M7��u�o? ��6�i<l�խ� ��% ����uu��E����[I��y �*=�$N�!f��}} ѭ��.���������7��wJ�_'���W=j�{�C���DLףˑ�iW̜�[�Ɗ��!�iѧOr�����n� �����m�"��=�� 9�G�ț5�%������{Z�+��ȭX`�}M��i�w���T�3[�-V�-�(I�ݜ ���.T}t!3z�&�/J 3�b��5����3*��r�;�8�7_�Dz!2�vf��+"���Mp���am��+�c?B�>G&�.$g��|�{��$pAH��ը�z�+���}�Dw|��Sg�U����^�h��c���XW�R܉�bU�UH\|v�sQ��@<5L�x\��F5J�Iw�-��sD�(!7>� �����|]I��X�g��{~?��#�͘d�KF�:\��$���Qa���/��3pK�r��7�� %c�%�m�,^�C�?����Q|����}�~���z��t]��o�iO-�Y:�.�bAwS�&qd��O4����<PQGLp)J�rTc*��mfle�A=��)��V�H���a�J�Q���SaW�p�n�m�g�J�!^��طKL)�ر�Z|�����J�E���Q�H�[B���qo`������){��瀎����r:W\�z/M Jt:���.K>ո��`����@=_������wG)^��1�6I�h�[Rؤ�5"��[a�#k����Y���-ţ5P�e��w���lGmH2O�v���G���y���a�p����ˇ���z���L��t[�z����cL �cf��Vj�f�߬��0("Ď����V*���-DG�;�m�([�ũ�d��Bf��D]p3���$'i�젠>/�]a��ajn%+F�W���\�Ʃ}�څ'�"CR�ˇ�,'����=�pIK��&%Y{����9�reQ��420�E�e�E�M;OH���gt��Z߷��馿���p Sʽ��渝a�������� �f�s��ER�">���W�@�o��C=��%�Ny��7����,Iњ�a@q�C?U��+K}f�k1���/�F0R�2R���X�ʼn��e(��ۭ����ܰ�M����T�*@ƠA���R��"4,{��ijA�_#&�7����ׯZ�'l�P�״)�zG��HW�mY�xƑ�l�4��=�˷)hD:�05g�2B��n]k�f�Tq�v�/��r�C��.�2@k�5j�cg�0M���I�@{��H�⤛,'A,�ё���i���OP�xO-���~ R,RbJ��'�s:�% �o���j���%{�;E� � �C[&�r:Z�M���D#YP.�Y�U��E�Ū`�_x����П�v�����B�,�T�]C�(Z��o����$�)�"b}t�ya�/�c9�� ���uԼ��cѺD<0�" #AD�ϵ�L)�>XD�[�1�n�W,�'7tBLU�����D�[�f}v�l�S���9����^]@�$��+E� !Gf-��Y('��rBCKj��*�+yݵ���6?m3IR���exO� b1">O�4�����v�%��H��ɏk�W�a��Ōߨ-'ׄR/9���ފ{�jn���{@�D���ذ��)f�`�G���]t�I7�_���l9����*����D���F��{�`G,h�g�g�v$�`��y��/%0�L��~���M�헰��̖!i����$�L���j�H�����M]��� gs��&o ��L.^GN*�}��:�b�Pb(��M��i�Vl�<��eRź�uaQ8nRPg���r�q�0#�߽F- .{%1�p�����7%�"M}������Z2K:��z�Sgh2�I�ߛ�A+��[��.!k!�v���a���.l���q��bQjJ��h�y^��1� (xk~X���|q]6�HG�Ǥᨘ�����K@�kj�?#����V��)��K������H'���j1O��;g[;X����s��U��B����&�a2��F8:�xcug���a9��@�/�8kk�d�^���3Zp�7����"��'ԣ��}��C���l?�3��-�cyK嫂g���Y;Ź�Ý�È��L���cY���~�^#4�I��g��YaqŜ�0&�T�F��i�5���B���K���u��)�f�{2<a���v����R3[���=��.�z<�;�rv���^�K�w�������� D��rT�{o.m�q�A?t���s���9'O�V6���� ����s{O���&�8N�g�gd91yVQ��ݎ/���\U������cm;r��t9��1b/'�aӠ���8�M�� G`K��0^XDp��v��K��P��H��`0��m�4�On����"D�Mn���W��F��E<��Z6�����o�@�` �?�ۊ��4'��(8�gb�4�Û��G=C`��A���&�y�`���r�<���5�WU�+o���"o��9a�9q�Vfn���@�O)x)x��1[��n�߇�F�":4S1[INR�aQ=o?p2���ϧ�I�^�{2��@5y�f��'�a/�I��V�`/�*��.T��E��+uL�����ջv���=��m���-P=���Y��G���G��L�\reF��!���Pp���a���������ӓ�he�mp�bO��8�<\'H���bմT6���?�8:��8�^י�e��Z��L��8��F%x�m��NF�M\_�%���1f�$�P�Eh�4=K�>^����2*e���!��7Q���)�tN#e\l�x������Ry���q�l���]����[f�Z�l�RO1���>!��7T���HCg��VM'�t�<=� -I��Nt.�)K#�`��^���y� !b{�OL ����0��W��6�F��$�@�B^*�1�� L5�خQ�r��!n���*��)���35�I�ҵ�T�z6�4�h�����T ��_��*]QL�/3g�a�!�I����C��R�ˢ�ۺd�����Q��E���q��r�>����S�=I�=��M���7y�W��s���}��@����5�l-�X�}r��S��>��r7���δW�b�J�@�0�^4��[=/���6�ʹ�k��S�:�3����irV7����Q�8'���z�@z�K#��<;I{�� 3�� ~� 3�T�� W#Ih��f�6�E/q��9L�`A��6I�Hn��p,8�@����V�;���ӓ��ٗ_<�|2Գ�[-�ዕ��`��]&��qj57��K�4�I^�vmЩ���K����Y�7NH+�P%\ɑ� �lJ���G�`�����_���-eV�K��D:I�2��$} s��n�|n����\yֆ��Rr�"�^��l��%�����?2G�����\�fՈR���w�!�c�� ۵+� �/7%C�{����?1�҉�~��4R�WK�|� 7 ���1{�<w�mH���4t��Aa`ν�X�X���a�s
Static task
static1
Behavioral task
behavioral1
Sample
77e9b3740b0e2fd375cd1981ce2ad2ece335200794fa7eb92d4befee2094b9ce.exe
Resource
win10v2004-20240704-en
General
-
Target
77e9b3740b0e2fd375cd1981ce2ad2ece335200794fa7eb92d4befee2094b9ce
-
Size
2.4MB
-
MD5
3cf711041254d965f4d100dfd2af83b5
-
SHA1
567f213eabaf61bf82e941631dbecd518b61d089
-
SHA256
77e9b3740b0e2fd375cd1981ce2ad2ece335200794fa7eb92d4befee2094b9ce
-
SHA512
629f3136a6ebacf69800ed96000709c28ac096937c75cacb262394922779ab6cc613dd496e263ac02b41b998daa570771b68fd6a79b5d73fb3c4a45ef0bdb718
-
SSDEEP
49152:QFBfSopK6xreRIkEGiQmckvN+tAi34M6znoX98vzzxDiDUGLz+y7LF1OjPur8:4fPI6rCRpbi+tAi7svzzxJ8LF1UG8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77e9b3740b0e2fd375cd1981ce2ad2ece335200794fa7eb92d4befee2094b9ce
Files
-
77e9b3740b0e2fd375cd1981ce2ad2ece335200794fa7eb92d4befee2094b9ce.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE