[�v�F���$���°q\L�/�[lW����Jv��T���jZҰf���-}{G�C0���N7�����W�<�3��K8�Rtg���.��M@��K��a�Ɏ-�j�x���ip�����%k�,�e�e�)�$%��6��0}mH��EH����#q�3��t�Ǎ�4O�����pP�B��G���tf@f�k�$�W��g �5��:'��[�]��X�Yi�����IA�ԼGC�7���-LP�y9a�g��TlR���9S�>Udy����.�R���b�x۹� �4�*��c>n��܃�,���qF4��s���.�Z[�hW>�C���0۰��X��.�.�&�4��+����+Sp�h p�d�pɬ �O��l����1�G �j��Is 2�qY@Jti=ܪ!�Y��`v�cG���Ww��v����W���.G�RS���q}\�d�+���+��+b�F<� �_�=>*��������+\�����0�����.�$���!�ͪ���7X��P��ك@Oނ�p-$�j���$��F���}���!&�K���w!���Z���M��L���G�$毯Xq��� �Ǽ��=���ʓa[��)�pCT ��Qih3P�NM�Q��rp%J��p����ñ�D9kV�2�.Lݚ�>��[�d�e(���������dʞ�:�Z�;]�V�ǭN0�N㬫��$u���<b� #� �\�_=����%�_��BA�� �_Q�0y|�ϝn����=\I�b§�C�+�@[�[q3%8i�-uw���x�%��*۾{6�����7�YOݬ{K�t�����6�k� Bv�]\zS*����3?z"wDܤ��ĊX���J�h�(��=dK�6ΐ�)3�懹���1(Kߙ2���O��~�)�Oa�3�).�&��+��o�g��e��Ϯ�G����h�tH��2�DG��6k�L� 8�]�U��8��[9���K��(�D��]�39�P��?�k���7%���]E�y>+�Ъ�����{���jh�8���Yٮ����Bm�����3O7��6B����5ԣ&�5�a��< ;�}#m�����\��#����#��QF$5%ԏ#\��h� 7;���˚�M]">|�/�B��D�Z�����Jb^�Yr[�3��O=ds���X(,s�-��q����a�@bH=�y)ZvZZs�t;��|�b]�:�{;�I�q�6�n��*cgz��i�����ET�i%��N7���#�8���/�S�~C��?j��^�Vm5��^���P����R��G[�{�"ԍT v���|�k���o�! _���h褢��\���O�a���-!ʣ�����[ؠ"�}AXn�0�7{�w�<��f�p�#{[y��������5L�2 ڢJ�����nx]�8T�vW��E$<�k�H;��-t\�{]�I�1�6�{�1�Mhr|�_r��_��@]���X���%�-=�e6a/��a��Ar�)���eX���2����R ���F��pn0�|�~`�*�j���+92�ʦB��C��>��L ��TAMY�f)�����������5,�R#���7�3��K�=�l�/�֭z������C�'��!i�n+ځ���U1z��0�!A�iü�p��L��\Z�)=7Q�*�A���a���|`�j��.���g�!�>�QG--#���N[�ᡴo���h*Pt�Ǡ%1������ �lp �G��/˧G��#��./�y m�B�*�w�d��wNή��Z���"�����8�{��nXPG}��x�x�{�� B�gN�F�T�nQ��iϰ]蛠 p�0�L��H�A�bM��%�����R�v�N��yAqJpޠ p+*[�{&��#�3��?�(!��G��"��\�x LMõ�X7hs� �X!����C�xr�=}����t�A�[]d/ur5g�I�&�������K�@S/�Ѫ{���OcV��Wl������)�Y�m�6��B^�x���3=9������>ʆɶ��z ��^_?|Q~����υt�veMZ�E?��NR�}"G2��H�pb됷��$��ن�Ś ���G���yȳ�_0�<|kpI�E�=mpքIrwv�[u��~hT�>�87�.�K!�_!F�X���;��3�h"C��ڛ�`*�yg� rt�4���9Wωn��0Z��G2P(�$�lk����^�A:r��YU�� '�z��9Y=��B�j�诔q��?(E3���n�:�Gt�*Y�M5` ���{P<dTm�|'�������_D�Z�;��d�M��!��v�� �LU�HP~S��P�c�'����L��Q- k{hD������[����k��N�ʵW~�T?��ɸ> �����06��uX��RB;�[Q5&%n!�ՃPQ8�f��Eq[�e�"A�pDAߌ1�3�����k@^�����-�~���ׄۗ��Ͼ�YF���豙0Rl)thU<C���^/�W���ZgDǻ牙k�$���n�N+;�����,�gЬvAJ��p ��Tƣ{�DNT�& V�v<�Q�<�/.5��غ����iDCX�Zu�p�+��C���N��ͥ�;�������Ǎ�o'�)ۘ�q�سS�@�s�g͟QF�(�K�N��d�G��;���*�����lU��뜲��I��bY��kwFTئO�H��@�K��˗���F��y��sB�-�BȦԬ�����3�\�J�XU��z� mT�M����V���������@,��o��M e���Y/9�Ҝ1���p��ë9������wĘ5Kzh�����b7'dSng�����#�VWۤw��B�_ �]ֲ��N��DJ~< ���oKޙ��jօ^ǟߒ�@�=�ٺ��hL��8ڃ���v��h��<&Zr���Z���p��f^�֠#���n���|÷b ��t�����Ϧ�+���rbK� ~��������o?�'-,g�蕅��T`�2:R6�������Bd�p�<X�1���)d3��WH�M�B��.�(�c��v]�ç$�/'�q�������LJ��r''�kF����ZY��ø�k��k��)���s������U�?\�����wt��&����VƯ63B���� UV�"�z}��j���9��!�Ԃ��(P(�g�M�I� D��ʎG��Fπ����h�U!h0� �=��3��_�icj�k4����J�U�� �!���/!1�zzi��dU8�o|q�=W%\iE���J�/�żԲ�.X�J�YK�5���,�������T�5���5�
Static task
static1
Behavioral task
behavioral1
Sample
73aa846fc6566e449ad9c89f487f74c7c51dea5c003f8a9010cc1b9b49248789.exe
Resource
win7-20240705-en
General
-
Target
73aa846fc6566e449ad9c89f487f74c7c51dea5c003f8a9010cc1b9b49248789.exe
-
Size
2.4MB
-
MD5
98d75ac516c8422010860028f45fe6d7
-
SHA1
2e70fd8c3f8ed1cdeeb754c8bc005b66971208ce
-
SHA256
73aa846fc6566e449ad9c89f487f74c7c51dea5c003f8a9010cc1b9b49248789
-
SHA512
21f0bd0a73376d70147d4bf186fb8ca3ddc731aff01613c120bc17ac33266a4861e9e9344252f87a5c6376c66dd5e3f7b4a5906bdcb5f7d3150ad0d969badbea
-
SSDEEP
49152:lAz1nDsYWmekVo7fwXRq02Xv835G/8cxGGSgklYcZqXpPDM8:eqYtVycBq0yklykPZwDh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73aa846fc6566e449ad9c89f487f74c7c51dea5c003f8a9010cc1b9b49248789.exe
Files
-
73aa846fc6566e449ad9c89f487f74c7c51dea5c003f8a9010cc1b9b49248789.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE