\��0[Q���"�Hw�%���R?���ƪrVy^f�B���ɣ��Y���5����A�� ����Yi"kޥ \3�9-�F�H3���O��q��GX���a88�ɻN�����E�,k��s���i�!h>d!���?�K�czYk�#�+S��i@�|��~M*d�Y���b���o7�6���帮;Ĥ�i]E��f�;!�k�:&JT0���Ei�6Lw�Rãp�wz��):j1�}���'r"*&Wn��s�Ӣҙ/��B:VnY�O6Z&aM�G||ySg��Uh�(����PC�k�J�k.~�/��WR+?��ˈ0�Z�_��E��V��G�Q`?m�o� y��t�� �N���ɐ�ɐ.@����u4��E����Pq߫I�ȫ����M߱U�9J�%+FR:ab�{g��o����̳�)@�2��k�A\"oث!�O�����*m�Ɖ|�{UV!U�^ �n�ѧ����\V�Dp9�H;�#�Fq9���>w��f� 2�m��F�X�i%�H?D���Aс������r�!} ��[bu��0S�=�S�mg��2�����AU��[H��br��D~A�1��a+v�@;���Jb�X��d�~ ���=�ȡA���=AA��N�*e�����)�Mc�� ĐR�%�h���t���AA!.ϸ@�|d�F���ܲ�!�0�0j�(���J������8@�n��5Q��/t��;�EC����~�n�{MY�B������"XwS �$�>�n䉺��H���?6S0��cV��V � �7���o���0��xD$����J� �d��Z�e/tXo����*�%��f�dJ�8�������T?�ͫ�����H��6G�}�m���W�>���*���e�N�ݦF�\�%�r��ezi ��$�1�����C[�������v��ՙ�ҟ��:�4����"_2�_��Y<ei @H�:����h��+{�^�A�?䄖B�+� d�9-� �d9Xj��P��6�M�3M�Q\���D�;=�����.�c}<F�/�N(&�Ӹ�:�7�c�a�6�ky�E|_Gǂ�UE1�E�\GF߲8څ��3�.�4$�a�$EJ���>95PCd����i�o�Uf�W���ğ��H=�a�C�u�/�j{$��S썦]dl���g.r�ϗ.���!�f���L�O�u;�V�L��8��Z1;�Fz�%5$�ƥ�fiy��8"�� �Χ�L&��DQR��\���`Zvy`a�SУ�WR��]�4��Ҝ��e¶a ����!Y�gܒr���׃�%*{�+M��!X�W<����b�I�����@`d��;��?+�ɥ�0�v�NGV � ��!�B�}XO�,��c���C��O��*�+�;}����K��C���r2�Um�l~�}��Xc��? j��aR�jI�m\_�����d�RC�� }�2%da�w�7v���;8 ���6jՠB_����y��Da��������V^#P�D��W�m���/g>��B�M����PP[A���5�<=?�f�amh�E�u�M���� ����A��"����}UO��x�p���}�b3�Yc���א���h���d�)g��f���ko"(�BV�� 2�d3�W�K�Xu�e�v9F��0u����n�hK.N�C.�~8�xa,g�15n+��N)M���})'�~�z}�����H�T҄���:{EJ�0�={l>��M�o��\�̙�D��Z�ey�Γ �� �賗�R��� !-�������=�*�R%N��2��ÅI\$=�fE���E���&h}pC{4��$�_d�'���an��N�r���J����[��Ҽ"K��u�P�k�^�H�Hst����tŀ(����Rܑ�w:�3P�B�o���ѧ�_��v �V��$�c��e���!�u���`D��8��s�pU��A0�!��rR<�[����m��3ae��D�g��a�T��d��l�I��ML�t�b�<~穇X��Ą���ť�6m����'��0����yG�������%���X��K�')�|�$J�k�ɐ���E�O߉�k���0~�q�2>��y����t�&��2Q��4����|�<쏝ݾ��0 ���\�]���J�J��1�ŗ�b��0�_{�H�:0��ka�d�"�>Яx�'�'{�����;��qd1q�������L$��,�����G�K*0��d����x�yː-8�C�2��JcZ[�L��MF�+G�C�^-���J�u�9P��k�a�#��m�:���}W�5��:m����c�p�$!5u`���oaܙ"z��6�bsodx��"��DHH�u⋴��J(��*�1��� ��k�����5o7�A���$+���F-�)�J@3,�fp��M1�*�m|��B��,r|U�c�qG�*iƝKIV��4,��I���|�c����e�g�YHf�k]��U�Ҽ8�"� ��t��ʫ��W*�u7�b8@п�y@� ���(|��r�h�U,z�s��V ꚹ��-癑VnI�,%\���]J$ ���L��XְXk��������}Ƙ����#@3��{�5����K�N��k�[k���{���;���@h:X{���� �?��A|0E4��ڌg�/��@~@)�qO��8(��#F����0I-��N�M�� ��漢�\��͑MzR�:�H7��������\ �s�t �i]�W)`J�Ȑ�@�k�@z�[3(����Bh����h\��A���;���Gv���z���]�ޡt���UR1�5셩1(��=2ۨ��PI�y§�W��!٠��ΨP&9�6� ���������Ͽ�ۼ�X�0���ͱ�!�L�4%i����6���:;5n�l2!�0� ��1?֣��HhU�4w�n"X��N��G�e����ȿ�rC�]�돩�Z(£���P��~��>N��H-��u( �W����l�I�X��"� {#�v ���?nj�9�O�f6s���: �Zu���$P�^�Rlဪ"����.y�4�Uֻ�-�a���b�X��t&lC7�N���]߀6WQ�'!�=�����S����#�_�٦�%^�(,-�[���NXQ⨋&qmH(���@k��rY6�#,`�3��4s�6��� �D�M�r�?�M� Kb��鋺8��R�����M��������} �W�d�z�J�z����[hX�E�j`=��(���ɷ�Yr���#E���2��%�����z6{�A�CT:k}&\�o�ji��h|���Ѹ�O��=0�hG�U��u�>I�����]�3�������_�����پ|�0�� ��;��A;�'��X���@:¼?��vE��1��d�E�T�̃�v���Pu�"!�Fa�,�N������*7�tU���S�4V'p>�e�m��V�M�M��U�Z�����J\�-`���B`�M���xA]JR0��M�,\���=��M,�Z��D�m���#{*� �g����x������Ysf��M�߳��dS���Y���r�+2��*�5��q4���aJ�@�O7�A|ä6R���<���N�st¢�jZq�/��?a�_��ωS��A��b ˴3�@��Q��m�����X�y ��VS���P�� D�ϐ��b�H��3�d�����YW3��)�RI]�JǨ@�����D��߰s�0�(a��/#�ނc[g �FN(e*���&��>}���zv�P��J#�;xX[��g�+��&��Z�$�5���L
Static task
static1
Behavioral task
behavioral1
Sample
783022b9c596ebec7986ba52f6002f90448b9ded95755391d4bf27d52702f913.exe
Resource
win7-20240705-en
General
-
Target
783022b9c596ebec7986ba52f6002f90448b9ded95755391d4bf27d52702f913.exe
-
Size
2.3MB
-
MD5
e43a0ac327404f3008b679e0b1293c6b
-
SHA1
9a2461c520ccc44840c1bd041467ce084dadab51
-
SHA256
783022b9c596ebec7986ba52f6002f90448b9ded95755391d4bf27d52702f913
-
SHA512
804d187c5b62ada2a6d9ad922ce7042c66a0e2110b2cac7c223fcf37b0af3e514bdf37d08eac83972c21968833cd563bc3eb6099ed95df01e45039078b36d58d
-
SSDEEP
49152:LkYIJsBoDjEdjeXiaTwfqvASVk9yTYn8C4S5gioYgwm:NZj5aqq9ay+NpE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 783022b9c596ebec7986ba52f6002f90448b9ded95755391d4bf27d52702f913.exe
Files
-
783022b9c596ebec7986ba52f6002f90448b9ded95755391d4bf27d52702f913.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE