^y#.�[o��#AqyW�����Y{�;d����� �T��� ޏ��`�TY���o�,���Ι�&y��)Z,8����F���3��0��ъ��Wa�'Rc0�OW<pʇ�Ox�\{n�/��~���QUW��`��L٨��o������T��;(�p�)�u��6�&��Y�Q?��Z�>�����(�8����G��_D�!�z��hN�nٴo��֕]����rx�����>Hb��j��>�[%�q�sF�q��j�,��R%\�����T�?���۱:*�z=���@+5(j����h f���UKJl�"> ��l���$� \��Qp���t�WJ�NQ�ZϜ�u&n*����C��4Ő��r�n�K��M#��s�K�̲���윑5�N�J�'�w�_������TQN&�`�0�������{��ɩ����!���K�2g�[�������-I(�׃^=a�P>����Q��˦��%�����=���/w�t7�Z �c�v�/C���Y����9�ǥ�]�� `S�[�^ub���گv5�7��"9�XK\i0O܈5c�e$+>�8��#�M�d��[�z��i;�FVM] �i�B6ymY(�*}^VG_�G�����B�f��ْ�-K��#�7�POP����ɗ���n!��G����TXWMf珉�*w��+��� ��je�R���Y��r�g:˫�,�jA��;g�L��n|N�&-��!kܙgq�������QA���Z%%��~��L�&��2b�q����}�V��vw~z���|��� &u�3E�!7dUu��ڽ2|���)�|��T�-Z��1=��HzhMj-O��wx>�������⎌f��y�k~ �;~k����p�и��b�:���m�S�*�D�ڞp��_0K��-ͦ��A�R��0Uu���Y�/�˅o�>���|W �? Zv<�H����իLPw)�Ht���|�%FD��߈�8�R!F� ��h�E������۵q$�����ܼ��_%���&#�������n���z�u.�o5I�� ���P�8C�B��-�`q�8��fd�l?�hK �+�?�g8��G�c/��ʌ��1��=����ʇ��\�Y�q�v�7�T�7H�|���g��0��R�,��D���~L[0��]�|ޮK���175�`V6�k�Gk2�L�~U�U��9���e��oV�k����5<y��$���k���UP9u�i�$K�g`+����~��C��y֭*4�9X�F�ve� ��+G����]Q�k�n��+����%^aiG�����fq{8����jQB|�����Dd�_���ZZ�J����e��"��S��;���T�Jޮhû�*; �L�"'w<Tf� W� ۨ�h"��x�/̵��'��i���})������ :�M�ݯ���T�z-�6� �rro��0�FC����� ���#�_$��:��#�t��ߕ�����(�E_�=��8�.Ywq��B#Yq��*�.z����S�c]�����S��ņ"^��|��i�:1Z���5�M�"8�@4�`�ӂ&�"ܞ���爵� ͕ ƺS�ٞ+�"�=��0a#!��v�̟�Ӯ�f���'����;;;/� ՝�s%���Z���CW�KH��k�ƕ�W��(-��&�U�U#~Vk�n��8(,.�s�)�-�r�;@�d�?Xs�I�"���e���ϙ뎺�A�����6�-g�0�yPr�km�#��g�P����#�_�� �h ?�����xx����"kQ�#9BӮ]��ؕ����.�ϙHqD��;�j-U���z�0�!=�*�� �`U5Ĵ c�W������ =\���kv����Vk1o8wGOߠ�YZ�����������"����-��M�8r�7�ikUC�jG�mP�� k̕�y�cg�刧��o���V1�[w>�Z�g�k]� ���ԗ�]1�W�I��V���>�8�$�$��H���/����(�0�g�"&��x������Yo.i[u���Pˣ��(�E����1 0\\Z0�����\�|�N!��w�.h�qL"*ioD�T���EIѽ8�E���b�R����A���Wt$?��E�5� ������/� Y�"+���T�6>�QqI��׆K�`k�N�E������!9���!����OG��Z���"@3N�}����@�l���m��H���P �:�y�7ފ<������ƫ&+� �P Rv�!z�@ԍ���C���+�y�ܭ���r���}���� ކ}0M��+5���Bl�+�4fg����ߜD����*�b,�)s��ǟ/�M�)�%���m'��G� G��d�,�F�����M��/w!�(���>��%(���l��^uL��ĥI(�����H���[�ֈ���2X,sL���,��o_�� A�"9Dx�c�Ӈ�����5�a����nMܥW A�0�6H�%LA� ���N2#������5\�E����tA΅�C��n�,s�6e���tf!�H`j��YB�s;�?n�{ޭ%w9��U��N��¿i�m[�4+M��1Z���3U@l4���wcn�fؠ��|9�D�gc\e(F�/���'�ґd���ȿp(�<�5�����dPk�h���=�#��7���������O��NVS{�{��Jo��wD�N�:�D�˭�:�5����}��lG�G� ���f�������UBT��]©=i�����x�є��qB�z�:91��ڄa��]6`]�}��OW�&=YZ��b\�$=L7oB�܍�,�"��]c*���Sj��r �:�������Bp��8����V�����:Xؕ����O��)�##Ϥ���1t�e������w70t�|���4���Yc/�>��J+۪�-z������������8+�;ti#��"��@�����3I������ޅ��e�?�˨\��Ҕ ��e��)�X��� 0�������8KF;t�����ٲ�[�;'��H��P����PT6m��u��K�|CE�v�- �P��M�z��-�����@�Gt�ʃf�ĺF�
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240705-en
General
-
Target
file.exe
-
Size
2.4MB
-
MD5
510ef6656d676509abf2ff0e28ecda55
-
SHA1
0f61ea4fff3a4160ee5eadbec3ee35506c98b10f
-
SHA256
42925f90758bbcac4f02d0f58e671ef5d071e1f528a3aa2b4cfa7715da9ff215
-
SHA512
08870978ef501a7dfe0a1f0042a5373ce70f50308f6929d1940434a27fdc61ec230ac0df4d80299ab82ec05ef6263a3bc40ebf82b17d32074f5ca6000764ba0a
-
SSDEEP
49152:TQ4wKF7TllIgRYTR+Y27rZ8xpIEHxHGfq779f2Ucsfly0RPnu8Cmvf:hTvIgRYTR/8wGEHxLn1TfIUPgmv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file.exe
Files
-
file.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE