(p}�]C&#���7��C8�]��G��lo��[E�S�bmCJ��&P���/��u>�J.0�sP����Iƪ�����`wT >�����hRy!1G����VtF����L�3��o�e���/�de����jS? �.�?MpJ�sN�_] @>���6g�(ݦ4�����m^�`����� մx��9y��+��B }�z��Ю�yo����mA�K�B��L6hD��_�"���S��Ϯ(�*��}ؙr�^$�N�ϭQ�rw]f<@�sf��Z(�9F@�/��� �m?����*~��T��H��aS�� ���/�����#��N���l�O�N��w=Jһ�i�}�\����S@z�8���ғjÛ9���P�q����\x�_k��X�'���5��t4�&�#�/�#��&'R�Iu�S���d�U��褵S�eg�52x<С6v�����d�>v��M��?ֺ���Hz�hA�`k:���Z�Sh,d���%��x�D��!�/$����TDD���v���\�5��'����kn�H>�.���U"�������aJW�{�H`��vL�à$3q��v�aQt��ҳtHU����E+� ��Z��'D�=NIFk?��Z�%��[<�}��Y �p~�8��+K���|?m�ue��J/{��3�6�I�f;��t��"�u�ZEe���AD�}/�5��;/A�S��z�*����`zF�M'� j��:��2_��z�hm���������;D�R/b�t�e���Q3v�ŧ����B���D�Uh���{ �@֞�B$8N��4=�Mʊ�V�<g�[�l�� ��!�"@ ��kcI����Rm��r��H-��N��f\M��X���L���s��V�W�� �#� ���!��8<�5�l�P�U{N�ֻ��p)9�L�lm�9�j[�l]D���[y�������mv�����Z^�}:j,ݸ�RJ��"Y�>��{%6;(K�%�R��#eZ`��ݱDs��[��]Hr7���e����#�mӤf����ne-�Zڰ�BC�P��%�F��j lϲ=�F��dt��UWY'�R�ԫ�uk�~����xt5M��z]�����?aOTS�m����I�e��fp��M�*(�խ(8}�ª�e�6�F��|����5ކ�5@V���J�A���E <��$ C���̊KT������<��۶��E�^��R!���R�%;�"q�R���d�~�G;� wM g-i�M�b#�o~��o^�%k���܋:<��O�lL���è��*�>�z�,2I��n��ܲy�e�L=��=��� �SR�tڙ(��g���G���m���Ԑ��r,y�h��2���X��o��*r���`����RL�` F��u[]�WE��/}+� �+U���o�26�E��r1�7L�l���A�[�`^��ܹ����8���ҘҠw�B��/lY�W*,ro���%yj�']nd��4J��J9s�"�&g���� ��q�X�_2C��q7Ӿ�" ��%�~!�����G^;��9���0GA�<M�<�ȷ�R]�뒗�6��O��p��腑�/v�),����I���c�Q�%��~��@)k����ES��+�3+˗c��Ȣ^�>o�]zs������#��99���9�&@�k���U�Ql����X���cE�g_3����l���kLui%�CQE�Z�$_���X��~�`v�<����IϢ�����$ ��U3JKH3��LJ#b/d�U+��!ѡ�l%f��m��h��o{(g�LB���<��0�F&&?�@����-(��Ͽ�J�������yoiO+������m�TN�i�t�W�1�������\U�=�<�T��ڊ1po1����s� ���D���� �h���D(�[�-�����������|���[� "H��a����V��@�<�S�(aM<��^zv��%�-��ɸ��2��U�A�u(Y���.�o⑻/H$��DM��V�^���At�������Ø�%����v7(YxV���h�(˿����Y�pȩ�º^[�=G��ʮ��7$q rA��"�J��=�{g�g�|3Yl2���p�q�k[D�,�#�CJ�#gU�Tq�z Gc���n� ����W�1�US,��6YI�]����pM�ɟ��Ǿ@�t�ś"�-����<2#YU��c���e� x0����B�7�P ub���fNcU���M볆):VkW��N��� I�;7�5�`䕬���b��NvJHE��S2s��+_:Dy���!u������z��&�(/.�*in���=��Gk���䡺P��m�*����ED�%�Y�����(�=�Бg��z�7��ɮq$[�������y⏋b��12O���Za��V�pW�n�&�o���C-�Sdr��ʐ���Ju#�)�����5���i�L����?�S����V"6�!�]�r[r�" O�:���8CQ����E�!�)�ך���#��%��x��ֺ�4��`��r��o�O'�|LS8i��w �d�*�RJ�#���'y���������&��E� �uL��hnyw��E8N�ֲ?�A%���)�\F�< ����8�h/���B�h��-Y%Ѵ��Ǐ�F�0p0�#��\�U����[�#�ݺ����D2��Д������.�<�$QgeF�x؎�(W��C2O��Vx��iT������|�9��葭PZ�d+%p�+75oYJ�XMͣ=����msKK��ә�弬G���ۗ.+,��!�]t�P��40��б;���~�`�ixh}چ⋵M.z�����!ٻh^LGk#��О�̋\�^�;��Y�Zd �ܳ����W��nn�LT�CnJ�Iف��n�]�'�����O�~�M������ � �|}+�!�~9���5�%�':����{㜂���T�D���JK��$.�E`�>��C�<�ICPIr�Mhh$�Q 7����P��+�t���T ��U��J��ij/�? ��<'��G��v|�t,ƅ�х��\�QB8�i0�s(Q�Qg=�_��Ac��@�>�V���S�@�&�3�e`��~r�R���O_m#��s�>kj�6�1X��D�O9AD�|��HRȪ1��S=q��ڬ@'�4\ö����h���k��H(��B};m]m��A}��v�t-�bmr1���h?����e9V٘�s�BFX,A2q���x��Q��'�P�:�i)�LDE�nY�����+���`��|%7a�M_��aʐ�#7��� ��[��Q*�@4iE;�D�pB��j���*��-!���lp;$��m bw-�z���s�[y7Ժ���D�0�p�s�v�dͦHM�=��]W�1b��M���O6����._��ok ���m����4�O�{�{2Yi.�_��p70��%��f4U��V�C9�DŽ���e �A��?6i{{�?�3=�T�u��y�����E�}��}S�r�k9G����@�ౠ���Շ��clp���nq#����O��'�q�����5��K>4���!�/;܁yP����*;=@
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240708-en
General
-
Target
file.exe
-
Size
2.4MB
-
MD5
cdee5e5fc7ed717bfa4d6d70fa5ec427
-
SHA1
8c801d339f44014ba6be70075125aef1f713546c
-
SHA256
73df1d0543aa692075a501ab897892cbe0cbb20af53041e1997863bdafac3ba0
-
SHA512
c51cce67ad5558b348a6069c9a3250155ba1e4b26a2a28e77ed103e52cb5774c9df24f9a8401138090de13a40bf9713529cbd9fe893e7250abd6f0fb51fa9433
-
SSDEEP
49152:XVtMkRVZ8eMdCRN6+tLMFwEYMr+WRSAhwmWsZFnz1DQwBX+0lP:ltMORNntQFrZNSLix8wBXd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file.exe
Files
-
file.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE