��B�<��s�#v���ڥu����AO����ε<�0��<$�tz4㊒��ژ6:䚞�aAk��P�z�d_g?1b�Z9��a�-�C�ͽ����o��i�]I@���a0�����^�m�\�`Ԕk:�j��ˏo{;�=R�z��>�M|p??4;M@��e���+��'I�`�w��]�|�Ňז�|v�������!�;���krn6YK� ]�j��:�G-�_̇����w,���.��t��k�)=�}��@���[�u�DU��8�=�'9��1�[U���ι�0ʳ��O=�`>f!3%�I5|�����2���q fu��^�H2��������~֑֤��9T��p��掄E����m^m�'�l"s���}��Bh�{)V2GzB/�h(�u����u�QeB�}�e���m��2�N��+�.ӧ�1��^fֽ�b�q��2w�<}���pz!�$&��\KNF�K�o`�5�Bc�-�x�w���/�l珳m��J�#�of.M@r�7�EN���O��x�~�g�<�l��,z"M`�|M6SMz/�'�2�n���Z��y���$���x��Uz�'�m��όf�����%>[X����O���X5>p��_�@��h����p�]'.��i#����Ds��O�W�w��f���H$��ؙ��!��݊�H���d��8E}#���0���Z¾�0��;��)t;�>'���lV�2�b*R};Jr9�52Ć>��w�`��/�/o }�ò'��_�s�H ���n+�n�̧�vj0�a��\�Y�3�7B[`Mi\<#���ys�<��G�>��sB �K�u�Oj`_{��E�������s.t�ꩉ՞ ���cL�pc�_�Yrʺ�zj͑�D$4��z��Z�l�'�f^����G�zdG���6�c����0E �ik����6�߸�6�{�k.G�Bnz�|!)�C���vT�KJק/�ܸ�����;�m����?% 0������?f�QP(������r�T0X�� ����G�e��'��r9�(�(��쒒B�gRj�h[�����w�A�D�v,PʗE�w� �JF��pl��}n7ų���N�H5R,� " �?v�z�g��Y+p%9z��vM�$nm���ٜ3#ǩ B��ɠʷU���@�U%���j{J��'M�Z��W��{"�]^%�?XZP�%�����U�[Ɇ�7��ZIA�Uk�� G�t�e�m���T �O����߷����@n��r\��P�x�U��t<3���� g��N@��l�����r0�̯�.�.ɓ1b�ͯݿ�� zm�k��E-�����°�sv�N'�X ����+�`'����hEy��uG�K$�) 1~�7dW˥�5�����5�DC��Ǡ�wRE�۷���g[�������9A�]�l��Ġ�� �FYJ�c{c0��1�,%�v��/�ʘ>f�Œ{�B��T�/ͪ���"7�YW��^�Z����l�ھ�1x�$��{�T���n�%�h��d����+i���D�˒�8�Z�kk��ξ���:����NKHU����F.���ry�\:s�s�����BǠ���ȷ�/yB�Kf���yB���;j��DŽ-�a�~_�]lg��TMrl��яј�}�j�;R@x�났r���G�<�ڴ =�ܓ��H��`I9������E���(�G>��}�~&�|�d` ��Ē_�/�ϒ�LK���g�GO��� [��e�����D�Brz�hᅕ�#�U�!_�qpQs�ڵ��͈���YSS�8�ړ��������8v� �P�bƴ�� z�� �Ғn�An���y�ݻQ�YfЅĪ�2 �2����aUNҪ����0@]1�:K�W9�҈Ãc=z�V�f��~����~�4;.�sh��FTc��-0�VP�C�"�j�pΊ`R��l�ϊ�X�0�x�������.�>0'�����~�N���QU�����m����۾�.���ppNyg���K3�`�bPc��AQH 8�������^�7W��̈}3��}����Y7�QjHV�j1���"EW�O�^]�(^Qs����*1��7�S��;��W#�3Ώ@*|'�j��.@�h��F��R2�ޢ��v]FF b ��&$�p�xI�� �1�G7�q,gKZP(���zćTCk�(w#F�"��+K^�P<�+6t٣�5p$)j�q�lj�����2#�i79�od^9���`[C�(�-^�QHРxL�9��� PlZ�ݏ��f�+P�4��'q]�� �T�8;�fۤ�̙��_�eN�{����,�����F��H�����6�xΌQ�]�DU�?�j��R[٠�G5��d8f�ׅL���S��|�7]�>*}(n(ӗ`�{5���܇�7t�E���gq����-(�q%Q����8�f:iuN���r��b^`Q0�Njd����Ϫ%C�WTh.�y���5��)��ʳt�X�R�W��]�Emd�rl�W��*�t��������[�$�-aU�$������H�� L�]v����.�,P>1;}[Zt-0�����J�E\�� ��}�<�a��,�i��B�"(��Mm|�����M�[�t츺���1hș~\K1�:L��x\̚"��?{%���7�����2=3a��l������<�;�.>]n�;�8��������k�H,�� f�����M�K,���aZ8o�?�u��+:Fqi4}|5l^��i���r��o��EK�_�(�"�"�eX�2v��i �H�>~��z�D"�: OJ��� 1�M� �b�̪k��:��_��ъ e�� ����%���4����� �P�&�J $��X6������喻��K+!(�!eL����cbZ_�&�$�L��/ ��j�">=E��mK$m�9�,ҩ�Lfv^��a���;~�2�Ԏ¹*,bU�)��#TRv�ڡ�D�����Y����a�����y��[�������8�_�)Go�^ ͂U�i᛬� �`8���a����|�He�S"���|��;�pj��N��u3�E��l�|V:��%������쁗�ȕ��s���A���3��-�� s?�>KD���K�42�CY�^G:[��X�I�m2#����-_"��s3y(v��o����x�;��b�O�2SnF�5����|[����7e~ϻGo���*�^XX�v������پ�.��+�b{�`��Vs]�Ҵ���Pjr��Qe���e��+۴�{xҳF�F�%��C�nT MQ�N4�>p`W��jSC�̬��a
Static task
static1
Behavioral task
behavioral1
Sample
546b5457cd26c9230fc49a456197aeeb761241adc2dd2774c37b1d3189968cb9.exe
Resource
win7-20240704-en
General
-
Target
546b5457cd26c9230fc49a456197aeeb761241adc2dd2774c37b1d3189968cb9.exe
-
Size
2.4MB
-
MD5
c03d62f485ea79a178992f22c713c4a5
-
SHA1
aa16eb2b07a4b91b44c9e484923eb8bbcaf893d0
-
SHA256
546b5457cd26c9230fc49a456197aeeb761241adc2dd2774c37b1d3189968cb9
-
SHA512
3051d67889704c3adfe2748612d88b40acdde17b3fcf54ef8ae7466bd38b121db130300b53c9db9a981292507cf830d99bcd86ccacf320ec0198faa40af043fb
-
SSDEEP
49152:AV88QC9RNOjl9T7YEagQeSPyT7VQGKAkRDPvKpgiX1mNvN1exBjdd//CnSi/d:AV8xUfOjl57YpgSiZtDSH8gu1UXexB5W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 546b5457cd26c9230fc49a456197aeeb761241adc2dd2774c37b1d3189968cb9.exe
Files
-
546b5457cd26c9230fc49a456197aeeb761241adc2dd2774c37b1d3189968cb9.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE