cP�m��;���l��|4��Ѯ�RB��LFT�.L��� �� �9!A6�O���D�)蔻�.�Ө~�L� �SA�-��'�1�b擜T`�lA|`�r=�oi7AN�� }Ӂcb+����oX��i ���oY�@��.��Bh�!���=E"�S�k4Z�����<���V��� �*z�R=UK��h��G`W/�h`_ k/�j�Z�Y�n���a��`\���������!��� 8��5�i9�qD�����P�x�d&n_�8�y��E�7s�'���\ ��`�[�_�Ĝ�8��^��}�f2nx��h������C� ��M���"-н�Ը�lmW�$"� 䊡gք"^!�z���Lө0i#rQ��K}�9���Qc�03�ܰ9}ꀆ "�%U�� �_�0��)k��>���;$3���Q���7�S����?����3������q�m�/��UmKJ��I��l�͜��8�BKJ�j��aIE��Y�1���T,(�透��4j�G�/%�d���~���u�gH�i���:FG����/ݸ��kd��iA�O�jC{Y�ڪV�Ol�U�RA敟���� e����"���=����-W��<.&���Gww)R��lO�ڙd�ܼ�(|�Ҕ�,���<m�ҩRFUim|j����gC��Uo ݚ�,�A#Z�P��Q�,Q栀m.���ᒌ�#nQ�Z��JH���<��`����e)��۷q�;�KT�E��z7�ɧ���������2v��N`3����j�$Gtt���`�D��0.��6�x|�06D��e"(�r/��7�����Њ[#�:�{�P��3 6R�6��@�k���Tb�a�<�OI;0ү�:i���Y�ʜq]{lj-Z6�m�u�,9;���r�h0y��nFq[�v ������C�φ����ɀ��c�v���gA7z/F���v���c�$V�6�O��d S�r'Vg����jr��8x�ɖ"l��Kk+���a�xR�Y�<M�k�(�6r���)��xX��L�6ln�0����0��x�-~�r4��r*��������*;hq^�^X�_Q��j(�X�3��_��U�q�[�,p�Ax����c�V��� �i����QA�eg���rx2H����%��I�Q�W(!z��=�o�T�&���LK��¨����|s�����y{.�y��k@y�)z7�D(�����b$��/@nl�q�NL1N<�M��v[g�,G�$w������i����v�=�Uu���`���8?1'���r��U�nG����J���ˡ�4B�6����_�t��|��|;���$S� ��S=+J�2m}缐yئ)����כ"����"jAmS#4:�K�c����x�ET�n/�ߴ�w��f�Bh��Εv�啱}�#��(� !c�T*��f���F�5�*RSFό2�W=r_�st��n��2?���X ���P9��(ԣq��9y���w�cF�!+)4Z�B:�?���K�s �dh�:*�4��h�:|�����*�����%&��NR>m�JP��W�����rsm���k ;OmĬ-Kŭ���%����� )?z���/�?[k���9����C/���&j잸�v(+J��:�[ϣ=n�A�j,0�#'����m��s�|~ YI��-/n����q�z����7kx��3��[��>�lI�Q�ZT���tl���L�Q���O�m{~D��4�I�L��'�/9� �0��)�F�����`�c��U�\��� �-��"��F�(U!=jkY2"�^�J��]�B] v��q����خ��wH��q�W�{�B� ��k>�ӎw3�� PG���<a�:�&a(�̹u���@�U�o��%wd\��蒽�iy�S4&QH��ѥ��G��B�x�� +iPU��_z��x��/u��^��P܂�s�u9�����B:�����+��.���F��Gw��)m9������f�צ������cL��2�=1����������R���`�O���1��nn=���_�b�yt�8�v��Ra��8^&I1���KA^?2ي�+oGؙ�F�{�;��)����~:Aҽ�EiòV]��[��P��šf;���/�{��>|jPs�8B��!=*��UM�\���/?���ÉM��2�j�I.QLZ���-���4�� HN�}�lO��o�>f�H>�gȊ�5�E�n\^�Qlx]I�����X�����K�Y�ʧ^�^y��ĤE�'�7�<j˦/gͩ��^�� #.�AQ��Y�t?]V���-���u�B]=o��NV���*lK�8Uf <�P��6Ѷ�����a%G��5�!�Z�B��Em o��Js���<`3)���r.4�T !�hc�B}�Z�b����DC����t�c���QP���� A�}n?P���b�6�hy�|�[bﶎ Vځ�P�wn6?6��G�5�F�Cc��h%��dT��4W�f�U,�;���פ���������>W���R���s��OR\��!cR�C�e�8o��3i�ؽ�4 lC(���H ���_|�p<+���]\7�GC��2�H~�϶�+���=.#�Ê�X gR�J��˂�/���]lNU�zg'�T�z��s� �g�À�6=��[Tg��� M �m���=�p���|r��G�D�O�H������`��D�&�U�����<U�� ��7�(�ڔ_��x�bZ@�' ��u�������;�$���D_~�ǝS������wnp(�����[�RTIe>�V���QK��^�l�A �4�� �rO�y����5E?x����7�������P�ۊ�/L��j��a�>���Fd����`�)�3>������ ϥ������}*s��p\K������"1���B7#���Qx�)4�n�fp�"�B�<n%R01�a��^�u�;I���Ί��j��L��`m���;�����BtJ�t���.�Hc��{r2%�lۼ5�`H�����<�抳|�MQ��d�Cr��}E���52^cE�[56$J���n�<ۧ���H�����c�[1�m����ɞ>{̹?ޔs�ְ���K(�����X��hVJ�����E����)�����#vP* �BSAw����hOi���3cᯊx��8���b���R� c�W���� ��r�������Q�.��sc|�=(�L�I��C��N�dt�iex�3��@n }ʒ*��J�6O)(5���҃Ѓ�E+�(1�kv�����(e�"C�"gB�!�l$����s���V��V2~�aN-�&�i%��g���A���-=�@c�I��ʟb�R��PRLw��J��lwj���xeG�e���� I��5��� K�D7� ��#����~�:w�lHf����YVh��rlq p=�X��-�Ľ��9�#L����)M�� ��Q����f'T-'I��.,��3��÷�������q�܉%q�NJ�t���R�00�ڙ�=#]��q"����Đ����C����3�����-���C�>�Djr�v*o���0=1�u(As����N/�F�+�0�}�B�E χ�d�4�W��|R�M�z�@#�fѻ��W��O����E<s�Ir������(A�C�~�L"q�y���!JBg�2��m�^/�>��elj}������X)VT\�E�L���]Vːkc_{c�
Static task
static1
Behavioral task
behavioral1
Sample
d87490fe72c11df8476414b03d613fff99a59894193c25121bde71c745b91c5d.exe
Resource
win7-20240708-en
General
-
Target
d87490fe72c11df8476414b03d613fff99a59894193c25121bde71c745b91c5d.exe
-
Size
2.4MB
-
MD5
1552573045f153aa7269a30d3a1dd151
-
SHA1
d07f6a1ffcc0bd98a80ba1d5574425a2bd1d3d23
-
SHA256
d87490fe72c11df8476414b03d613fff99a59894193c25121bde71c745b91c5d
-
SHA512
8301e552f8d1019bfc9e85d6249e329b767b95b7092d537129665d96ba62427b7a806c97b97ce0f314cd34a7675852b3f553519b03304bd12831eafeac446460
-
SSDEEP
49152:fUJ0tlSm5vh9dwM4tYensXVh9uZl3Rh7LRCFIg6EWkJeectmfdF:M2VR4t/sFbgdRh7CWeeeww
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d87490fe72c11df8476414b03d613fff99a59894193c25121bde71c745b91c5d.exe
Files
-
d87490fe72c11df8476414b03d613fff99a59894193c25121bde71c745b91c5d.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE