����i��p�vET�.�N�8��Ut�0��Q��(����� ��lOO���rlP;"\�K��a伒Ubl���܈N�|�}5��a���� �<%�_����Y ȯߩc�_=����a����3�kJno��mL۽�E��%!��&*�6�ۈ�H ����zf=�P��'�jᚺ4!��J�mOܯ*�c��Qd����;�c��9�4� w>rE}�aT��,���:���,r3}r$�N�3%��o��5�L�7����� �fk���pN�ĉ�V�a���q�K�y� $��NζP���F W��� �ʃ��w}}�pG�M8/�"�R�ה�4�b �5} ���K?1y���!������i-v2��e���e�v��z���65Ğ�d����( G��h9��S�kz�I�Q _j�� (��HP�;�j ��E`�SW���G�*[�&����Y��,i|n��V-�m�TU����D�������2��,�5����sKeX�T[�)��<̽���yڟ��"��UC,Ø��+�������֠������k��OT���0OkXؾ�䊜�Z��.@�ݑM�N-n�qሴ?��lJ��j�L�&WGԆ�����X�8`������/FsI�̼F���IE�I!w���\3 �N�D;���m��k3o��3R�x�̦z<R��5Ԫ�6������T�>���C�v��ٲ焖��E�X�j���`�#�O�����F�1|�#( ����ȁ��:,o�es$� �����!�`]�sGgF @�ԆS�Г�k��E�a��o��Y���A?$d@@�W��p3�Wb����B�@�+sF"C���h%*�2���;u�u���u?����6v��Z��L�6�{��k�m��Z�}�~�D���Z�^C�d<4���a\�qeu�)���I�=,t�M1�(�����`+<��)/J��ħ�(�Il�㧋���O�!��-eL`��,��U���tzW$wu#FR����2Ck�< 0G_xk2=��#N�`Ӈ�H;���bȕ���Vi棦�'1տˏ���!� �3q>����t������щ3>�� �ZHVml�n�5����B+�:����y)wSu�ֱu�ǭ�K�'[ߞe?+�,CP�X��ΟT�&{t�g��;�"��N�}�%�|� U���Z�����@��%��Up#������B���(�6���g�Tl,O_��+�z�JM8A��a��~)�jݯ�:�i�#�����$�pT�P��/>I����5�l���ʑh6D[�6,���^��]��b�'�3TL��W�%eٍ&D��������_J�Ꮈ�� �!���g��6��<IB~��J}��R�7���$�F�(��B(��-�&�f�nw�����+zN�*+M�o������t"�� &����O��V��ؓ��#YD�|��*�yC.�R!5��!˿�0�Wu�j�G�����I��W��Z�ǁ�Lu��`���[oob�����8>i0��gT�E��㸳ۆuW�|�`t����4�ϓZ�l��T�5>��3 nL�ۡN$��+4���p�%��&B�e������'��lq��-�&�E1Ja�s##ZKxN)�.ؖv��0�eKo����#��J6z┤�%,/#�P%>2�� ��^+�m�#�IA;E�/r#���Xm�",$�3yr}ր�WIs��s9ݙ�N�������z��~0_�"�}̧=�ѡ��h"��5���Z;P/Sg�|����y)b����AF�ͅq�d�"���*�m͜��9���2���|;��O�XI)�P�l U�d��5�������9ٲ>�Ɍ����E}�Q�c�!���;��4�<�`Jc�ym?�K$�6��%�_�!�� Z�N̐���CH]�b�r���Y��Wߘ����7��g��&���ٵ����e--K���4�UY,������D�v�E�S�-P��wX^z�ٜ�Y��6e�b.�f4[3�|X���u����0y�g�����/)n�>����� ��=����9$�#�u��őy�4�ܳB�b�X>�`0m��q����F41��\��)dz�1�����O�w�J/���`> ����m�x`�����$��{- 0cS�_[W疤]|B?�`�.N���ƴ����:)�I%e���<cG�������%Ґ<�m*��P��8�=(u�(N�M��b�M��\D0����e��~����V7�_xO��tNl>%��D=��iٷ�����?� �'!v�:��"0�B6��Ĝ|��Zg�aU���U%�.B�E�R���D7���nw�0�odZ��#����3�w�J{hZ� t��h/d=�ϼ�欤�N��a��ݬ�r������wo���{���W�N0���,�ָ.OC����"���_�F��<+�%���@���b�~�WuO��G��{����N�G�����D蕰w��/�XU.=��}XsYU��hY(o͢����t�%*)�'���Zz��d}���,���UT�-�-h�A��"�6/�Ŝ��g�=_q��$h��+���^��F'������M��K�^+��I�T��v�V8j[����j�N���`�R�[�X��Z���D����3 p��h���Q�vPH7�WH��1v���i�6߭9�v�ݍT���+Exk�K�w��^,�lG����M��D�V��-��ƫ����1ZVȁUL�S���֧ņ'5r�\��oE� �K?�V��)�_�e��������C���@�m݄���"s(*;G7:���s���<�^z,��_qN�U>mj�=xk�Y���ku�ׄ���Iu������Q>�n3sgec�z5W�u�����Cϖ;��?�����k������S�$���R.�3��r�&n�M�ZM)o�_�~Co<�Ӭ���u[Ƈ蠚��������W�����x�bfU`wG�����O��4���J�� �?�����z�+j[����m<{��l|z�����3�R�i@krt��G��~���{���� �6zXF��������j���H����R�� k�N�6E=��9�S.�����3 �OdDw$��Z��lW�ã8�X�ԖB�z)f�<�I�_65R���qk�6�p��2��.�Q��$��ψ��˸´�g�C���d�a����5����fTFyLroc0���
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240708-en
General
-
Target
file.exe
-
Size
2.4MB
-
MD5
b6bf96c3900b28a9970323938a1752bd
-
SHA1
fff9ac5ee2a9849759bf02538f8a431738a894c5
-
SHA256
1013ef0d12658680241090322d56cbfd6ad665fd922049180184c3fef077a506
-
SHA512
475848394c20823bf0c05f3d66ff27422b22670babde769f936791881d0da800cadf3ae08e0e99fe0a85abeafaa072672575d020de9267d87142047c1e1033ec
-
SSDEEP
49152:vNXu+em7jvl9vusinK4BwNH+T7m4/OKp0Pu46RKebeb9kbXb8ddhhtQhCvOaY5dY:vNe+VZ9vusiK4BwNHi7m4mK7Webeb9k0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file.exe
Files
-
file.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE