��)������;U/iL�h�s3���3>��\'@�b�N=>-��Z�$(���RG�#�d���ӊw�a닦������}:L=�ӮO��J6�sq�������N��,l*r�K�EWQ_=��ń�y��Td���I?p���I8r9�y](�M �w�T��f���X/����{HޒkO���+Z���P��}T�FmW5�Q�W�Xyv��R0E#�o[����y[Pv_b��b��VuD�Έg���֕M@�*���M34|����R���^(�YR�O��KƱ�>��w�֬Wy�u�싫)�ٛ���/��ȼ�R�#?����k 6��h8���2b@�Y�>���ɠ �P��6���h� �.�N���)j�2������9�P��0LF���`m�������,岮�z�L�I��˾x#���d2�Bt�u-ԯ�g�;a[�:1�D(5�����5�� ځY�W����~�7��ʇ%�č �e�T��9�S��0r��P%��f�W֜���z���w4����_I���Q����:��aʢ�@�'���y�O�b@��q���jLV��C�Pu����e`i n�"�����R��=nE����c�n.�P)��ĕ�x��opH�В>��o^�يh,D���fY��u@'�#�����k��J�?��"�n Av���#2]�b��|��)�o���ܣ��&�Ȍ%��F(y'��~��ʽ�mh�H��3z˺W�s1�A���~O+ ���U��#$2���X^}�q\ 8��z̅��^�@����|�HNȽy�-��p�/�.s�9հ�DZ�L��ZC�������Չ3�q���I����C\v/�]�Ǜ����6��g�%YG4cT��TS}�ZI.�'��6��n<�w۸`�*����W!<�c�������I?�"<^H:�[�s������M������mWYr���C�K��W��n\�Δ�V�O5O��L��C���f�X�q�Ң��7JOȰY�5�"����Ĥ�~�f^p�%��pM�}�0XC G�����<�\��q�?N~�|�°㹈b<J����!L� ַ@�¡�!uB���J6:M���:Ox/;��2&�K�m`���|(�6P���`̲�;9�z�����+%D�A�C�V��mKT�]/����v�wA�o�0�.|��7D�M����t��>�4)��#k����hj$Q���:!�X�+��!"�s6Y-C�So@�#��EO6��)�R�˵�W6��UO}F0V��t�=U-��o����S#];m�t ��"�^94���;�'�H�u?0�*��皷��P���Ñ�p��k��G���p��2NZ��'��S��9��}�8��9���ɋX���xT�+��:��a�bצ�Ц�"J���#��|$h'L5t0�����߰��,�~�V�K��>�6&�����U�H�M/;Ш����R�)�W6NA��Z,Q[���f5���p7�^y�(�Ԋ1�Hi� �1��2~}�Hה��L��z�:�d�a���OD(�&�#v�m�/|G�Ҋ��-@ծS�ͬ&� �r��0�s�O�sE�FZ+<�#�����Q��w�߹y/J��"���ނH鼏E!{����;P&��W�C��k��#�A l�! �7~b��>n�*to�Z@EM;τ��/��H��D��Q�����ë���cZ� a�`:��l��Y$�&����Щh��v1x���4�H)H��(:/=M��d�,�n��n�5����t` ھ�w�т� �Od9G���O�7�N���))�_�+�ڣ���$��5)��T�E�����"���<P�/��?��:�o�>Q��(ՕK���)��J3��^��ӵ��e�x�3�1�%��f�\ ei�����g�S�Ǽ�:B�U�O7�7 ��`X<�EAJ�t�gш�]ObH3�"�t�u�l?K��4�p����|�8��T����I�F⥹N��X��1)#�3qW�� ��k���#8�߳�πq㞧��ة�:Ŷ����a%[ ��������RTPR1Jӈ Hi������}(M��U����fN��Haj%�U�Sl�g�y!+�D���>U<=�1�_^���M����㓰m����yDIAR$���u�I-��2��J"�W��Hͩbz c�UUq=$Vp��Z�Z?�8u��%oE��� �-t_�=�M�����f[��|��0"��p�sJXvF���M�Gp�ze���#���#�s,!���B?��TW���$��l�q'4�Dz3������̍��F�4w��r����;�m�4�\��~/Xq ��-< [�L짿�e�V��5y I��ͤ#=��m$%R ��3s�<á4���G��O���zZ[�`d�fǗ�qtn��iY��B�|ʇ�`V� ��h)�"�\��+��"�L'�wt��f�/�&;]��<;eRí��Ѵ�M�E� Z.n�$�Δ.֧����1��E{7�e�K����@�[ҭ�y��Q>E�Z���W��������i^��u�\�v�>�o��-��?M�d�@gd�7������ͤ.P8�žV:ͯ�3s���sm:������t̻��cS�����*҈���>�LJB�d4h2mC�?�2;�T�MozU�]r�80��i��<���0��"9�q��E;7�\�2�x���1�~���3�X���l�V�/MC�1�47G����܈�O�i�Jڕ�Z%����_�~���f����ٞ+��s黃�g,͉E�9�`݇G?M���f�KS�~X�QH���zz��W��ʏ�π=��?�H�J#]V�v��F�r �h*�u}���Y��MK��$(p��OAs�1i6�a�L:32&+� "<�]���� ��H����>�e�3c�k4!�o1:���G�JxY�i�'l �pNAw���I��G��v�Eg�*���<�.0�Q5�w���)�r-"�z<l�|(^o���L���`��)X�M3I����q#"��M�j(K.T��3�߈f�����7;t���ɗ��������N]E}1H<� t O�Ӂ�x+5w�-m����?r�e,�#����b��N�'�{��dV�W��F���2��l������v��
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240708-en
General
-
Target
file.exe
-
Size
2.4MB
-
MD5
fcac53ade6abee5bd5c813c626a7dc2e
-
SHA1
49d2890836e8122188c20cfe0d4e412862e58c02
-
SHA256
17c2797cb63c1cc15869f36031c9dc2c7f63953ae08ee9f257faa3b7a916629a
-
SHA512
03689b9d80408e79a258f234daa782c7721f4c4f69349838e89e7e6056c28a1f492e1fee1f62f5cde23adaaea64086eb4a2684261afa0c57ceb21b3e5855491d
-
SSDEEP
49152:la3U2Quvnr17NUfsaGMXyKM7c7QabvKvfeuzfv3mGt2uUaSbK/NxHeFEKc8:gkgsxGjIkaZ4eY2um2eFEKL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file.exe
Files
-
file.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE