̑���M�Jl�_��Q*d�Q��m�~/��(� �4̓iH�C�OT�I`���gP���ܞ�r��4Apda�Z%�g���G��(;mP6������I�$�8fJz_ }��Qk�W�y�F���UX6G���&�1� �Z{z)ht�O8#<��4���r�?.��?�XXX�7��.С�Gf���w���]���,��)�g;@�p��5�N|��nH�uC������P28q�!�"��y]Ai?���\l��S.)L�`_J>��[� p�z��S)�4��S)$Oj���0-� �<d ӹUh�f���+O�:m(i�|؟>�f����/�apMB�(E��{���C��1y�L,-��i��Wljo���P)�`��NE��פ��'����3��������`<��.g �5�Lu��i���T�7�nщ�V��fo����.���9I�f>���\V�TJRZ�c�f�J0��'�d��S�� c�[�K��䓗���������e�(C3P��x�k�k���߉;y=]�K�Dbvl� �U{��þ�⮡X��FҠ��AY���'��~���y!�9*��[}1{ZX��b�� ���z4�w(����:��60}�Z�1�wm P��ɬ��~��iBH����a`�\ D"D�w�����L|#\X�%��P�z>�a�Ѡ;c���6L��A��i.f��E<FE�q) �D- ��ز����&U��J��K���:r2��d�D�,�\��]�u_��K��P�K�A���+�Ы�$<�Y��.E!�i�=�0N�����XG�)#E}*&g�8�IPxuLz0����"{��B�\[�Q��d�~����Q��9$��}��g&��Vt2Zc�lTZJ�/�"��W�Z�AxG�r�U��Z8k�)�#s|��-��2a���Ȍ�������9w��d�<��.�.���!�k�^罁�OQu=�<���丮���#�ݡq������a�ԧ]v7���vz��Q�<���1>'�9}�](�;��H�+� ��hC,�py3RYF�9�c�1���<љg;��B0��m���{��пH\i7�4$ū��-�����ּLE`h�C��X��u���VՓ�jsDW�|�M���H�'�,<�|��RVUً�k�ǹԆD�M��6����|�PrP�}���fI���TOx��� �b�oN<[���x��KK�f�"XI����*���(��D��o����c��L_����F��`A�DʸJR��`� ��'�7���lYs�*I����ڌUViV�QH��s9��-�[��;��财���d4N�%���X&4�Y ����'&S�x������t]�=��7�|��E?P\m�6��ilӭ-| 4�V�x�C�����8��5���{��d+;�W�E�����*�:�u��������#�ڄ��Jq�����:=�1�\�$�,� n�z�;n;�7W�m������s{փUb��d�h��ұD��r��n1���Ƿ�� ���e�q�c�|����D&�I�걹��5m�9g�YTey�K8=�``S�q÷�\ʠ��9k����3�z�[֒j�.P�Z����x" Jaζ���S��Cbsc%�~�h����0vZ���g��% U[ڟ?�@t���Y��y�Y�ɓ�Ho��.��A�b� �%�X Vw����{�^z$e��Y�Yd��=�1���srDy����e���;�-��Ѭ`�����Z1�e�S�x�L���I6}B"�fx ϠG$C�Et�!�:*����>r��q\���{v��ˡ��\4U���ë�:�:��`��n9�V��KqD =��'ϸO�Q�5�ZD�;dֹ�nڙ���x��9�>�)��;�~h*����(�Cc<�<�6��Ϡ^U�� ��t��c,��7���]�as؋���[%}76 �"s�'��o�#�i�;��k*��wʞ{ٵ�b�s3.�0���T,�cн�h�?���6���^�� =���p��!D�;ì��ta�% �;�}>��A��ޗf7Wj6'1�n�:�*N"7O~��晤��mJE��hDX9udz��HƜH�=h�L`�P6s���O?����|(�qND�sQ�i9-d�#1�|�[_Fz�+��*?A!���)،�kDL�4ܿ� ����:�z)�a^�` ���Ê��2��z�3���m(e�V3�F^X6�k��#:��,�;m�zù8�����q���py(^�E������z�~TD���0e��њ���◴]���L�!��l��y���;&�ܒξ�@0��� n���Y��R�NZ���c+���!�t�Z�}J�ѷ-_�x����h�H�59 �����f%y.Z&z����y���솲RЁ�P�Ոר\���<���9]����+�+T���KڝW�O�f��C�UbB;��u�����P�����TGv0���mk+0i^Lہ5�V�D��Ɛ����A�i���s'Pح�+_k.?~j$�X ��=�aZR/�/�A�+� Z�+�E5G{��s4�}�#�C���81���9��4�0�������#o�/;��[����l���cG'��-z9�P}i��l�������KCEW��'h���w��@ *~͵����jxb��J���0��S�Bp`���=���<Z���FdՖ�}z|�$7�FnA���N�������v�*NŨׇÑ�is2�PY_U��B�%,��%A9V��$��6\�9�W�]H� Y�<��ubb|��nY�7e�.�\2_�qвc��I�2��K*��ma�~[B�.�'?c,$����<����}nb���懦��L��d)���C}3��3o<�ݝ�r���GO��n�VP%}h��He�y�%�hXB�1���������*0�"�c��m�c\�ȡ:F�I����5%A�P_����iPf@��l�eΞ͕�q��ÒF��&��|���V�L�WX(��ꌀ���i}{a X�9��șNt��Y�N���[Y���A�.�dь����-��� e����)�հ�����yG+���F��WQ�$�wL7C!��)�@�h5)�]A0ݗ���ݵ(�{̀�u�����=-�sB��A�����k|�! ������-ZZ]���/ц���D�����q��և����ڧ���G������A�w�����Gz[�� 6����G[���M%59_���QH[�2�@U�#�FvxށC��t�Գ�)�!�%��b7��i����,ɴ���y�8�*�v��kMt����?y���OBuDo�Aa��˺*��n��M�@�'@�:�}F6V �����B��.�)����$ [����� ԏ�����f8n}|�{��8�������V���=CL�ʗF����-C"��K����x��r]�T�3 ���=e���3�� 5D�����6ǿ��>�K���G���z;��cD1�Os���7���.��no�/�[KG�W�S`R�rF_3"�qƛJp�oE���X�id�� �7n�̔o
Static task
static1
Behavioral task
behavioral1
Sample
77f6fd5c226861311005cb6fa1843b12569db3be7ddc04de3bd4a9530fb272d1.exe
Resource
win10v2004-20240802-en
General
-
Target
77f6fd5c226861311005cb6fa1843b12569db3be7ddc04de3bd4a9530fb272d1
-
Size
2.5MB
-
MD5
b23dd8def7283a2f1643143ea9bd133c
-
SHA1
0238f247425a84fb29320f58a82203fc3234f549
-
SHA256
77f6fd5c226861311005cb6fa1843b12569db3be7ddc04de3bd4a9530fb272d1
-
SHA512
53b82c2b5f90eda3f68b73b84a708b70a6ccce3e1ac0f4a4d179dd4e7ae080c0a7a78eb209d2624c801ab884c31c5be016f50d488b2ef83422d50ddf94a41caf
-
SSDEEP
49152:TICiAYTwdK24dqIn9WQeEemeciI7Q1hn/XWkhYmxxkwityh4B:ECI/24tlemeDIEFYw6e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77f6fd5c226861311005cb6fa1843b12569db3be7ddc04de3bd4a9530fb272d1
Files
-
77f6fd5c226861311005cb6fa1843b12569db3be7ddc04de3bd4a9530fb272d1.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 131KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE