�ÿ�җf]���Y�0^-�q�$ Ɣ�%��g�8���� uD�� T�W��ټ��˴I���?�����yц�y�S�FrL^��l������o�S����v���~ً�+@}aϝSU����35��N����Q,u��0v��`�X*FszNhE��j�+�8d����8����g�0x�ZE��e㍂vĮTy�T`�D�V�5gy����ZN+3{$a��L���Ɍ����dj����zMM��^4��=���4�����v��+'�w�Y�Qu4:��tшG���r��=IV�ǖ�q }�p ?�8L�X�g�ܥ =ڼ��{4��Bg"!~>�+��鑪a [<C3��{3�e���y�����&^Bs_�<���SS��h��<*x� �"��%�4���$� �Nu�Y�D@6D�C��8�L�<��kݑ�)<���}&3��;���`]`�����: �lC�$W6o]5��%�Mu5�V�M6gԦ���;�E|�����X��]8Q����Nar���[����L�gOIg�>ssDd��d��aR��v���h=Y{Đ���?�r�M��&�������f�up f\ ��f��82:��| ��˵eo��G-�.��p�Z7 Z��0Cq$q�ٜ����85�?�����)L�+ɚ�&mk�Q�1f]u���DA�|]i(��m���5YA1�6g%��ۻ�Z�^:��AJ�gv��W>f��}��=�.���e�q��!�q�$Sr*>���X�c8s�D[+�ԧE����v�99�7��]�*��������/�y]p��.gx#W�j�l��1^b�DÇ�)y���$��G�{�aB���ܥ�ҥ ��(_mnZ-B]������d��~�ʴ�^��{�6�Y0|����_�at/��e�T�O���9��8Z�ŭ�sW���������Z|��"����"�T:N��2_��;z`W��HS�1(G�����NيE��m0=Nj[��3�S��a���� �E ѯ�e5_��?+�5�4�4��?�5ȏX͐�${ɝXJ��=eY���(�m�j6���5��<@ί��l�n��B��2�'��>(�X��4�qa5Ȓn�T3B%��z��� Ɠ)"[���TD-!���6��Q�����<`tB�d����h�lj�w�9��L����a��`&N���R�\���#�u��8\�Ľig��i�_� ��ɑ���Nd�����[wO�jti��qȴSU��K�r��q�T̢���OFWl�� �,@�_��Rp��0l�B"G��v(��dY������;&XYH�+��Z3a�#����[��6���NyUW��4��Na4�Ong��9�ա4�q�2c�֡G��ZJ�2Y�V�0�S��t�+�A�?Pi�S�@S�����W��i�Z3:�����Fm�e9 l�^a��b�ZBz؊����{c1�f 3�s�樸�G�-�ܛ��z�����ދycxcF'[�x5�,�h���;���Gᤔ3��~�HhS��o��+��g�ݛe�u�7���b�%� ލ"ZXH>/#,b�F��ұ @�f �a2�l%L�s�����V��57��T�8��W�ެ�X�g�Rݼ��#\ �^�6�S+ӛ�o�D"���M��[Z�+�T��h6�T��;V���]�����@)��m=�I�>�xUX��V��x�j]k�Y9�o�-�����s<�n�e~џ�g3�bu�7(���p�,�Uƞ���,����e�"u��$j���g|�;��i��(j��u@��NR�u�M����'������-���O#����-lK�X�q�� ��բ�����+�E�n��U�)( )�O�P5���_��!�oЦMBL������6�R4ܸ��6� ���/�뒍|���l�3bv�Y���܉�W����%��`��yCϪ��/XȈ"�ut*�9���h�-��mҨi�b|����l@��l�c�DeJ�Ay�S�X1! ~�ǴH+�2{�� J-c�Ү���b% *�?�&� �bl*�_�N�P��_��{j���g>�{���i���Y�JQm��BZ�Ŝo�n)W�t��`~��}�\q�~�C4L�z���h���_�Ѧ�>�Ge�8��h�]�� �}M�ۺ�ള ��vZI���@3�/�;� ��� M��WG\ཬ��$lX�R3N�_�A`�$�mA�6%�����ů����t�0����DB%g������ٝa����� h�N'@�T2(�r��&�������H����]�*�t������,b�0m�h����N�&�aQ�L� � t���z��N?����&�9��u}� �y�W���n� ~�<3fx8���^��8=��^��qP��p�S@����yDh�"<�;xc/, F;�#�My�Y9iR�yTm��P�6�w��y��t]g�+����r�p �R�*(6����0���aАD���u ǭI#��*��y�Yb�,KV��|���y~��7���R)پnSW$n��x�E�����R��P6�|�\j�ҧtKZV��^�g�6c�Y�^"�&2 ḿrF� ��ʘ�Hzw����NhQ?��x\�6�������\r��D�|��!%~��&��d��Z�{��b�x���!��~ޗ']բ���!�no���I{۬�P�:2<ϻ�n�9g���e��g������W=����">�ĂO%�,@���c�v;d�/F�1�(��N� _k~NFV�&�q6���_�ɉ9ʮ�p�Z�@����� ���C��]E���첅Qy����y7����z6:�N={�ջ��)S ��բ�!ĥ��0���3�n�9>f`@�"��i��G>d��*>�<�R���"��λhSO!v�Ð�S�D}T,�y�:���0��G_9�.�R�x],��\���(��E�<��Ē G^�/�U�k<�lZw�{����T]��M�9oMC0 ��O+���*T=Z�e�>Bw�\�[���RˇI<wƚotr�)!�r,3�}6�������@���?�m�r���~Q����^�:*~�f� ��rե��O]���nj��Cm���M�$��f^!]�+.*#��ѕOY'i���Q�'���N9c��{b��l�:�}X�w�Xչ�S�� ��<�?�r��� Ŵ�*�ɍ%7FZ%�xN��M�o0Bh�ӧ.�G!�����`č`��?�!$�m�(�������ć{�`r*�5��X]�S����MUg�0�`�=�D�2-CW�_5I�GsFa�Q8�Zd�Yǝ��������l���T��k5�����9yeCr���?�@��yT����-�$�u�\�[�~�וܮ�yU��d����O$%ܷT�7�g��m�M-�fp������Ɏ��ӗ��aڸ�t>�2�`N
Static task
static1
Behavioral task
behavioral1
Sample
1f02f64a44ec6aa8ee35a18d9325fca0N.exe
Resource
win7-20240704-en
General
-
Target
1f02f64a44ec6aa8ee35a18d9325fca0N.exe
-
Size
2.4MB
-
MD5
1f02f64a44ec6aa8ee35a18d9325fca0
-
SHA1
0bf2aacaef124e1a4090c11f01bdcd2c40ce7060
-
SHA256
e4c86641aa4ffec75bb9123257b131a71e032bdbd9c797a045f830e9f4ba6efb
-
SHA512
e0b30f947d4dad0067b514603108eab0362f244d49cf3186e200712d339076b615eea90a7496f2ef8898d5e564bbb4615b4cb32b3b2ea7552573f93bf3c364a9
-
SSDEEP
49152:OLnJ8ByH66PuvVlPkkW/d2vD9333/hCE4988r9ITb7EazF:h8/uv/u2vBPgEDg9C7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1f02f64a44ec6aa8ee35a18d9325fca0N.exe
Files
-
1f02f64a44ec6aa8ee35a18d9325fca0N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE