X���0�eip����}֮u:�(��R�������Ey����!��O����I�Y��,}�|m2�$�2 M�ֶ/8A���a�<^�G��/���3�?_;��B1���1�,��En�{9�8�\���^�����D��On1����.|��<�`"f��9<`[2-�'��j2����Z9��wb���b$i���p]~ͩ����r�c�@`�L$cR� ���S�ze��p}�Nwk51���}z��+ЎR�m�["�.#��/Q̘S�����F�c����h��5���&O�(xʾ�`�HN}s|�̡�N��!K�ۑ������3�i�U��D�K^iN.}����=."5���;������e:�lA��2Hݐ͎p{b���O����c�X8<��W�/�E���������">G.�R��=�uս��B�k��tE���K�]���e�K�@{�W�ђg���7����b���3^��S��b��Niݩ.���Q%���[Q�*�����}�+`qH�G��[���,X��4I\�6XX�i��t���/u>N���؞`��,s�*8��(��[�]7B\@E�x8I��j�a��*�mnP���HD8w%"L�L�Mh��z��u_�m�R�J��em��@����m-��O�e~"����\��Q=��9����4x��ം9`�H�.�3��c�X�\�|,�5}�ʖ�Mތ�n�{�W�D[�g�@s��w�<����΄�ˤ��#�A�&E����ݖ�cn��Q>��FTC���oX,b/n�i�d�F6 6�h���-N�7A!��=A��}�8u�p�**"��:j �aG���V�n ��1zH��������mv"�w�$ELb,�����3� F'����:�h��?���kl�C%�/;P�����B4�&��M%�JB�k^cu}S�@�����P��V�{K�ad�����Y[��J�jp�C���$�"yk�U1������ H,��)�~w��S�'*ʧ�ֹ���RZ/���ƣŧ�2����se���I�d��G�!)�W>��=�c���+��I� 'e�����%��CD�ޛ���<���� X���&�|�;%Q�y��k2Hѱ9��/�5M������*toO�D����t�1�iL�r��r����QΫ��|��ū�_=I�� �3n�J����c'� /�'FJ�3u6���)L<,I��IL:s�L�3*�8/WL����Ny��^?�|T3Bt���@Hb���u�����G�����R�� �Y����A�:�t�l���]��fhQ�'�C��R�z/7]�1t�!����k��$�J�8��$]�X57�:(���T ���H��� ,������})���,~!a�W~ �F�H�+�">�ܓ~v��'ʑ��wP��&��.-o��K��p�!B�]ċ�"��|�_~U��� ����+�;,1��(J����q�m�����5��^{Q�� IA���Cպ?�&N��+rͥ!d[3�i������Y�B�g$P֑�"���px~O��9ӎK�t�'v��>`���ڞ? ^�S�چ�� �dh�2��n��rz']�M�A����Z2KN]Re�T0:��;�d����C��[Z�W��W�f�=�Y�g�o�0�ֳ�K�BĩM�=�)-��u����r�ޖMʴF��d���Ni�Z���6��3c<����J���50�'����v��Ybإ�g#���o�y��DP r��i�n��:��T�m&����?�����f�L���+.������$�+�X�0�К)�~AJ��������� HNհ�)s<�UCy+���=��5 �lT�5�ܟ_w��P�%���?�]Hɮ�����],Bz^C_���ҷ�;���B=��v������W�����v�Kx�u�������m��3Q1�܉���f���*S���{��/��/"K�`���mE�s���?Ӓ��0/���%��l���ᾳ�\��1�B��q8����oR;EAvx�e�#�T^!x&�����S��;s4��� m��������IX�,���t�����LImY�Ze+~(��Z� n��/�ksWy�;A:����f[�^������gOw��F��2��%y1v���DY[}H.~�[0�o���̃�(L_{ ��`m�:ή�\ �~��cбLx����x�:�EU���/*q� AE�� Z,x���t&��B�p���'m����37�����b%=����_n�����*�=dtI����k��qRC�$�b�n��Ӌ�;�)n������{YH��Z_���?�T�ʏ(Ci��3�q������t�w��h��Q��NhQwÊ�S�GCF�3��Wv�-�æ��}L$j"�0���Ǡ�WTQ����aH��Q�s�-���hƫ�*�";���i�D����&��O@�=֟W��RQ��Y� ���2����u���Oǟ��r�o�rZ�����&��pY(��/�IȳK 3kGP�|B�|�� �-�nNٗ3`�ć�Jp�xm�Le&��%�K�[ 3<�������`�b�h^��'\�YX�F�W�Dn?��S$|L���.�W 瘫��Hg�U������X���)ffuwP�.tכJ�q��q�tlQ�z�j� ͣVZ�8����N���>ΫT�.��S3�R_$�!��OD���$ �4��Y�b�C�o���N�$W�e�C�;Ջz�V*��L�|e��:U�E�DZ�qg]�)t�gvO����]JX�E̶H�fHx�w��'�ֱf� ;��'ŵ�&�K��4�!M��rM�w�����uor�vfHG�R��{����BA�����x���7�0��c�1d�ISX6�ocRaI�A�w|����>��#?ULc�w`) �.��:��� )����?���!,�.��i�-3#�J-�K��M��(F��O�&��p���{��)� ���N��\* s+��X��7���H�)�ǾVU� ���A� ei;��"{�����[������.]������~�i�P�W����3UU�$�0�3fC�/%�?d��2���ɛ�wS.)�F�t�J����/4���0D�6������r]�u�n��:�ϊ�0�N���[���j� |k���de�O�z��K�/ &�Y��VhWhw[�t<����]���Sk0�U��^y:�T5��ƃ;��V�F�.ꥡZ� f��旓����~L�ec/%�z��O�
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240708-en
General
-
Target
file.exe
-
Size
2.4MB
-
MD5
24d20705fb54d4d58041ada67e071d21
-
SHA1
f8dda828c59aad8aff6eb9787302f1b3b9fe23de
-
SHA256
b8e467f289aaf7e2328c24b98415ab9102bad8bd92100624643cf904c1979668
-
SHA512
f00ba3664849b0c673f99076a9c913e89e71ecf5a2743ade21cf8fe19dae6c2f5f8b639f438d76bea7f0958dc862e3c9381f17c914833ced363e6b3305657b64
-
SSDEEP
49152:x92wG8kydl+fV/7L2THbYb9IbIlceX2ytE6aSqU8LRJQUSTW4Fw:x9GuSF7LMHbYBIbIOea6aKq4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file.exe
Files
-
file.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE