𘑘�z�1��?��&���L$yL�����_������^�}��P�T� (�Z�&��4`���H6��#t#�����}xji/))I˔�ɔ%Q����Y�a�g1�j. sͧ��%�6l߶Nث��yJ�A2'�|��h��&!�sِ�Lu�ͼuϵu�(xA~��7�tZ�e�%�#$�P�å�-v�=M����ɷ�I�X��:�a��0lM)_Lo�.�>'k����4�ݼA����6 k��t�ͅKp���\�L�?�-s�� �ދ[lƒD�?z�t�Y�����!aKe�>7/���Lt���y����n&�i�DEc]g���6�'�W�&a�%�h�h�2Wz�0Û���I�*��P�zՐQ��R�R��h��=�qި��<x�E9ޝ�m��xY���Rx�� )v�K� hjK�� ��3n1U�:�Zc(�ج|^�����Y��f��O��&qu�$����+N�����JM�T��o����$��bG˴�j%k3��d%)�^hpbZ>�jJ�G{g��1����������;���Y�0w�!7�Q,��4=�*Pt�a�I1P���) lVy�����W�� �q�R�$����t�طha�z����،C�ºȭ�����Tx@w��IQLqVŋ4)��,��;�P��s��J¡q��c��:��0n� U�5��U�J��E1�F��&"6�6�A�!��F6���BQv[�~���e�G���AZ����InF�#f &��p�IX�F Gӗ5z��[�����7h�UA��bY���ۯbq�.�G��L5���7TEJ5J�l����$?�H�m�3��xI�F`�ה=���ȵ �:F,��e"��+X�T������Y�R�.�^��$����?�v�&��%�!�4��%�,R�� �����3��a�'lV����i�ﰞ�`ERY�Eu���t���W224nD���*zL^��aG�J�y�=����?� �y�"o�!D��M�0��wm�N�]<L_��5n�����ZƢ+�2�s�OT�T�rC>��R$�S��[�TD�W�1�� ���+�R:���t-Ƚ ��R\�|�N^�����l߇;.kJ*�L S�"8�������e�XD�:5� �!�ԟ(y ���~M��v�M̤^�>��غ��T+kj�F��r�=��aFi��R���c1˼����q�����7�㚁�8x�d\^�n���A� �>ʓ6ME�TNd,��dO5�>Xxi�':*�p�&jI�\�F�zHj��'E��<�� P��"<l�h�B�.I�#�[e6��#��P����F�7���G�q�hK%~nP]��K��ll�OGb݊�vӁeWф�..G��2~ �����TZ����Vj��.K�����,� !�t��j�P���q!�!0N�c���������o ���)ߒ�R0q ��e����$��QS$����Ƨ�w�qj,�[��;J1���M�7T�v|����&�]xU�̡��Fm�-�fN=�v�?����8c}A��v��D~���K I��i��r �창4���sUgf�/&q!j� 8�`����2E }�6���$��bm�1��y~Y\� #bK � �FH➨�A�a�٘�@�W;)����ɺ���u�'j��G ����5�ƨ�g��N�4����j���$礽�S�DZ"�B�5��D�,3SֺK�S3�@����6�tt�Na[�>�\�?a�J�:�JBM�ˤ�@�/��˗���\^"�u�[:Ze�x?R���O�˸y��R��y5�%�,,E��0�Q�������yoK��h�|,�B��)�D���F V7@ɓm&���X��.5�iE�W�'��hvJ�S�Fr�Lŋ����g8r�� h����~�{ۧ�iB�?v�L���� �D�����>�%��VPܻgU���N}����ۃƥ���P^���w��vTmI��"� �S+��YB�����F�u�����$�){�I�L�@��E�K�L�v�d��n���\����5t3�5�\b�#���xq�3���[�>eK�G3J5 �٤0aK*���*��HQ�{9��Ik���j�����ܩ����C���`N���8$��c3�tSo��r��pLQ���ރ��d��{�A�.�ٞ��X丐�1�u�|W�_�<����ۚ�����ѣ���<�����r>����9e�88�c�e���TpE\ T��>MY�qG���+���Zٹ�����V��ك�����Kn(�@ѩ���m/A]���c&;���2�%�A�M�)ҋM�B핽��?<Ft8�Vq��cam;OdVcx��4��P�a��U�*�HF���=�j<�4o����!U�9P�� P�S���$�F�����n�"H�G�M!�C��l��o�\��XR��^��<ݝN �ک|Ԫ�������7�U�cw�����s��ļ�,αߤ��p�o�*ǰ� �yTD�5p"�~��2�Η�W;?�*Ů�ٖ��&J? �� b.Y3�*V��Vl��j��ȫ:��wdE�����(M��V����_��-��@��G �{;�3���%�6ٴ(�v������/)L�ߑ�g������X��-E�[�q\^7+S�� �@w���+�~�SC|�yFI��;�"�l��v�(�J��sl��a�i�@�G�$��!�Z��Y#�]���������!Y|�L̀� ���.��LU���l����Lq��&��,��˷��z"f��f�o�Cި_�� y�ڄ���d���s)�"ߪ��A�p",'���e�x �f�,�;��W��כK0�O�C�28�5b��ߌ��jE�:����>�'Bm�R��B}��W�o�]��R<�3���Ű��ȋ���xޒ7������ @P��^���s�Si\Q�W6�����O���*����*�[���/�O�Q\�)��8��L�W�7�1-�-c�P&�$-��3��T%�VȲ� z]�= ~�J�� �]����j:sx��ۓaSی��*�pj%�:|��0k�Ёg��5�q�gs��$�fEa�Y��vz50����pӋ��Q������p�$��t@VP1��6g��� 8�S��y(�<c؊�D����f��X���3�7H����K��6� ��t�Q�Z��8��b��Ia�^u��![�"_�� ��ś��p�xh�݂z�M+����u��b��/Y���䵭�|"h���S����q"����]����w]�d�1ڈ���Ȕ08�^T;x�v��I�rZ�8ٞ��]�����v��x'�ם|3�< �-i�_o��A(��>րvރ�N���9E�٬Mg_����Z�2��T��þ�;\�ܡV�����c�2Y�"���t�4ϋ��*'���7�����}\X���9��iwa�#�����P
Static task
static1
Behavioral task
behavioral1
Sample
c19e844a529bb52d59a243340243e2208ad23ca059aa6b095f555f415d22f687.exe
Resource
win7-20240708-en
General
-
Target
c19e844a529bb52d59a243340243e2208ad23ca059aa6b095f555f415d22f687.exe
-
Size
2.4MB
-
MD5
be934ec22037ff0e960f7aac46914ba5
-
SHA1
c83d95fbdb2610bfdae718c485e5ee339c940905
-
SHA256
c19e844a529bb52d59a243340243e2208ad23ca059aa6b095f555f415d22f687
-
SHA512
ece945b348bf224784f814772cb17fabff23e1301fd5131a4ba26bf4cced5ec4e05fcf27fa5b96e5d942b71f04f3e30e8f119ee40165a1d256322459076a7243
-
SSDEEP
49152:YlFyP1lG+KRGsl1z5dkQ7N0MqdODEZ22buRhIwh4h:YlQcGsbk60M2ODEs2buSh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c19e844a529bb52d59a243340243e2208ad23ca059aa6b095f555f415d22f687.exe
Files
-
c19e844a529bb52d59a243340243e2208ad23ca059aa6b095f555f415d22f687.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE