K_�Wv��`��e����7�A�A$����}��Z6����BU�f�kiB�*������ϣ�<Y%��sjg�:s���?S���� �Ø����C���s����p�Mc� ,�l"�$v,e���XJ�._�������i�-|�S`�RZ�N�YK{e(ȝ�:��m����c}�F��~��B3���5�tj� �Ӓ��h��/�B�7qW��Gp,��!�؈�ljԴR�.�����%u�C*9OH����X�����NS�ט�����à*<iN��Sژ�����Zk��D���Iu�o}���~7Ӫ�m�iˀrS��:����N���`s���#�(�"��O�ax�yS�ר�U(�sa|�A��Z(����VH�>8��F�I~��*.Vf�!2T��G/̞��Ǘ`?yi��ޓ�9�����,�<��8$H&Ln�+;�E�f=,? �ML�~}6*:���'��8�w���ݯ:Pɩ�1:�����#\P�e��b˛���*��~5�gc��LAP�j���%���Ѻ�1�� �ժ�����6��_���ӛ1��g%W�ť�9G���2�k9{�j^�M땤\�����5���-�J�"<�QQ����U�p�tf�����'�}��Z�l���ʝDo�"�̛+)C"�[���د/�����V�Ҿ�����>5�=lc&��9�i#���ؾ{�00n,6҈�j�R���������2v����q�z�u�7�*J����@�P���,��Z����|���tۉ�lu���T>�]oA%#�!�@�9Ύˮ�F�5�z�s�����U�� ��*��j��XGR$�ΨU�EW����w>yy�NU�%6�ɤ�*=qmB��8�:����"�k��a=�&�iU���+y�2��Ľ��4��u[�n�[7��Cl�?�F�)$�*�v�V������Ȩ/���c8�:JAuy������2�jR���E4�ȫ��O�}nnoLR� �s��^��]�dwy��n�F�4ޢ����Q�J�����d���vH��y`�^o�4E��=,)k�^��k�U*�� ��-6WeI�PCx��=�k)It��@���, �=j�9+5✻��c������Y��L}�溡���������`�[���2q��b_Z�!m�Ok�'�wH����?J���;���A]�����2P���;�����Z�����f�ۼ�Q/��b�د�[Jx���G1�p�rRρd4I�i��ٚ$g�� 4�$�c�FB�4�q�!�z�&%����*ZZbN[��$���W�m1�/�d�8��"�v�8,�xw+�� 苦!P,�ɬ�U��5�a�QP��Lh5���B!W �����囮F�,M��B�l��^�W��en;ɲ�����I;��N r������Bx>�4ԉIs��?�nc+���^X�3E�o�憟��\+G@kv\����� w��a1��vg���X���B�Xq�-z����%���[R����v�29�A$�:��d�`7.�8��s�����������q��ղWo��<���6h�<������wr�H�����C�$gG%��@�����bjY���{���ob�I��O�DT��y�Y������M�e}�3|��I4��[����#E��������f��v�;��e�c��z���I�����0jS��<oM~��ת���4�6R�wq@�˓U�.�h�wa���Fj1���}�S'�}���9,���|�C�s�'~������I>M�X��\X�|��p�sR���Կ��"�b��H1�S�ix��|+�����Rmfƫ���-���B�4� ���b�Q�I���nyU*���.���\����d�\�t��F�ymt�լ��!Vb�� ��S�Le��B�ų��c�gw�q��z{����Gk�I�nV/֙,�u����&��N���̧��z��Pa~T�7v�)���/��3������O����?�Z*�kxg�<�e��f�����ۇ�侮��`$�Cs�w��l�6:�%�7��%�8+g��Ģ!��<���LD('���P��E��'�H�J�D��=(?Xe ����*"�H���tah ;랝T=q�&��BD_�#��+�S�?劈���v�4�O˅�&v�a���&_w:��+E��8�Xt2Ȱ`\:�$��2�����0<�Z�J�K���@�y��t��]�}@�u�/�ٌ���]3��H�^�Y�b�,zG�a�w6�B���(�1�P��xo�#�z2���� ������,�$蔜����j�Q�@�!A�]�����@g�z86��rjL^~=�����> ����3����n|��\;K�o1o���-����,o�o{�1��[���[oQ-]E1�#m p,��s<���@q����7RQ�B6�V���`m�E�F�tJTp3!S��6HֺL�g�*�d" �\y��$�N �=�|��l^���S,�:X�yۥ�}�1d��փ��A�M�]F,_R���k� �be��?Uq�x�Z����y��#P��'=��hר�j��ʃa�T�4�p��5����7{�U&o�d�Z�Y�/��zb"(�.��=�`�iu��ud�ʇ� &�yxFp*�� =�y;?*NdRl:�m�AtZ�>!Θ� K�I���L���ڧ�Ƕ�3}*�8�DZ�s|�-�Lƶ5*�e�t�5���<�\��ʼQ�+��0bu���"��6�����.��BwO�Dh�4�{�W`QLt��L��d|�{���#ZuHܚ�H�˺/MJ�i�B3���-�1�+ރM���:���s��{��'CM�T:��w�|+7HxP��7���gV�|:7oN�u�u?s�<�.�Q �FA+m���m:�/Vb$��R�E��{�'�;S��fB?� ����~��<�z�E������J�(�J�5��FD��%���L�7��c�D���L^�^C4��$�ˏ()�j`���Y)g4~y%�g���rB1�a�'��4���mKC!ÂJ��D�� �a�e�t(����?s�@�c����H�W��N.��� ������C��}�.f�AK\!��A�ќ8�~c~߆F��T�&�2=������hbQ���.ZO���B@|3zS�Zb�.��N�,?�M_�E�W$3C��1_~�����������L�(�!>1ȑ��X����%I�W��pc�a��F+:&Fw���1�D�6�G�CX��ӓ�� %L橎a�شݯAl�1���M�$S�%�*��*�_��0ƛ>�)�Aݏ��I����Hk-�#s}�4�N�n'㏋?/���ͤ+炈s�
Static task
static1
Behavioral task
behavioral1
Sample
f048ccac6781c9a52c029724c4b866febcb7b95187008be9c48be6d8c6b25cac.exe
Resource
win7-20240705-en
General
-
Target
f048ccac6781c9a52c029724c4b866febcb7b95187008be9c48be6d8c6b25cac
-
Size
2.5MB
-
MD5
0cf98c250ee26096d91e5248b3721acc
-
SHA1
bc2185a5f73c3abf54eac03c11555d3f31564058
-
SHA256
f048ccac6781c9a52c029724c4b866febcb7b95187008be9c48be6d8c6b25cac
-
SHA512
50da02ec72c7758523650900f4ff22b2871334bffa54ba7484557c21a5f9e5dadfe22528c8011ced93bd9cb247791620cb201b904fc7228a735a70fef60a1452
-
SSDEEP
49152:P+BiS73lhaHsT3kqLBQNSJg/irxnhMbVp3H2y3sSROvGrUZDY:P+BiS7lYMT3/BQNSC/irxnhMbX3H2ycs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f048ccac6781c9a52c029724c4b866febcb7b95187008be9c48be6d8c6b25cac
Files
-
f048ccac6781c9a52c029724c4b866febcb7b95187008be9c48be6d8c6b25cac.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 131KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE