.��<v#x@���)��ĜԀ�˴S�n�SO���9a��f|������/oBa�da�* �L���6��8�g7Q�.S�wφ����v%pR�%�¡�����@DQH�k�b���*��#:J��6"(x.=�l���Ay)�E)X�4I��N�BR=_Y]��r�Z�T&@�*v-�.Y��d2|Bu0;I�bm�#�@TD�����BW<<�i�z�es�m�S��Ȗj�^�3q�b ���)D���� 9<Ye19$�#�<�S��5��X��[�ݸ�tA��@�̋0E�h����%9�Ϻ���?ǃ��b� �z�<��ٻu,�{��q���@ӻ4��q먒O����)T#B�a�&S!h�.y�������d��CϮZK������ۆ�ۦ����W�z��&������mjI�z��I��"�C�(���W~�ì�T�C�>���Ո���g�)�! ԩ"HE(�G���=#�� X ml2 7�?g.�\]��#gш��Y��Y�N���T�H�li~�}I���H9��±�c�@˯T����B�e��Y�D� D��%4J�1^~pcA;�� O�2��ȓ)�Z�Ѧ��^\�t��&r0�m>۶~�|q��}�3�Ҫ�b�e-v�����΅i6{� ��aR�WGS@)� =A����ew� ��G@;?�$KJʇ�v�w.�R>�x��d��ciA\��}Z8:��S�6W�����.pb��k ��1rb^+Y�{H�7�sԾ; 07�}6��u��_L��(�<�4;���"��x ���>��ʜ}�~�pa�� j��z5����Ъ�����_����v�#?V^�ٌ�9�wR��jR�4֖֮˂Y������Zw�z|Lu8�����Լ=��ә��'�Xu��2���wņ����ܠ����P5���k�(O�j<��㈖;Q�$��R#����ٞʵ���ǖW��ǀʼf��Q:xi�έ���#N��$��.��)deF����d+��9�CÕm���[�/���ۛ�^��PY�ԑ�j� �A0��]M��I,5cV����n]p���,�֯��yl4���5�}:d�$Lc���\���:�f�~`�0���s�[�pldG a�ʚ��ï&!�P�Q�È��ɼK�O%!]eя���ޏW�c_���v4L#�U){���(X�>��(0�)x"9"i�� �����9P����b\����v�w��� ;��Z.A���%�CC 3��/�/���y �&���͜?-%��z��2���R�~��=�Yp$l��ڷ���G�~���]�;9��2��b(�g��m��=��1KjN�.�?V��5TF }��aZS9�<�AQ�����N� Tly3 ?�(0��e��M^�è�<��B5���13��O��b��)�">E/�TVȾ����zVT������nGJZ"^�X.'�;��S0�v�� �tm��n T*�q�:Hi�4�u�؇����z�cH�{���cCo`�up*s�?������L*�/��R�׆�5:�b"� �[����*��K��1?���' ��;����$w��uQ�8��|p�3�G�;����p�U�|�n������j%�Z�Ǭ8Q&�+��C�誵_��ڽ�f�'E��TIn���xn�>��Q�8V�z�2=kSRU���ص�}j�QRx�-h�f.B�� ��_<��P�`ྈ<�� G\jo�e���oA�)c]�{�� �9ʬ?2��"��(ڄ ���ĩ�O�(���?�t4��2�� g�J}8�tr��:�� ���TH����0��Y�K��m �=�μ�N�,��EEB$mG�ɀ�9&$=H��@���9q����UeC�e^�?c����0�����}� �+��K�;�����u�8aw�J1�0��t�`�>s�0Y�Fs��X�_p5]U�-�1�f�/��ڕ*��נ�����_�q���x�̖���k�,������M�dR��]�r�o�T��I�Ɏy�o@�(W��/����Jv# ���M�NS����7(Q�8��yy�S��N���{K��S�[���?y��`���M��tB^(�/f{۴���(\����-���:�]o�����!��������i"�Z�6Z�5�r��Ç�è� U�����U��D�;US풨�"�{X8`���%X������e<�V~v��0��� 1�����M��o{�q��h�2 ���x�|R������5����B�M5��@R�d�la�nQ�0�� %�|�4���i�'=^)C1b�j�gx[o�o����G]Q��r��ߊ����@�+� ذlD�(5��GD$��a=X���DX���]IW�TY� ���;�+���@��ad&}0h�Y�J�t���c���z�Z>cA�$�L��^Q ��`��D�) ���v=[�W+&��@�uN]$�N��h��ō�Ա���k9�l��$L�LJ��\�ff=�J�S U�~��УU��?����w%�@�L��Dz�ėEc��q/A�=�� ��~ڑ$�~�RH�v�#'��К0��t���4�x�d-��C�Bv�S�k{}R���˥��@>�V�m�0XV�a�Ɏ����8V��o�t�3�����������k+iLajM�d��|;>����iӥ34�V��M'y}Lڵ!�,�L��CZ��^,�������8Mw?��o!��Y,jzra.�ֵO*!����7�+���z1�q��:��k���V�����裫����o���{3و�8F�>:�<Ix�x_C�$(A�1w��T`V�=d^��-r�Q� �XB���zf,�.�#�l*�e���2� %o%�0K���W��� �W�ʡ���[�[��8q�L�������q~��N}�rs(���,��U���?�e*Țؘ�����-�2'��(�˪ձӼCj�Q<��J)�S?o=�'w�"*UMq>r2k��� ��Sx)H} �K֚����q��� ��:���Ҫ�y�s<ݭ�e X�I�倱j�-�Q�2Na쁻w��w�,�<��9�^?��S�!>#+����"��IJ� Y�1yx�X��*&�d��x��R>]/|s�dB��a4�=�KYѮn�>�p����g�=�#*��P�q�� ���|Y`���0�B�4��s���kp�$�t�V�vf�E"0�$8��p�F=G����4�^�*!BG�q��E�ZOkC{�+9��\�����1p�-�M�2�)���:P�|�땉�jR/݅Kb|F��Uj��wIք�́9�[�h�>���I�E�Z���8!i�����=�!�W �U�{}�$�\��W�|��O#�P���;ba���H��}�"�g���,���D��!Y2�Ut0��Q���h�ht|i�� ـ{P1P�t�[�_߬Wl���4�ʇ �i�E�r����;J�/�B2����a�Ǩѕ����K�ch�w;�~���T��ɱ=�A:���
Static task
static1
Behavioral task
behavioral1
Sample
55469ef85dc48effe7ba2725328194bc1aca86d8058824f12d78bfa12002ac23.exe
Resource
win7-20240704-en
General
-
Target
55469ef85dc48effe7ba2725328194bc1aca86d8058824f12d78bfa12002ac23
-
Size
2.5MB
-
MD5
2b0ff709e643e4a792e02b47fe5b103a
-
SHA1
d43183b6a4c778155467d50543da6d9e8a1c1a76
-
SHA256
55469ef85dc48effe7ba2725328194bc1aca86d8058824f12d78bfa12002ac23
-
SHA512
db40401da2331c34f97025521c735bfbaa6fd7e4d62449b0a27c086fc9f708914fbb65f320eb15c7165d2c79f21328cbdfb0b7155985f8750279298f65c36774
-
SSDEEP
49152:eOizGoIuIZS4cFJbMj+7ddPOB/5AFLNXGLbue9lG9gBarCBKrq5in/W/2xp+:yz79IG5OBWyL6sUacrCsOA/W/2xp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55469ef85dc48effe7ba2725328194bc1aca86d8058824f12d78bfa12002ac23
Files
-
55469ef85dc48effe7ba2725328194bc1aca86d8058824f12d78bfa12002ac23.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 131KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE