�)�� ����cP�r��0�7V�������|O�U���M�4�K0D+5�T܅Q7I��j>d0�Ѣ̷{sL��D�ѷ�"� M߭s�Y�vPkb�/y�llR2��6X#�[W���`���uE�ɢ���B2����;�ZW�AR��=� J���!h����p��]�~ϐ����p� �[)fio��:�K���'�E��&)d�������O�N���~��;�M<��G���C@���q�@^cJ���'=^F�K�D��0��a�R e7�yiፇ+��p���urO������ ��Ҡ��7=w�� [�am4��qA||���U�vl�?��A�[y<1z� i�r2�F$D@��Vrg%�r��5q�x��ow��P�c}�QiWOD�j�s�O��C1��0z¶��ף*����n�m1r�Ĥܜx6d�A0���)�/��$V�`g�kṒ!B;Tቂ5��3^���Ed&b]�3F���P�P~�.� @�?�B_�a_� ښKs�!���}��V���Ϙ��3`CY�Y��2��Ӧ6j���4�����Ț ���@�`��9 �0��Aﭽ��O�����>�NOx�l�P�Z���<�lr����������Zo�¿��+��� h��R@�^jlFD��z�.�����i`�Ԙ�Z�T��Z�Kf� P���������瓤H3`gs�qs�6���!�e�@u��`�sXWa�Lm-6-C�R<*H���� gTz�� O�:U��L,`���*v`<@�Ѕo����H��v��`�a*��m��xG��5�=j$وs�qu=�P�^n�o��.*�1�K��2nQZ�Z��� ��n�)hf���CD�1�����3D���ږ��TF���g��$��߽$o���(��-�S�y¿e4>����O��]�Ց��0zj�K}0�jitϞ�n��_Z -���)7�ƕD^��`̺zQed�Ki���s�06@�f;j��N_xE�kֳ�]�Q���n�����kޅ�ʓAgV��W��MM�8<v�QSキ��z��~j��ק�ӡ�}����v�Y��J�}m��D�4����%�G���|��r��"R�����'ޙ{*H��������u����jʿz��m.������aS+���a0���nvr�ұ�8�ye�����HS��>���}��\�Oy����_I(>}��� ?q�Ϧ����P��R�Xe�.u��n ���а�0�BRV �R��o�V>|�QN�ӓ h�e̔�2(1���!\x-���E+���=@@�R�om�X�~aC�;�V��f�ѳ������ ?S0���s&:�&��J�����1���W�6�xI튎����s�> ��PYb��07Qdž����m{e�n֦�Y�X҃�n�17߄>k��њ�����?�|xT�Xڨ�i%9�8K*��c�g9:R+v ��5����c^�8D[�ZXh�y��콅�,ɯL�bY�� �,�l�P�E������2y�~a�}�����������9 ��"z�a��h� ���K�� �ф�x#f�r}K�������/+�`������B�_�";�w*ӄ��0��.,(�/��Fo�NC��F�$�}��zv�S�^y&{eug�:��G�������U�'�����G%�Hʻ1b��{:/(P�s�(�j�-q"H����>[WC��X�v< ���+H�)��B����<������Xm?'��"�T%tb@(�y����U��$��� �!�����;�$���K�*:��¡]�h0~��u7Q��>P.�h�9�Lp��g��R>������"�D#-��+�g����]�) .|�J8��=0RZ�*s?8n�R���I��f(<�}�,n�*�l\^�N��r�&��`�?�v'FU{����嶄i^ �a�α��9��Ȁ��G'��i?�5�0�D���~���P�?gF=��Cs �܉�T���sR�����F_��hKU�w�N��Lx^�V3(�5PL��������h��˯ ���)O�nT,��ć*�z<�¢j��G�r����>�<yX~<(��N[s��]� �[^H|#�JnKgp�d�����K��u���+M�e(��sb�w�瓊8C��t��g�<��rJ2`;g�H���X���XS]���s4��;����l$�)4]���Amz�c�Q�bޟ2��^�M eޞT���w� .吺r:Ά'm0\D�$9x#�j������n=�<gL��7�����c�k�DO�m��'�����bA����{%����LJv.x����B=.�V+��Fϫ�{�2�̕f�(mʾ̠�[Җ[p.ûT\�*ƟW~j����|&`���������a@I����Y`�ʱ1��*��sq4�qJ��D/H�j�^W<�U�,��Wy���5�(oJ�RwO�:��`�Dg�a�ŋ,���+�NPT����GS��@��$�N{��:)w1)��l�<�m��Fㆬ��3�rų�S��z��~���R������� 1�|�|�@���xy�|�Y���u��^Q��cp�[�G�q� ��ѕ�-�O��{�[�2�����{��g����N;^��f #�Z~�j_�,Y�u���B�OM�y���ɖv�S�U�}��j&$L[�U��(_���t���G�'�c��1m����Q�J���\�����s�K"]��{/���ʞ���?[��&�>hq��$�(kp�����/Mx��V��9�縯O�V���q�D� �_b�B�V�`��fM��͝�s��q��r�����'��|�`a�衵`Ѷ���;���F��9if�z�8�: z9�e��_���V��5΄���^�%rŪ�'is��^N��|��&�S��A�І�J�ͻ�a���|}��]5�u����ᦆ-ttN/h��z+NL�T�����b��ޝ�ջn4L, n?�% ����"B{;��9��e���n'�;�v"� g$���AU����܈0�-#���ܱ�����;3uQ��r��e�U��\�˚i'pfd����<���TOO|�;�q�) �u��%`��\h2%җ�*�$���vo��%LVXp�N��;9�]*�#|���4�X�/���g��7j2+��Կ�<[���Ps }J4u1�~[aV� q�5z4*��Tӳ/�QV�I�wsU�x�e
Static task
static1
Behavioral task
behavioral1
Sample
88edcb330179b6d28b755308b2c06b9a9ee4adb10ea7e4185d0af1697ad89761.exe
Resource
win7-20240704-en
General
-
Target
88edcb330179b6d28b755308b2c06b9a9ee4adb10ea7e4185d0af1697ad89761
-
Size
2.5MB
-
MD5
b7677aad5399636a95eb6994e115916d
-
SHA1
e2d4dcd2ebc1027245d2103a0fd9606f9bd2c5d6
-
SHA256
88edcb330179b6d28b755308b2c06b9a9ee4adb10ea7e4185d0af1697ad89761
-
SHA512
d0b8024ade74ccd107d3e85cb3bcb1d164121097f75fbea5b74c657763d01ae58275a860e39f32fa2cc7e7064c551cce6e68c7bec2ce4f81ffd4b4f74dceca87
-
SSDEEP
49152:zAwq4XAbWjDGhlEDd1yLePsBBXLK37e71cpJ6dvVmxD4UJPlpwnKD:MeX36hYd1ynX7kxsU/sI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88edcb330179b6d28b755308b2c06b9a9ee4adb10ea7e4185d0af1697ad89761
Files
-
88edcb330179b6d28b755308b2c06b9a9ee4adb10ea7e4185d0af1697ad89761.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 144KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 36.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE