�"�X삢�����&\�{Bkи̠u�� ��)*l�ze&w������a�`sQ�=<ӷ���� �2.t��������q�FW�z�T�J3�14�B��y���aA�q8�DGA=�\��Q��-@�s��q0�7.�EZ~j�YG\���Zl�Q�p�� N� ~K��n��˦�Q������:���g�$����E1��o ��7��MT�����Mr�ق��G�W���W�� ��i���qŚN���5���3�+5[��j.ԐA�l��qp8Wm����؝�b�AхB�|��I���Ԍ�@~J��d�Vzu���_� ����Mș�����8m�l _e3����<�R]� S�����9[Q����}̛��f��2;3���`��ؕ*�^s����*Ÿ�Z�&���v�ߤ6p�ɗ�����cK�w�O�,���� �9T Y���O��H+{��0���4 mvS�aD�ZO(7L��+����j7�$ � � $�̒+B�B8�.�R���J��� �����������S����Fޚ�ȉ�5?�����/;�B[�Y�9n�sbx��_����b&���K�*��+�9�zBM���s�)�O�/�� ��xU}�Qa� �5��o9�ǐ�U'r�b�&�}s�/�ɧ' ��,o�h��8^<8y�yUx ]}���y}mN��.�3��ʿ^&��!E�6�����:����t�zp���=��v&qo���C�Kb�T�A`- ���1|��m��UU8.^����T<����k��ۏ>5FCD�cYMR�D�-{zo����m� ?{6������:�c�D�^)֍�l |h�̦̾캏̎S��n��V۳I}��f�0x�t�k����r�d����A��(X�J�����E���!�][R�R.��o�}�����ѢG}����� (#)!�ܾ�� F������<`�}����I�aY�y1��eJb�eiRƬ�*�$� ����=�س.�X�T7�e8:�ZUi�Da$�����W�x�SB���ż�62�G���F��i?�Ŵ�ц�f4&�S����zo~�@���U�k�mN���E�驰Є*�����F���.��G�a26 ʁ��o��L��N䫑ʔ�6��B^���Bmiu�� Zi��'�`,�����W���L���F"�/�h���W���y�H���ݓ0��aAT|�D�� �z/RpcK�4XpVE�������<�<��.�R���v����K��;�/�9�EnJ�B^~oZj��=�m��$ ���"���*Q�h��N;���w%,�A�Z+���}�6n�mm��B���Q��3���'� F盵�o�'�滖�`;��&Y����&���KK��Û�ޱ%�&?ߴ����M��ң��pZ��g:�$����L1�":Xd��PMJ�ۑs��<�>�� 7�]���(�'�������Ik�(����JYV\ڎF ��<��2f��"�8�LPOEnB�9w�!���ZF�F� g� ���!�TܪAK���k7O�SW7�Rp$2ov���#��z���1ᎁ�����V"��{�p4>�I���2�wb�Q�c���8�b����]�ns.#����?������j�Xݿ^��(�X�̡��H��8����������IF�Y&���������I{N¢QhP�]�v�nd|�()%�&:�zZ8Q�������������Q���*38n~��S.ky�W�J� (���H�^��p�F�X%�d%�V�g��ͭay� A�n3<�U�f�I�Om_�M�@���<%����@( ��w jR�]T��C�K������'�EgK����A�8"D�s_���-��76���(e\:6z�O��=�x����������\�{쬱�rn���C���0^�+*��X���[��@![����$�-�������H��J�`��MFUӱݼ�7 >�R6h>�z"�Y��k��%{�a���'X��N���^���s\�x^tswHk�s�����'��\1:SRa�Nͨ���\��E��U���K�^�S����$ �[Z�۳��z�I��P��P_ q�Y�S���<�m�����b�-��?T�9��3��]?���"~�dbb*��?i����:=7RY��<����R]��Fr��H�i�R|\ʋ���zohF5���=�#�uT��� x�_��h�n��u����d���g��y�<������"E��r���=�1������W��&9�����ǎ��h���K�މ���hg�{!aZ�*Xj���zT3_�H}/�I�H�����=co��%n#�ȫ������~2m��� 3ܾ��E;k`�Z��Y��k�C��H�B�<O}#��]��r����+j�������)X�b�d���� u�{[�I�%m��'^0��rBy������ ��C����h:^��4���-��F}yLa�6f��|�`�\M#�����QUk97�I�\�89\��QWzMe�����i���y�0��9�젽�m�Zq"�9���+Dsf��K��nl%�qX�H���J�v�_ب�u��V�2�XA3�ݜ��'���<%���L�i���C�X�8%uck�<�"���rO��H���6����gd��-SK�)c�j���ӧ�tyD���V�Z/�ل�y�ˈ3H��}W!�xn*ߏ7��.(FQ�T�� �����k�/�R�4 ϔ�m&0�P%�^k$��LCJ2��'ľ%�T��-ujF�4������0Ϛ_�Uz�я(��-��L��ӊy4i�*�R
Static task
static1
Behavioral task
behavioral1
Sample
7378f4059b53f7da3e135c76ce4d6d6dc3af8106f510f128a77c5688f958a803.exe
Resource
win10v2004-20240704-en
General
-
Target
7378f4059b53f7da3e135c76ce4d6d6dc3af8106f510f128a77c5688f958a803
-
Size
2.4MB
-
MD5
1353eeb92749ad19736c9e3d97959c2a
-
SHA1
0bfd65e336cb0a12b150e7212877cf9b5c466500
-
SHA256
7378f4059b53f7da3e135c76ce4d6d6dc3af8106f510f128a77c5688f958a803
-
SHA512
fb1a3757833a746e811d8ac5a7b3cd486596ba8e1a6ef47efa54f8fd0be71c2719a8d136750a8a551125504072be25ee5b798fa4f1317b5dc53864ba918e8ab7
-
SSDEEP
49152:y4AaYJnc45rm8DRje7HYCRvNZ5ZC3JDwHKi7AbfC1N4nNW5WflHBHVQeefi1FYr6:y4H811maeZRvNja1wHTBN4QEHt+DfRr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7378f4059b53f7da3e135c76ce4d6d6dc3af8106f510f128a77c5688f958a803
Files
-
7378f4059b53f7da3e135c76ce4d6d6dc3af8106f510f128a77c5688f958a803.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE