��m�S@ŝd"fiY+����6�����ݎ�f>� �s�`JT����-l+S[Hґ�Mc�7��} 8����T���Ը�����ʹt��~���l�d��W 4�>�'���H.�t�H_�����ܒ��2�${��#^|\�!�R�4��:�wx`���h���s�fC1hwq�<�a�l��(��8��8C��zzeH�uD1�>G��~3� ̳WD&�*�5��T����F_�v �/���#��v�����<pMd�7.���o�2��P�:Ae��d�z�F���|Y�˷O��<'��B1�`��6�̏6s��w�x��s-�N��:�s��.������/�|9��� b1�OR�/V� 9���L4z =�*����^�������`�b,��vi�=^��ZZr6���S.�N�����^l�q#r'���S�H��s�WC��Yp�T�w�;q����`�/�*�)�*�� �~�2��$/yAu��qx!�uN��>���=f'�CZ���߮�s���6a���gc�q(��`��6��h��r8�Q���C��d�������/�R�f�x�q�CF�� < �x����yV���k�{��E����è���Jg���N���˥ �H�b�7����pU��cuZShF��x���v�`9Hc��@K~�;j6C��v�� �y�Yb�먐���ɽ�m��zx>b���'yB3��3�Oeei��FTk�ਜ਼�S*������g �|��ȱ�X�M��5���C<��� ��6��R`�]lOӥ��P-+b&R��펢���ʷ��Ԩ6��a��V��E�q7�2���D? )~J��Glf�H�[>��:m���&����B�r��d�����s�>E��$l@��*5�l�1{S�~�٠hb��j����-r6 ֍v]���������k�mD ��G�U`��?��+C�j4eG��zG���:Fm�}rV?��W�z�"V23�<�W�q�@�5�h�d��.4%ѝyY V�Mt�� CE���2-zL�Sa����{H)�28�4�)� 2�����r�!�H�����VP|=?d���ߦe�%��8�\���I�G��M�p�R?��"*v:��8=���$æ��YrM���ڃ�%QsO�^!8 ����Rԏ�Tx�yNF|pf���� xPD��ic��f��s1ϼG��]��w�!��X�;������Ԩ�c���ay�wq{�6_n�`��;���y�7���E�I���=k@�����FTtYx2ֽ0����U+�RU7R1Qk���P7� ���d\��LB������YXi���+��%�X�Wp*�I����bG�b���>�Gb5ޒ��rP8}7T�}hzX:\�\'��J/�4eld��,�J�ɪ>]�%w��^Z��>xy���:Q @D��aN&�3��~�{�����o9�6A�nU�D�0�r�y2�� ��@�<�EK6gں�)F5U%(N�GͽI$ �z�D��E��kX��X���f�p�CS�o�;�\Y5����+M{���.�X��h�D���NJ��b���sj� ���) �$c�ڷ�A���Ԣ�S�v�iFO��i� P QX9C�;V^Z��*A�OS�X:�@�?!��"����:pu��j��ͪiU��x�� �V����d�W(��.(��%��1d�T����㬨Inu��n�]��^z����r�m������B2�Qb.qt���0�,��D�͚��8�^ <���+��� Ժ�(��}� 9̏CO���U��"�YZV;��6�xRb�k�M���i�f.9��[�#��o�e��?��t�S����}9%bJϠ�{)!r��S��;7%Dױ��kؼVm�6���Dŝ��ܕ�| �w�^����#�$�����[��#D��ɧ�!cF�>��+��?/��z8��� ":�<Tћ�^��[V�����!��c�w�9 ���>�η��&�*�4���U/�g;&wm���pV�t1̗Q���A�˚�+����o"�5��j�a�})�aY�k��������'���T�����W���:�q���S>���V]�EvN�f �?Ir�i1910xdw{�Y��R��.�8g�EM�� R�)��c�VK5�������9v��(Bv�D�e)��IB�B'_o{,+#S��0���h���L�:��w=,Ǥ؟"(�{0K鐤dW��z�RA���>��2$f&QH#���P�l�ܝ���:���M.'C���$�\M5�t�e��90�w�g�*�� ^�y5�Ԧ��T��*e��o��3���Ɛ � %��������}J��O�m�R���� ��]�N���?%�F�EK��ה�uN@�}��S-S�F��:Nku��?뺞�?��c��΅T�`��jl9|w�ꆚۨ�~i�7u�P9<R�y�W�Q2�-� �`���=�=ὠ!�B~��1;�#wفj^�Z��w��f�bv��� ������<1���b�33�;azJep��9� 6��Cb�{Mm���m�����5�7(��[F�Y�Vw�����NgqH;�2ЬN�@W����aqdm��{�� ����1ݚd�"5>Q���L�� ����F��Vjz뙵y����E%�yLBl��oMԃa );�J�X?�g����f���:^fe(�D ��z��9=G ߣ�әyD����]�^��4��,���k�5Y �G�'�%�����6?�{����6���v�U�Z�,Z1ZV|��JZx������rk8��[Yu�JN�a".�-!�Xos�+�3a XK�U`�-إ(�4��� �A���^���fA�MF)��q��{����6�A<�pAb$�* =����q��x6�����pQ�&Wy�; �21�-gfA�ֺ�G�D�s��X��~3�p���u4���Z+���[2��A�u�>�H�S����?d�Ӗ�`���� %u ��>�*����BH ?�Y�� �ʆ�"d9��[P�ǢP�����E{�j�j�?����W��Ӊ�и�(��i�g��D[9����� &%.5����`���D�3��4����m�����>�F�d�d�w0���A�B����a�G����eR�#��Z��a�ʡ�t$v��7�����p�A���z���M�L�35]:�ɛ� O����;+���R$�MFUU����ŲKDz5���3��`�ej�y���`H��L��Z�G@m2S��q�v����X�%��C�����Gqf͇L��ix�]�H���0��q1�1�~�_B�G!��Q6��3�l线l���Խ@XH�<�od����Έ�Jwm9 �B�I�ϟ�w8%;�#��$@�.��ނ�C���{:i�Z !�o�-%����'?��}�!3�.n �Ϩ�
Static task
static1
Behavioral task
behavioral1
Sample
d342b0b1abfb52f8238f15947684c901.exe
Resource
win7-20240704-en
General
-
Target
d342b0b1abfb52f8238f15947684c901.exe
-
Size
2.4MB
-
MD5
d342b0b1abfb52f8238f15947684c901
-
SHA1
822148d3b2b2663c25b865a1f98516095c5e01b0
-
SHA256
c11e7133c481e34c3ac90d33416e85490b4e4b3b2af782fae22138298bb0e404
-
SHA512
e6558c4cc35d8b1784602695a7febec0aef5c9b6fba90fe4a90a8da27592678da6f61655770f35fc425c3de1d970576117982cffb12a9f9d1942daf7b32e4f75
-
SSDEEP
49152:Y12qH4aaB9/JQGfQpUhQ2ZH0VH4QWcS56/DxIqzsWqPjuZ:Y8qYaaz/JQjUhQ2Sass6rTqbuZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d342b0b1abfb52f8238f15947684c901.exe
Files
-
d342b0b1abfb52f8238f15947684c901.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE