�4�w7G���/B_ �ϕH<-�C�2�Gٽ���<g�Ѩ�j�&���S7�#��!g֗�s���ƚ�ۤq���������(%�PȻ�h!s4o�y'��I5y{���ݥO*�ˍc�[g���M��.ad��^����g�>�猑�{C`��%)H�0 1�װ�;�����R=�HSS���9K�;Ş����9�k��|)j���B�Ri[ܩ�f/a�%<�1C�c�v����� N_{�]7��X�/W��_QNJ����hڅ?��r0����Oz�^O�����*B)���N����-�XuG�H���8uR��̫�f"��\'�d��>텍�]�w�ND n;���� 6��_ }����EwH�]��2*��]��)���l�+��P x�K8�;�����7[�r�Y��W1R$~�P�P���tޖ��4���\�u�Ƒh��N�Ԕ8�%Z����Ty�]�IZƩ��>$ȩC�O��5���Sf�������v���xk�qz���[�������+PG"�z��� �]�9K��'�����rA�q���Be����C5K�h9q�{|��O�����Y\��J��ԭ4���� ̵���i� ��Wv�϶ف~��M�b5\L4��S ���&î��Q0�Z��z���8q�J��0~E�0��攼8�)v6� ������GK(�1qok�����:$Ys�ʜ?�m�E����+cR��7�cvX}���R,~������� ��c��{)�]'S���������j����u;fdg�T��s|�缸�ܶx���,���������د����e|�7�<>�H*�:c�s�!1;j>�j,��&�UU�� ��9�ߤ�2���x��c�Yv2��~5�P)�q�W|�����p��x�u��>,��I����8�#�NU��ct �B����(�-�~E\*�I�S1MՂ�=Z�B^�C������$�9'2f����������}5�w��t����_T��h��n��}XE��b��+�����u�Q�� _$�F�U�/����+��%[�ϭ���5���nr���2��y��͒�m�P�ˆĩ��#1�(f�R��Ot�jj#F���熎 �!�1&w�s�\�!������m��jR6�R�텓k>x��A��N� ��H�h�գn�d�Ż�a�Z=m�N�-�A�qT���/������$iy��B���\����C�9����q��C6�{�M�mn��'���˙~�����l���7��<um�����4l�~ �׀�>3�9I�-�?����5�#��餤r_z�݃,��gU���2��T�p�H+�3�D0@��{�3I�4��:���ڑ�!Ҥxƙ���&V�W�]M6g� .?1g�U����d�����m��A�,?��}�u`,q~|��\�����C���Y �^C�i��}����J��3`�6���$)B���� ��������m"�'=�:��\����.��~���#\i���p7/RHӒ�+L��bɞ�-�B����1j;JY��ƶ����Ġ�}}���Ԓn%�G�'�������x��Zq��u����E5�9��*��7�E$�_���F�s9�����J�v�+��ZD���;p�i�t ���K��ɡ� �0]�OvS�?�,;���qI��!���t"�� k؛���P�`�������P����r��\:����͵�+1]1'�����Ӆ�q��Þ~s��~h�b<�O8��*<s��f��EWy�`��C$��^��Ĩ�alʭ�|�����7]�˩�����q��v5S{TF�]H>����.˹ڟn����fD1[pC��O�t:��� j�M f�I9��g�=q���Xۤ���9׆Q�xu)�r��aQL��X��^xU���O�^Ud�nb6��d��>*מi X\���|��s^_�F�9��d�v��:{����Uƻ���m�̿U�jǪ'�v��_��9 �nN��&l�����j�!X��Gnl�������p��pA�����}�b=�L��9Fʪ���z@XNv�ţx�X�S�ŵ�ca�?��5��G�)ͦ�����Ho����hL��Y�fVA�_��@���R���� $��$����߀|m���p������#QӑFAu�!j_�W����>�Z����ƨ0cŚr�6���6����@K�d���H�ᚴ�Da��(Y����/"��u�xM�N~ߑ�zC@�ÌNP�,�^���1��&2�!�M���q���}��/C{�-�`� ���<Bx�]�~���\D�Uei��q4>� r�%v�? b�BˡY�Ȫ�I`�A1��Y����*�������������4����"��PH� [7��S�i���Z.����j�x�L�c��K�ftit��<=���C�G�+?%�U�=;�(��[s��c'��� t�N������ZU"�iA,��>vw�z��,�q2��0��xNW���,���`�����%=��D/��� �����.�4?�}��j͠�<�k���oCM��� �َa�P���4Ɛ6g�ϵy5��=��b�8hK��� ����iff�ٞ�'"vP�f~�^}��͑1�p�7G2�s�Y2�М�����n��1&��ܽ�_��u�������u�\�[m�v�!n#Lj��Җհ�3�kh�~��"�9�~:{4 fR�!ر�`$�����W�T�/�o�39`�����ؕ�-]j����9��L%-M%ѳ������8Zy��h����|� ���3��7����@�NK2z-LhI�)G$����"`�Jnwh�ldʧ�!��6l'�']����o�������^��R�=�1P�����^�ni[pJ��C]�5ե_K��)�w[N(�>���8���4~dj)��Md�A��Bs@ξ�Z�I;p��wT$T�Sn܃>��-E�M�A��S���F�&�)Iʚ��Tq�0�)*��F۵WB.������V, E+���l6ck��T�Rx���`��Z� y-r�����j&$Y�:{����`pIIV�8�.%G#��-���L�ی�S�X�}�Wj7�t�ԙ;�O
Static task
static1
Behavioral task
behavioral1
Sample
a8b6bae3666f4750edbc70c8ec4022adfd63c198c250a6493abf073fa0396da7.exe
Resource
win7-20240704-en
General
-
Target
7ba3eaf6b9fe429cf26df53a3f195fc5addddb445eb05c9e86bee2cb4180ea60
-
Size
2.3MB
-
MD5
a1627695469a9c228e0955b270e02b77
-
SHA1
dfd6d3eb5b10746a96baf1c3bfa079fe2817dc0b
-
SHA256
7ba3eaf6b9fe429cf26df53a3f195fc5addddb445eb05c9e86bee2cb4180ea60
-
SHA512
54632ee5b40a51a9411c81076d9ea4a7b1e1d1e584fed9c98253998648687ef49ec29be3ffbed0ec97c129f278006489ec9cd2d55ad7265a2875013071ab1f57
-
SSDEEP
49152:j1jmm44qjYLG7tHF1HAJpCKqsLuOzt/g0SFI+IBCFxq3nvr7UkG9eWxAt:jVmm1qMcPOBpx93BL3vbG9eh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/a8b6bae3666f4750edbc70c8ec4022adfd63c198c250a6493abf073fa0396da7.exe
Files
-
7ba3eaf6b9fe429cf26df53a3f195fc5addddb445eb05c9e86bee2cb4180ea60.zip
Password: infected
-
a8b6bae3666f4750edbc70c8ec4022adfd63c198c250a6493abf073fa0396da7.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE