p������\�ڨ!������]��T�dy�}t�<9[��x��櫾 �S����q�O���zІE ���&�!�O�Y��=-�¼ �1��6[�o�����G�Չ'@ߔҹ�����]eE�uHҢ.��� ����Ub��<�ԟ�Ȃ��<첿v(�C|�PB{�7j���T�Q���&�Ћ�ȓ:����C|8�ǤH�]#�����$ɦ�X�l�5��G+`_7[$�?����FV'����N�E��DY�2��� ���@�:��1���7"�W������t:ܵ�Z崞�&q�@/6},uW��QSc�d:I��ɞ�4��\��_ Yq��>�6!�@n `I�?�av ��ގNB�������Ӷ�G���f|7��t�{N�?Iү+ �V�#�ظKЈ����`|y���9��hi�b+���s����Jqɤvh�� P���x1�Ifip� ����[�w��k�|�Fz+Ԗů������������C��0I*\/,���˟��܁���e/��i�����Q4L;�4��'�� �Ͽ!����e��)2�xI�rgy&C����]���:6����ɜ��� �|�t�H��)���P��.t.e;6H㩳{�F�u����+���ѝ5��yߵ�l�^%�_���,�� �n��,ƣY��~y=Z$X���]9����:%���X������S���ִ��9+JҪ�>Q���Ou+bA���Y�]�l�{�`F?j�?��;�=��"���j �7��(�P�&�OP��9'�pO*`�$pk���0�n����̙Gh��{(V�I/��A�6bݨc��Y��&b)?u�e��"c���(�^/|�'4P����9���<���@vYX��&M7>�fv�h��E}c���2�[xK���K��έ���%���7�����Z/a�L^��"��M�`���T��1���ֺJd���H=j�� ��Ò����p=v��R���@e��\�Iy����Yۨ����5����"Aσh�����3(�+<��R�E�F�Δ���zG�uY�\՛cl����p������" 3��(��ة�N�m���2�ϥ�(�����}L,Qq鏞�2�*��, ��-;�rߩc}��RMxy�l� @��No<u�u��,.X�H4���aIY���`�?���Ж�b���=|#�[�i�&���v�J�pν����V��cS7�<[ ~��^y3@���͎2��j)�T-�El�t��JЀ<�#��q!m��T9+��Ԩ�Xγ!��g� M����!�� NWsqQ�Nj���2���Ug�ɺ�vA^x!���5���P?PSa�����a|/ 8� ���ذ��$�_;��ȶJ5<��쿹�Tv[N}���e����*�� 8!�PAd}m��s��9 4T�_ U#7*�\�%}�F$���f.� Y��B��ּ�&u�{��A���!����I����"h�����_�{�)j��d��̼K�D�oE)�3�[�Jڌ��G$��}a�p`�돈�$�B�m���'�t�UƓ�6RZ�W���J���n����>�u��� A ����8{����oe�f*�� ���M:���g����\ � ����|���b�c�:��E�>�z.��霩��Z��~E��L��~��9�[�M�Pg ���F��F r0L ��q�5��<�of�N�t��\�[�gdRR^=hXi��{?��([��Le����a�DuH��051�@��M�Hkp���cGQ�]ֆa^G� ��RA�!����>��0?W��)��J�v�M�e�E��q�VY���&m��ig��`��A5�L������O&��������Ő���g���/ ���� Ӷ9*��4 ��� V�2H�略�&H�4���B5�s��&�/�gG�+2�Wd�p�I�P"���ʏ��8���D&C���+z�� !�)�/Mpo�O��U�V��%�Y),߮N���RR���>��B� ���a����i����DU+z�|� �*�Zy¢��j�oM���l�J�@�CpV�U^��V-B��We���ki���(9%�c��LM��ֺjTg�X�L���8lpf"��t+`�Ő���`��n���ȝ*o5vk�G�l1z�ӄ����W{�+�el�)�KJBZaAO�,�x��x��$+̈́M}h����]D��!� ��:���Q�W7�9.j�4���+�E9�� �Sc{��� s.w�|pZ��W`H�<�\�s�A^�^a�>�5`e�@LQ���o%�S������V�Yg��P9�WUh��-Ĵq���f�?��N�6*�y� {ė�"�Y� ��3MU'����:p"n_�V�Ln�,J"�WZ�{3�PF�B��mW�J�l�H�u��2mD�S�ӑ�E�aD��.:�<�p�%T���]�߲�2�+`Z)�fhž'9��t�@[��C��7�ix�]&���;s ��s�c�*܄��>Y'��q%~�����5HO��pG�"�E�F��lpBl� ��ǛZ��<Vj�rz�/�Q]Z"�l;���1��d�H��c_��ʾk�@��:c��ɋ�M��U��K4癍TӍ��L����e6��` �I�Շ�ӗ�9�h��b 0#(��)>`�r�� �Lm���B�kCk� N�z��,J�r�����o �������jC#ڰ% Y ��i�?Zݗ��M�;]�6�15C�j8�۽Ūi��� ,���Tm�����t=�ܚ$2�V�H�"Ac=�ژ�0��hb��=�XԻ��9�����h�8a~���c������c:� |�n��n�wQ��Y��lk*��^�����Y��$*��c�w1������&,��7�w(F��iC)mj��(��H���ȓ�����w�劄8b26F�̀�HCg��g�pp��)K�b��t4��S��d0O}h�����g_t뉸nh�Z�Uw!���`��Δ4���|33apĒ6%x\:��������X��E`2/�[G��Wa{���9�,����C49HL��h�c���3e�5j�&++��N�P����2Y �.s�}Qy�dNq����a���э�er�c�Sx�S9ņ&�R�3�̉2_����7���P�np�j����E�Л�ci���|�e��Aw[u��N��a��a��q��,�K���u�a�*E�k�Fq8�X� �w���A�$�K ��v��/��k�]w��]��yװi����s�d�����e�p�E�� �j� 7:��g]U]X�C�#����!-gUt[9�Џ@^���^�+ax�gq���?94#�J2�XKz�+/..�+�F]�G�8d}�����G4,�,��% ̘"F���c���{�s�8YQd?��Qmlu�u\B��?��R��=w��m]e��K�|4��=d|Q�W��=1{��S $``Ķ!|-��xl>xS��ЇK�8����"u1�a�$[�ߗ��>%Z�+C2)��?o z���(_��d����f�,n!5�R�D��l2b���&�������xP��h� 1��n�+�O,�E�4���!C*��@��tX��zY���o���\�M�G���L�@w͡�!�����oN��Q���E�ӳ�T����4��R�-9�[ٵ&��p�1**���L�Dg:s����;�\�ŎY���ݰ ml�I�74. �Y�5]`��FB&��s�
Static task
static1
Behavioral task
behavioral1
Sample
77d87942ad55fe65d74d73ea23160627.exe
Resource
win7-20240708-en
General
-
Target
77d87942ad55fe65d74d73ea23160627.exe
-
Size
2.5MB
-
MD5
77d87942ad55fe65d74d73ea23160627
-
SHA1
4a3fadc3f5756a3806b5f090b380330739079c9a
-
SHA256
c7ee09f97a93eeb8ce233644edc415c5c65354fa4483883e989660407beb2b64
-
SHA512
00c9fe18c7e177e23ff5042fb495a6f50b8c3dd2004d2d8e80d563905311dc881215a8c9c5303ac5d3bf8434a7a3bc51fcf93f09e2fb059065f3318688509d38
-
SSDEEP
49152:A1jlO1EMa1uBQdJ/5aptUjHVtU8DGUN1/FdhtPOdLNClwY8aT7uTQuoAj:ANlOZaAB+/5abUxGO9v7FwqTmQuo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77d87942ad55fe65d74d73ea23160627.exe
Files
-
77d87942ad55fe65d74d73ea23160627.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 144KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 36.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE