��u�ˈ_������}���[�x��B{])��!���pp������㵰����B����Wڔ��9�����0�!w�jf�B*?<%�04�Q��Ҍq��!�&¨����EA;|�}Yw�0��p7!`|o��-:�!ހ& ����v��[m��F����m�P� ��Wl�0��s6��V݆��5����lI ���߀M��g�xJ��#�K�S���ŋ��T�9H�}x�|]�Q���Or)�) ��W��i��*L:(Cx|b�!� Γ���>���m#=9���VƩ���V���;��xF��bS�5��-��GeUioQ��)��Gַ� �P��|\�X\9UI�������i�-;�T ���W�1���PHxڏV�6��������Ѡ�y������kIu $�e��$�y��AH��8���0�aȬ5X[�i$`UY��_�����t��@������s�|� 6�~\,�"� ӽ)k�@pt�oVcNQ�2";��8�ϹZس8��ص���u�A��,�������նhwqz�R�e� bїq=/6~�d8k�{�.���%��q�����%B�ؔqK}���] B� ����Bp�ؚ�##�p�9�;�s���I+@4ƀ�1�&sy�0��ĸ�h���� ���� �#���ۛQ���д�\b@�0Ǐ��>ӄA <��HMȤ�.��UX-��R֢pY�v',6�d��l�<� t��+P�v��©/4eq-���<|��E�Q�nb������t'ۈ�fcY�"�\d���)���Uȭ� \y�����ߘ;o��{ ��Ѧũ����1<�WP8v1�3�f��h[�g͚�}��[7A !�?�j<�eť�,"�d�.��5@ǁ�2riP���|�� �$5,��\�:�?V9��S�"�s���=�Do �"8$]��M�8�b\ &Դ<M�����p�5�F�t9R�>�|��mq>��xL���P��՛+l���!z�3ۮ��Z������8��]��B�+I���Ze��c�@3���z���l�(Q��c�l�~��� n~�'s?ڎ6K�t?�٧�,�A��v,�U{E|�@5��]Rk!i ���}19���.5�&.�ge%ne�0�tw`��PS�s��D�D��&�Oe���9�]2 � $C�#۪�!j�2K#�ԝ1XB[ �P�+[�7TQ��갟��@s?���;!z@侼�g����y�I�+B��pH�|yJ��^�N3IC���X��~f��浾��xS�/��P3O:��������ZgϿ 3,R�cE��}f@�P�V���<s@ �e�6>Ɓ��9��ae�1����S��t�G����9�2���!���Z-5.u�l����ZS���bL��۠�dZ;��d���/|�6�*��䴑y]#Z��ϥb�֎E@�����%�^xI�3}�ـ��3�-ЗJM|?�X�D 7�{��`%_g)��`� �;�1d����>&��L4�fgÞI�� ������`o����HC�{,~��I=�@ ��<A{=������� ���L����.�h�_yi��b8�ne6#���-����N��B` 4ع�f�vf ��#�=����d�0��������5��r'L>S�I>�V�yH�lJ�`���_�)�e�u�����_Hh�l�o����I�pQn�F����7s)�n}Qy��E�l�ˆS.��z՚dy���G�Oz������--���|��] �Skx�A��8&.�c�Ŵ�] _'��t���x��/A��+OH��6Q3�<;|����VP��Ȥ>5a�7_@$WN��P�'t�KY�1O\Ab>����R�WI3����U��]Q�`�+���Ci�*r�@���iԍ+]�ꡥ��N�?/ �^J�y߹���Vj'�1X~E�G{�?���l'�a$���3VЯ�N�f�搷��P좓�=�ƟI �V[�� e�l,�Ҕ=r�>�h٧��į�0/�9u�f=wruɂd�~��*���$.y�݊��U%���[�����̅�}�I���� �>T��v��"���PX�w����N ��m \��V�rm�9�B��'#�:Pk5���哀�a2��Uc�P���ޏ�GIܓਟ������東1���0���ɳ�~�Ø+Ϗ<)G���*���Ք��R����fK�s��7(Z��Ie t���a�)����2��:ѣV��r��.2�7?��Z�*-]>�c�a���Y�5�1�����K8���r�\�|�n6�0��3��| �5�|�fΞW�ҜVJ���헓Q��$XԽ���ϧ �q)�K� gl�C�;a��z��#��6t/\�Kڂ�!�hc�T��&��#���(R���H���U2�B���0ƨ��&�p���"�+����vHS�7����8<��K���kf�����G�K�\k� ���|��y����T�Cz7|ei<xK�����e��F��3r�GL3�6lF�������r=S}��y�y\�<��Ĩ^��*�oVWє�M� ��ل��Z��k�w1UY�VN�Z��y*&�x��2<M�$f P���m/�ŗ�&�\��Cw��V=�6��k����̄$����BI /4��*ן�� A�vb�aG�� �K�{[Vk�Wq������w��KSL�����{�)[��,���co2������3�� 0���E��R�B�[h0��?h���3�9x�q�^�]^1�+�p�"j�g�?!��ĤѰ(y�2��!~���dBl�d�t�>�p9+a�S慕�����/��n��g���*c�;H��`�������ZG�=��F���C{��LPR_h�G��0�xK��Z�&�}�J̎��P�B���T����'O��Z���z:s�� <pӝK��QU�d��I��вh��o����w ��k� w���9��:ƪ���+� �(�g��AzT� ܑح}�U~�740�v)&#D݆��tR�fT��;Sa �D=a��ؖ���!Fm#���������ҍ�g��3�N�3C��p��oO~_��b������.ўh�E�<5=K~�)�a�Β��ۓ�-�X��Ѐ�mM�[�{��:�q�<|�T�@������' Q�W�>3��e��3�ۈ��yλ2ź�v�_���� 2��,h!����s���2��X�'�J��ޘnMHQ�T��x4�Gdny�Bļ�27���t'�%�p�f(�����gjM���V#oև��<K(�.����v�u�V'ߢ�-0K��KSdߔ' >PAEyz=\�^�Rg���BweƘ0WT���3��d�T��v*�t��� %ɐ�~ )P���#buZ�}�|� �(آ�u���l,�T� ��z=��+t8���9�@8!%e�|vv,���.����t�;�a����3�0 ��B���/F���5ر�ni'��i�����V\�m�hں�ک����j����xs4�L)�%3��� FPdʝFHkA���7����q9��&"���~Qo����
Static task
static1
Behavioral task
behavioral1
Sample
da68eede5f489072a8f0e34579d75ccefa0adefa2363cb6a2923c09f3f3d2b0b.exe
Resource
win7-20240708-en
General
-
Target
da68eede5f489072a8f0e34579d75ccefa0adefa2363cb6a2923c09f3f3d2b0b
-
Size
2.4MB
-
MD5
1b1117aacb221e675092b3328bdbe8bc
-
SHA1
8c68aeede370fe98c1d60066e039e7e0f70e0df8
-
SHA256
da68eede5f489072a8f0e34579d75ccefa0adefa2363cb6a2923c09f3f3d2b0b
-
SHA512
1ef104a90c7e9eba6f0a3d16ac2f8a31129374f055fee80296d5c8cee24c7ec6aaa949dc2093ba5a10a11a9a5f0fccd0b2eb3c1ed7b60b01ceb37a888255142a
-
SSDEEP
49152:gvCW+BOth3h/J2rd4Ni8cbFUbooHw/p7OiGvORwkfZQe19o:gazqx/8rdsi8UFUMoQwDeFw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da68eede5f489072a8f0e34579d75ccefa0adefa2363cb6a2923c09f3f3d2b0b
Files
-
da68eede5f489072a8f0e34579d75ccefa0adefa2363cb6a2923c09f3f3d2b0b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE