�*��65S��y�7����%`�F��߿DMⰔ��y7��fpl�����o�}�F������6�ƭ����FĎs��Ug0F����_�|��A��S>8��]�h{���~<�s����\��TUcpM\9�Ğ�%���ə� H���A6;m�k682/[?D�O�T#m0��v��e�:�{c�R4M��e!��Ĕ��f�G��K�ş���ir�E�ܲc��������Ke���6f�����՝�QNU �wO��E8�F��$8���-����t)�+ �ش�<��>>Z]�G>���$=�Pu���t\�)%��Q�@�г*-jE2ᜏˀp�d-gq �{���r����N�Ў`�i��Z�5Z5����RV#�M+/�{ձ�%\�l���;A�D/�����'t��Eg�����RK�T �^h �21kNU'6wz�aW�V�?`"�H�V�(i�����I;(����ܶ�?�P�N���N����3��C� �M`��n%�͒�#� 1��G�DG�Dj� �蟾o%��u\y溣�L�3��\�W=��t������;�:k.��+Ӳ�1O�E�p�U���l;ߪ(4���oؗ�w��Y�&�`�x��.z�ح�.�y�k�_�Έ��h���#���F�1���I��@q����&�_ۇ�^vS߂��-;�S�ص�rI�t� ��ә���ۃ��%�g����)��������]�~�q���N�=;Ȁ�YM������U�;�g��z�>]�6�2�Q��פc�@���ި��o2a/4Fq�}�d���2�/~A��������_Bx���8�<�y��S>�;�,��6 �`C|Tr{"y�G�L��<eI�m��_�9Q��)K�J�teA����n�E/y87�8�-�d �4��zW ��Z��6(�U��<����N���}����%D��/.�+��p�Ar�N~�h ������A�y�������Q- �����T�|ѱ���jd��C<��f�nbwZsU�D��Ԡ���e�`�y܍7�(|����X�@0E�d-n�<���Q0���M2Gh�r�Ci:X�b�Xv��]�u��&���^��L�9Vd6�-+�a���c��|�h�e��^'��P�DCi��n(��.|/ѣ2#��1�k�^G����y:5=�(�0�N~Q�o�i;C�B:��'#���v�(�S�����f��²�ph�� ��&E+�ˊ� ����#ȅ���1��m�)�X�\GK�E���}!�"r��H�W�Ș|Os���b&���"��Ø�F#G���˓������W��J/Z4���.Z�mR ih{\�"-����%�B�27�'��y`��4:u5�_�9�n"<Nl�2�Ƽ��n/��1(�THK@Ѝ�7�3�v�`d��5�R ת@��G?����f������<��i���ShM�[�y��m�TVɠ; �&(�;�:N �4�s��NT�6T$V:ES!A7B��s���ZS8������t��"5lMj��?�6Z8�����_�<'�=��s7� ��8/$����q �^�"AW9][���EZ� =�"G�x&�S��� %�|����5���:^.��^ Pg��_�V$���tC����x�,C���1����<f:&�͍,8�-��m��BV���?��v�S�F�X��]Y��(]�H���왪d�_��b�VL� Z7=�m�"X;���þ�duo���5ɅC<��O4Y�C���&IU�Z��?ꤞ%��y�ٝ{��f�{K�E��isw`���d>sΜg�#W�_>/�:�SbGrHY�c4&��۠2r�����jٴ��|�ç�gj����c 4y#Q����3�z�C7��D꯷�R$����0�%�Y�w��`'�\�s�<f!6=#|�!K~S֊L\�܌W�6�;��������Oxm�)~�|�i���Cp��mO����D�7�i�˝��3L �G�� ��,��B��ىw��p� �rt�g*J ����K�����X�O�R*��7o���10�I�7;,��F����fī����������B<�Vl��4��T;�˳P��ٵ*��LR�t����w���?�i�+/�Z�O(G*߄|_g��{�2!�>_-��������#HlR`̈́A���f1SV��19� ��?k����f ��=1]�Gl�4P���:_��5�gD �]��z��:\����F����3#�3���.9KN�}y!�][� �}ڧ���'�H��m���ď]�D���x���]l����0S�ir����<�D*)f{���VkBW����5�M���Z�D�M9&}SA�r.�pf��t�8\-!&A�Q�Ӭ)�ATʳ&��L� Xls�Tm��-@t��k`7�D$)p�j@y�_������{���A�#+�`��n;t�YOf�k�qK� *�*߳��s2�����YuK`�R*,C�؋yD>�"�����H� ݕ�m�YY����嬓��p~�TS����盞�!mLu;�6xڽ�ҹ^���U�Lxѧ �}�_z>^��K��Q3�}��t��.���5 �h@8j4�J-���2�A�V�)�%�<��@U@����$������+����F<�x>�*�2����pC�> ���w�^��ޝӪ��Qf+���ȹ \+~�Ս���>/�^�pY����tʡ��u�Y�1��J��e�[�:�+�Q���pl+5�ƈZ��?}����1z�鷠�*�\��.-D`Q!FT�<�(*s�x�e���(�P�n�;Ѩ���/7������~�RwjҦ���ȱ���1U�E��C��Qi������D��Ţ��U��ҫE҉��)��t�+�W�����I���y��8ׅ��A��0�!lj^��|8>��jC,�2H$8�{�{ld�y��t�B�̚�5 >��&&@(0�롓�in���J�: f��~6и+.��Rf��6��X�^Un���N���@wC�"]A�|�̵D O��A'��+a����ӵFq\*�^��z���k��9�k��qmDb�ܓ+J]�E{0~��G���s {�#w� ��_��ZG��� ��@nW����X9�k�4�$�s��8$�[�(am�d)y�gA*:���F��������>�
Static task
static1
Behavioral task
behavioral1
Sample
5fc403f578b80778920cbd53e811580624e0c5361827d08ed14225c2c0ff7eb9.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5fc403f578b80778920cbd53e811580624e0c5361827d08ed14225c2c0ff7eb9.exe
Resource
win10v2004-20240802-en
General
-
Target
5fc403f578b80778920cbd53e811580624e0c5361827d08ed14225c2c0ff7eb9
-
Size
3.1MB
-
MD5
60897eccc4fec123288507df63b89fd4
-
SHA1
ec078672b382c0de5f4015a97f4ba546fb04e179
-
SHA256
5fc403f578b80778920cbd53e811580624e0c5361827d08ed14225c2c0ff7eb9
-
SHA512
7b08807da9b2e21117effd38d423da27bc70d5200703ac15f3b02858420c976db513bc478fa6e04bd00be25cc9be788229fd4343fcd807d39e9edd1740bc5762
-
SSDEEP
49152:RmtJG+Ul5PtSg7Ka/MvSzSBX+Tmc1Jqx1RZlWeptBZzspeqUTksO6RdsOZ6PQ1zF:CGVptSXMlJq/RbhZQbGOIsOZvWa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5fc403f578b80778920cbd53e811580624e0c5361827d08ed14225c2c0ff7eb9
Files
-
5fc403f578b80778920cbd53e811580624e0c5361827d08ed14225c2c0ff7eb9.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE