HL%���hF��9.&OƞԾ� y�n0k�5Sɦ䀌��1a˖���M���͙H �0������YT��h�Qp�ߠ��qW��f��,���h1-x5nᙹS�!t�X;h�^eQ�+�� ���c�YæK�� ֣��Q�<M��,��.X�M�Ƈ��u� _ʜ���W���&䪺�G�Y�S����4�yP�?�&�)��]��{H� ء"&�֙�]2���NP\�)��ӧ���0Y�3uypt�z<� �3�z�Ն�;��7��p�X�7�������Q� ��J��[Hn�3o�=��R�ұ��>�+՚ӑ��4ʗ� ��-trbC��F����Y�PJAO��۴�V�� d����d %M�����U��fvI�q�6�@Z�=�X�.�ӹa�M���d�O49R���7u����1z�l���/�z��=}�E���xN�9�$vʂCێ�!��xW���,��"��ѧGļ��y:~0��j�IZ�|�# ��[H��Ai�&/_e�Q�H[���Z'v�m�s*����5-�N!_��!;+��D�SCw��-�۾�]���y�������f�9P~0�5,���ں��^�Jjn��a�����������Z���sxKx� F�)P�f'C"F)��N�R�Wi]�7n�L�%!�ˆ<W��s�GX��<V=�)�VCv�38r���=�a�N������~�]<�S��,�Z�e|Y�=Xñ�?J��1H������v/���`�n{�w�o �O���>��� X�� `m<��\�������M!B8VD��K�f��` �B�F��y&ُ���r�I@X�����Z�9vɉ�.���+Ϟ/i�:_�Ti9�+���e�C�\�?�����K0�*l���.������I�����z&`�7w�$��^:Y��~e<6���!lz?�{�w"�3��w����/�p(aCz��ȁ������J-��X����(Y^����u��7N!LPJ��FZ��w�c�c<�zڗ�����������X�����3EtW�_zD7�s��sh ٢�ݏ��68�N���b\8P�D���5����a-������4����45�_���u��>�&Q�����?����t���d��t>^�H�n����ΉV�k�>EYd ���9{�z-�; ��o:�6Dь�S��4Cjz�/�I�(�v��b6���=6vRZF��r��&"�Zr'�}�x�#Y珃�J�Q#zm�n��� s\R�Ŀ�])V���k���RQǃ�a%N��!��Q��ㆍny@"#*�<pl�T��°�.�o;W`; ����\ǀ��MI�_�Ӎ4d�++�a^{;���^&W�wd ����[�Hѵ�j���؇��[W�b��B�U�3mo�j0${d�+�[����CXɩ<ӈN��X�ei�&�̕�kw�!.S�P��M������zɠ�HB�B������~Xi����|�@���W<��&4��p7˫��T%��['�yV5h��r�Ƶ�ê�Uxf��y��=��������7�:��U[��,��2��J��6��8�PS�5��6���}�g��>�� 6<�9���Q �-AI�a����lgw4������{��a>�d藠%����f!MrII]��uL���ah�=�d֭������A�y�����3RyD���8�/��/��'�@��wY K�b�1dp /�i}�4����v����O(2���������*\���ɓ=wT�UZ������ �ғ��j\����z\�)8yn;���f��#y�36�m!�N�3��j�@o.nJ�PTc�h�R�ɶ[v�i���d$�R`��E$NŤxO���W�O����{���y�CPR��x]�d�ŷR�l����e�����E�����G�9��M[�zBLpu,p��_�'f^+��ֿ: �)�V�cYhKV4������� �D`��H�6y�ä)��o��SYݢ'{9#����3��}e��^��Q֛���%�������ʨ+z����a��� پ�ކ)�,���Q!M��Nʞ�h�ZB3pH��KhJ�Ǵ XrbF���#���X����Y�]����m��>��`i9���8�y ��j�� �F�O�h�E�֭3���d���i&��_�s �V��b���`�!�����Y& � %l��X �;� ����%|���U^��b�ť��R ���?>݇�S��d�\�4,`�>G�c���A|R�����\���sws6�����ް����Ӧ�3C�%![�M�/K��m��,�5�/�X���^b���#���dc�{���lp���n}Ż��d� Ω{��^Xm��v�^��j�E\�z���}Ez8bo8����q/ƫ]ʿPV�?@�H���V� #c�Zk�\@%A�J�$Wl�ۋ�,��1�:Ʋ�m'g����G';h�����������?�q��a�# �.J�Mi�T?�>���Q�C= ⏥��8�2ǎ��K?���"�qa&&`}�AHH���у6��p0��X�}���YdF��ݔ=�8��.C�kĞ��Q��.�j料Z�m�jJ(i��G���?@�#�0��V7]�s�Z'���$ ��K��J�uh�@��Fif���� �ג�:�|��-Z��NQ�r�kSF��{H������;�{ޯ���ga�KP�^p�x�m��c�m3���v�z��ˈ:WTǜ��8�$#1g�d"}C��o�f����˧�+W�q��T�NGV���Q�s-{B=�$D]k5V��.��ǔ��s����V�m�DBpo5��Xe\JѺ-�c5�� ��<F� b)�s l�-�fݻ����0�.��C�C�����9�!�.b��Z��_����w���\�EF���[� ۫N e�H1h#~��~�o��/_G��m��(���q��Nm �{~�nixr ��L��憼V� �\C�B��0-�q<������eXA� ��"I�^�vh�erR4-���B����Q:`���,��\2���U��y�V�lUj$�\��Y1N�8�K%[��E�Zh�S@�Y���{��,��.����V��5�zPa-��/'͗���O�Xҏ}���^~���\��H�*�ұ�t¶��njw�{�����),8����;^>t)�6]�r�>��|-��<�⨐�=9ـ�b��kJ�����}��,�@%���4���үC� ,���M� �3"�GqY���r��Ek���)�̊7JSs�Z4�h��MyM���Q��j6IQ�oX���u�^Ƅ�A�L0�����M����&�{}K~��;��"̡��J�+�V�������K�<]�0�����Q�TJM��$"a�?� ���M���6����0��H�V@u-@�O%��T
Static task
static1
Behavioral task
behavioral1
Sample
1fae7a09da2d90805c3c5ddc97b91d36236171c34e79c8f3a3de945ac2ba25a2.exe
Resource
win7-20240705-en
General
-
Target
1fae7a09da2d90805c3c5ddc97b91d36236171c34e79c8f3a3de945ac2ba25a2.exe
-
Size
2.4MB
-
MD5
380d17ae48099065620bf6819a75546e
-
SHA1
15287cf99b247c5841ccb5d349cec09f2f8d6842
-
SHA256
1fae7a09da2d90805c3c5ddc97b91d36236171c34e79c8f3a3de945ac2ba25a2
-
SHA512
29f2c8583b179b2fe323383bbdabc2afad54b0744dce2e9c7f642d2f4e2036a241b653a2b9d4f9a8a0072cff7e3bf06257a0bba905f2d3ac76143da06fbe9f2a
-
SSDEEP
49152:HGgqW+2Ifc21ch3scIZPA8SPtFlbiNZhNOL4xXoY+pAdrwf7:HRZFIXclsKtFlSZhsMxYYI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1fae7a09da2d90805c3c5ddc97b91d36236171c34e79c8f3a3de945ac2ba25a2.exe
Files
-
1fae7a09da2d90805c3c5ddc97b91d36236171c34e79c8f3a3de945ac2ba25a2.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE