����K��������i���:�~�\;��y֍pve-bզ?��!���L���I.xYρ�.ˌ[.��� NC��W�fI���s�DT3(Zk���D4���L��(���,����A;@�M���l�YCЋC�Z K(�V>R�ъ� ���JޛY�U�)M����y֟P|��zYl`o T�(4�#��� �!8#:�M�Պf�T��l�̧N��W��Ho>��v�����d�c��̡�<~���OZ)���ٱI���Z����u���T�A�����Jt��:��"��Ȧ���D�42��mʂQ���&1���7���tk/<jլ,���>>�W��y{�^�{)����ʦr���h�%���AF��[�A�F��B �� M�������z��� �왲�=���F��!�=������Jw��dT���eL��9��)��3�(���έ����z���cɣ?�#��# �������8�_v �G�l�P0[:�u�WeCZ%p@j͎%Uiy/�Ѻ���6��aQ�e�[�/�,���Ĵ��3~� B�{��$�ȣC6��樋��uyj��H�D�^������\�jd��:t������J��G������_��Z�����[;`'�(� ,�6�Yh\�΅+�>�����8� �;���LJ�2�<��b�ןOAlY�6�8t`;&����?_��֖�3�s}G�� 2U�^{N�K�$�����V+���d�W{��J�Q�K�5�R;�Η��L����u��3���ƈ������4�7֟j� �c��Jw�����WZ(�~�N��1���=A���ȃ�?�N(�6iqm�ؒ��0.gv��*����$�H|Uiyȝ�)�10 ��WQW�k�ʷ�{=�հ�1�z���4��o�"2�~9i�ӣ���&vt��8���:��2��f ;5��τ?�L��,ߝ O���,Y�����k ��bo���A�YHD� �iEQ{��o=���8�zp���X�D[��=n�G�lD��Ax=�M�{(8+�6ć�>�bV�����zFr�{ػ�X���ƫ�\?��wjz���ɗ���0Y��qW�����8KkZ�T� u�hū0b�Fq���������B\��EN�N�h�Du� �IJ��OW�|� J��s��f�_g��g�"NOV������I������t����)�)Җ �VA�0�h����e�Uj �B����IU�]���8e1A␚P/TSf��2���J�/G��Y���z[��ӆ���_Ә��J�Vd&n���vR}>vNNl�v�3��l�Qh���Z�rr������\%����U��x�<@r�t0��Bj(����47��m���7��|�!@��-���=����|ѩ躦I;E�d�� ��4��&.��VPٻ����6�r��Yd#X�������~����U��kq��ߜ2B��EG|�����ѻ�W��Pc�rN_��ԫ��>L\T�l��j:��ieE���V[�� :q,}��Ϯ������g:QF*��Ru�D��j�(�����ǵ`��LB"�JDöt���u6�Ћ����y�BQ���$��˃ �Z�?��qa�:RA�ϫS�#��;�`��TA�����-n;���U6�/�(t�!&����!.�!�s��K[�xJ��?6;�k' �-��CŠYׄY0��|r���q�v�D��F�V��F�^�bdo$G`�N?m��W�����t�8�s9"S��*�J�-N�>(��O䯥 �M+=�����U�Ŭ6�aR�S���S�sF[L/f ᨎI��A��}��s�g5l������ Z ~���1X�,��7�����"��e;�+(u�6�����L�߾��Ǖ�d��Ԡ�L� e�ѫ��~�E]9!@sG�c���dC��H6�(��H���}����Ԝ�C:z��G6y��f�&q�7P�{W�+��Z�4�O���gA��C�|���VG� ��z�b��Z?�W; 'o�m�@��9B)��j����@����*R[���C�2�q�b`бE��&�u��x'!x��5{�.9�}�Q%��E�.j5Wn y��%��d#�$i �W�ޕ<_�7�W�D�o� :!FÇI�DS�(���&� r��y�� [b�X�p� ���@c��������,L�8���J����Ҹ�!f�k�_��Z�`1�z��}L��LCl�7�3~-�֜RC�{p���W��q��gG�/,� ���W����iɼ_١�)8[��p����--���_V46E���M�y؊�(@�����w����I칚�P�9�.�1d�>�gf�A��{s*�.�J G��́lޏ�@�$�)�d�\]�˯���D+p{Jg�-� u�V�`T��@���������P��aj�ľ��;��\�;n_j��P6�mD������~JU�M�c�N��Z����Y)���z���(m1��{!�����9��v*�2��S�U�'`�)N���SKN�n�_D�\1y-��B� �Zɒ����=`�)wv����ˢ���� �,ڊ���F���Kn�����h��z}1�`�!`�W`��0&�T�7~ġ91���'�ᗙ�_� ��f�C��<��p���&��x�c5`����ȳ�|8)3K_���]���]�1� ��$7�� L��Z �[�p��U�6�z<�y=]4�;lO���*��]�j@���<=`�ޫ9l�r&]L�C����{�S�����Q݇Zu���E��+n�q��rM�,��Ít���<̵���Mm���+�/��+4���/c�x�<���͞K���L��A��1+AzP��ΐ; ���o��Յ���V�"nQ���ߋs��"�`fJWg"���U�� �m������:���q0;��������c��$F%�ʷvz�2XYQi<�;�)>V�l�Ë�W&�n�[}�z0,u�Bl�����>�j��F*FK��]��LZh3$ �P�f�_9W�D:q0̔6I�_�Ќ���ު£rգg�[�V��)���ϝJ���JM�5�<^��j����l� �P���wJ�@��*�-3O��SB-b��E�V*KmM���wx�uk��h�����"�_6j��#J�5�# h�Q[W�af����rj�������mD�')���[22�J�m�$ �����w����l� ;�Y�t�Ɣ]���_�`�2-[@��z1���Zà���Ŕ����Xd4U��!�چ���J�ٌ�Z�{�L_�2�C0p�2 >����+s1��;��.�t��~��x�H$�1�D9� Ց$U��@���TN�or.`Bmu+� F�����d����8a��k����?4$���e1z��t�-gu�0۟sS 2z�%����9}h-��IC�hN?�<tSq�ģR��6gt�.|Jg�[Ei�9�ٞP��M⛳�,��\g�۲l,� �W�f��Yy~�X��z>��]AaA�Jj�xN`������;�M:d`����w��Fov�u<�����1]�����e��r@����9��H�L���I�C�t�tuu/���b�Y�����M�S/^�
Static task
static1
Behavioral task
behavioral1
Sample
745c8f38e2cd894f6ce759e3096333b3b219a25bdf1446558cac4a92d0cb4e51.exe
Resource
win7-20240705-en
General
-
Target
745c8f38e2cd894f6ce759e3096333b3b219a25bdf1446558cac4a92d0cb4e51
-
Size
2.5MB
-
MD5
fcdc969dbc2996ce6a0c91c3ae526258
-
SHA1
0c5eef0eec3e9f7a03708f71c70a1d591b38712f
-
SHA256
745c8f38e2cd894f6ce759e3096333b3b219a25bdf1446558cac4a92d0cb4e51
-
SHA512
1c7181ca72f8487201d13df0ba4cad7492d167fe3fa39f266efc49c537d756bc0450039db06f581de5c09174f1817b104fd02f30fde1f3a378b73d8f512f7892
-
SSDEEP
49152:lfH0JaAOHXUHvzyRGwf6WwvQ3ZL/K2bHCu8r/ubEsZOwcWm2ikY:RAM3EvGf6WWQpL/fcvsZ5Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 745c8f38e2cd894f6ce759e3096333b3b219a25bdf1446558cac4a92d0cb4e51
Files
-
745c8f38e2cd894f6ce759e3096333b3b219a25bdf1446558cac4a92d0cb4e51.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 140KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 36.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE