}uڧ��隋,�j���x�\䬂y�`a��ۃ��:»�e+Pd�$��i�i��������j�rXu3����4���1�([�V���=_�z��,��ؚ�ǔQ�,�t�Q�Hr�q��0��ʐ�s����� ͎; ��j7�m,exj�a����~�V�"^��$L��$e��j3N+���#����ih���+���j�B.��x��-��leEG����C�T{�i�/%��7 w����n�sn��xd�$z>20�7�L����B[�Ck�H��z�������{c܃����}�C�u;#���y���G~,��p�.����a��~Kl�(�%�����XT��o�&��W�s�2D�z%R�-����L�+��\3 |~����d��fyS9k���S���U����o�Т��6�;�7��͚�7N[�����(�@�M�A��.�M˒�'�Ry�&��Z������~~{�}�I0PI��s�4쯢��|,�2Ħ�f��:�(��l��q`�DM��,�^��_T����/�,|/��OijY��%�9D5Z����G=��v�S�y�����Y+7�ꐾ���׀ �v���m����Bj>��T�#���q5��r�U��?"�ެ�Z��ɸ̻���`���>I&+Q�C\;d�c�T96�uz�����`��O��t��\gOЌ��4�J��2gѮ�J�~�2������������vN�5�:�8[���m�c�y4{R��ҕ&љo"�[3��wW��=��Qw���+�[}����@��~wÞ5A:c97�l=A��{~� ��(C�I��&� �$ ��8|�Ƌ�E��ӓ���{Q�vw� ���=��+�����������������as��M�k��u��݈��b�c���[��/���� j���5O�����n3.8��$r�9���(�|�Ue��!���9����Hh$��UpZ����"��5:u_;��8�N[�3iB�p��l��$1 ���� �=8L��k���+`��2 �^YJh?P�&����L �3��rqj����J����Z���B��e�� �TIxD�1��Ť�:�pa>.���b��������&�bR"[��b�ֺ��&�>ؿ�t�Y�C)���� �R���E��y��Bƾ����F�u]�?���Ke[�սx�@6���['�={a!}X� B�����_E�~֩���>��k`�����i�(N�N�.�.Y���E�) ��>W���&xE]H;�X���5{_[�yꚾ��v�G�c�?�;(��z�ٌ���)%��Nlq�A%�9NЬ��� �b� �z+���o�����.�|\�G����=����$w��R&ϔ7!xN<���\Q���%�r���6?ґ�w-�Yb��j�T�j��2�)9 �B�h�c��h����c�O1 �A�����Wv�tpG�����.fJ�Z'�c�~@�y��z�~�.X�I���K�ˌ���D1��{M~��#��Lz�i{��@��,�����j_���T^ˊ��hb��S�D��L�Y�b �qW,�k���1�:��?������Qdp���W<��Y#�H�c�?A�o���lvk!���o�$ёr>#F�- ��G�Z�p���(R�&��k���AQ'9��z��>���k�,&M+u��9a>WD�V���X5t9T�����AZ�ʙ�\��5�i�*��Sb�K�W�N_�]ۍ�����D�9�p�� ٫�SJe��*G�~X��i7�~�RV�R\����5D�=+Ԥj,E͈�s�yڟ32nS�CP���0Mv !ޱ�ɧ�8w�������|�m�-o�<�����~B;b���d���0gq�Z���3�]/bٍ�rW"ȣ�����=1��Nz+���Pj�W����<wz^�/J���۸7[�ovm��2�~&0�]��͈w���]�fd� ��>��¥D{+�X�E�nlG���� �����[3_�I=F�ͱT� W?bv<_����{�u|;�<���Xc��a�n�����A�!���8�������7�> }�7���� y?L�<%��C\|�-T����LmeC�M�U�$�o{h�VB�!�PΫ^3��[T�����k��;(���QQ��h��z�F�zq���g�}�?���J\��8 �K�L燝���Yl3��u��$��!~�0�P�^�J5 I�|t0��U�[r��e����jW�Z9����ێ����t�Zk��T�_�5BĞOA���b���0�7V�����Qw�0�J�kϠؐ���s�총5}%t;zS��N�oCQ p|5+Ze�4r�Ltp����Vnj����V�m@.��Cy�S�h�:Ig�[�л�����Η�s�ũح�3�� �-y$)=^-�� �¯���৴'�㲗/�RF��� �K��z�O�)@wZyY?���kg���t��x�G\��Qꘕ���im��&�ɝ��z��G.1����+O���wK ����7�8��-�Vj�A��P�O<�E:~�!G<����Z5� 4/�Nj8ǧ�Ȑ�jj-�c�}�l ��B��u��e�O��|��;� v <��ᠧ�o�Xű������nA$2���W&a��_,���FģHZ�*�A� �����Ջ��.��OS�Ap����D`�P��o�I��������(�R�\}$� �d�# �bGBö!s��[��A��K�>�}�Vu���MEl�\�&%��%nU��ѻ��G��jy�F���� .� ���,r�\%�Ćـg}��O��BZ�Pߝ���=�o9t��i����"����g;�+���?m]���}���R3�3����'{�gɑ54���|J<�e�<��"rꢽd�8�d�Dx���ȝ�j�����)�s[��~Y\N�������e���ޮ��%�G��p����O�J�Α����ߪS]^n,�v�h��iq�s� ����u�8�ӣl:L����d�`'��{1�,�a�Mn֗�`TM;�5���k��
Static task
static1
Behavioral task
behavioral1
Sample
48d6fa1f938ce3fa2d54e27373ad93fe13936362d187881a9ba63e9da5946e42.exe
Resource
win7-20240708-en
General
-
Target
48d6fa1f938ce3fa2d54e27373ad93fe13936362d187881a9ba63e9da5946e42
-
Size
2.5MB
-
MD5
f0bb0592b63ca7c1baf6a12f5d3d867d
-
SHA1
0d9ce85ab874243fec285d12d57f83689c09d212
-
SHA256
48d6fa1f938ce3fa2d54e27373ad93fe13936362d187881a9ba63e9da5946e42
-
SHA512
955dcf78d1787f3e203726bbcea6ebbc651ddec5df90acd933bfeca7b8dfff8281264a4a79c5a66b7e615984ce5bcc066d306395994ff35e879f47e86d7a9082
-
SSDEEP
49152:XQzdM47nlk8Gn/zDAdWOvR6eXgnVMG2LcuFQMxpKwax+c26xA:XguPs56ewnebcuFQMxwwDcfy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48d6fa1f938ce3fa2d54e27373ad93fe13936362d187881a9ba63e9da5946e42
Files
-
48d6fa1f938ce3fa2d54e27373ad93fe13936362d187881a9ba63e9da5946e42.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 140KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 36.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE