O�ǀ�-ؙӧ��a�&v��~�{��Z�zV� W���p�3�Y��������k9�e�u�߈/Hg;���33R��������통b��b2ȼ� �X��8����|�"aܟ���B=�bB= �o������fQ�T�_bR�L84U���Ŧ;*��2dx�D��-21h�K�2�*xW�7�3���<��\������ϖ�$���Zv�q��Abs�u��Z�"��z�<s�c�2����j���-�p*�bD��oa��Äg�<(_�r}��n�����EZ�/o�KA�]���D[����?iMSܖ,�F�a��6�Y;�μzJ/I�L��?ʱ���I\�pU4$��w��=��*�9�x�j���}2|nI�7Z�����L� �5Ī��b���q�a�>�N����=���|�ѧ(�P?3��� ��#C.*�`c�WQ �U�,%_W�fu��V�<S�t�M�$�ꐔ��_��P�g�o������`�edޮ]�iUM)^��z��n�q���34Z-�oOUnS�X"#� �b��L���쪓����:l���>%2b���(�����>�_�Ji��WcB��M�'���q��rpE��h�.6��oBԶ�8s����]L�4N� v�>�3I�[���+ �K�f�3&�2\� ")[� ��x-�q���N���{g���`�G�N6�L���^&�0w�S���s���E����|��XLr��+\_mw��6��yp;6�sK��'l�0W����[�H6�4&.&�� ���>%�'�@SE�q4�ה�2����I��KN�A��$���=_��D� �W�ۛgt�7I�\�� �p��8��U�>�l�L��$ə����$ϋ�"m��Z��ܒ,m��.�^"(?��w��s��g���("+�t,�x���Y������a� �5�IJČ�N�b"����J��Lk6lY�kf�1�����b�>�r^�AZ}Ѕ�{�] �3��9��{n��\p�L��R��&���E3�y�ʝ�PK^1?��*(� ��V�!�n/�\܍� y�K�F�C��ߙ`��ۊ�D'��k���, ��x۩ZGb5!�7����P%���q�1 �7ٴO�.Wr��F2���Ir�������w`Զ�����zI�Rt��E"�����(���j|��QD+|%M0M�-a�{~�K9��=�F�����oHn���b��3�<��`�/���/�_"�(�6��.�0��b���^:����g`���@�$%!mE�*�c�)� �#��#�z���H8&�(i���kr���H��);�����}��hο�!-���8��P3���lR���L<b2|��1��AU��>�:��N?v�"����o���Ԝ3`H[�cA�Z��̪���-�g��v����-�ڃ���]�tt�i��� |Ȃ_�r'r��t���Z��.�� 2/�Q�*�wQ=u`Y���3�����0���l�Z:/dž��9�q�L�w���!'9;',�a�ەw��Պz��ps+hU�'�`=6��� ��<x������$�䫁ޔ���#�g�p Pd�]H�"�j��]_�e*I��*�+� o���^.O���ӗ5�:� ϑ����Tlڲ�yQ��l��r �oDvˏ-�zj�4�K��\��Jy�Q��("�X2R|���49�Mkт*@���U����x����ur#8���F�{v}7LK�_��x�ɍ�Nz�>u�V�k�U��l�6!o��*9T��#�zZ�;��/_u�F'}��,H����<�]��`�Kn�K��2g���#a%�(AW|�˜��!�ct���dV��!�:xɞ��u�&������?T�5�{ �hO�Q?��mu&��?��(@~�� 9�z*uSҼm��K �S���G��Y~6�XBiIAy���Ul� ,�n�e V6��C�{k�f�R�߂ ��_��B��U�����]��;?�*;E�������RP�L���]}��; "�Ld� �A�ͼ���t=*>����=I�7��,��i�]-rCJܠ}F������>AYɾ"�gg����t�9C��C�-q��q��_�3cVF8�R��{��u���>�s�.��St�ې����"*���%���pM�����G?�n'������F_�N�K��l�w�������Ge]�|���������"��]�y՞A���{v�zݍ����t�* p� TOEʹ�~�ȓ���*WUQ$��U=_%�2ՠW ���D%z�%HI���� �d��tw��߮������s�G+0�nQ��D�>c��jBS�M7�ܧq1ftr'��%R>��A"͉jdP���e�y��&�_Q���s����V��-��`ꎜ1d���+�T����q�9�����-E����kq���'��O�\r��_nE@9n��T-O�Q^���/F�_hs�x��R��ƥ�;]�˦��b��R������Q�j�ݬ˴��l���GV�� �]�����=~� �����_9�� �ˈ.�庲c��_gs�b��W9�����KE���^�K��g��v�R�@'��,,���\�z ��uY�' �kb�������]� �����a�;��<������^���J����Xg�L��:'�� s�=��~���t��Sc����v��"��?�|���ɴ����ȵ>��o����M?ݟ���5�Y�<Ms��[{dMQ-\V-���Z+{�vy���Ye&���*'�ܱ���pm3�Sx%��\���]GF�ኜ�@drE�j�{ t��7��7%�����r\Zn� k6�y�@�����)̦�� �����gn~N&��;&vd�NA����:%�L���py6�x�� [���8릛�۬ B�v��F���V�J��I��?���\`���r'wSԐa�����*$u���BXgB�9�w�d������t���ӻ㻖���!��4�O������rQ�q�{�3��;���a���띂�!3�s@fR�A�@�ڳ��A�M Ԣ �-�$�T��6��Aj�5�'�.�k��*��3Z����ց Bn�k�" ʯ��Ho�5W朜��&�J�H�M� p�����\�݉���b�,r(/�d���&FUw���(]���ga����^�xΜ@��B7�i�_��r܉��>|qlLJ�'��O��%���gq`�?c]�u0pHޕi/�J�[q0�`f5 NO,�#�qN�,5���$jI��'G�C%b�����8����JB���T6E��t�jS�o�c�Q��*��S�G�0%�ŔBj�q� �����BF5��eh�〲҅ZM���4� ��I�-�2Y*-@�-�"Z���H-����G�,�����9�X���t����5�\���]��M��`%��,��L5>q�9��,].(��� �u�ӭ�^�o�м����AɈ�K�l]g�
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240708-en
General
-
Target
file.exe
-
Size
2.4MB
-
MD5
19e12e86b83be77897a032abf5f32fa0
-
SHA1
ed606581628aea09508d24540866828e73b020c9
-
SHA256
b9ce9a4cbde31bbcd141e3e0136c0474f23b3008c043e365cec3926758283423
-
SHA512
b912227ee8e6d67ae3a2106626e70390f22bcb8e83a343662545efb7070ade906c87fab6f947a499c858a26979968459569b7fae5cfb4f38cdda4d5535e58453
-
SSDEEP
49152:dzB2YroEDJbbi9SWeLlt0FpvF6m4gFAVVj2E3BuQZqGL5:dRro4JbxQvF6m1FAVVj2E3Brj1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file.exe
Files
-
file.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE