�T\���_�^ ����s���e��Ĉ ������F�c$�v�<�����0��<��w<(�V8�'0��"�dW$j�����H�����q���0��@�c7X�J���X��Rf��=1l�������b&gI/�5�e���&`��^���:c���i� D}�Bc�� �%*X�fT�d֤�-$�k�S;�0_�=:�K*�K���͖�cLjh!�p�(%Ѻ�:g���H��^�lAy팕�^�^H�t��íNlgLo��� �,)�'F�Q��� L��y�7��ļ��wX��%��L�H_w�HL�Eb"�L���E��� ��/b�mo&m�;/F�s�j��� 2M�o���~4+�4� ��&4�m���!g��P�,Z�!j>Z��L�sڢ�K2t�`��_Z�ۓZ���K1cQ+�w�]�R�N�RO�U�j����(�QOJ����8����K1TعRm0eם����Nx�Zb��g}^<�O�>Q]Ȍ� �����{j�Su�vձ�CO���Y�0�4���L�8�y�d�'�E�<��%ĩ@J�x���V&�x�"C�/�e�����D�YK��+�@��%Pr^�n��s�*����$���,�wh� :�]�y�%��X��F� ح�y���H�8�%��Vw����6����8oc�1f�+�`�,n7���������G��$Iqg���U�f�Cɱr��S�"�uM ��گ�������H�uH���QR���q����~=��ĎI�Pq�H_�������kS%��}54��.%����lH'��*�$�"*�%���ʓ���ǎEU�UגQ���4z�����gE���,1�����nx�T�HG��M2�e];Ѯqa�� �o/�Y��3��������"�VO�^v��$��M�,�m��uLǯPF&�5�ض�'��4w�ϲ�x1f�(oY^X��I��i�V<lє����nRɤ�s��:�Wmu��~���,�tW��!������3�Ao�oi������n�=��)Z���<��[EHE����1�I�Jy'4�o�.��w�J�k��`�c���Gƭ�b�j����n����:��[��1��"��6#�� 5����J��K�5/�RT�UCf٥��@3[����"��J�tF|�B���be=��Mw�J@�o:zשcz?�Ⱦ�V�<s"]�D��� :DiIlL$Ɍ�5�H�o#{R�đC�B��塞(ȭ��pD"��������L���U��[�9��'Ȃ��dH����Dz�P�U�1�����M�V,���U}1�=���u�^�v��46�I� u/��~��T��0�4��Ee�8�V�� ��F��\��H��0���D�j�n^��� ���ީM�|����%����V@�v�љ���W����U%3Ƚ�Y���Z�Ϊy*��$V6�?=ێ�⡖Y�4� ��!ƅg*������ �<�\C� #w�Bq�����(va�Uǿ�]����R ��5Ei��\.w�^���X6%�����ᜒ���TG��@L�[)]jo#�qjI���I�m�(�N��]GȀQ��@kKB^_�+z����"zx�Aq����g��&Uu�n��<�*pN��#��0L�h匷�z�����?�g|ʙ���d��hƾ�U;�i��yj��)y���o�-�7�J�V���O^�����NB5�\�n���z~5���X�f�o=�M��:�y���5Ox�ٰ� ���Q�a�5���˪�����6�#�,5:�����F�>�i��P��[ˑ��X)><����j&�J��c������Jý���ܢ�3�u��L�B��D�Ķt�B1���!�<����Ixi9NW��5::�����~��#U���/ҡ_���O���_��k���;QO���8L��� ���z�qp�'�,d.���f0D���]x5ߡ�B`K��9'U@$����7Wk��cD���Y�| ��H�nro�ʵ�h�M ���ڠʽD�x���D�ޔWp �7S�������i�Α.�&���3.p������9����~�74t����yP�]���DU�<!��$��bE0/�$d豘��$"7�8�?��x�3YCl�~VL�x,��������ڄ�ǷĂ��p�=ȁ��� �k���Qt�����׀m�&�̲��~q%�"�t~ɜ��ɬ���vam`��V��Jyk�I�R���4nwg�W]N��L�7��3�Pa����PQ� �`,�1�<b��:���˗��r� xrG@�P��Uz�ѵE&tztǪ����Zol� P|H6�;@�R��1�!�I�n�����}�G�&�H.���V7|"��ڌ̵��L6�8R�����%*;�e2����0��z�2/�����?T@�ͫBnl���x�3j�]�}nղ�ǣ� (B���� - ���y��wO��[% 9�T�14;��6��2H�dt�j� ����$����P�M>PG"r��X�_4*K�CG�����~���y´�,}Ɇ��gal���s�x�yK��:(I ��_e�H45����ss��/�D��~dK�ݰ�w`H�I*hw����<�z����cY@������T�yC����θ�M3AoxwA���Qv��k�c�3�����Yh�. ٹ۸I�D�Q�0�7�x)h\�o��-��'č#\1�T(߾XS�&�r��l�N�Q�q��p9���;ՑR���~��$?[\i9���"?����6k��_t�l����^`e���8~��+�����n%{��}hw���i�>�?���l� �����0�_7�j�b/�q�2U*r��L[D�Kc1�Gg��������-�h�Օ.k7O����"��e�RZ�̖�,�c1�̭҃3�V/�(M����,cw�<���u��B�;F�{� [_G��VĿ�_Y'���N9d-[��N��ޒ[-��y,�%�c�Q4�yo͔��j1����((�.{h4)�u!' ��{��f��{���e��aUJ�Yf�J�i�GE�p�,��O�ࣝ�KTC�`Zt�JZ�i��Ϥ5.���Bn<g �{���>k,���PZ{���x�K��S<���6��d~��\&\{9�c���ǹ�(���r�I���qk͈������U�7vg��@���tTHa�~!%bi�m����ldL�cL��=����+�u��T܈'�」_V��@�,� ��w��;PUR��F�G�~���/t��"=�vX��rڙ�P�^uQyEK$�{ �� [ <z��>8�zM��}&�YZi� ��و�Ŧ`.u�憵q�uԝH� �ÚN����4�#�Z��+h�1{ ��M���`Z�U��#z�����֜3���E��D�S��.PJcN�� �L��d' 1�һ�p����t{�ڮ����_t#��?:��ve]#��n�vM��k�s�@-����*h�u�Xk���0]B���2�.�}r����� ���
Static task
static1
Behavioral task
behavioral1
Sample
b1741da119bb1e0a67a5f73f2a0c92622e549fe2b2bd93c07b896bc262168295.exe
Resource
win7-20240704-en
General
-
Target
b1741da119bb1e0a67a5f73f2a0c92622e549fe2b2bd93c07b896bc262168295
-
Size
2.5MB
-
MD5
824810d374492283f9376425c677c893
-
SHA1
d9d13919b2a762f169ad61a9c49496ccc72f7d27
-
SHA256
b1741da119bb1e0a67a5f73f2a0c92622e549fe2b2bd93c07b896bc262168295
-
SHA512
f3417a7a3aa9936395ae31401a255bbc374c503ab92dbac693929b261a91e4706f50ea12d1e6c524346a5eb2809c462e8e797762af7fa65dc1d151f5720b0d1b
-
SSDEEP
49152:OQNcYR9oDQRW4DQcYNLy/52HTDPEcc4Lh1xVCDbUXxksH7y9urQjfJ0GG3NZllW:OEcYR9o0RW4DLYRyxOcxWhVC3UEurQj9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1741da119bb1e0a67a5f73f2a0c92622e549fe2b2bd93c07b896bc262168295
Files
-
b1741da119bb1e0a67a5f73f2a0c92622e549fe2b2bd93c07b896bc262168295.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 131KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE