,�&����Y�8"���*�?�a&]�1k� w�$��6�C�?�)�9�۷5�~-�Pl�b������SWN i[$6`e��tO���M|���%��(?$���o�O]5�#��5�]`4��'D�J q¡ꮐ ����P�f� |��d�N��b���ei�c4�r}pD6?b�����{�5�}��IbN�`&���u��n���u+D7.�~��������k�(~����j�Ys����33TD��v*��qN����������p.����gE/ԉO��.�w�}o䋉I΅���c@_�HSέ�*j��K��ȀkՍ�í 2D.��>U���H-~�#�q�[U�����oOV��%�'c�m/`����&�ƈ���`a�|��祺�C�OVGIG�]��n s�@`��a~�mRс�n5�(/Q��S�#�\��*~D��$Lr"�f���r���$ 2��C��=��ΕS6,�BZҜ�6��1�X���FVo�<pU�_�9i�I{n���w)�������B&f���n0<�+sq�6HE�~�t��U.�H٫�N5��' 9 �٬3#4�A"�@0���.�Q<�,���8�R@�ˈ�^�K��ػ��_��X�`�3= ����3����#�� ��4����XM?iݐ� �F"�F[�� 9�v\Q�e���!�7� ����|�{mH���iQ��W��QK#�/b&G�+Em�f����}*�������� �[&�JVZw���@��f�|���8U�Ixe�Z�����w���|,��Sg�M�Vs�yGR�?(Yo��o�,�k���^��x&�K��#4R"~d EFA�u�+\���ߛe�b�k�(y;Էl;�哥sҭ�ҏM��}�ZN��fó*t ٖ��[�Bs��Y��F�]I9n�l��I�K�K�gX�/�p�U�����iA�ȧ������|��8�x}ņH�����TQ�]Exi��8w��D9����Ƿ�Q��y*T���$�y�GH�J����B8%r������=̈́����ȡ+_QV���)���tr��mv�ꘪ�������Oz�����3�ӹ:>%fG����vv�P�qN�U�W:F�)ڰ�JPu1����D�3��A��Gic��)�*�ү��Ldp|Bd� 8�T�X���m�ÅȰ��ib��O�1��лD�"_3S�f+���n�����苂���0�t��@w�{�K��(������{ =5Ӏ�,p2�`��f- �L�M�*(:�A^0>-��'�a�<j��o��K� �,� m-�T ���K�T�.���6�QA�A�k눕�o���9ĥ�\�"_ȱe����mb/��Y`?�؋�[5��j����5R���E�`��8�!���S�!�.��g�%DL�R���ﲍa�~��{v��n�l��v��1�W��ZVM�BŊ�g�Or����I@�=���\�����<9/����V���r��Y��|N�xr'/�2^4FqZ1IJL�˖G�x�)��oR�1��ri�wX^s�xp�F�����$�):���]P�Z6xҠ�&K���##v*����tlݣB^7�d%y˂<�elpЖ�o�e���A*�i����[����ړ0Xw�����8���f��re5�������m w�kld�P��IĻe�i+;��/}�/�*�?ЬQ��p~a&������ ����WI�� ��a[������F�goKB�R;u�K=Z�_� ��.k�s<��ly��s�0�����~c#�R_��C�3�cGag#�y�Ta6e� 1�� � �j�+�*��f&-k�x=fQ'm�kC��B�ݶ�!��S�O�!p1��&5�(Z�&��i�b8��N���JW����P��Q��e�h��������Zp�����8�����M����r�z��^�X[($�Rr��iTCT�}�M��r���Q�ij�&C���Pj����5� �Mφ[1�� G5d�%B���� �)����a����D� j��=Y�Q �����q���H�9)�c�a*J���dj����6%���LO���f?�bM\�~���P����8�uC�T�E2�oL����Ċ`�����B����Ȯ;w�z�iV���ѿɜgIۜ��YŪ��z�����`�;��L��l�R"1�Rsb\=���s��? � KVY��͵AL�*ܦb������d��]��H�C!�X �w)R��k�0�IX���a*m��/@��?��<����������/��d�)Kۗ&2�ܨ��)��z,Y[�*�s233D�֏�ke�e�ǡ��ȕ�2�����]��u���F,oG��m3O!to�����Wy�<x�u �{�;�o���qM%#���#���omÆm���h�����̿�ք��^��@x=Gَ�06f�U�7�&Ƶ�$����m�h�?�Q"c�q^F��M�������P�����eTw��i��*/�;V^%$�l�>@{�U��rj,���x�e�mǯ���e��߸�c���崭W�DŽ���扺yg�1�5�יGF?�r�d����=-ON�LQ�f�J ADjm�Q������ ��J�^x�0��-�F��+�� ��=dݖa��Xf�ʳ�đ��}!��#)xf���'�{��X��Η_�ɹ�+�_��U4�"�Y��U�<zL�l��=l�]��tL88�4,��G��쟀'�������Ё1�W���?05;��o� Ylg��6f��t|l�ͮ�x�'��2oٲ�?h2��N����]�6i=�ʦ\�7٢}�$}�8E7�4�A�+���j����+֏93R��}��Y�R����@N��>�p��7)+�wR�r�(d��5����3�{� ����M%���}ME�w���5�'������7���B���(kDy���5�� Y��mŧ#А+��Օo ) �D�t�,��+�c��O*�P�6K�������vN[�CN�gi���I� m���j������D�X&����؆-�W�8��T�zy�ix�Nzx�@��K�c��> g�O�}�N�ޛ����KZj��t. �Q�/��i�\x��Ӽ����W ��"OIB?��f�b<q�1͑�r��ˊ.�p�_MɀD;�^,0ֈ���6�'w�Uh�ܻ��®J�6��Z� +���[� �y��@��,0�8���d������w {�[M�3a>�8�%N�:����Ӥr��Gߐ�%�6��W���>��3��jL��ZS,��}�t�K��!�y���c���b�N��k)O�}��]Qڱ�،��d@r�4���C��-z�w����>�[�������ᩩ0�>��Ny%��Nx?� \��,_N�]��^i���7a�UH*i�&d&Z�&��QC{�@5�K�9'�b X����|��/+36��eU->8��xC�I��"נ4W��$Z?QGWІyܲ�)j�aL16�bwȖ�Dz�ޚ�%7��rIik~M�-�f��y��������B�J+�W��G둍�P�*8ծ��� �� 9���Je����eP2��*ǡ��F��c 1�tkx���`"�<��������Y�Lj�g&�0ք�"�i�Ф����b,����������a��I��5�0<�>�����
Static task
static1
Behavioral task
behavioral1
Sample
887d84eedb993c757247b7fb7fe85e60N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
887d84eedb993c757247b7fb7fe85e60N.exe
Resource
win10v2004-20240704-en
General
-
Target
887d84eedb993c757247b7fb7fe85e60N.exe
-
Size
4.8MB
-
MD5
887d84eedb993c757247b7fb7fe85e60
-
SHA1
d6bf12917731457980f553f68cd4cb6e545ef142
-
SHA256
f0fb26fc97ab42fb50f29b3cf08b6bdab4911e2458599d091d9dc883857eb3af
-
SHA512
b73a7284067626c36831794de75827ebdb0cf07b77e09431e247b2ac2afc7162c186b5d71f11d965345d27cb3af5fc87d5ada9233099232ad5f73f78398bd694
-
SSDEEP
98304:9pxNhKbE7Ue0WazqWoPqCnnE9jdIShqbhT6Xl+2fIiCXdhYA+OJ3zir:9px7KoYe0WejoSCnnuj+bg1pgHXpRZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 887d84eedb993c757247b7fb7fe85e60N.exe
Files
-
887d84eedb993c757247b7fb7fe85e60N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
Sections
Size: 1.5MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 84KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 309KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 640KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 645KB - Virtual size: 776KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 190KB - Virtual size: 7.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE