�����vm]��ڢ���OH��V~R�"*?��Rj��ĵrI53�Et3�I�~"@+1M���6*�h@��lz�<B36�ݯyL%����uC�v������^B~FŠ�Ax��c���-�6Qn�h� M�F�)������ �,6k0�5����� �L�P�����3�9�*nS���@k�B�n\=/@�/2�1 )��oZ�����G�� ����u�-=��^��&����jWog0�f���� �>@��.����O� ����?�<}.b��� Ϸ�}��.#{∘J x�T��݊Aҙ՟���&S����}�7�o)��Q��>��73I�8yMe�i��6,$+�8�c^ܾݍJL�[c��ʹ10��M�C��ؾKN*�飆��D�H~D��e�#�=��$��dL��7p��9�hu�S��2[R!荄Q��V�~�V:1Gd�va��k�Κ� �ܠ`MքR�Q���nyrPvQ0?J��)���5M�'*���gǖ��"�a0ã��9�h[�:���~�lv7�ǩ��G"C����A�*��[����Z�� ܁*��I$A�Xg��,j�S�n��If���U>>wo���Z���G�����c���EЫ��"/vؔ��>+^e�z()��4I�^B��#tR�S6rz<L�XS���ҵ���)���[@5g:jȖ�O|��(�9��2n5y�-|B;����"u�>p\� IJ�����F�n�Z>M�K� ]��㭢��@,3�cU�ܺ(�%�X�+"�4���U&m+�pE���mI��3x�^��ax����Q�Ǥ]����J��$������"[���鑳�>�X�!6��kĢ�@�4b1t�'����q�gEa�뢮����XK��[�ҫL�)}��F��kӛ���|���Q�>5����b����v�*����3�#B&�6��X,��3h�A�D���|~�y��3C���S瑎� �^�*�3U�1w�skjF���^�(�%oa\<�8Ƽ��3 .Q�����Zo�W�v?� ����r���9I�G���3ڗFֺ��g��ܝ��;ڞ�v8(K��2kZ�G7/@E��S-GZ��٩���5rV���w$�&���`���5�9�5Ⱥ���m�W���nU �p��w{Z�*���P�46I���ӆ&��c�YPƑ�p�"2*ة4EO����u��K��} U��� r<^�M��b�G�j�P���]�5��B����7���܇?-����!!9��X����f�u��[)y�2�͎��O�ߪ��R`!T���=��Up_�9���6b�R2%�8z����عT�~�>�e�.�u�喅g2�����A\�J>Mw��/����oI �T�abh5��1���B��A����Գ$X$;��/�Xhh���"�2\�W��*潫�ЃN5��)�Q�p(I�>_ )��'�甘��_�h��D��F�D<O���v5=�RRňe,/q�G��ԞD���Y:�o�'�}��b�����8Ù�S������!�%����wy6��^�0/�Γ͆q�u�-���#f����i˚����f���x���Fʈ��,^�(�8�����;�.���6���������<�E�� �;Wؽ=CZ̎��"J�8Q�]�+Ϝ`ӄ���p�A�����mٳ�Qr�!2Czr���^�{6����j+�t�ߺK�ObC�!�����>�@�*�����\�%���M�2��]�#k�d5�Q8�Q���~U��}K���3 ��{��v�H�%���S��V#��]��g�b�|���_�.2����L�9���<S�/�ػRӍmP�+� �vr�Hq��e\Q+�DAڴ$0�"���9C��Ӝ��*������A�FY@�Y��|�/D{皭y��k��Y�����p���!�F�����x4:��A�=����6.n������y�슆�����j��UEV@q\=�8�-�-0�1�[4�� �F*<��^�C����1��Y��ۍU)�!���t����n��C_N�a�4��[�i�h3Ll9`�ǙtԧrT�.�Ó��#��0��`���2�Ϝ����z��� T�}���|�~��t��+ H'D~���:69�!�g�Aڸg� �(pgS�9ڡ�@�( �e?+����/J#�D�7���V�d?��%���':k`�j���'3����z�PlRb蝮�]r58������./���1�Ȇ��2o�#���ӱ=1�v�TЏj���n- Ӆ��� <��zw �7��%97Ą�#9��FR����v*;�~g�N��>�R��H�Z�����ے��b��B��3V-���A ��mL�on ���(��E�ǯ�����+�^�]�Qò���%�漏��ފ� ���f���ׯX2�7��5�8��V�PJ�`���g�E��KS*���rP�9�������������M01 ���[��8��*��{�# A��E��y��8pF#R�M���� �Fa�o�a��P�S��3��F���Ir�)t�?w���{�q��~���ϮzryP�U�A��K��Q�Ҝy��K���s;+��pMN����B�����ǣ�bq��W��<����7q��DrkG�;����U�O/۬�K~�*�$��/W>?����O'q����l�Tؒ/7X�`�0Bdv�}R{I��W��u U]P1��&�-t�����ƨہ�?W�xޱ8��'�pگ������8�!��e�;�Z➼�,����)��kp̻4��R�$��.'w�i�Nb5�|����F;~jX%��Lw�L�n�M����'2N]\��e�kAW2N�(�+P&8�t*�D¸ �X� ����Ĭ��� |���2Ifr�� XB���}������t�.k<�`� �v�k%�L���ϧn�O7�]���Wp'�X�����P�H|�ݷQ��y/M:�~�&� �Q���!��U�m���@�f �C �%��_g�#9���F8S�����Y?ݨ�u0�<����d��R�"����a#��e�_�R�"A*${�{3o�S�#>�����]+:����u��/�sA�g)���N{�R�jظ]�B����ѡ�+��� ����6����Y�<�2��UT,Y�8&����;�"6��Ԭ �[Z�����tE}-5�F�-�W$ͫ����Bl�����X��N�BDf�k��!�VaY|1����(fM�v-D�{y!��twj��������QKX~����)�U��O?͊�Gs�C{�拁ʓS�x��K2�&�NV15i8I��48�8c8��3P�Ӻ�l�.�C��,�dnPZ����� ������B��a{������~���ȏp�Áf�iP�w�c�u���lFbAK�Z�4��; ���FP���5��yN.��}������@D�̃�d��E%[λO)Y�-���L���~ -G2��#C����I��x�~W���$�PO���ȣG��<�k.@$TX�'m��ը{a���{�O��w�aR��%��Y���l�H��L|�Df�_��±��'�Zl@v�K:���$�4�/<���'�QaJ�XҶr��$�����,Y'�@j�8U��^j۹��١)T��� sa�[�̄����m˳�*��K�!W�7�I1��l��zs T��)�܁�LK ���^�N0uR0T��_�U�e '��F+q����Ъ��j �/=�!)-3��^�����!��8$Ub~�-{L��D������X_��ˎ�H����y
Static task
static1
Behavioral task
behavioral1
Sample
379d98fa760f90a9b70c2e3221fe3500d1c1d4d2e9f587e9a5489675234c87f1.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
379d98fa760f90a9b70c2e3221fe3500d1c1d4d2e9f587e9a5489675234c87f1.exe
Resource
win10v2004-20240802-en
General
-
Target
379d98fa760f90a9b70c2e3221fe3500d1c1d4d2e9f587e9a5489675234c87f1
-
Size
7.7MB
-
MD5
94520a7883459a12f754825aa2146ef1
-
SHA1
addec1fd268c36848054c1c6976ae7fcddf652d8
-
SHA256
379d98fa760f90a9b70c2e3221fe3500d1c1d4d2e9f587e9a5489675234c87f1
-
SHA512
5dcdc5d3e2e7fd7f8bd52d6ce531335e20d765eb68c9493b727244278685a2050d3d44f80dcb6ccc6eb47f8e1268fd79ab29776e0b552e85e5c59eecd222f422
-
SSDEEP
196608:seFzgGkqbdVGEO1/5UbO5GGuBG0RAsmpjf0M/1yI8Do:smzgl5WbuG4KAsmpYMn8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 379d98fa760f90a9b70c2e3221fe3500d1c1d4d2e9f587e9a5489675234c87f1
Files
-
379d98fa760f90a9b70c2e3221fe3500d1c1d4d2e9f587e9a5489675234c87f1.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 1.6MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 136KB - Virtual size: 576KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 15KB - Virtual size: 684KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 7.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.d23 Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma1 Size: 3.4MB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma2 Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE