���L��� ����4�pɏ�u+M=��&�J\��Fhy�A�_���$\g�ؖ�1��b�C\0�E:2��|���E�^SCGJ�"֊/�zO6K�+xru�0�=��硊���*��$R=.��,���t&(������.Թ�����N@�aTMh@@KV�Цy�᷀���D�j'��4�@�Lf��ݖ�KE7�{['��PL�5�Y`w4�5V����l��z�z���:w�JO�^�b���X��s�V��O����6�ą@����J7η�F���ObBВ^eJ�\�̃P���@X8��N�����;h7���{NtLJlW�GM�I�,�A��+^��Z�Ϡ�N9dM�&���F�S%S�����m�t8z�v��������7��zFƃ�Q�����!��J%��`�S�J�����s|���r��/���Ʋ{/ߞ����?j?�|��ue.���$�z\&Yl�5�����Rh`���f_M���%��Ѹ� k4��(&;�ia/� ���[���|�y��L�a}ݐ���M&����Z�ë�EY1������F�o�B���<б\��ZF�B��t����ۀ�L�,ة���`�'.����Zxu�d�TG)Λ-q`� M�ܨ�_|/H��Al�=���I�R� ]�é�Qc/��?��/�^�uQn�|:xqɍpB����?>Fqfc�F�(O�5蜃�9�>�/O��S�2,��Q��g'ᑱ��Lܮ~k'��!d"�r�L>-`��H�8�Pb�m�t~�$wfo9cOTw�-y�[��27���|p+�tFU�g���8�j!�+J�;�ZK�u�l��� ��_�eكt!{vE������P�_�8���@ ��b;��T!�ݶBU[��I-.r�gL�wC.���Z���H(�/X'.ƙ+Z5ח �Bl����m����PP\?��ٶ�u0��� D��n���Dԓ��H����#ϕ:��I¥� ���).E� �o�.Qt\ ��{W5����ɓS�4�f���!ł9���&�ߔ��ڂR?��lcg��؎�b�����so@%�����^kY7^�y�+��kE2YtqOk"��s����� �BN*Ң����N�Cb�x�����Vф a�G_���e�m�%��9�lJDVCl��͙����-=�Sl/�O֡��W�j�^J?���� ��9~to3]��%vy�#���<Jo�d$Ư�+�k���=��f�����\OB�(�b������YjcuO��|�@���"���HMRm��xؔ�9����X8E���<Xr��m[��U�NŌup����a~4�ߨ�xe|-�pl����Q�#��ҿ�|��\���ټɬ:�~q��DN.]���r�sLTI�` I٣�$߉o�(�b!m':���E��9ak(�7�c���uI|�箁Us>4�\�uz1۠ � �<��gO��QB]�N^[\w\ 3�/�LNυ�>*Q[7�;y�3�쒉*�4�(gǨ���C ����.No�Oj �E�l�X �ʕ������ %Ќ'�����W Q���p+<��j���10c��!-��ݵ}=��8��2/L�T�۩�i,M�-���7C^����1��"�jyiZ+�m�Ou�H���~g�2�o� s�"�#�l�S�Ҩ��5$�����z7�)�vّ��N������`�䜇����5����DB�킆JI/�^�����>�2=;����B2�� |IA�ӮNs��i����U����v��ݶ�$a��ΌM��؇w��7��!<Cnd�쫸 y]^-������J҃��>f�m��h��P����_������P)%EA��F�Zi�h�E}�����j8V��,������Xx�56�B���Dڨ��R~��9-��IK}e����o�js��{�@�'��m�M�a����m|7��1����ve�Q�1��UE3D�*A�ꍢ�f�fм[1����xU��hV���gZ�H�r�?6�şP(5�h S�K�j��� @��?�!� � ��H3ꈲ"�)O���qùa(V���x����{{4���oĔ�6���|�\��R��(g����s+E2����;_���L�#8~��.�Z�N��M��hX �HjZ\N.]S���YB�j�f�r l�,���Y��&��E{��3��mLoP��V(�9�@ƀ�UL�p6�6p>�g�t���9��d͙�Yr�A��'o��B�⍪���ȓ�6��W��+[�O:Xþ�&����B�C9�Cs��z2R��S2���/(��փ�+�3���r=Iz��aB�/߭��X������9�h�jF��sy\ ������������=;��ϭnX%�4A'��8u�U��+O=V��GM>��.>y#��P\�xBB%s�Z=}hK��ڝmA�0�-�x���DrbK��6/:욞2�$�������G,t/^� =-~���`�1`�i���@-�$�:,\F��0�͡;��@P����a�7�+�<'9/�_��&!�[�i��+Tt�Ml1{��׳iE��|���Ԗ�����RT5w�FA��Q�Aio˂DR��{�6�QN��qp�Dm��t�e��tr����M�� �_�6^Ǖ���w�,�����Wfɒ"�N=�D�~,�|�i-�+�vֿ�3�MU�G���~H�9� �G�07 ��ߙ3���#ژ)�F�����'qǐ�t`3��#'E������و�j���F57#8��@?�X�!9"�Eo�_=}���P���7��\��Ydy��➥/6H*��&h�~_o�� b�Ɂ�+s!(�c-��B�D�&r��0,��/8�������Ar�����_�&���kG~��$W�χ���q���A��gQ��e�C`F$��}��w�t�����c"f#�ï�����-�����"�3�q�)����b�NW~�C��"<I�Rw�"�6��ߐ���1�D�N�\ڒɄ�V��b��Pk��¹}Mk��|����nJ�GsQc��'��kɈ1�$���E�̿��`鱠�?խø� @ |�Nþ_%Z���^75��I�����&,�Iib>�c'F�����Rᨻ�1H8�Z���ٚ����Vwkr��a+��9eeE5��lq^XL�&#�ҕBn �t0���\�w ���t[2$��v�T i��e���%�n�0���������k�1�>Ɏ�N������) ���'�%�U�<!���EZ��J�Zw���!��}ʹ��-��;^���<j"����t?k�O�Ϳ[��6_j\�lW�����!�e��T�ݒ�"���S���M��O���"SuÔ����Г��ѐwH"��T��t�'����{Y C�70�W"�d��� `��?5f��� �)���Ǘ(B��U��]B��~a��'E������8)� �~��4%el���U*�VI�����78���-��]�ȴ�]��>O�NS��k�Um���|#�2�����"��SqȽčy����@�3�2"���_,��?�T���{��Nj�ғ��(pӶ�v���=���ª.2Y�� ����+v��y�O��j4�šj���s�������<#��y5���K�W�oN��9O�������u�ɛ��YpE'[J����l�j��}����5��;z�C<�Ti���1r��}y��S A`s/g5�
Static task
static1
Behavioral task
behavioral1
Sample
4f7fa12c5af8555b2d3a59c49a9adc8011a9103b66bcb35d6e12ff0cdb9abefd.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4f7fa12c5af8555b2d3a59c49a9adc8011a9103b66bcb35d6e12ff0cdb9abefd.exe
Resource
win10v2004-20240709-en
General
-
Target
4f7fa12c5af8555b2d3a59c49a9adc8011a9103b66bcb35d6e12ff0cdb9abefd
-
Size
3.0MB
-
MD5
a44c09b80c8d4a4d90827a5c81d7da51
-
SHA1
a6553b8b960b076a6a123f5e54a9c35528d9753d
-
SHA256
4f7fa12c5af8555b2d3a59c49a9adc8011a9103b66bcb35d6e12ff0cdb9abefd
-
SHA512
0265259184c84c835a75b010dfc9651068a72ed47a3e8c2625af267bc2084126a228b5bdf99342596170ae380570f62f668f3e74cdb22e9d8c1bb43fbd80c7ca
-
SSDEEP
49152:6VCIXndwd8rtYuMDlLqkJ90KbaLcUL1gV2q83kY7O9YTm:6XnKd8rtL/kv0Ky9Ra2j3kcy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f7fa12c5af8555b2d3a59c49a9adc8011a9103b66bcb35d6e12ff0cdb9abefd
Files
-
4f7fa12c5af8555b2d3a59c49a9adc8011a9103b66bcb35d6e12ff0cdb9abefd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 332KB - Virtual size: 672KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 268KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 196KB - Virtual size: 7.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE