B���'zQq#�|IG�+9V��r�����XangK��*�9��ʔ���)�ۗ;d�.:��H���$&{)����GNÕsޙ���"�n�<�B'�[�*�?���'�2�`]��Ig#Z�Rs!����Ф���$\d;�]1Dn.���z�� �v(� ����Cζ��l6z__����5x�����w�3�Uӵ����Rj��(���n(���kMZ��aE�ś�FP��\�}mE5:�l��b��&���φ�+dt_���Vg1��O�����u���H�(��<)��Z~�̸>��É�r�V�ŋ4�16`g�Gթ��&����葌!���Gw/ٹU|�����H� ����^�}�l�F"8���\ϔ=j��a0 �eA�ǏJA�ӺW�X㚶���� ]Xx����DT(5ʾ ��Y��p����g|���aju;\��w xQر8��K�N-Qf���E��K�D��0�S�2B�N�(�П������k���J�jr#6Xw1Ok(؍n�|lB�8�5����6���k.�^��Ǜ��ſ�d��V�9x������h �JyŠCgƼ��j�q�Z:]�'af�I�~DR35C���k{�v���X!�2��/����L���~Y3�Y�����`S�=f�ؕ��v?0�ߢ��lWO`�?��K�K��|�gA��G�`���%�^������PG�^yy%�I4�����*� C((ss�:���%���y����.�n"���ӷ#�Q��0�P���9�l�`�w�15lq�ʭs�zcy���/r�2-����G�Nm��3�0ce`5 �Նi��G;YODa�pgm+�"AcsS=b��ò�M۸h;�iI0�.Y:���o��G�g�eWB��Brt���#Ya�>\���O�Tjb�Ӝvw��\�y;�D2I���BA���U@��\ķ���.�ۤt��������2�&���mx��_�xH���D�W� �`����?3O�0;ne�����qL�̀>c.X㍴�Z�u��m���s���/Wt)��7=�֚��9���V��&���8�Q�s�(Ү7���5���!���("��Q8w���VGv��<{%���Ʌ*�xj�{�-���U�,<f뿒[���Oxrq��C��Ë��Wڹ����A�d�q�S�0��JѴ��jWF3�ʶ��|n�ӹ�][¨���*��=zf�c�q���mŖ݄�/}Ew���=��5Ԇ���n��c�1�R���2V����;�& �i�)��JE�ɚ�G�J-*�6�8���Jp%<�4m��rb���5�f&y��]W�� �l@��'(K6�T��%�i6�j�u�j�}�2����`\L *1<�c^v#n�L��I�J�J��8|��K���� xA�N��I���W� Rv��H��[!.ۜ�Tp$5�Ad�Q��K���{.f�\����z���2�R?W��U�@�G�>7�&�|����Ե����0g�����!�����}N�kB���L�'� ���- \�����z���.��w�������R8� �y����v���9 #��,�T`t����������î��5��J�u������>��A���D(j�N�����L�C�%�(�B�Vٴ۴�;>�G��WI ǎn.��a��X`�D���_�%D��[�u�Ŭ�˳$�e��z`��\����p�?�遙�8#�6~,آQ�Փ��k����d�|n�TH�}�XM*�_hU��������yf2]�~m�c���Z�j���0w9Da��}UF�?[���- 2 cM���_��Dq�RN��A�.�y<��,(���'����K���.[\�I���6#�N&K�D��~L���Ŀ��VK��k�O���ժBZ�O�8 ��|�ÍJ�bi�E��=���4�{@R٬w.�O���\��n�6A��m�R�hR7�A����A���0�E� @�q++n�a�N��_��o������@Yh���RZ03�Z�%����+��;�J��@?խ(�]k�����ϴ�W��e��A����ꒃ#ٓI��萭�K{d��#�����-?��襩��zGZ�0X�2Rk���0�W���s3�L���`�n�~8�P�㵈������v.�<"ⵇ�٩���i��r,j���R�B��E������oO.��e�!6rdU��A)4�i���f���(J�U�-y��P2魡~��fLZJ������ h�������>�0`~���օ�>���a��.�U��[ ~�&��-�f�F����x�R��z��ȏm��>���Ĝ���>���3��$~#�Ƿ�f���K� � E��!6G+G�nD�v���s��,��X�́5β��J3���������Ӊ�B)���E����B�C���ko�;���Gm����D��� {2�i^����Ȣ0������]�ܱaL�@��V�u��Dg�v��>�Ć�GWq<��l�{���_h���Np~ҍ��{ ʚGK3�1c� 52.��Cߚ1wK|[��)��H2���I ��"���_\����xr���Wx͓ni��I����$��-��*��X1�#��ٖ�r-��3g#w`ڼ��#�� 15L�)�G��n�&�dy�·m���z{��Z� ��|:��0��+�G�.���� t�ގ`��=���5�X-�)��XH��te��FEb�A���8E��69��y�� 2���1�bp` ���b��X{K���P�]�#*J��ۑ3�ck����0�̀v# �,%\��Z�m��y��K��??=���Z��킢�,�CԷŹ�K���B>O���NA5*��v�"���;q�.�� �Y|�Ј*�D0 ������i��o��?Y�C��=�R\}U�j9�@�~�%�=���*��mh9v�D��6�`�ZE��d� v���Ea �1���t+�n�����|N��R~��q��^��3��pF;�̣��h@$!τ�{Z���2�6¼���[f���Ř�"�G*���y����cW&� ��@�'�I�������1�uY�)��6A=�+4�U�\{��������������H2.�#��C�q��"H��Np���Ҵ�^b�ړD_t�nFT��)&tfu��W����DN��VwU]$�BӺ�"8-ip������I��wH���DP&h�y��5�T6c�+ �G�q���Q;�s��L˰���j��U@BI:5%�?hf�"�x2Ҏ�Q��8��^RO�g�W�(��Iy��3>�b�Z~�|'d���A,�Q�"kz����/9��L����i�/ƍ�����`�=�x���a�Q [����W�����1��#K��SiuB����a�cԃ����Nib������~�]�T���������Y헃_�+}�´��dB@�&�I�"L~WAꟲP@��瘣���|tZ���]��x�V���aɷ+ꎽ�~�t�@b}&�m��s���ݻ߉{���t:�M�NQ��#H��������N�1�L�S��
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240705-en
General
-
Target
file.exe
-
Size
2.4MB
-
MD5
748ff7f54c11a86818687c93ae1c764d
-
SHA1
fddbcce30649234cd1bf786f97c33fa43f082234
-
SHA256
d41249911dd9b7d79874d8b0ebf1045facd5f3720f1a699ab43634f43a7158a9
-
SHA512
87d77ddc50e921b55bcf51860764db8f613fd2ea52a42cb4cc3e5468b7ff24f5bd34f94d20e5107499de8a6fc01ecb19c7c5c474119dc0fb5f4bdd846e8932ac
-
SSDEEP
49152:SiEglQ047xTWkU+105/OeEQUtOAHvjvIPV0G3lIVrvEjUktLLbVR6Ivy:SilK047FVL10ghvBQdumjUw3bWIvy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file.exe
Files
-
file.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE