e>vV>�;^vDX����2�Yġ�g���$�<�[-�Z^$ₕ.�uت�ut���Wtg��̮��ZI�݈� R~���%AHj�X�tCȓ)�"�8��5"۞����D�3̛~ ]�U_��0K�^ =������Oj��F@��UØ�u�f>7��>�d�q�YVإ�T�I1W�Cܢ�+��%$��k��.9(�":�L�uX������N���S�������O�j��*�_M]9�-���U_E�ߔjC�]rԭQ�E'��!@L�p�)��A�G)]�U�k�ᬘ��� ����K�ZOӭE>EF%�q��]�i�� U��R��@�iJ����<�?���M��\���pc� Y�������t��U�͒�ň�.P� �}X\��|��9�9�v6�%���o�Z�JoŨ��~/n�ˮ�ˀ�����9�7��X���7��`����v�*��6��$S)�;Jc*�ͯ���ILCU�x�'L��B�KdE�\���p�b���ޔpr9��8$Dq|Q�XR�W��oa��ON�t̼�lE����Έ?3)��υ��NYU����ն�0qdq�a��5�l8G-��W��"�$Z����])F5ڿ�>���9ŭ7٠�n��KB�I�6�Jb���N���k�4y�iD4�#+������,� ����q[T|Ɛ�'�Q�U��6Q빖=��ߍ{��j/�Y�%{�k["B�j��̠��q<���_�R��iS��U��lX�������AjK8�ǀ����o=:�Ȉ��G�:�pc�E)w�=�����b��K�_bYd[�[a���w�doX3���IJ��F_u�=�U�9�e��T��L�OM�G��#�*���X���������lZ��ڃ�k��K�j~[d.z^?9�U�}�������~a��qQ�*ay̿;�G<D����0� �+-J�4I}wMƝ���z���L G3�YV�:�� �q4M[���[^�`�<@�رU$�M��t$_%�?0MA��A��/��(\'����~�����6rK��-��?pɇh��2H�c�� �J~T��zr�#$��rS櫧���Qs,��O��#���58S�T+�N8����`P�y��f��bS��4��4[�8_<4�%�����t��]S��B������Q��vd�b�l�rS�=+hM�T�N��}�4��#��i��xZ�@��AI*|.�0�\(ݑ������T���<fXi�d�'zAǓR�5R�@Q������0\�"��B�����5��.C�S���?m��Ɯ�?�0�O��V���3�0��{��_�x�ܓ���xPԾ�-g*fu/Q���ػ"�lNmT ��1��B}9l��ߡL�A���"���*���,8�6-Ƃ�i��� ]T�T��4�/�91����MKm�YN����rEtP�d�b��3}ѐa��g�0��P"=�1}�F8]G��,ީ �����6��q�J���pu��L���(�t� �N �qC�� V��T{��)~����lYe��F�(1_Y���"�'����ɩ�<����#T>��^Ì����q��Q�;9��Da�,Ӏt(Դ�g8�EG1}[� �O̗^��;�rjM�ʛ����r��U�ܚ��^.p��{��G��)O��ݬαo�_@m��!T�����F�.����C��_�&Z_�T�ɖ���Cmu1�h#Δ8�C��6� ? )r q/mS��{�z�xr��#L��Q_'7���z~���&�NI��J��#��<�T�+� �=\65�e�eǼ��j@3W�ؾN}B,�A�)ߢ���bwVY���x���=��u����u?����[7�D�tW B�Pn�2��(��%�Z,c�X�i�J��B�˼0u��<��Ҷ�:K��������O��U�-5����J�,�������+g���0�f�� '�!����Vs�O;�~?�ɻ =� {pࢷ}���e# �j��˱]<�x��8�=�^�P���,���+ᄇ`�HL�����a^|�x%y\��A��=)F�ݵ��9���>꿹v�+�$0�� ��ʇ��/(���ǃV�w1�ge�����bNHS�;�䍤U�G�t�T���Tw�#|7�m2�X��|��t{t�{5�����1~������c(Z�\����J�X\ACV�GC�2�O�ٙ3�"6rI(7�o]�����HMo�0ƈ��gZ�f��a�����Nd"���p� ��aK�<�``��)�`xTg�;P\�&�r���-8�ޫO��N=6֞S8[b�ↇ/��)��<�J! `�ٻ���\O����w)���fV,���0�t��պ��=�ǃX����2��$4S��тI^�*��_$��Nd�1�)jn��-0y��)���wky_���<+� j � ���;������)����� A�DxT�E;7��s��1�]������H�5Y�Q� ����&��F��D 3E(�U���S`�C 8B���Ϛ!�n&���[���X���A� �9u��9�d�ZQ�4��w����e��U��&&l'zyCFg5 n�q��Ί�E��d�����gh#B��l^r2�O��Z?����A?4�#���U.�D'�zf��h ��W��r+C��yMo3��u�ᴊx�=�T�Tx�-��_rF������<�^�Q����v�acbCZH�x`u�3��3�5�h$9�ܫ���G���43��W����`o��7�dC2$w��w�����zI૰���d��V��I)��*�`S5!����@)y�i�) $ zH�"*���w{��ٲ P{7 ��E�3���rp��|$B_��ɜb�����c�BcVա#P���c϶��_��mD�b���T�Q��(�\dYl��RK�uT�3�f��F���B�m�O���`���K5 ��r�m� vx���64'Wd#�vܾ9k�K�W�ۓ�b���ݳ!F=|�m: #�����&��NՋtz_��C��O�G /[Է83F�j..ɀɦ�T<\ 6>��\ �������W��q$��ûٕ�uu@`��ŶH ���]��1U����*��5���y�@�=\ &�-_�i�Ψ�QW�����B�?`�ߓ@�����T|�Xū�J8��$�M��?�� =[�v�̀�N�!g�B&���D����]�u���a{��y3�Nހ��v&�_����5 ��(끽d��D+�+�>{�ϫ�q-a��oӅ�HR[��D�� w�ۤ�!0Y�QŤ��������S6��& �IK�o `���dr�����a�Ф��-5�`:�
Static task
static1
Behavioral task
behavioral1
Sample
4d337368aebb2cf478e81a3f62406c4315dc8151acc57a15c6519017e845641e.exe
Resource
win7-20240704-en
General
-
Target
4d337368aebb2cf478e81a3f62406c4315dc8151acc57a15c6519017e845641e.exe
-
Size
2.4MB
-
MD5
1b90e9911ad236ab1b2febb649cb321b
-
SHA1
99d154f2494da662f1d11fda5f69ffe5c6c8e19f
-
SHA256
4d337368aebb2cf478e81a3f62406c4315dc8151acc57a15c6519017e845641e
-
SHA512
dd722df27c48105274cdc28bd0467b154052573670f10911b5064251242ea246cd014e30aec752e43a47f5d6f6b46df5ced0d0e60e92fe09582fbe64193ea482
-
SSDEEP
49152:RfPC/I1UHtpx+gzTzSR6YG1Wz2QmSeU8c3HWGbCc:RfqDHtp7zW6zAztAOW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d337368aebb2cf478e81a3f62406c4315dc8151acc57a15c6519017e845641e.exe
Files
-
4d337368aebb2cf478e81a3f62406c4315dc8151acc57a15c6519017e845641e.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE