`�b�2�6�-�I�Ժ,"�e�Z��|��y�Sn��)���i��!��T��2�~;hPh���\'X-���HJ5'�z�u=Oq�x�Zݼd �{ǔ�MT����;4��L�H�/!sb�!fg��/�c����z^)�I�~g%�~|�7�*��?�82�%d�������M��$�Y��$�]�����/�Z��X�$W��� �g=��j �V9_��k���`�{e-�$��+:H�����A��[$��-C�Ѹ��>�):���5F���|�j��v�嚣3c�y!r�C��y�SE��JH�?+�e�{ӆ�O�i�G����/����i^[�^?�ٯ73/��d� �=�{\�bò�FĈ��'Ʋ?ՅP�yKB��6! '�ӮZ�O��nfAS����@�o�#Vv|6R���z�GcCe=q����b�K�,z�r �?dH�f�<d�f总��(ߥ��^�HE��t��.d��hP@��bߚ��\u��cO�p5����:�*3����Կ�.�DFF�c��o[�`�⎥Jg��_Jb�i�-|d�Q/$���*�� �������X�O"Y��M��}�v��[�-Ӫ3��<��K'�M{x�*��%�����!���S�u4^�4�-ݗ&�v��8;&������j��n�J�ssṳ��� ���e��a-���}���Z�Z�m�ݽ��b�P��qy���V;���z�Bb��D�!W8�1�8a٩ �S>t!� ^�f��K��s�ҿ����wƅSɁ�,Ot@�&�QN)���c�$�����J��8�Q��o�qS���߃�0�qd`����ZJ����l����[4��q�����]�;�U�$�.�sP�R87�=|�(��� K��3H�<�¯���cH��晴�����}�e�[C��>>�ʋd��bbm?s�X7��� �R�$chDypZa���}��ٽJ�3�$�g����@�����U�K�%��)C�����[G�Ẅ.4pK�u�ϥ�Q��� ��f �S�vF5_��d�Tl���.���\0|]�y��`Χ�E��XX�*;��p�̠�:�2,�?�[9��DQ�u�m�Ѷ���z3�T]Ed~�v-zC(u����6m��Dĩr���5(�N�bm}��(��yi\�`���>��Ue��(�b�t2:��ހ4�'�e��Y#q_~���`�A3l��<�܉�E���I �)�Z6���]&�!�*e�Am�'�O�w`E�lS!�. ��*�(2�Х�7��a��QT*�{�Z?Lu��h�Dr,��Ҝ���?o��OC�F�&/�;�m}Т�\&)��R_q�8`0���n�4V��P�5-a����O_ ��E���s!\����&�ˋ���U<p����O����5��2�����s͏Xs��{�,�QʣW � 28B�d[��y`���4a�O�?�7Lި~Zojw���<v�%ΫԽr9�$ ��u/����~R�:�驵r� �9�҆�;���?������ܺ�������W���0��yg+Ԣ���� �/[@� �N!�!�H z�����!�`9�����+m��f���PRB��V��Yw\��/y�_�/g�N$��+���WC�l��^9Ӓ��il�4Փ�����)kޓ:g���m*�.j%Y҄��棥Y��7���L�kK�����S~ݎF���0ԅ���9q{D���p<͌��&%��H�C�2��� "�-�8�2�ޤ_� 6�H�5�:*�(�Ǵ� B� �mh�#���� K�5�_�� =^�3]���u��Ua��Vƽ���gn~N#\�f���H�ϻz�?�]E�%'%y�5�@����A�������>�U�1��)�n c�;]l�r�5g�i6<�̆����/M_r�� ̳o�VD��g7<���~{����g�IO�"��R>�?}���7Ou���AN���p�m"�"���ʖ�w���+�~��q�9�LJɀ��V�����p�+͎r:UK��=�i�υj���_b�K��RG R�=m��� �DZ�Z 1 +����[-�#��!*ʺP�����lkҟ|�:5�|&ꏎ�w~�aiD-`*�j�h����bvZ�3{���p�7l�I�}i�A_��͵��`�����s(�i�N��Fʲ��������8�+lIAy�?5ң����µ)���+��n�0yhP��D���Nlw���v�$���p���y�{p�VE\o�J���$H��z"�N��y��Vx��&ғP���!t5lQSٍ9�t�z�|Sp�t�l�t��|ǝ���t�F�o�2u�e:[�ҟ-vI�Ɠݼ4�8�b����=B=���,��/[&!Qj����w(� �׆Z%����||i�<��ɇR�Б����T��lnў|a�� Pc��5�>�m�[��e��ɘ�"��Q��5y�]w��� �dw�f������݃������k oR�W������L�;0�ѓcPu�X��y�M]@�3!��__���߱��`��brBT�� �l�t��Q�����3/���k-�Y�������gj�FU6�4;fm�p�*\�����>���nl8L߫�����f�B����>�s�M3����c*���8�l�^�� ���[YTt�+�>߭�@+��o�4sjf��r��N���3��>�a9��%����Do)�,Y��t`�Lq�?*S(����B�Y�|�B��cw`��eW3S7��Bn������8��>��������Y.����T)U��Z�D��&p�SF.�l���j�$�'����(����.����=&�J�,d�ۄ�y,=�#8���u�ҩ�\��:��֮�����WP��S�T�4"��[U��ӫ5ѩxp�� 5��6���cXU#�Ӄ)�%f ���z�&k~0w�� ��Ta�����4h����] �>���01��ϖ��A�h�����4��W;��Z����l�im@��B�u#����zD�>�T�#�����b�pVu`�*D��a�G�eVE%��#�R����Pmp?�@�X�u�[�t�������ta2jn��HΡƈ�I�m��xyN��-��}%DTW.GGA,��'R�E�bcD�����n����t �FB�$|J�����T�4*ܷb�*�F~��`�sa�Т��+���Hzq�)i*|]㌎������w���������)"W��Y�%Xa�� ��� ���5��p�������ꅎ���F�q����մ�T�`I)��5v��36���{�ܰl]�^l��{>����������i"��::qw���ԅm�y�R�m fc���C��Ci��p�x�sQ�;h������&B�L{��.G1=���J�M5���wm#g�#���ӐD��VwO�K�I���+�b��[�p�hl�2}�*k45u��]R��s�f���(N���F里���+7^F�wE"��s
Static task
static1
Behavioral task
behavioral1
Sample
random.exe
Resource
win7-20240704-en
General
-
Target
random.exe
-
Size
2.4MB
-
MD5
f7a1094ec901c30a546487c8aa2a3093
-
SHA1
5818379023c31c60cc63df13710b07ea8c791181
-
SHA256
579804532d286ba442de9a9f8b9a20a2d5239eb510558805fa18ec0717182e0f
-
SHA512
ada3d3b87f01ed5db7b0de44f94b128a154113e5ef0fcabf1117ee5250d171d5f74b637a783c71ab5e16c4b7427c089702e63a9080f5661d0d616c5a3c087af5
-
SSDEEP
49152:z7JRjKf3hvcH2lpm74xGmToTzUHf6KEQmbufIJEOoc9z:T+fxEHApmhDTzof6tQmbJEi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource random.exe
Files
-
random.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE