썐Dr�m$ŏ��Z�������0~��&:f�bO0�eT��M�Uqv�Exv=�i�(�<8�?��Ix���$�1� &�M�엹��l�5Z-�۟|���2��r![��z�`=*��ұ� s5��f�P�߱K,*J��A@CB�� ��Eߍ+��s7��.���v�%�X��Rb�+���E sD�������dH�!����{m��"��A���OX�=�V8+��65�W���,���hPfčS��<LjG������"Mx6J�Z�|��0p��^�/��^�t��-_4G�<�%8IǍ���z��K��q�[>/ۍZ����ag���&省 ����jl�����2�_�!0$�[��'8��\�`��rE�I�_nV]�`j ��C���Mk��|��)g}�^]��f������yu�`�N �|��bL�2+�x,�?(Rg�� �n0�3�@���Xw�����Iԅ:uw�.���B��e�?ܚc��� ���"#��3G�#�!ӛY�����N��Ձ�_#�?�큣5M�<P��:'|��wa��q"n�qV ���y���,�N��:r[k�,1~;Um����0�r�ȻVs�&�[���zP�8zN�>_zI� Tⴃ'�u>Q��B���6��1,NP�p� Ri���� Z3�� ��$�S��?��z�{�� 7���YC�1��!����~B����aМ����H�]�1L]Q��FWg������x�0���=�q��v�b>����"O:�H��ĝ�*�l'�t@��W���>Ry�$��K�Ԕ�}�n"BDvJ��o��<Qq_�ie��Q4Y���O����7 �$r~bJ��:�7ڒ���5�Eڇ�0�~7�'U�8������軰͕KM�k�3��'5@��V��I�KݱB�o��u���99�3�����k{$N0��@^�W�J�����V�Ҿ a�^��{�ta����� t���Ũ�"`m��2Vs�� ��D�G|o�chͪ�`���0iΝ�R���4��t��V5�!?ϜК��U�z�[�u��dzU+V�D�9،�_�^@�ٵ�����\.��'l]W��-4LN���<�?�8��/D��p�sO:2�w���Cʑ��+x%aV��l#����S�Qh���Vm�`r�8T�l���@/��o^�'�aXu!,Dsok�����f#T\6h��pu$)6t��ˏ�xL����v��$7�ٓ��B�����D駜�f(���H�K4c��J�;o�^�-�,��Ѹ�� ��==D��0?�p�:J���tn��&�A����k~15m��pWx���ų���ս!�r�q���SM���P�Ib��S�:��u������H��cx�����hۙȬ/R�NCGH5����K��{�H~oR�ۄ^;b>��OG����V��2�6P���ɚ�E^7u6S ���ɢ��#��VgKwؐ=w�Y�I�V��.�,ڭ��5.����wW����%-�p�I�:��I{O��Nm!�V-1w��P4��e�����ʟn�nup)TT�`�'R��\���);�ՙ�ɩE��z��o��nz����¨A�� u����=e�ߟ!����s��OK��נ�"(зv z�XC��¢��M�5�����,ӨS�}f9ރ��"]��7�_@���)5J��h�+O�*@Q;�Ѝ{R�����\Ut��5�>�O��ȿ�`r�,v��&(���;�����$%�橗�`�Hp\CF�n���5���g2fel����x ^��ua� e��21[t�,������A��k# ~%�����Ŧ�}#��=R?W���#�גw�'�������u�>zC���ȋ�<B�9N863����]�3l��h����2�]�:G 7nd wf�*���g���^��;���ފ[ԓ���4�ځ50|� ����P�G�Z��80�m�AST�IbT��ԫ3e�j����� ��_ ��S�Ҁ@�M�_���F��L�,әd�$΅�����x$ 7SeVmEf[����h�E5����nBP���{��7�|���q����������"m���K �G) � ���Mߡ�K�����(�]������&��.��|����r�ώ�?"�C2�w9i?y˯l! r�u�2軈�0��� reL�fo��㸶��-+����`U�������HX����i����R��� �]&� �@\�sW�W.�[���G� |⼛����듎� =Y|d���)�'���K�G�Fߒ��%D���\8S��¹�����y��)��v���F�r�,�(��JR�Q��F� �=�ˆP>���mYo#�-sW��c� �'e���;��3ƞ������iS�V���m��@�|�D+<�uj��n���=���j!%9���r���r��~n�k��*����0eZ�-���Y���Es�UN,���N-�o��Ә|�<���6M:���Ыj�%��d�;7Kv�o���k�ơ`���ܕ��p�a�O��ݏ>]���Ϊ�������Є�Sw��߹����~-݉���t. N�]�k��" c}�BI:�_�_�h[d7�����B94�\��$��~XO���_�-�2���4mv�,|��x���U�_��a�/q6�����4ο�g��/�7��f��t'K����ɂ��< �2:n 1�� o��}���8��i ���R����6l�ٽʕ�jV=A�hL�>A�� �l�kj���קr�ͺ�Lx���u �`�Q��iL.���ic�Ϧ1}JO'�P���������5Ak�|��E*V'�^�� 0�Z幾r����S��h'=�jP��Ia�^�����4,5���ύ��.��:7�Э!�d>�W��K@�1������������s���$C�O���=���L{�U�F���V��]5@����~���}#���'�� '���od����v�d���/Em��n����@e ��?#8���q����'��@&{K�!D����I�ш�~6���.n�e�i4!�wPQ<����l�����;�dR�:c�>B}��Nk�����ù]Cc2�[zH���՝��ˆ �t㧦��?�4Kڨ�ah�(�)�A�O1uk>Ux���9��J�~�<f����Jza�|�V����H7/�#��l�e�5�ad-����t`�)�P��b�^�VmO�O��u�����SR|"~,=5#+��:�Ѕ���&�����0qH�� *R��|)7� �a<��1[vB����ܴ������:\|�=�����6O�*������6�2Un}�W�p|����Q����a�%m��&���'Vƣ):K�����Gw�ϐ��@�q�@���(�ژ��1�A�����L����t�'����S�y����>1�TyQ�.�m��F��\Hea��8�W�˴4 ��R�F�f����q�s��6̗��&�b�݂���#mUlB�-�i�����@`baf@���R�L��w+���q�/}U5����P��]T9cW�'m��88gL�8�E�q�����A˵R����3�i¼xRBOrE���5(w� �\-聅}��If�8����e �+���ʨ՛��CK֔Ä&+-Lc/U�4����s/ة�p�ˡ�M�e����5�r��2׳Ʉ�T��H��i�ׇy��D�B�(�0����%U���l;��e�W���#���D&�__0?���f�8߹*WG��������JP�!��A`��h�7yn<<U����A�.GĞ��]��
Static task
static1
Behavioral task
behavioral1
Sample
7f84d77bb8e7576c98a02d2bfe8022a4297084fa4d2d4a73fe15c08bbb0bf0b0.exe
Resource
win7-20240708-en
General
-
Target
7f84d77bb8e7576c98a02d2bfe8022a4297084fa4d2d4a73fe15c08bbb0bf0b0
-
Size
2.5MB
-
MD5
9545551bcd4b4c9748e7d63a9a3debfd
-
SHA1
e3271e71d336203ef9620e1be008e841783874a6
-
SHA256
7f84d77bb8e7576c98a02d2bfe8022a4297084fa4d2d4a73fe15c08bbb0bf0b0
-
SHA512
82ad1bb091c5229626e0f78cf03b50aaf3e529a1f048c04c599d68a18788365bae39df2bbbbc793ac492df106db9fb80cd52a5f537a0f4b559c35533d6440d72
-
SSDEEP
49152:2FWHL8/k10OGB1sN4u3wzNa8wJME/j0CcSTqKGFexUB18yaDxs5n:M/XOIs6uENPGMwdceqK6mUH8ya9s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f84d77bb8e7576c98a02d2bfe8022a4297084fa4d2d4a73fe15c08bbb0bf0b0
Files
-
7f84d77bb8e7576c98a02d2bfe8022a4297084fa4d2d4a73fe15c08bbb0bf0b0.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 131KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE