I/=ʷ�H�u6��@v�8Z���pI��8�d�*�ݾu�|��+}_'*��iaU[�D ]2��6O�"`�R���x�ȩ��y�U`V�m�o����� ,\Ђ�1��!�lwP*-���<a�j�� N�����H�%����+J +��t_qs�)�����u��n���˗l���fZhۄ�k���d�=���A���������uv�-,����5�����~^zۘe+��C�0���$,�ɇ{���}��K��!WQ����%����Y�����4�� gZ�\*���ۖ�T�7��BPe����y�~G��V֢~͛;�\�0��\�t���D����KQ���XK�yu8�?�պq��< ��� �YA�!sx�����'��孋�a�|�C�� &`ŐM��u�"����)�q�����M+}��� s�Epp.����P�e�~��Fo���� ۖE ��WY��6.Je�'ߺ,���IO=.Q�J�pQ 9q����0 �� }Y�-d����6�N>?�����R�p;V�7�.��]����n0��wfq���cj��n�b�\"���������PB�Y ��n� ��|��\�G�(�7�)`��l�#��EJe�S����W�� as�B4��u�b���D��L�|�G&�|I�'addz;i��!���C���#�u+w���C����rf��M����Q�SR���BA)�� ��傌���g�������;�`���mĴÇq�|�>0�Xo;ӘV��U�S�K�8�W*����|g��RG2�ς��G^���9���Y�����E��;Q��a��6UԔ9\���،*�%4�l�r�S�oB�y@_[�#1.�D"`�����1.=�c����,X� �l'r�[7��fzR�5��o@�pٮ� Ņ���q^�uP��"4��Z��_��Z�v��K�H+l�e2��A:E��"uy��U�RB(����e�k��cnՒ�Z_E���&%� Z��܇�pc�7 pӍ����e� ] ��pv�άoT�3��B��p��d$�ó C����8��ݽV�������^M����.*��ū�w;�,T�P�� N�dR*z%K�f̼\��.��堚�0�ᾳ�)c;���~V��z՝��{�"g��\ɒ��N��GpI������#98�wɗ���p�G�,bs��"b�2�Z �O�`M�dG��2M��[�'�%Ӻ�2pħ��t��FB�M- �����Ԝ���-��'(�H� ��\� 67��8� �E҈�7��� ��(��&A�G�������0R$��':�C�:��� ��y�x�����{����"&X�� )��x�}k�1s߫�O�r̛/�h�Y�˜�9ْ&8��$F�1A�i��1���ؽ��#��Q|���/��>EY�Nq�H�� '~��_ե�Rd5�W� ���V|!L��<�X,�j�+&���P=z4�Ĝ��6���>�\��~RJ�`r���S����#�� �j@�ٯ|��(��Q�L�<1(�/E,���wJ�&���!����0����x�,�,{@Zf���ly��}O� 7I��j�6�b���͠����䛛���$˟%��.p(�� {�Z����(T�䟒^�mrK�?��b%^_��R�x�mHji�S�|X��Ӧ��;[��^�C�z����I����J�O��Q/�ܺ�f�����H�F�.\��!7Y��5� �U|����U~�?أ�b5���X��ֈ �@��u�o��m=����� �Z,���le6.���9���ZZ}vq���� a��M��>dq;E���X���֞�)�+{�%t��^:��.�ɢ����������m#�aؔC��������jT̜Y�z��=�!<q��Js!\�F���Tԯ"�dd���=f��#?R���6D�"V�UX��-a��f� 1��w�6���,�q��??����8D�M�������U6��B"����(��.w�yk̦Y0�DJX��JD��K3ࡸ������ɡQ���y[��h��YJ����͡�p�(�� �����K%��r�I� U�qti� �nGq���y�EO�_��q����E�o�|L��p�L����Ù�IW���}�!hL͔�S��cuUk�[H�C���YOV�._Fm��O��O喽P���7�SP3]��\h�G��$���(��Un����ک�.�o^���<R���-����Yp�-�g��P?��[J�H }1L]�Bd��O)L�������XS�|-Q���Vd������݇��ֹʁQi�ϛtp����O��ԶӶ���{��0���WH� R6�h�Y��z�$Ѝy�q���!���l�a��� ��f�m3�L��E�$p�D���NAa���^s6�;Z�[�9Rf5>���q��~�q<;m�Qo�n(wZ�n��]y���f� h_���,��3ӧ��Z�_��RN/D��<� �Y )��qД��T�J���Kw�Eo������ZKxv��|��}���7����������ۦg��4 �T�����R��$f�ES#.�Xo�fi�e>>���l�cjS���Vx�xF��j�H=@y��$�.���zU��F:���W�*�����3�qI1)����+F�L2�FC=$��S��#Щ��]A��)GK70aP:}yI�ga$s�nZ�L��jGئ�9����ݺ5�@�Q�M��e5r>�����DE����Jc+8������(�����<#�P(�#L ��)}aE;j�O�`E�a�������F��9��jU���8��|�Mi<]+�� ���`ܬn?}�w����g/�'�n������6��%֞?�_p�=��1G+�t��~Ε����t��m���1,��u�߱�.}Vh��������0Oc����o��¢��BS�8�tYJ�[% �a���u-����N��[{�X�Ϛ ai����qw#�#.v�/ w�;TsO�ˇ����V$+8��X�o�~�,���� �hjS�۶�C)�?�����
Static task
static1
Behavioral task
behavioral1
Sample
b7377e3fd4fd6b453d610e208730d55903be1558dffc15821c4aa49ae81c4ca3.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
b7377e3fd4fd6b453d610e208730d55903be1558dffc15821c4aa49ae81c4ca3.exe
Resource
win11-20240802-en
General
-
Target
b7377e3fd4fd6b453d610e208730d55903be1558dffc15821c4aa49ae81c4ca3
-
Size
3.1MB
-
MD5
edbc12cd5e99276e9f2ccea30474cd58
-
SHA1
bc5382b7452c30891f3d78cec3fed1eed51004a1
-
SHA256
b7377e3fd4fd6b453d610e208730d55903be1558dffc15821c4aa49ae81c4ca3
-
SHA512
44cf2ff7fd9b8cf9f3ad14824cb0cd75ecea0a1e332ba31061350f8f2ea58ba1dc96388b87b560a6b882ab0cd87d3d16ecf1be41aed21a05c21fd63d2e69e994
-
SSDEEP
49152:K+MveOFDo5Cxg38IGy9abyoY3o1QfuyQ/GZmL+zuzab:KsONjxgsS9kTYYyfu9c++a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7377e3fd4fd6b453d610e208730d55903be1558dffc15821c4aa49ae81c4ca3
Files
-
b7377e3fd4fd6b453d610e208730d55903be1558dffc15821c4aa49ae81c4ca3.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE