`�B{[u��A�%��+����,�n �#�0@����!�~ 8� s�����Bg^v&RJ]|6���3��^���On:���ȃC�OZi4�/<^���m��=Ɉ�_<=XߙH��i�ٷ���T�To��ؽN�m2�C��i���9�L��ܵ��U;�~O=�9#ݜ;Pw9��Lye��������bʪ�m)��?l�#��%�E,�>���x�;���f��ΧɈ����a~�nO�\�\&2i�0�����i������)�F��>�#_�܋Ւo��?�����<����xї��qʅ>onnXֺQ^lH([��]�H��SX��p� ��0f&B��,W��!|&�;�K���O���1r�����IcCB���:�$�D����s.�cf�Q8ñ [��Vݣ�5�-�*:L��Ϡd��AІs����}o�ʯ���cY���C�Kx+������*��t,g���^�aC�\u�TH�14,���� #g:��}v�-ȴ�֎�ԩ���RA<}�W�}�̾��Q�ܥJDb,�b��}{�H*Ü��MPm&�����D1�y�o�b�q6���4�9���^��s��i�$�����?�ӊ��E��Uه��P�,V�=��J��LJ☳�1���<_j�c����r7���P[ Ʋėp�Ss`O]��KͳyPܺ��_7r��l�{�Kw� ����X�p��B�Q�n2%��ݶ��0��3�&����îNy���D� �pr�;��AR�3��}S�ia�o\��RUپ#�����Qw�?R6�/�2�4������&t�z���8r�'�E��Qƞ ��/�$g����Y���!>VCe?���S���i��Ӝ{<䃗�$�(+G�� �k�^�. g"~-�YA�G��>1 �!�2���hs����z��8I�q�C\�?6�yIh=�#�QQ���YM�?Fy4��������@���Kad����g�6,B�������6e!{m�����1?w{ʗ؇\�� i� Ӵ����W$���#4�)~P���}b`G��ZMyP��b:+*�U(l�!R��\D�4g�O��� �mL��$�p6�E��`4)&1�sq� {�e�����R�5�k��f�#�#�w��wܠ��ҳ���D�d�L��kw��;��܆� $^-q<1��>A��6H�o�>ʨ����?u,}*��C�?�IgRv�(�~�i=ς+����r�%��h��F�X������v������8�&VxU�@��q~�Zx� �IA�D�*�<cs���<�JOQ�5������X7]�����?S__�L���f^�đ��#�kL?��,Z�n~�B�Թ�g)�)���j.������=IgU!����J0�[.C�Ҩ�mc~?< �o�e�b�^[Z;��%^�yw�x�Q�[�}~����6�0�ѯC9�=��xR�ϥ�"(�� �V�����Z�I�O���)DB��k.ΗS�ѻ��KZUg4@ux喘�h�jC.=�<��}�w����^&J��~��Ur�B��R�>�+�L�GW����V%���K2��yb�I!�a� ����IgP1��Y@�L��Nڮ��J�����.���=���y&�_�3N����w�teѨ$AA��#Ѷ���@��Y�?o;�)ڣ�7f-/��iP�E�$h��W�[� ��smi���z�z�����5&�N4Vǭj>ȂO$wr���ql���J�Ab<��*`�s&����FA�A!a�R]ӡ[ę��qJaNl�q9�rIX��W�/��d=�cR'X�|m"���oD�<�ڍ����/���E�1rj&5����7*�,X��$�#E�g�l&p��P�P�~$�}=~{u��s���3��ʡ��aH��g�#�P��T�j�h�FS0��7l� ���A�L���5Ȥ�Ңe4��f�z��u 4��B=?�h*�c�5���w����jV���X2�#S'4��g� �fB��RN���E��ߡ9���{C8�����}�qQ��xO���7���WZ��� T���PA�&n98�ͦ-����\ ��xhn�U���ٱv�͞�^$>���~����+^��X\)�{�����n��j�[�` \��X�zeZXeq����6��5l�3��T�]+Яi>m�<-@",ؾۄ��wP��U�Q���R��*��b8b[��$M8S���㳧�Ts����c~SFl(�n�$�t�kZ��.��tl�V��r�BQ�G}9#�Ѵn����}�;���c���D\$y��An|e�`,t��?x;���K����$����q'\��a?��v9�,A�m�w7S���<��qz��>f���䬪(��M��`GBp(���=T/J�D��Ր����5�h�b�+�)��#��h���`���S�'���5�XD��� |3K2������t;I����.b$�RyC�qH���/�b?�w�o��I5��SܬʃCb��?r8Jib����C�&1��k�� �1���3'C(ähB����D�����t(��N�x6h�.�Qlc^����B�XEkq��V�g������'H[ܿ��,u΄"���cmA�Lp������ H�3����eZ2/"��������:�Q�͚�yO1�pS �j���zB���sa �08��CC�cn�O�ڨd`���u���H�����hzfo�L�P�r ��4#,��s4��Ϥ�A�Pז#Dp(\d����I�TJ�|�aݽ��yg�KuQ43c7Sρl掄�&P��57���q��w6���qo�N�@�ڑƮd����rr��?ZON�El�N�� ;"9Wx���ي�����mW�/n��DՔt�B�� ^o�?7OC!��=� ce��E�Zp��¦���/���v�H)�V^���-���7�����Z&��4�7h1--cƶ�3��'����`����E[�ih������z�VTؠ*�Ľ�nZ���tY�������1�i�2����Q�)F�KK$���v_gY�Rd�疄Z���m(���� �7G�w�i6۠������a��\��6�B/P�!G�(��߄�b:ߐ[��n��+p�� �#1�'GT�L�S���QG�f�Ժ�&
Static task
static1
Behavioral task
behavioral1
Sample
4db680528104c9edafe50c7da30e3e033ca0e36c3668ebf591863a9030f5aa01.exe
Resource
win7-20240704-en
General
-
Target
4db680528104c9edafe50c7da30e3e033ca0e36c3668ebf591863a9030f5aa01
-
Size
2.3MB
-
MD5
0be478f5c91d051b07f2dd07bd326add
-
SHA1
19bca3cd2457fbbc77ca77122daec931416fb04e
-
SHA256
4db680528104c9edafe50c7da30e3e033ca0e36c3668ebf591863a9030f5aa01
-
SHA512
70b8853dbcc2f35efa92cd1ecd02dd2fd373b66265c3d81157eac7094c2ef7238fe30f43e03a170dfd78a700439f53e44499b1be6365786c4bdd7bb50d244a0b
-
SSDEEP
49152:/dHUqCePCKxdDjOJD//z8RY1SjpOEPWZlb/QUoxtXHjyFC:/d0YCKxd/Y//CYIQCGbYrx5GF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4db680528104c9edafe50c7da30e3e033ca0e36c3668ebf591863a9030f5aa01
Files
-
4db680528104c9edafe50c7da30e3e033ca0e36c3668ebf591863a9030f5aa01.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE