�ʂc��e�s�<Wi]�d gJ�D��E&N:�qB��%��, 8_M�d�X�z���`6��R��'��J� :�A1(4��3氫�\�!`�&I�>�q�/�)�j��5�����P�݇@�XxGTx�4!_�~v\�Y��#�=�va�n0�)���|�>#�?�:�jOsQ�mЩ���L�#��k�,*Ot@��K�wh!� W��t��4J��y�x� �C&��9(���D��#_8�v������9��J����`L���k����u Ne��M��ڝx�����y�� P�CZ� ހ�BH�q8�"�sت�g�c� J���!���$/n����^x���J��WT���5��sa�sf%��'�j����˅pCzzk�Z2�'��92�|�0�si0d���>�E?f�~��F�1܇?����|��`��@ur6Ư�d(N��*�0�)��8fͅV�'�=����^]�/�l�h͛S�͏����E{��x��`���$p����`��˿C�F�����|:.ЙA(.���wq�J��#�3��P�a3BvM�s8���������y.��_jP��D�����s�q���ZK�� �E���[�Zl�����Uv�z�� �Q��y$��&�`�s1������(?��w���Y��^9Ef�[ר���J�;�ʜg>� ��U��hA&w` ����G0�N9������J�����!���?�"# ��a��>�'E�E�Tޚ�� ~(��u�AJ�u����n t����:d��ˍ�'z�L�Los� ��D�*3�ъƄ�a-�7ǮƐ����wIR�h�D|`�_�jy�����0*�{��VV��@O�g�>�4Z�5�[չ�J֊���]�c���2$G/RP� �w�YX�����%�w�d-+t���XԐf�6H9��&�:N�0�R��:}b���*�~��3���!Q @S���F3�?:���v �ƘˣJ����$�an$`�iB�_�K��7�!�*�)����> �'/�I*cdz�-��}ֳ!"5e�Ei�Ǵ��o��ӷ� ��0<h�!�?�Ӽ{���\?d�9�4�� :Gz�&�#�����9�؆���2�@d��=N�[�U����a����q��|h.��7R�r.n���4���Z�!V/��������� e_�!��H� AW���u���z!ζ����S�K�x|��m>p���m*�f�+����$��`�;:1��!T�r��m�FaS[�����9LP �m���ͳ>�~Ζg��!S�ӭq�w�*z� �NhP נ���nA����_/i3Tԟݝ�@]�B����s�'�*l�gႸ���+�S&R��q�|_�Č:���*%v���큁yI>���^\��ۑ^[�a�w�b� �j;���'�DfU��E�B��� S�r���)�}�]�j6-C�wW�4;]'��,Us��*��fzQG��Ve�&���7 ������ �`咁�fQ �dbF�*���Ne���깡�\#�5��PB�겳�� ܝc �M��?�^`80?��W��/y��-Дx�Q|��7�u�&Mu�&��3w�Vz�_�n�i�:~y�����8��wOε�GR�������5h� ��>�Ε�a.6���-��I����ڹm�wͫP��5Ѩ=�X��o��MN����J{d*��=9ik5c{E��Y��S�U v��:�z!�C�܂�_|n�I[!�p � ��0~�=sE��ò ����&�l��C�����xG�Mu�.�yv\����hZm爷����&/8CEBit�iF���S�c�����(�Z�m��aQ�SBOX�饪'�ӆ��w��QJ6d���g��t�)�Џ;�i$��f�Kh�>�إ=�H�C����]uN�/[���3^TjB,�_�b�|������Ǻf�!��)��V^/"iB���_��W���di|4V��)����¿C)�v�����^�Ϣa�����1�/�+Xc�K99�����$s7���V����������pч���ʍϬ,���ƕJyHY d����1����<�ô��>s�F�J"d3�.�jw���.c���S�����פZ�`R�Q�� �#�V[l[@p��+���ۈ�8�[qv1��dGI���N���A`;���뚷��.���Hˢ9���i����:��ݴv������և����+�vؾG`o��.����[U��jo3������3��͜�bG����ҍ��`�ݭ�Q�z�s�&��5�gr�)�{�~|O��S�S�������~ҟ� ߮�����&�KC�02�]���)M��O�ĝ�ȥ�jU��G5�P0=�Y�)4'1���z�% ��v��8�f�kv��S���8켛'���?���s;���Ly5�O�� [A,5/ZD��A7i�T��&>���sJs�]�;�[�N%�qȍ>�E����5j�C�Lez�6�}�۵\���ᡘf�º!kJR,�6����m/�R�9 � <S���"����6[���m�M.��:�~qЏbw����Ƚ۶�W�|��Z��v��l{�$v�;3��'(����0F)M�5�Ӛ6���Ce��g�ppCNj����MW7~Xst�Wl|�_�� �UG#@M��0����o�Q9���@Aĸ�p%u�ҍ���NTv0R���Q-f�|mO� ?r��{�xV9DP��'{�/&C�w� �n�{�2Q����v���7�֊�{�h�T�z&�@�u�'L�Ў�u���_�FU�uM4���TD��rKR�vY ��u�/Ĺ6w�Cov�J�U��=[� ����&B���P�܅u��E�cU���P |�#��F)>�GH���#�iZ��+�`�t��8���\�j����W�V2�kfl�H�_�W�t rKۍipB����PC$����CjR�J��Վ������m�b��������Oi�#"����\ �@ߖ��Y����ǎ�G3s�y� ��MtJ��Jyz� _5� ���K�u�7��D��Q2�"�REȑ�%��*e�qk�9-jYEK���R��#�}(>�(aO ��H��~c�`� �ܯ&0�9,m�a~�Y����P�EjI%D�fU9�J ����S��Bdw$�4���w^g�����B+ι�������П4)�I>��At�~ ���b'sDm�b�&x��[�.ԯ�L?�L1���)�����H�������\��Y�=zA*>Ŭ`�s
Static task
static1
Behavioral task
behavioral1
Sample
f33eb6792997086062ebdd70eb4862e0a8113081bb7214e1153ada7a3e8111b4.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f33eb6792997086062ebdd70eb4862e0a8113081bb7214e1153ada7a3e8111b4.exe
Resource
win10v2004-20240709-en
General
-
Target
f33eb6792997086062ebdd70eb4862e0a8113081bb7214e1153ada7a3e8111b4.exe
-
Size
3.9MB
-
MD5
584faa753c7c0f18218dede66e14d0c0
-
SHA1
fa0a5c88bf557edc9814af8b9986fd8220fc9ecb
-
SHA256
f33eb6792997086062ebdd70eb4862e0a8113081bb7214e1153ada7a3e8111b4
-
SHA512
5e942b51e791121e97af23acaccb0edbca69102cf8334f3abccb9a56492035f359897aff33fea733f293e20ccabbdeee75ef71af181e6cf7394ca475e60cfdbd
-
SSDEEP
98304:4O33vMxFX2BdbFQSrhdkEO+Ltq+HiYyQu6Ceu0sq5ymJ:P/MnGekhdkeLZyQu7FWy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f33eb6792997086062ebdd70eb4862e0a8113081bb7214e1153ada7a3e8111b4.exe
Files
-
f33eb6792997086062ebdd70eb4862e0a8113081bb7214e1153ada7a3e8111b4.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: - Virtual size: 304KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 163KB - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 27KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 189KB - Virtual size: 13.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE