a�d&�qad�6'h9��M'ggk��\g1�;�#�jv��i�n9u��WX���2���C����X]�4A�â���Ob�o&�b�U��!���=O���u�A;̭۸�Mۘ�x`'��M,� eW�:�_3�����M����S��K�����r!�V0�������%�*f��jS�"+���XoHCi�t�y�Y��1�*�%J�sw�۩Y�P_^@ɓ�prJ��1MBMs���J[�edIB�@x��|;4�� �SC�F����(bq�n�<Lؕj��ݕ.<`��c[mc� p����Rb�'$�c?��ĻB]k�<h���5M��"�Jq�� DH���� ☌��΅��26b{�K����'Md]l�Ƀ����~�N����v���g$n 0��.i�oJ&�GE��w���L�.��F�_F�n���F���$J����k��Rz�{(up��? �ɛP[6@8 ����-C��RJr��Σt#=хg�U.X��S���"�y'��ɍSc��.؈� ~Z��P��dQ=� �D�����B�8#eM%n'�c�I{r�J(�cތ���(����h9�q�JzaϞլ�+�j3��E�R>u8m���4*�Yf���[�9�b�ת�B������F��Wd`��V��9�m��zfq� �Ʒ2ms��R���+�̂(��8mՕ�E���F��RKl��]�d�>� '��/����1�d���B��2�sw������^���s4 �FHv�t,� �G�9I>T+�����bl���`5�H��? ������2L<;Y��U����oH\��M�6kg�6O�!ը��������9}#�7�l�y#��Ec�s#��C�0@�h�a�ỴV�|��,m!|��<�N���T��[&��~B��(yVՉLV:Zi���}�� B�\����B-���B���_��<�������H�)|��P�O����2PY����3��+Fj���9�t1����Ӏ��"]>ePj�O$�^.�.ɩ5X�Z�l�U#T<���?;�ƴج�ߡ�|�Ť�����2�.��}���lp:�}��z���n}��c����(96���Ś�[�w�qj��٠ .;c��:1�ؖ�/�s>�:� y�-��NL�Q5BN�V��B}�>�ǬI��/�"������� �y��㉅��2^��J��K�����1eJ� `z�����;G����wJ�&�d�m�)�쨫�� ζS�n B�����2� ��� �zK��3U��']�\�����B�3ĝKE�pU�\|ۥ����I�g���p��i:RC�X��7Qa�:Q ���p�_�N�Iy�(�>�{)�QBx����bL�U�|GdDdN0�B⥊��&���<U8��Ƈn�췢�m_ܛw2L��T��u�iK��B�ĕ��B(��{�;���B��qF���L��3d��q囡�RI|��bU�xXv�X�!���Fr��P߽3DP�"L-:�H��v� Ć>F?� �d��$U���C�?�������/�.�_j&���k�3�f1V7�P�g�������U�H[rA��$-)�';�� �з��:$B�տ.����ʿ����T�+`��-��~���Dn�sA��ؿ����A��*@(-R��ʳ�B�C ��Ҭ��{`����U��F����^.��,�F":�*����=��aX��Dϴ%P��Aa!�_�fީ��@:?�h�/�������Z�D������ t���ЦY&"i~�,��;D���)U�'(�@w��4���a�@C����Z�x_�Bb�~�����PC�e��n�p��Y�8%��v�˪m2����Τf ��XjG������e��\�+�����'�v�M������YE��ۆ�*��d���0��]M��7�<�# �eB��p���z �"%=��HF"x��V<2B�!$�����Ռ<ח̵���p��FEt2z��(�e�u? ������^xc�$�08qOߣ_�����~��F��V$�6����2�����������{9|S$����p=V��7ȁ�����dr�lc̯���y$v2w��Q!Akt#��o�7�[?�K���>E]�������]r���o��~?���":���煼�q�'A�K��<��N#�Wl����䎖����1��^*�ߩ��?$Z��L��%8�ԼR:Z�O��L���E���s�H��"��dܫ* �-s%u��˰/�)�m��gR�ǂ��j<��4�Ц�V�"+�#�wC��'�^�l �ޒz}�H��ض��D�X��� ��_���]k��pR�|�(~�VCE���+��Z�q�'`3G��S�6��Ҽ}��<q�o �<�p���r�ʼn�c��+�Z�H��p��o%���Ϳȶ�=�lhQQ��!�V0^(G�݀��hzֺ�����+}�J��#<���h#�\.G+���o��xB�������_��H5�)i�;�x��4HK�퍠n���0U'�z��9�����m��J?�x�1�1���ߐ+���lɽլ�av�#?7w��O�/���u��C(H��� C��%�B{����1��TM�a�F5�> iWL ���#{��hJi.~?� ���T��78�d���J�b:��T�J������$���(�zlݎ@�%ơ����"ʬ\U�/=:$�$���'H��g�y��� ���i��#ع�L+L`�R��G�M���������/��8ƥ%�,�$^���*�V�*�$�����qI� kC��� ��#�'���E@�X������c�m0�$�F��:��-Z=7�Un}!�)*���צW�_h��Pێ(y�#�u�:gޕi"!����3���E+I��\) ^�f��r�F�Y*�:�̿�,2�LE&��!jɡN���k�����r ��VH����,�~�歄���<(��(��(�I�+,-c_����~��g_�xT� � ��0@�v�a��,b�L��z�����ʋ]��ʢ�0���'�o��ծL�:�;�mH����5�7y)��3ɪ��B�>�T��K�H��$=��\E�FWV����w?��\�a���m���ژ\�a ��4���'�� ��Όy��ۋG����'���Nfu��A�s3==�DdS=���FtW7�Aa�����2u���'�{L�04F�ö�lLʄIT3)�9�]^н�!-�kx��u�Q��x6/�W������,0T(3�zp�O�����(~�,� L�f�|S��vpFj~��н,;%���$������4 cNĥ> >5�u�LD)�Ru�|�:�nٿ�����0)��N�sw�&�H �5#����rR�/�8��Cs������fԂσ�7h^)��W9�<����pu�dZcyO?��(�H�+E������ʬ`���B���\��,V>a�d&�Zuh�p��FN������2��dS�]���Qv����C�q�(Y3t��G��S24_p2R��� m�Vk����0p�[��;a/���]'h��Pi��[>�0�=e�xʵc�H�X���@�e��A(��ϖ9R��̝0^���\�ٲ"!a|���ڸ�7����:��B��ݾ��L��h�ʮ�V,L��8���zf�[fX�X�wW�Y%�E�]9����
Static task
static1
Behavioral task
behavioral1
Sample
7429025ffbd85e5be2431ed0df5876af6447aaccbc8c672d18d3145a81904d5b.exe
Resource
win10v2004-20240709-en
General
-
Target
7429025ffbd85e5be2431ed0df5876af6447aaccbc8c672d18d3145a81904d5b
-
Size
2.4MB
-
MD5
6ef660f3b72711a1d0c325ee9f1d0147
-
SHA1
8ceb7d0db9d7010847046f9315648ad23b62e302
-
SHA256
7429025ffbd85e5be2431ed0df5876af6447aaccbc8c672d18d3145a81904d5b
-
SHA512
fa09292152be99c363dce93dafdeede78bda4b819b5379b4d3a9481c8e368e4ba96a170e4a963ea16d080e9b1dd27bc0187f42e048173d8bbf335aac6e77e30e
-
SSDEEP
49152:zaKYHT7rp0hqjBgHe3x1uULlvrkenpz18fLl3A1:eVT7rgqjBrXucTnpBV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7429025ffbd85e5be2431ed0df5876af6447aaccbc8c672d18d3145a81904d5b
Files
-
7429025ffbd85e5be2431ed0df5876af6447aaccbc8c672d18d3145a81904d5b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE