��L�˷/"��$nz�t����!)��$wT�!Ưց�z�� �S��bܧ��4��!�Ǽg(�aE��s��Q �r�ܲ⪳�g ~g�ee�[��T���A����t�^�B n֯0inT� n� 3-ƻ�*��/a� ��Q�W��K���s�P�f��_���=�"�$�A�諿U�!���`��Dm�n�p�- �D��%�����n���1�8Z�{mi�?�A�V��u+��gБ����h�X��=�Z��[Ŋ���z��X�^*���c���f��X]v��Y� v�%<�o�"f��?��TuoQU�꒒�.�-�%�T�/�̈́M�~`��c�}��9F�&�Ѵ>{KP�5�J��3�9߳i]���@X��X�AG��I�pC��`�قI����RK��k�_�,C�yaJ>������p\�x��M�fV�j5噌�v8�������̇��C:ِ�=�C�y�Vb��]�l�\JD}��h�"��r�k,Gu+��9F[Z�h4i�ڵ�]u�� ���¡TG�ɝ���^f�'qMdț��k����'��QGf �CJ�eÝh ���C��ցP`������VM2|�)�H��J�v#1���o�%���N���w鵦N._w�t��5��'7� ��+[E9���p$O����P�4Sl��C���@�T��V�GQ�y��og����m,K˃�S��T:�xJ?)c��(Aw���1��)�/�Q��#š���t_GDRCo-P���dt����Ye�6��h�D���4�ǛBf�H{v�[�)����#ϗ�v��K��z���Cm~�fe� ���~oKn8B����S������Q��l������D���Kf�%���]6����0����xc~��� p���D�_Z�㽽O��w�z@��O>V2Γ�@�>Y�Ċ+S�3� ������4�S{{����3�;�aʩ2S��e��8��µ��@L����~C�2�u�c{T��u{�:����(a�6R㡹��j5�ُ]��6�Ӈ��~�Cl��ӕs�H<��2��� �+��̭I��������C�O��D %]?S/�x��(������;���9��ڂWJ=q-����"i�+����7���� �>6���+ȡ(�J"A�Q)n����f� ��0�L�iQKP���h3��67��U�s�Cg�hBs��lTYW�i3����夐U<���ﺹ�-��3���ֿ �߉�;#�^���~Jk��~㺎xy��T�n��eu���R"9lpKX�o���bU��;>��̔���uh�L����>����b�nP _h�V����|���2�)�4�>�]��e��;���Q���(�H�dl���v4f=ٓ�p,KU ���+����Mc]f��b`��"9����O���)hF� ��!q�9��-����O��{��_kX�p ?�ԶD��O8+z���\ " ���xY���|���fPejF���7p�/͆��X�<�e`{���:7ӱ���7�L˕dؠ�4H�A�O��S �������}������Y�_(n�.���Zlhh4��.����b�ְc.L'=��4�% ��vu��iF=!���F���"��ێ_��~�_l����.���H����_ y�W�:,��0�����rMu�q��L���"���>���?�^Ɋ�G��As*�����s�S�?���T| �� �(h��Y-8���� �����s�>��[�L�.<2H���^FvA82�iL`���5E�c,�|g �� ��粄�^ο���'�㮅��@����S��$��3`Pd3(p�������v�*�]�ص�Ǽ����c�� �_�D���yD��ڧ���=��_�V������F��BҠ�@�bv]�[��ڇ ��}��=H��1����ĻGy�UU͆��/��d$����9\�-�A����Ny��Wt�&k���a^JS�t�J>Жp(��m���6�>����cO�@��ur��P;&~n,|H-$���X��1]�Ȗ��3ν��l[S~!2���\�y/^N0P�=F�{z�����_�++��I����W�z��qt�ud�č�����D#�����~d��Ϡ ��7�KQ�JV<���nj�Xp�*�ղ���ˌE���W�ln�Th+P��(Y�q��\�j"��f��av�G;�+mi�C��ΝB��b�x�8��d3��w�dV�J>� E�>yV����DW���N<�z;^)��L<��4aS7�>�,���B���ك�����N����jf�q��r?�͢� S��}U�J B�+� ���e�Y��HV�f,�轖�5��;��0Т� a\JD����0%O��K{���S�`�h}��#BC[�D��j��}m�i�xRi����*榮v�6A�zL�������&|*>P��he�����&���qD�wd�;eS�ޠaR�0�P���}�EU���%¿2�0�1�`��L6��E�m�r�lʸWT#$�!�p����\9��>���A�Z(t۩�Ws.�{|��M�E�$4��)�5X!��j�����\%[�OS���fv�H�n��=�I��!.��Kh%�����7X�3.�����z_b���K�%�P��&��O}<N�����ŏLY��WEF��!*�)����ť���w�RDZH��Mix��V�������c6��L;ޏ��7*8,!1G�+�Mn�#����X��LB��Jx� /�F��k��u.RJ�� ���x�AL�����{��8� �HNQ�W�$�_� j�W�Ta���V���U�!�֩�3Zr��h���C{��z�fP���~�g�2#a�k�����t�p˩$����N��B��F*_ ��Y��2�)jGe1d� ��*{\����уENnHm�@)�#��d��V�9��O����&���)�m� ���A�e��A� O+K�d,����Ze��<L���W�jҺ���'�ȩR��*O���x�!u�#[����vuf� ���f<�5P�)fd$?�\�Dl>e}U����j!S��O@�~$�Lj %�X;�FV���Pߩ�����H���z4�x*ƢZ]�������퍊R�8s���� %}I��&mrO�}I+��, �}�����Lz��r%>�R��n*y����|w��y��ؙ���.lQ�#2i��*���S㹜��|����Sb�Li%�
Static task
static1
Behavioral task
behavioral1
Sample
4c4967b1c31f4c9c06d951a627ee8c325106835d6142e4c92bba56fb67a732fc.exe
Resource
win7-20240705-en
General
-
Target
4c4967b1c31f4c9c06d951a627ee8c325106835d6142e4c92bba56fb67a732fc.exe
-
Size
2.4MB
-
MD5
60d8ae12fa771cfb6bf9c71e8fa75136
-
SHA1
9f7886dff966613888d799c788e705de2c94bd6d
-
SHA256
4c4967b1c31f4c9c06d951a627ee8c325106835d6142e4c92bba56fb67a732fc
-
SHA512
d5da0255b9d141cf28d3063609bca456ea78b4c2bdaa71c3b1fa30d8e32b7eba45288cd6427094cab702731b91df63334e05e6e046bf4a18db857d7b3e99a9be
-
SSDEEP
49152:BoNcjwtMyHVKcTEvlyQ/OYZUz6bldZjJwwd6rh3rzzcKD5D00e7:BDEtMOVKcTGXGbwzjJTUrFrUkQ7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c4967b1c31f4c9c06d951a627ee8c325106835d6142e4c92bba56fb67a732fc.exe
Files
-
4c4967b1c31f4c9c06d951a627ee8c325106835d6142e4c92bba56fb67a732fc.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE