5"hߔ�I��d��`h�ǥ�\�'=�#���s��_� ���GT�� ���!�OX��x��e=|x�<���^N��|�k%+w*,mw�i-�ݟ�$����~B�?��N2���l��������5%+�>������#3��D�=�@~����t�������9&��Jlף��=�Z�o4E�_�s��� j�X��FN9,��e5;v����ǟw�_X]awq�rL[���\��+��ѼM����[� S���v�o����ć9�'����U��n�"�<�uC{��<�6��Og��r���Ԇ�S�����[I��^yǼC�3;w��ͺ�g��q�)����U@b �� �D� ��G/�� 2xʯ�&��,�E�` �͞_�_�9��C`M��P:�#y�@C��as��Ͼ:���[R�͒_h��@H-R҅)f���!T���6�=n��ۋN���n�,Q��a�|OM�#�;�:���fb�(p�Vi�l���ZbH��D���N0��N�ڟqy�I��2���eƑ=��=M��z��V�7_�����M}��F�$Wyt �^zj������M����}M2F"BU=�����6R-fL�_�!~`��|T�H.<U��b/|a?pe�A���x���iϐu�R�WX��ۯ�S�w%ֈru�<���]��ߛt+O�M������� �3�[$+��U{횏_i���XGx^~�CkD|�͊�����?/�F�������`��+w�\�N����ڰ��f�Ҟ�CH��h[��7W��.�����`��yi�w jޅ��`l۳���A�sK����k�]��B����^ ?�Zs��n�K�:o�GF��� ��vl�N�����F���qo���]��#Do^Cۊ����/A>ˀ� �O lk�o0\w�vF����I'���|�ˣa����x�O)��Jb�c�M����<�IK��#��YQ�'�u��{S��yx�w��Q���L �j�:�(��M��t��^��g}����Ro�*�;�� {���[��?_��ҼkGL�=vW� �2ҫ���&�з�!��������,j�D$�;��=g��$i�YQ_d�Z�k�_/m�MZ�� �?_�$'gRXG�nh�`{ҖAhN���1�cT��,�oF��g�������'.���̈��?���U��l�V* *6ËnI��¸�Ro\w����!97��-����J�?'�Ih��_Eix!�E��:lB��Gb��iH�5���7"�ӱE�a,����6�r�?N >���=�-+_�G�@�-xrUOo2��ω����Q��Z�2�e��|ӛ6�/w�����=1����2��Zf��aل5���4�P6]�������~�{�#�6���*��_� +k�bmOS�n��B��x�[��&�u�����M4�4p�r�r�]�Y�bd/��ض!��8���q��� ��d�E u��U�nЇ�����Zz���mK����D���B\���z� �ʆ�#�գ"�� "x���r�F�m���%~�v۱W�����;/e����L:��X1��M��"��[�O�X�I�\�"%��y��������B1�yօKo�VZoٶr�ƶ \gF�P������Y�z����o�l�#����+ԧ@�3��(��7L%]\U�4�������p�N����&� �y�s;���� ��B����2 ���S�*�b~������,�h�|3���^t^LB����:����G5��z���Qv=�Wo0���d��Js�w�mys#�Z���mV5e/|��v���4�/���h��TW�V��*����EҵX�XҢ�پ�v�*��k}��{0<�HJe��]``��/����$S\����&�T���rXh|��ό��_��l7���?#K�D!V�H�W��ڤ�ӛ��K� v�.>�ԥ&���Q��^�$}E �01sh:C]}�W�i}N^%��-����)0�x�O_WG�8H��: �7_�t�^d��u,�/�Qݐ�����p@Q�[ҡA��*��B�S �V�M���[;���+)��6�t�f��K���(2<�m��"�U쉧!ߘ9��R��[/�?�4� �>��)_Q��n8�ً�P�v���Hy��2��6��Jֶ�R�ۓ�H����Y���㯂3��U�H���H�����,L+�����ϖ����� x?���ƅ��/-7�<��1$mA7��ӏ����X�$#���g�=���b�YL%�OggV���rE�JM��d�Ti�@����H��@� ����S:;��x����F�,x8�Q��o�lF��9��8pd{0,89�g d�A`����l�' {T1�c�t&=��a���8"�=h�c����c��z���<�7Hw����Hu�P�U5 E����ef�;@O���!u�y�=1����� y������r1��f3Il����y��.,�;����9��VQmT�ئ���~!�=�6�S��A�?�{=���:�l��-5j�cV$���� Y�_�M��ܹjT��h���E]W+5ʹ+R���@�X|_k�M`6hQ�K��3��!A�l\nF@��Z� 1`xRQ���NvO�X���`���y�,��*#Mk�#s$��i'�G�Յ;�}ɥ��Zݗ�y�d�h��t�����*6��#� ��w' q39��k�˅���Y��Ea�����9ڼa��<l}�l��ߛ��+� ���\ͫ�$�� |z�L"���[hEB#Z��k/�X��#dn:��$�����A����Mt?L�[��j�c��a�a�wm���R���s�TOz8e���*���A7Տ`�\�j���g�ذ�d����{4J��*�d�`�߀2��=ى<4Z]�<y��R��V=�}�0vZ��%���E���%�V��78AbN����Oܾ����N�S���xuB�o�x-�ϋ��+�]���˳��$���֪����*Fީ ��M����9����)f:ӯ�!����M}ė#PO�RhmK��Qx<�(�5�'�U�D���3A&9J�Z�[������ ���ޓ�v5��(��=��C��9�����'���ɰ�Ųt���C��?�ݭ�%�Cf��F�i�G�8����m� �^!.���Q��;$�-��ozxj�2vY��/8�zT�Ľt��L~���+Av�k�kAM�ݿ�X�=/�%%BL��^���=Ǵ:#�Gd=j���ܪ ֆA���t�R��]A�_�:�)}u ?�ޫ�^�E� �^���!).p.ʸ�������w�H�S �3�i8r)9����G3KqV�"|[�_I|Ŝӊ�5��,�/���B.I����nʻɁ��]ky��gH.�,0��s���5��F�.+����T{��:'��^�������?0F��ٸ����m�����"�K��Gd�v����f���3��u��a��S���-�M�/��W~�麷��2bM��[��ljq����~h��\�F��-�����p���r��%F�k~�~�-���ca_r����ϧ���L��"��N�$}ʏb@W"�O��$<���˄l��IШ�Ԙ�����r]W��c�Op���o �sRk�Ϊ���&��$5U�@��HCl��ܼ����ד�6ҏ�!�Y(��P+S�� R,&g�}���z,q5��"��h�������,2�7t1�hT�-.�Z�91^E��{㐷��+He�
Static task
static1
Behavioral task
behavioral1
Sample
b72607acc27a9023118f9b19e2da980354229dc257c5f97a36c1bf5f254fb44a.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b72607acc27a9023118f9b19e2da980354229dc257c5f97a36c1bf5f254fb44a.exe
Resource
win10v2004-20240802-en
General
-
Target
b72607acc27a9023118f9b19e2da980354229dc257c5f97a36c1bf5f254fb44a
-
Size
3.5MB
-
MD5
0eeed02bbc8bd51016ecfc7696903fe6
-
SHA1
8558cc98c50a5fa8df852d9302ab91cf0cffb753
-
SHA256
b72607acc27a9023118f9b19e2da980354229dc257c5f97a36c1bf5f254fb44a
-
SHA512
b18a3ee0ca94dd782692fdf593259986e8d782f6125d339242a806ce63df3e96b1a6cbfca577cf790a326190bc03b5600d2478ef0b478f18181b15bc74f9d1a1
-
SSDEEP
98304:ndSVCIaIrRnDXtxVCDasqHMGwirne/XsKHIFUhjQ9rPBG0yc:nQCbGV7cDrgBn0Ii18U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b72607acc27a9023118f9b19e2da980354229dc257c5f97a36c1bf5f254fb44a
Files
-
b72607acc27a9023118f9b19e2da980354229dc257c5f97a36c1bf5f254fb44a.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 525KB - Virtual size: 840KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 272KB - Virtual size: 11.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE