o�CS'�H�����odv�\���!Rg���&E�"�\�,̨&�>֎��vKNr�6)��n�R����<kul*R:d`z��lyCH�5�@8� U��.�6s�x6��ł���,m�N����%k�e\"S/��c��݈�)������,�������њ������[���cM�� ~�Ϝ>R�y$�xZ�KZs�J����지�3�8s|�Ϩ'@�4�&WC���v��Z@E�Q�k�%��r�t����#<���n��v���j5�B���{�Э���W��(�^x������!���wr0�W1�Ҡ����j�E��[�9���L`�AY%�5�Zt� �P�pq/�'�)�����k�,�3c�R���s�nM]%� �E)5v�KOsXs�������9�� ���G^��\$Ysf�Ǭ�߮WӃ V�>G�?Hf��_���3�?�e*_Y���dex�*RZG]k�^/[�\(X{�xiL^��W1���7��O��d�K�2I�m(�(u?�����}��&��u���g�����Dd�+�g"ճ�L��lXJr��깄d|�1��X�� y���N;�eiD�8g!�T�[o��5��O1EB�� �� �S!I����`Q�}2>v�[��X�-��/�mT>�J:����(��'�9:��dn�2����J}ྵ#k�<g��^>*���xv���`Γ�������/��X;��k+���t�ot�; ��N�46���+����Ȏ%��L����V���c�O#S�{����X+l��FS�<_I�r���*lR��BS[W�,:d����ӹ�2����e2���oc�k�)t�Դ�֨[7e]¤�~�H���#!���΅��8&�̣;���5Ǹ$�����ni�<Q�{��������x|prR�2<�6�pr|���F��� >�s=G�����E�A���ə�P�FZ��y7�&x���Qo<U��jxg��~D,F�[/����٤��3r�ܞ� i"O��l�@�&�.���[hq���l�b��5ѩ�'c���iN�&��L ��kz��l���e��C�����zeQ�������&��/�C(�tk�K$��K&Uȅ-�H����=,"G�#O��Lb\ӳ� �� ��I}Y#��Vs,@B[��5���$�J��o� q�v�����'9V�q�sx��87�u�{ ��,�d�j�J��I����.R�z�^۩V k�Jyq��K�Z [W�J��5�����#�Dǹ��4WFo��1w�'�Ҿ^j �����*<IkVk2�438@����t`iO��e����N��)���0��s{_R�e,�t Ή�ẃ��%Z���6�Kq��?;An�&&o\C4���U���ׄ�v�z\��20�3�*��OY�8��%O�� D�hceU�<2�̥`k+���03�)�q���e,�#9m������ǹ7: ႙H{�U� � q��=��-���\���Tt����&O�ݳnW�\^��j-�TѧE��(�����q)��>TP�92��D�ߎd�U�R��`��ش��A{x�4���hj�T�:��E$5��eU��*خM� ����\�6h�P�:zX��[j�Zጝ��є��3���9���.<�q�Ng<e�e�>�Pl�S���CB�ޡ�a�6W�i�n�(�0x|wR�v���@"��n^�*��v��ܛ�r�[�cvCL���GN��Jԑd{�p\,<ݙEVL�^b�3��x�ǀ���Ԩ��?���^��~.��P��AbvLe����F�pVi{�Tx���I"�]���`� �&b^�bOy������e���U�\$˵<���t w�@[�ן��I#J�����{Y��d����8�������ԇZ�����X�])�$FJ=����2���Zr�������x�,���y�]�D�k��C�yVB(c�t���C�[��4�n8F�k�}iV�+ʾALF�xL�i�@l}��`l1ɨ ��=��6Of�!0����v�\��}��ը ���+ɩ��T,߾Ĕ.?i�G�������|�-UQV���wO�3G.���x[�K)�(�T�6G TbI�y.��eO�dC�FH3���t"Fˈ�X��R5��?<�_���-��u�s���;?��S�qs�U\Άc-�����z�S��.~n����'CS�����^�ߝ�����4�'�p+T�����G�=��N�� ����&8R?�$�]dZ��2z�H� �����+-�@����T>�PgYY�Tևȷ�˼�m��W� AT���o4" ���kj_�u���͖Ý%��`Ѓ����Q��qa�&�S���:��!��GY��P_<c`�UU`w5�E�8��E�u�<7Fc3�b��E#��ѣX�� ">���]�%J=�������Ѕм�No��1K��?W ��¢vvD����]0�i�]ZNΝ�Ca���X�j�H�9o��U)�d�/OLb��˰�ׇ����C��g���W����<����i-��o��5��h���s~��<�Wڕ�Bȩ���1�� a+A��.[m�`/���b}E~��ŋG�����/����җ��'��!ph���?�V xtvά)��J�Q�5�ؙ��K�9�S��?� �/xq��*��ˀ���pj��Y5�'��Gj�����o~�)�Z�y�f���S]"T ��آ��#y����j����4��s�#� !cH��y--��r�/������ytE+��e�<��ў� �F���� �����UP�#����!1>h������])ښw�������-�y����G��M��$�g���$Ic�An�ƷE���Z��ܑ_qeU1b�� ۗb*D�F�d"m�z{�>>�i&���~��q��_�/5^�7.�Ug����k7��A0�' %+��>$�5V�~�@���)K`��{��f컮q����{l�NmuqEA#���$PG\�Ht/�gŭcKT�}�4j�rH{7���_��A�gI��l%��9�n���|��X�K<88Kmq�f�&Z��O�����}:;y����6���FJ���}�R��N`ɨ�^&���T� 5iţA�o_|_�?jL"Ɔݶ�����v����~x����U�%��~Z6��x4 �����7c[��k�c3C��3m1dnG%؉�L "�hyj��e��*Hx�����D-a�C�&�=
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240705-en
General
-
Target
file.exe
-
Size
2.4MB
-
MD5
b5f67083e086299287f0dfb2a7bef96e
-
SHA1
dccf58d99cd7153859d1ad5a1c3f7e348e2ebbb7
-
SHA256
1b6722f558bf4483253663180682caec67066261bc0414d12d6e1622cb848d80
-
SHA512
55c4f5d435a1a27e6c8e14c88e454da4dc2398076f4596a6f983184831db0119c58be9c82b8ddf5ef37265b65b5cea56e5963c871b2be0f8e88064224681d654
-
SSDEEP
49152:EEKU59C+b8stxJK8rWjiw8+gz7RGkV6ladMPlgFUfEIb017XKzyB6su:DKktejS+wtJYlaGIsOKzyEs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file.exe
Files
-
file.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE