(]��y2��z ̖ʪ�uAB�G���I4�Ah/�݄��G��b�����2�U�T!�L���+��<N��ޑ�%���.<?���sDԿ �;���P�~�[7��3X����i�6��l�usz0��Al�.��9w%�F�(6b���%Y\b�:K�Ӛ�D��vq}O縳M!�j�+���Ru�0���Ơ��F���5%�-��/Tb�9 �c�|k�>��� ����.%���dа�6�xp�e�72�@���{���x��j)�Z�9~7e����)� ��{��"�hRK�vt�yQ��Ϩ�ĸ�3�����?��ޔ���^�5sKBXЈ���{ɪja�L�dP�.��@7������)=�]�u0����q��)l���*o��q$�.�t"�7��k��$e�|L�����dqb�P��&�D��E~K=��e�K]��Dž*�b�:������uj��7��elj�}���80p����*/.�0�,ҏ�;�/�tV73 �E/&.���$�h��\oBEƐ��̉�LP�~d�i���Q��2IU�U�]L�1���D�CKW���팚�{G�`��yf�aL����`Notݜ���\��X����eа�h���J�W�΅hV/ (�7\袾Fb�bR���S�[l�YP�qx�ؓ�/�k�Ti��lXƃ� v4؟}\���9 ���6ڭ����gn=���J;+;Q�28_����� &�^G^ "z�M�;oQV!8#���P*�>�2&{�����k��)Ӄ�%��מϨ���9p��*IF�M�O���\�Q�<{f6�4�x�<��b;��z"�$e��p,�K�/=�(�����|V��ߣb��- �IQ ���2Sb�Y����M> q��~�74왷j����Hj�2��Ah�O��4~����F�O���������͝�W궁/��"v6DR��<�ogdz3��;C���<�$��l/�i?�����&uR�C�TA�$-�g/6���b���6�ZP�����l&JW[W�dL�,�U�ˏ�k&�[���=�z�f�7+�P����������7;A���%>2a�{�s� �s���U K�b�?+�jޠ>��v߁W�H୩P�؈U�?.?�/�D���z��mAI�3�Cɝ��@�5KK��4�3�lA�4��Z�_Ħs�7�b�(��o?c�,e)����b�p9�t-��,H"�?�P��\VEi��>���n �~�)������� �!�T�X�癳jnMo�0���EY�� �!�����C ����V�:!�/ѬK��o�^���K6w0N�����[�ri�邡��#�����!hs��##�y����ݟࠆ��ւ�/���?5�k����֞�^�S���� hy�T�}A�]65a�I����^%�y���Z�ɑ��h�W��3ܣu����uS�\��c�ֹI�x�����Q[��f�8�*ᦘ��%$ٞ���^˫�k�u�G��a y${��V���I��4>�N����Yh��.g8#���zՂ�{�#��%�3�;4q|���lj���i�d"8g��I&T?:��r�"2Cʅw�l�@�{��\��=�Gh�1���J�>5!u���P�}����_�q���N<w���u���E84����e�(;���%U=u�G�mD�C�Z��]ܒ�ajC��fj���~N�@�(�s�"�m��$�c[k�h���}�ub���[�l�߰��e���^J�e�o���My|8#a�cH�{ՍJ��H�I?h�۪�rz����>p��� �-�;�O)-,�#��F�$>V�Ԙe{�J��~C�R�NH�Ak��wA�Ů��0m��y�������$Qf��&Z�2�њSl��)&-��G� ��]���8�"�,�a���t.3��$+1����+�<8�<��lb���'Il"vF�g�Mĉ�So�:q8��������}��r��-�I�}���t�4�s�_{�O^�z�$����W<f�N>\������5��������i�L˕p��-Y�F�,��]"!��{�;��!�6sC]����͝��*"�&�W����9L�� ��b�G5y����*�/��ׂ��� ]�B]��]84t�?�N����Ԕ����b8a$* � � �Q�v:���:�kЈe�=���L��zy��.C��'�ٹ4����b�|�*�yP����P-e;�K?�~�릱��������"��;KyA^(~zEt׃Y���^� ���J$���@��� 3���}:<� � ��T��l�;S%x�n Җ��N�ܔ>w�#>.�� �ݦ���wz9@A�` �q�@)������=t��7��j�_�9%8rC�^T��-Hd L*^����(���0�c��R��)#�;2��ab:�:h�#]'x��0�sg��]*{����Z�3(�W�Y�����I�R�:�K�U,B�u>��R�nL��;X�BM��O_�HZ�]����5���t��xyJQ\?�6��A{���h%V���`�y���_Y�V�F�H)�,������ӖJ��@�L���.̾c��� �x6E��h��W��o�G��1�V��A��ܒ���z��w�l�<& �<�e�y��V��K�.Q���+�~���G =<J�( �YP[~��"�w<�ʻ$T^�I�@���8h�J�m��瞽��ݓL�!��T�^���9�r��T/��/*O�o�r��e��E��yf���p{�� �y�h�_�t�Fv0|�D�[���铷�A��u��T�k]�`�_��.�m�]{�g쑖F�6p�7ⶋ9W��F� -���;ɹ�dݩM:�s���bX];/o� Z�i�hE�_Rb���������7�� "��уtG��`�����%=����zUB�"K�jgw���ȅ��նr�=���*Fh1Zp)7r5��ʭk-�y2���l[Nָ�606�A����תX���JgՅ�ɿ�B@��G��4~y澶�g���:����{�>��d,������^xmXq������<ɞu)�L�nlcBA���f��퍲� q`���;��zr�r���./��4�&���P5�,�@�I�^�{EXW�� ��X0������W�j1^�<. �ߧd��[d���f��.��|M�� w:�y5���|�8I�3��?�;s��-x�k�|�Yڂ �(���w<L�Պ��, ��:�%�>�#M�������`�L�&C+�uf�5���f����#/hE��N���фz�@z��|h.1�dʒ���5X�����
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20240709-en
General
-
Target
file.exe
-
Size
3.1MB
-
MD5
3fb40eae7c0427693cbda49e44991c48
-
SHA1
3edadce6470b902e3f23fc8b8c8ad60fdc7c1cab
-
SHA256
c9083c30c53f1888e25470abd1bb2de0ce279ba089b2adf275ccde8c28b48020
-
SHA512
95447b94f120a03c128bb759a39767d40f523d742c9d72bbd9bc3de3aa79f284494102a7c82da7cde0d5e04747badb9f78c1952a6d7012382adb889945a22c7a
-
SSDEEP
98304:KIgK6GngOE/QVJSwCFypHSJAC+9vK9MFm+:80ngOEQJSjF8Su9vKWQ+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file.exe
Files
-
file.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE