�[4^K�u焊.�+>:�7��>����/���I1d���`9m1�Ν= o���H2�.�a8k�f�^��'j06p����Qx��YN��h� ���D���~I"V�#������ �`�CMH���Amncp�)�S W����'��e-`l>=�K{l���$1�._���P��!b4i�\pb����z��32�g5���T��F��-��ށ��ā�W�α� ����,3����u��}InP _�F#w�������̎��~��gSz��T.��01u������ �����.��iq��*�IUq���ۼ瓳�"��B����U��4�[6s�!��D��>�b�Ś��t�@G���A�ҁHC0���B�h�q�V�dήꡊ��K0�G� ��E[�"I: ]C�;��9�2g2�"����ªk��S��������9eK�[�J'I�wV�����v�VN�1����=D��kUm�Go���_ףMT��۷F� ,����x���/���!\+�W���`�K�\���f�,#��&�m��n*����N�ݪck��{�m,���.�=��܀]��|J������,;�j}J�TaY���|$#E�L`��yD/4��c�2�v��FV�hgy8���=�v.luT��d\��6��+/m�i���1�+oy�8��� ��9&��q-�`o���!:����Ud¯����ÐdS�+�1Z�f��Rc q��b��4������c]?�=W��h>��*��OZ�4���2z��罡"Q����튉�����FS�9����W�0Nrπ�a��?��KuI��t"����r8�F[1T�[��9)���#��S 0��"��S� ����x������vJ��B��L�K��й����Ԕ������e,�BKk��_~r��~?���T6� 4��� �E+����F|�a8ծ6����V�ױ�QM>O����-pb���H� %�a�\gF�~p�I5W�l�p5ӌ_�@�cn|�^1����?L��&u�l���6���0��)�ɐ�Y��� ��:sF��Z���S���Ώ�XO3)2ݘ���,��3�T3I���E2��h$E��J�!�k��>Rl)��K�c&��'C��^(SI^��B�D��Gk��D^�Ru���܄�D��"����ܪ�&�A9��&��,���up=��nYZo9� 1�,5 o���.O���K��5@F�h�G|��y��I4��Ft�6Q w��b����M�w8>��GXa��Q��� �,<C��G���S�@��n�u�|� �T�6,՜�waџ^�*Mp��Ճ�-�s�F=��e�,��Q�?���!8ɔb1c'��Hc��m\��_���c0��.!Tt� ,��u�ދ�<.����X�b.��/��,[�c줿��H�훙�/=��j�q��-I"��D}���A"�FH �kiB�|�j{��ziۦ$���>�Mv�Bc�>F;�I��[�΄7�7.��Ͳ��oc�*�7B��io_�FKʹ�C�b��k���q�^���4Wx�9b���b�Ki`��!�N�% ��E� ���\�=�t�\�nх_(��hƓb�T��˗|�����$�-�N�P�g�aC�Ⅻ�1a�,J3�1f�1ZzW:�h%�x=)�� �vu��[��ZQ�0�U)�j�o%�ת�1[Y��]t+͐��鞏��ʏ,]���@��hڇ��Ɛ"�-'������V���[li�zl�w�)�I Js�koޢ���妚����x�_mF=�A��}�F�k�Ү�{3(Gʔ+��;A�����-��8�GN�.��{Rk��B�/Y&[�F@E�X��O��b�m��J(iտr��?ނ�� ������|4��h��������~���~��/�zg��\<ϻ�9y; )�a3������o��/����ʭ+qRɨMw�G�=��I`|zk��������7ԉ��z+�+1�jl�j�G��1 i�h��������XH�W@!?��2>�\ʬg?�E=���s ����b�yq ���Yg6آus��L���T���]��Ё!>�]C2_���ƏFҼ��W(���Ut�$\�+�)����� �],-u�/�pcw�z�=Jf��HEj����b�7d~��V��İ=Q�&�l�P�lW��L�K�9����r��Lv��>��4\N�zr����4;<��Bձ�/^�?1�?���.k/j��ː:(�uj��\��"�1ċ*$7G7�-H��硦ZY� �����@e�'�Ɵ�?�`%�R0��n�lTS�b��M�uڏ�lE.s Z6t-�ujVBDb���j����e{�����P|��3/hS�R��v �xT��N�?YS�����z����`�s�'�f��%����� �A��������*� ' u�#�Jp���U�8,c�hqY��oY4N���j�2-(s`���������x�cg���������0�d��N��3�h���,��7��*؎���1-��]�@�:z�[���˩%��O��\�Ը��r�j�[/])�%G�AgG� �<�l����F�bfj�=@���h�H����g��<7&�H$�(@��WS����[u����O��IN!�n�[_���K���Q!�4��n_ �8�q��vXB�G��d!�W+^Y�g�U��$.1@E�x]�*�צ�x.����y#`~GX�h�M���Ŭ2r���q���|l+�<���zS��$Rqb���NH{��#�DjwFb�_�~(!�>h�@��/ۭ��.)O/+�k�a�?��Y��[�P\�]A*���-�?���R�DΖb��,-B��0�j���m��#ҵ_B���x24��& 4b��\�]�긥�[�w������W�D�#�/I:�:�=IYm�ے�;���bK�I#N� HC��=�����!C~���{x�?��?�8vH�FH���Se�r�6v���Ĩ<5D��rõ�B`��+WU2^�&3�%��^Z�o d;���='�O�n1���^$ mJ��)����J:�Or�7V_����D�Ugz�����Ó�n��]kX!(�4'(d�<�gm�������>E[�<q�(�_e�����DB��d��: ,[��"`�<�@*�}�E�~@���i�\�,-PO䦈R���\NH@�����J�X|)"�ٸ��O�l潡J��[��<�/�������X����\�yd�=+��<�r�����i�����_Д��҅?aL���*=��~�d��I`q�����[(�CA۴���~��#`�bj1��,���:��%�(�p3�
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240704-en
General
-
Target
file.exe
-
Size
2.4MB
-
MD5
f2290d91936eb97f18ade533cbf3df2b
-
SHA1
4b38b88543dfdca2330a82fecf51ef471f40aeaa
-
SHA256
e5761fbb135d29bcc23feb09ef09aafc4d7b49f0bb64793dae3adc3a5160e8ac
-
SHA512
3f644d29b1522498645708afcb6c820c5c139123f85813006ba76cf74d1606cb4cbe514a6dbfc8aaecfc4d230b47b997f78caf04007b8c26c50235a264e4ad70
-
SSDEEP
49152:F84QSpzCQuCZw7mqzn66mWAO2S0VyXB0hlQs7PAAGaxBbi7YXXydoJPC/:F84QUCjPSqzn66mWJj0Y8lQ4lbtXXZq/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file.exe
Files
-
file.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE