��V h����Oٛ�N.���IJ7']����ޏ:y��D�F��1����oUˬ�y�xpK�ԛp�[��gf��#_H�t�ӳ��dآ�j�KM߸�p@��,�����Ore���V�/"pE�>ߡ&'�rT��M7�Y�˺���*h1���p%�:I�Cu�B.�87x��v�i#�����l�c�;=0_m+p��^�ڊ�����ݙ}C��d��Wu4���?@A�{�,�q��A�˲��Z�#����m�~����Sk�o���Ww�\av ����j���<�7�ADb��A��;b7Y�/��Xog�$�\���=m���(� (��ѳ�;������7�DT�d4�������\@���V �Hf���lk`T"=�m֣Z��.��9�<�^b1�]V�Ҽ��ʴ�����36sP���w���ډkFM��J�3�^����끾N��D;w��qT� 撚�Ɔ�Vc5�D#�\�ն�MZ��@�Ӱ�%5�Ƨ��M"*�X��Fh ٻ�UCG�9�-��#yD^y�0�Ϟ�a�w�oqB�J!��[.{�x�5��,�n��fcM*b���i5��� �ݟF:�b���:��Ļ���t�i��5�QY7x���r0�!L��g�LN���j7�f��S��F1�'%�G(3���ө�D������H^����+�!g&7��VZK �(6߭P�=�tC �Ε���"v}����ݬ�Q�z`����N�� ���NRdZ�)��t��E����~G��{����L�M���%>���{�;�(�+��ո��t}����=�|v>x��G���Pgb��i�v�C��+�g�d/�dˍe����B�ǑM~eY�P#yf1SQ+�Z+�yx��9#��z�^+jl����� ������|P��I/�@�~�����ώ>0v��Y���B�з���C���1��n�qX&�_�`��_-��|�oB~��T�3 `��t�ao1v��ࢰ)���%�;6!20�'F�Z����������3�X�E�dʹ'K��z�F�I�kKj��X���z*"����w��kz3�2�����0&��qæ^û����W�nϋq�N��"���wO��0:ZX�o@D5�-JYb9{G�Dp�� �� �b����������uR�Xy��'4�[+<(Fɲ��G��;����Ӵ��8�9Y�����wL�V1C��לH���*m'{b��KAԩ;pz���P��<�9�15�<_���1OI/�v�A�y��Žm�y'����Q�5��6�:�B�C��-䦷�h܈����iuDNa؛E�qj�Xv�/����Nji<l�Ԥ� �)B�`�[�����~�Xs�yh�v��w�B�� |�J pn#�m����<a�̧� ���G��X��S�N�?����������nj5ك���I��j�2��3(WH?���e�W��l�$��c�$�)�.��6�yQ/��T�&�g�l�$�f]�^/j��1�G�#ף��J^�0�5<��5�.��qt�/���ik��^���0�� �`�>}DK���R�f�̏F;��@?X31Z��H��iÁ��)$ ���Leǀ�����Ŝ�)5R���8��H�o��L��%�~YÔ1)OQ�����ju*2bpb6}�o��0ٹ��Dx�c���!S-�K¡�[-9-�u�&�I���rsϖ����W�4#�&�#��I��:�Y�� �/��]H�6 k�|�%���3f��#7�P�%�����j�T���z�Qm��cs{�/~尴 @�����x=�^��,.,�^�ߺ1\���b�g���{�1L�ʧ��6�f��V�9hR`���}0�`���Q�[�K��]8淲Q��'ȉ����x]����,n�_8��Aߩt�p�xG�� :�{����m�˩pg��=�P(r�V����]>�wJ��1+2�������CG��Կ>S��(+�� �ݻ$ϣ�)��b�x(����}gB���\Z�t7g��g�Z�1 ��}�9%Q��x�xO�d�*�" ^�}Z1_����3�3#~���ēO�;���a]0}E���yO���݇M����v&�#��F֣|�hyS��l)�#�A��-�۱ R#�s�{uLV��$4�P�N{�EW��Z _ku��������G9���k�&L{+o|�K��ѻ����e:ո'镼 XU��������O�Ԑ72�C��X��Nl����&�1�n�"�~Gg�i5#�E�������G,�c��A�j��g�l�YjUoau�!f��˫#<HFT���{~Vߎi�j\6;Ǒ�MxUL\��U�J�����T���&oZ��c�"�&D�nl^߶�J3ư��V�#h���=:��m, _i�o�8b�!p������'�^��=�]w+�����l�o�O=�}��gj)�k���@�ۣRA�'���} ������������������u� �{�lig�A%Ok|��s0�ƞf�T��7�:_�4F��!���*�`eOCvq�n������1I����;�:E���E�\��������"Ux������P�-��7��sW����9'i��D��Gy�z�*bd�jE�����|�@�-���`2tM�4���.Ȣ��Q�FX�c�(���� ���f}\k�t� TCh(���P���)�f�N�S���QQYb�-�3Fld�8�a??A ��)��S�HYZ��}�K�:�����;T�����{Ob�^B��`w�{;����$���l��*���� c���(�j�yL���W���lo�`��Q�e�q�����x�b�����c��赚�H����'�I�RP�;H��"�;���fAQ��Uc )Z�0�4�m����{���&xzBF{� �<��i�т]iN��PB��3Q�q��H�U� �"�������G��;��⑽YQ�fշs��{ov����I��l�`>@��R?#*�>�2#�a~��� E]�q|�)ح�#25SvRB��ǫ$+[�k߇����E �ˋ_�:�.F��0��h��D,,\�k��źcO������ W1�<*�kڸ��p{"��G�ŏ��&���?'�@���7L6-���%��+a{(G��lz~8h�.�U��]����
Static task
static1
Behavioral task
behavioral1
Sample
5986af20c5aa3b134f85fc08b1da2e3851f644bb9c7b8774377599e444dbcc26.exe
Resource
win7-20240704-en
General
-
Target
5986af20c5aa3b134f85fc08b1da2e3851f644bb9c7b8774377599e444dbcc26.exe
-
Size
2.4MB
-
MD5
0fcabb02e9c168593cc61b64c0f6c5bd
-
SHA1
bd3bd73b7fa13549695b7c522fa0549a34d29c84
-
SHA256
5986af20c5aa3b134f85fc08b1da2e3851f644bb9c7b8774377599e444dbcc26
-
SHA512
c6c0fe81ccfa44079841ba65c2a559d1f2d205c821c7bd4d0d3b84e42bbc09f24e7291d1c3f6261ace648be1a4ff3025e0d04adbe02fa685d6961cdf7990fa52
-
SSDEEP
49152:GHXu21cjgUrly0RC8ktX9MnONR0DRrJOWBpSJtQqUHgsRREJq/WvRgNK2o9z:YXP9wE08ttX3z0xmt6HgsRRE0/WvRgs2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5986af20c5aa3b134f85fc08b1da2e3851f644bb9c7b8774377599e444dbcc26.exe
Files
-
5986af20c5aa3b134f85fc08b1da2e3851f644bb9c7b8774377599e444dbcc26.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE