.QE����i� ��\.�I$r��+�����Ε��#$F�� v��W�%��I{=J�%��>�xvp�I���m��O����N��U�nͮuDY�9��������^���E�b1����q�Ժ:3���gڎ�m�ES`���v�8����1�`]��QTe1�����Ψ���d���x �i��Cӂ���u��U ~�)O�D��6@7��곣=DUJP�*���e��%q��5��:ˀFP��Υd͕߫�F�6�K~�d�I��a��Npkx�ߊ���%MUZ�8O4�Quo��1���l��I��J�Ҥ���=�)��W�P��b�mG����S���(?���d�5�����5�x]q��$�~�긪�_����=4ᯟ�Byڥ��Ug�oIE�I.�u���g���u���aO?�'�ê�~��l��H3�߽v� �x���R��R�2n�rY�?gU &Cq�tt��O-��)=�����Dѷ�zk��Q?��t��PYiH�Vr��;�J���?�42�ΩΤ$n�ڻP���v����ҩ��3�a�;�G�\�$e���ɩ�1�Z\�-��td��'H����yV��*�W���+�:N����]l��I��9�Z�G��zBn�©�v��֭��!��ΐ����x].ǚ@&T��8w����"/�Ǟ�7��"e�� F������)��g�K� c���Ҵ/E����Ȝ��Ec����M�U`@�v�ԦM�[2 &#ER;k���=Z�L(��W��5�^&��oo��܃���KU������%u�%q,iۚn�<XE {�������L�-�Q�SHZ�������'�,�ފ�BӨȁ^�BQ?���<��m���c0���,��Y��?Z;|l�^� �w���=���5 �?���X�#l���u�� ������De �ʲ���y����p�W�����e@ ]!�uI�o��.��Rk��cF)���f�)%#�!Eֶ���]ao���H�Θ�?)�����By���Jx���o*����Hm��C��$!2P�>��a��M�{��uZ3�Y����{@rR8���*t��Yg�wj�KB���.h�Ӂ.����uo�/v�'B��.�) � ��o��lLy����? /J�46,�P���e� 4(�Ӽ����̓� ����)���qq����� AV6p���[���ۖ������;h�4���e��c���p�9������T�5E�Ć&$�$`���K^I�L)NQQ%nj}Qڿ���C�#��S���mH���c�������7�]a��X�j����5��F�(��&%Cd)�S��Ѳ������Q��DZ��}�FNcY�]�5�k�����cO)$��r�_}��跄L;�w��,��J��an�ޥ�&���������, ���9?.���Wf���7�h(�f2�F��!�:}��cJ�Oq�����*K��Óe������Y��R����M3�Mw�u����T𭍥 �(���Z\Ҳw4Gf���D�mT<Y>Z<Y�3z�Mzk�$�k������86�u�@x��iP�!f0r9����ѵ���&�Z�Z�vZJ-j&,e]�x\����d�j��[2����@�� t��Z�뀉��tX��.�j�yJΘ�K~W���Ưֻ3�����A!��}�58�1����U���d�̘�9r6��F�E�:]��/���ZW�8��5���r���FPi�Ǘ=. :�M�iF� �^!⊏|:W�F�nb��)B3�&?�ո��� "��������m9G��%��+���;�Ԣ���9�$r���P!���xHBۄt��ȫX���,��i��Y��QΖ;:�p�s>�PE76�< .��2}�����7�;u<�x���?�e��N�$��cD�����%�IZ:�E������@�(/k��Ha>���dx�)(���o�t����e�_ڪ-�酛Ny�� �cW[QqI����3�af�*y� <�s�/�;�d�7���~�~�I2�����/G6��~� �;}wm$��i����8���A�(����7$�R�g�,�V���^ap�qё����(غ�M�;�vpy�U���F��PE��̖?k=6%/2�؎#���ظ�Q���X��^E�4zS�:���na�� ���[)����˩�Ě�k��`�<�L&�I�4���Ҽ�!=c,N�/m�먼3���w�(E�ʝuqM��t��W2�'(����c���~u<z�9��T���j��{�VO&����nk�v»x����JF"j2�i}�g��y�zm��f�Q#�|�x �٤v7E����J�/ �a��"rl���H�D�������ƊEX-�vB���B�bXfٺ���#'�� T��/b2b����I����3mY�f�ɷ�;`&���6�>���tD������P��m?J�i�$M�W� p�:��/�#��Pƍ7#��ȅdx �[�<�Z�� �K��;O��R�_װ(Y�M������$(zagL"���x!�!��,^�\�e_0&W�v�6�ڒ��h��U��:_d6�D�r���0y�|4q��K�8�MΎ����6�/��h*Tab��+7��_|��_�f�H(��+���Aϥ��A?sD>`*�*�Wnlv LY��^�5 ��?+�o~Hߩ�\V݃\���V�e`�!9M����L��/�@4Yx�Ӟ:z�����+>����Ͷ��� �(�`��eT��������"��&#�K�o�U�ڦ���F�R�g=�g+MvE8{m�����Ƌ�NE=.�XVWɉ=��q�]?����C���k�;qܙ�=<��O��s�w� �du;�(�w��� X��r�x;l�q�>�~J �[���)���nB�_Ӄ���"V�>9%��]n��31�=Mş�&���R_�2b8&C D�xeo�g���m������jbC�u��!����W�ȹ���wj�}�<_�dV@�s�4����3�}�$m褷�ZBҍY��kxP�B���� r~z�/u<b�JQ�x%�F�:0��]��T}��z��`bv�݂� �Pjʒ�PJ�i�����q���E�E�����i�d����G�+bV��:�IաX��Y�/�x��Z����]N���5���������Tεi��|R�v]�W3joV/G��HFq�ii���
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240705-en
General
-
Target
file.exe
-
Size
2.4MB
-
MD5
e0525803e9e18b3e3a73b6e999b40284
-
SHA1
f92b719f6e774c35836a582cff902f3f5f54c6a2
-
SHA256
59d115c4f1a0035301f09d9697f988c7f667d0131582dfa7a28990fc02baa086
-
SHA512
dbf56d01de700a74c757dee971b146661c93d284590813b7eba336235eb32aae076060f45467a84eb2541db9926a0cdb66af1b8885f7a9c07420ebc58da2c81b
-
SSDEEP
49152:50qyaLYgipQlIeEk/AuNzOmAhHmjLpyKMATpTaqNo/ZboV:MCNoQlIjk4aOThHMLpiATpTzGxU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file.exe
Files
-
file.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE