��r�9�է;*Q �e-�j9�1�c�!ku�~�i�"-o��܋����u�=x�@.� ��h[�����P����� ҟh4���:Y�&'2�{�8&�>C��}��Y� ��78|��8 ۵ ��h��ӑ�Ry�Kr��!KDϸr�v1��i���s�862BHe���c�s^��I����H��ñ�C���r'Q���5�_�DG/6�s��1� �ԹVxž��� H'�`~42��������p���9t���Q���s��b_<�����5������'��"�)��98T+nߘ�%���Kh]��ғ�{��Y�ʩ����+����آ���T��f�C�w��(1'ᇸ��w^�����5D�j/�����Ҩ(�X���`N@���^ɟ�/j��_]L���I�i��ƬL��=��r���j��CS�S�x�*VG��^T�GO�nAV+�>��U� ��t�~PGJS����l<�4'sK����DNNYXu�q�I\Zx���ě$~���Rkz�O��?ѳ�LccO��D�Ff�<ϝ�c�c��[��y��Q� g%��6scZ��^��ϗ]���U҂�I�JQ�@�eeb�NVp_+폲����\�7e���3��|{�>6x����JZ*���T C9�wq��^3W\����@ ��j�_�2G[1�{�P�!�ꇡ���-C����f���qW?�fRb�f��;0�lț(�)��i�i6��R�����t�7cɔ}`�R>��0�)!B�"8�wo�W�Z�`pS6�����,�xԷ��;�>_���'fPz����J���Z��Bqa�:`V������s;-&����h�O7?��������`���ۖ���%���D���E��k���_���ݮ�T"���Zme�Cj����-fmN���]V�a�N����3�����5�p8����W�;�\�i|���Ref{3���wpׄ1�aop��-�3�<��[f��F�c���)�q�/z@�e5���N�����:�<+}^�����-���E4D�{E��Rdp{`��%���+1L�I�0��Q|S���ˉ.��1��<�|x�S��F����p��^�^�����n֔�G*iq�j'�9���n��Oᑕ�#0�>�x��T�A�Ɓ�sF&�/���j?7RC��Vng���֬�N��N�E���3��a�Dm�kR��I�����n(5+�S:�'^�= �W1?�xh���c�Ҙ��H��%M�drq�59s%�bVwz2���_�]�6��bH�:֊ؘ����݄�)��+�Y|o�����<$���&�3V*|�0+=Tݍ��^��m�J���A4�Xi�d`�"~���m���QE��^�!��!)ߜC�[�lC��������+�$2y��{��Z�|J����X2dLMrk[�F�(�w���7��&�!�L���f������b��?���*�c#�]8��12��0��S�����b2���Xq奟\ty�ܜ�����e�z��G���m�#�m��yꙂ���mh�:�=LK���cK�A=�����Q��Yv��#ɚ���.\�1������I��+fR܋���ׁ�����M�N�N�>��8��>��_YecW�%wh��xzMHU���J������ �{Ws�&��}sv�V�����]J��螣_�����u�slp�.���9s.�|[���B\���J. �/��2gt�%�P����u�A�O,���Ҋ�4��CM��-J�)M~��`�Ã��Π>�I4YB�����EF��f���q��4*a�x'���-�H���n�L�ZB� �B�y-`���q���h ���ws���`T�~mQ��*u�S$��p��x���:��!���������iu�U�Mg�����i�t�/pO�]})��{<&e����ԬĂ�-2�����ܣ�x��.lh�%�qtH�"Dƾ���=��XC4���$R`'e��Љ3�l��[~{7(X�hK�,�O-+N��W�쐜��Zy���͗������)��n$�Y���� &S��}��x,��Η��څ,=��]���E�%:�A� trk����ᘾ)��7l�숥�����v����DA����(�o�ԍ��[�ǘ��"��?Ȟl��!�2w�����R:���B�L�<�� aۙ�_�����><n��F�h�bo�x�3!kB{��f�������q�g�\gr�c�z'sN��؏@� 7�n�N��C&�6#���w��D ���Z�:�n�������Mމ�b,o��?e��B������bo�-�(/��6�v�����^:i"��N� Hy=w��$R�w�R��2nH����[�$�A3�b}�>���e�q�0��0��:ĺ}�%ɲ� �ZP�����3��T��|�^�A��n�U- �LD��w=���������g�{��+b�� ��`�[�& }�S�*M���qs��zso[�%�K���� ��N�R���5!i��m���k��袛7�)E |�")VK ����x�]�-�B�%F�`r�$%H��E;E.�/c�㐁^���.Hc!#�։h���&����2����Cr}��5������̄uhx^�+ ��2#71�Q��%� ���G�S�Fk�B�϶���l_ ����M���H^xE^ߎ��.��#��`�-n�t�d{#��tɩ�X�O5��q!���C�'H͒�v2L�ha8�=����G ���&$�wd��4����+��i�sEZ��L+�}�<BO�Q�J�kc� �9��^�*�z龞��Mnꇈ�~6s��i�+�-��Mc���HXz��}�i���ᶪ���b]��R6���I_��/%�d�٦~��)[�nt]l(����(h�!9��j:�T��@70�2q��R���Lּ~�,oIx�:��(��b%k����� ��ތC��nr�Ӈ� ��j����U�T��'2. V�оiҺ�p���������KIX7�����T�N\ލ��o!~��cs�}�/gZ��|�Y����#`3%��k)�R�SN�`_k��Ui�.�� N�澌��n��N~�T�#�R,�����b8c��즨�����Y��2xhH�c�K�AB9h���Hx9C��g6#DcИ�M�ݚʡ�+:}�>-y��JE0�J0
Static task
static1
Behavioral task
behavioral1
Sample
Enigma32g.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
Enigma32g.exe
Resource
win10v2004-20240709-en
General
-
Target
Enigma32g.exe
-
Size
6.9MB
-
MD5
7e9852458179de1edf83278e9b9c23be
-
SHA1
fc0b22bfa19a39c995a3f7e97abfaeceb1973fba
-
SHA256
73a31fcd5dd32a37701921a4a2ef002cc76b7c14b8bc920f288f5beb6b4f647c
-
SHA512
e5a2d9edab19545997ba1304291823ebdf89abfc7c9d4cd94b94e232c19065020a927cd59a6b95d9a2b98c7afc7f9a257a7d324500aeb371283a295dbd7e0b3f
-
SSDEEP
196608:8bwt+R7el7rCJt2JdbBdek5K6lAWs2UZ5G:2Ol6oJzUk5EWbd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Enigma32g.exe
Files
-
Enigma32g.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
Size: 1.3MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 44KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 185KB - Virtual size: 876KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 174KB - Virtual size: 6.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PC-RET Size: 907KB - Virtual size: 907KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE