����y�������!�k�>��`n<��|��}+r���7n�r&E\�ze]p�h[L\CV�����5N|���̱~Q�汒�����S ���L��UE���%�Ѩ�"�a�~��t���x� $M���Yv-E�GKF����F&k�~v�/9r�-T�<�YU|20q�dk�K��hE�`E����f�㑇�q���o=(� <����Z�M���"Oi�C�5���/�Ի�������]�V�f/�����e����eO��J�R1iR����&�����Ɲ����[=�K=���~��bk�N�y�NA���A��X���*���H`�5�`�]I��V��oe�p�JjI���W��}q_!o�W�ɠ�Y.���$�w��N�����:�ֶ(��6�*H�-2w�u䳙r��T����E*���EJ"lH\c����@����t.ϔn�c0�D��E�On�كg�|��0��K�L掱Ml��D<٣��1T��A-�����9��R�wﺽݿ4@©��2��?}�s[|j3�Υjک/�Q�R���X�2�)J}zZw�?�����h��T!�<y��E�����ܠNJ���Uw�D�F����4�f����!L�ޠ k��p;-�n����(]�Lp'�='(On�5��j�8� }���h�m٬o��hS��8�!Voo=�C�4��30^P�mA��BGP]N?K)�}V$M����P�{ Z̘�u�,gS)���l e�p�>��S�2���8 =J+����N��u�f��qhO�8q�ʚ o?ss����On�M��G�Σ��������t�,`V��hD]�a�\������ӿ����Z$�p�`�+���C��XZ�ts��m�?k�s�E3��YU�x��L�����;=�#^i�Fi� �� 59a<��|1*���_'\�W*F7�i�[m���v�fE��#��oKK�L������.�����v�� ���U�F7��/��}�{���wT��o��GK��cI����!B�B��߷��b1@z���G��cx�D���ku ���~g�q\_1_h��hW������@k&��ht! �T���E����Ι��|<���bcA@���2S����6�G�pR��l^����9�b'u��h?�4.��a7���! �=�U��(��'`�T_X�@��H���R���5�f���N�N{OI�?��X���|��4��O����U�o�G)y\�ʕ����uS@�zQzb%f��rJ���j�����?�����(�P���<R|b7)�$i�uް�;�Ӯ��� �l��\e����Q'\\>xMi�r������r2�ƽAʋ⮫���K����3�̥'6Q+c:)���SQ��[R����I�<��(�5V-�x�\#~x�AP&ܦ����Ǯ�;r�yb-�J��$�%X��ڱ��|�����{�ҹ�fT2[Y`�_�p�I<�zM��!6v��uoؙ�{Ui�� ����(��*��D/W�v�����͜^yrp擦�����e3Ŧ��p����Gdȳ��h�!�9��R����3�"��i�&��A��+�x�w��i1�Ȏ�W�ql{�g����"�py���)y �o�������9��$r���{��L��E�@c2�oH�ǟ���/��dy�_ �[q���K��G�� gM�BbO=��yJeAh�z�c�,�A3��Y;��y��ۚ�}Qg�"��>`�83�ň��-\y[ �L;���>S�<���?���h�vR�uk2��4�f��_p��xQح�H�v.�/�ك��WX���f.,8xo�4����yk���K��+�̻�c�}�!W����N<����?�bS4�JrT�����T�I+2��jM/x�_��T VZ�6'��C�KwJ��K��S)�� 4[TS')M5��\g;g!����g�</�qɧ6w�I(9]�V�:�� �3.h/�l�Gڞ��u���M�jW���Pjj�Ʃrs���&����1/1��`�����d#�ɿzv�,�GN%]I���i?�|� �����e�%��<�dZ��핢(<���<�bwg\�9/b�g�ȶ�H�I���la$@.�7e��]�g���o�!���%�dp���㩵Ǹ1���"\C���5���� ����"�WhI3 �K?Q���f|dK�!�mj�D�骮N��/���o��x��.��[9��C��M��P~��,9k�ڧ���\W8t����m�N� Qؗ�]bj������L�������x�@D��\1�B��|�I��:���&���A�HR�6[���Y�'\�\��SI��r��1����D�E�Q�D�Q,XXWL�{Tx�b��`tA�f��v�%^�I`�Y��j~�Ba(E�ne���,�+x��3���ء�����>����e�0c6@�)��n�o֡���qվ"j��Ύ�0�H���G��/Iq�F��O�q2�`���Dn�X�0�O7ݴ����\�5=q��A�P0�R�@U�1�x-�NW�tw)��%����gE�QR�%���>�bW)5��Q����(�I��t$���#�t��w�1L6�e=�������������o�����n�B���b�rw��K�i��/�-�d5�9�8|���=7F��j��;�]�t�(�er1�q��h#j��d�c�]��v]�O\���X)��4�Yhn;��!�1ۧ������Y�@��H��Ӧ��O1���j��X��%N�l�@4b��N�bw�B��&�F�aFZ�\]/ڪ�Z>��E6��[�(�������T+��cc̣h��b��r�e�v�&Ux��|Yw��4��f$>W4Ű[���nE� Q�&MN$�YO~B%g�p��>q0��.O���h��0�4�L}�-$�zS�4)�)��y�w�CY�>�͖�����E{���Y� �������ק��URM�I^S-\�:�G+*8���&.L]n������*ʮWX#�b�ƀ�M�F���q�0��n�D�1�-�'.BG�@��+Q��(�����y��٩� \��.h�:���s(*�w�j��TZ���_���L���^Y����%��:�:=ӝ婣��e�}2�=���
Static task
static1
Behavioral task
behavioral1
Sample
4dbce3b48eaa032021893a69d50f153369ebfb5c8c1a5d8f1df2a35debc0f357.exe
Resource
win7-20240708-en
General
-
Target
4dbce3b48eaa032021893a69d50f153369ebfb5c8c1a5d8f1df2a35debc0f357.exe
-
Size
2.4MB
-
MD5
220d3b545e973e99f08261987a537e94
-
SHA1
086b1e036bf86da6eb993026aee9a5ef97cadacc
-
SHA256
4dbce3b48eaa032021893a69d50f153369ebfb5c8c1a5d8f1df2a35debc0f357
-
SHA512
0400a7380b680770450764fb92c42137c88a78c671d1dead66675b9e31098f5406e75025fec2e122208642e9c3bdb9bd661e68139cdf6b66c0e0f7ec036d8966
-
SSDEEP
49152:sdo2LoL8iIBIcHh67oGYytYqvxnbxuWnEE1oJa21juVwGjWqLew:GLo41JHhjGPtYSnbxCEaJawjoLz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4dbce3b48eaa032021893a69d50f153369ebfb5c8c1a5d8f1df2a35debc0f357.exe
Files
-
4dbce3b48eaa032021893a69d50f153369ebfb5c8c1a5d8f1df2a35debc0f357.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE