�qCc (~�&�|j0�u�D��|�p y�f�AX��0�l�d���kMxW2e9`7����_��G�6ۆ�S���,�a���ܦd[C ���;��61 ��ג�<!�`b�1NSv�C��]��3�6~Ĩ0����e;�c�6AMut1��[����|�6��e����b��� k�����s���@RV���8�0)�ϸ0� ��?�i�/�N2���'C^����"�ї@��\їݐ 'x��@��,�H-�kiJq=oao%"5���gR�y0��9e��~؇z�54J�0S���}sxRA^�xk��*��qB;�+�ym��x��]j$���p?�mx���=�%\��ޚ��jV������f�Ιh��ՙ�=���ʌ=C_"�p*��S�K��s���3��tD�R-�ޢ�=�K��!��I!����8n�"Ad����8��k�~���Ot�̿9�:���Ƒ����2�>m~�i��ǚi��oW���<hI� I���+�`NIB��쾱���H��M���d��Y�>�nRi���Pz˙S�`�85�G�...ȕ.@;;��RP�Y*�ee����g��nL��aF���\���Ox��&<�@��wS' �)����}�/d�2��_������7^M���P7:�]��FOK�E��� p\����c��*�Y��X��@���Rqc�LN`�/ihZp��j�}#6~�rrb�����"�t��/Z���_��7�7���@x�Au��h�J��ޞ5���`��?�u�͋]_�L�LJ�up�,�i������gve�p@���<������|�d�!�l;��A h��"D ���p;<a���*����1n���M��;Ф�P��*�5��'��l�cڹ�'}�Z3�T_(�I/� ��9�cV���W2N=�%�lu�j��ڑ���ۑ+������:9��Fbr�O"AI ���D�鼹�8s���L��n�f��%���x�6�x�h�CV��i1y�,}[ɴ���h4�I1�j8�Z:v���y�*5�c4�X�~$��e�(��ֹy 2f��E�y2GA��x��iVUp��j�M��=���G�KI��b�#�>+B{��<?��-���W����C��&d�AM~�V�W�=�ߵ�ٲӢ����@�/�xA�9f�.@�d�K��������l�c�(�u9��sz�F���F����q�*!�&�k�jq��JOv�V�����!4�m��yNz�~;��-��>��NE��}�ʔ�b�E�#y�sjx30��i\�����̶�;�{B���8�����JB��U�,s[��ދ�l0����E֞6����w�~ �U��^���"v]�b��c�}��D�՛�:v �� �8|n���Y��Wʣ=�S�F2΅B%��SgY�)��=����H۰f��Ն�j��_Q���~k��o<�lg!!���s�zhe�:����=�6��q=��T=G��'*��o.e��Kl5�[_)D �f��lV�z� �.��uyh��r�^'@ǎ5ѷ�� ��n3����]Ƙ�o��?��d^�'���t7�TL(�+u��(�]1���)�t��/C�`շ��Tv������dEz�5��R��S�o�]X�,';�/�pR��#��z�R� �S`��;� ���H�<��)���}�vꅾ�����r��qZ6���A�d�%ޯ�F�cmL=�[��U��]7�7�]���%D�=¸n'��r_�8ٛ� z0��hi����W�&M��)�gu-��������gf�[�X�pF1-������O��/c��22�w5��F���b<���Xi�d�h�A�8����W���ظ �O�5T�Xog�_zT9x����ҵ\]\�G��6��!*hU�b�+�c��@V��F�Ql��KM��93�5,X@������o�F��Z�lMf1��X�w#��HqD r���`��#%������7�(�Z؉0&Jul*K��T�������[�W������z�7䴴�=� :�|h���Ni���Uw�,�dMIf@:���W���%�+u-g�#Q�|���BK�?]��E<e&݉C���^�ç��� м+� ���B�P��/'5����ۊ�G"u½��ud�\ס��L��=��ȴ�!��tN֯�q�J��v��L5s\c�}|eY�n�7�N;y/�XD ��%�<5���c��g����I3��m܊�_��?2Y��F�PM�@��jtN�$f8fB���o�R�6( ����9J _1��2���@L\��t��T^%"5��|��Zwk.�{-3���C/�R's��_^�br�cl}5F���|R&F�Ǒ��q,�� ��)�B�S�s���/��#��t4/�">���̐��ϑ@��l�#�T��E���9^_�s��)�1��K]ȼNn�؇�U��f��͛�����8^��(��HsB��2jߙ^ɝ�E}\�ȞҘ]p8Xdou���v-��o�y�K�4�ة/i!@�N�b�̰3��[�#l�F�2����9SbFX��j�GA{&��y�^�ҷ�Ҁ2�DZ�}]%�{����l�Ϲ����.�ȵ�Q��MJ%5�<������ZT5B���kHj;������R���Tv�� �4���o��H�|��-�uG1��Z@�q�{���#�'Di����9'��\���n���y�V"I����z/�Kyx�Q�� k렚q��Ђ�Ft<���8-���^w���%����G?Ϋ4R[D�d���sxC�p����ye��`lK���{�S�4 �Is��yd�T���=�8����O�r/z��Fm01���լ�H���x��)t�9���F��|�j,�#jt�*P�Ia(��:��n�H9mbʼn�З�^�7Бy��l5�J����]�,��|���d���{6Z��� UV��,�ۺ5�n��]boDy<�_�r�M#r��������j��J|8Q�]�w��ڼ���ׇ�$/�ܮ�"���y;����I��Xh��NQ'o�T��4m�M�xC��&$����*䧥�^���goI��|B�'�~�O�ʁU���N���3��1��vѾ$JЋ;����h&H���W=y}g��߹gB'��b3E鷤ͫZ��� AL�ؾ9��̭�uk�.�O�DN�/�>�Gx.pn�|�Fi]팓�./�踷�����-:?Y՚��.��sWS�5�ED�D�1��)%i�a�\�"3/UA9P�E�x9ўq7�Jt�w����#���6\"ȍD�4袑G��L�)��uB��_H϶���@��Ng��!�ia�3��AK��*6�H����{:<!38`g�ȡuSM��_Z\"n�̞�AP7b���M�����1�� ?�pG���ne�2�UI(�#D�g���!F?�������x�cY�;�i���\�
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240704-en
General
-
Target
file.exe
-
Size
2.4MB
-
MD5
329916de2caafba4344911bd2ca04740
-
SHA1
12d9d708ccbce1890efac78b1296c72e3f4fa6dd
-
SHA256
7614f3191e218056402bb21b5349f37435d986f7d81954555d6b776df808b18e
-
SHA512
81f93b8f5ae720fd726b7a797b2cc9326942821e42244cb30c4a0140ca4299fc4e24df64720ca6871b31e936db7bfaa66c661ebaf4dbff311aa6f713f2ca132f
-
SSDEEP
49152:oyIX/s7XvoFv+Qm9Kyj04TZXXdRvsz2VwLW2CPdULs:ofYvYv+7VNdRve2Vwyi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file.exe
Files
-
file.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE