�)���.���� ��PM����)��ZY[hvh���!�ru�TŬx+�5>�(�,�y���/�$�B�^�Ϗ���ooC4"sh.�2�^b{�]̴�`�5�iI�x\��+9� *��ǖ�'��2�,H��8��~�+2�?���-�д����?@RIk�F�Tے���9���b����4��6��w=�2�����i�i+�(�'���Vju��TF!t_���՝?���*���~貺�*�i�=6�QX�I"�2� ϙ��Hb���|Ș/�i���o���_uڒ��� %B4%Y���^��S{����*ػ�B*�ڞ��ۅ={��B����$(!ф*���n���B&�$�SR����zD�:�pR�����v,څ�ş�ߩ��K��L�;S���ep�"���.}m�1/���z��w}z����D8��xb%qA��X8� ��v�H�t<2��y�K���@�WE*�.���en�L4���b8ݏ����h���X����1��� ����v���������2cP�9�t@� �Ϟl���l��C�A� ��0����A����n+#R�`�ٟr֕��m��V _8ߌ��d��^�:��Um�=>�y�ē�D>�]�/WG�N�ӾXhL#G(xx���D�%4�%dra���c�}�cW�O��~ʟ�Q@a Z ���]9�㮨�t 1����AɵlB��pD �,�|?$��xOI�H���y���� y�:��S���%x7����T�Y�?N{��v� �!�����8$���X�B��Yg���H�{�E_�Ȼ���06�<9�/��ѢW(��Z��m9�62YE�gc�.n��XQU����}�z-ͫ��x�ۜ�&j�Q��+!յ�Ef��_�M�n�W�?���݊������w `E��X�`���H%lK��^]���˰_��T�Rs����U�)�\�p�[1�-�<�.3��Y �ib�(��/r��vAEd�W��t.����axx�3GIYp~��]~)��T��2�R� � Z�Øο����%$B*�<C�C��P �¥W�M�n��G���a]�%�x��~��H>��|�/�<1��Ʊ|}�H������S�[�/L}�{����M�z�\�)�ϐ��z�]��\0���Y���⢣b߰��.�f�EMu��Y�[#G�R$Y`��1�}�dt<�Q�0���s�V��y����.J�z�-�z�YC?�:�T!NzV����o0�dp����Zq2��ˠF ��0�pfv �90�Y��4������%Zzo�j@ �$�<s��Xn����\�y�g��2Ò�.-�>�CQ+�[g�+, 7���z�J�i�~�����80��m��/BPs�����*_�Gb���[뙽�}r�gEGtP���gk�:�����"��ghE�q�z�yn�:Gzhkގ#M@�� .�!��A�J�Pjr�����\�S�����4n��T"�N��b[#�ɕ�������>��?̻���F/��(anH&��Z�sKD�5*۫T�+�I�5鄝}�q�l�ePC�K`�m`�����\�vȊv�ö[fT����$p�&����ܪv��Ҥ�,��Q�{o��=��(F^��Q��q�x�5�V�D��!�/�����հ�*:I����Q�}�"��]P|����w(���i�N0�=�-c/1-ƔňT��e[�� ��.LX��?�)G� ����"M��|����ZΓe�G�p�ȸ�O���y~[�=rB��Ths�C��V���Ru]D���K�c�����7���X4�Oe�tU����cI�W�0"�_���o���D������3��W�Z�L�tv���A��xw�ؾxh�́�/'��>p�L���F��Bݥ�ß(eE��M�qUf�%�b˯S�����xd`����ji�]m��.����*�� �*V��j�"a�#�2����#d?��4c���Z�^`j~��cuDT�_2F�@Ӻ��v@u��I���(� u��Q�c~1Q����� o�[u�m֝��l�v�s�j��?�l,��9�Ӿ��F�.�]�:��Y�:j�b�E��PdC�"c�d�5�gWfP�Թ�,!%����G��T0�K���,�����fCT+gصx.^):b���9���^f��͉Y��cYf����7 +Oi_a4���]}����g"���� ~h�^�� 7q@��oDDi� r@���j�ŨP��{@����%����S�vć���XyWԆ�M���%�G�.�?41�]�/���{F���Լ'�����I��zb��l�q4a �K�{�[���xf����M���9iet�ʤ����g��N�S���,����Đ��ó�H<:w��g?s� sl��o"6�;~��Z��^t����ʅ�,8�SX~K�2Q;�p̀Kf�2O0G���l:�f�6?��� .6~���<>F����ٿ�9����[��9��GB��k� u^g�_�?0d8ʃC��=�M=��'���h�1�jfCp�^,E�������D�~�?�Ђ�,9-�V$JnƎڴR�l��`�����K�9�:�{vwدy2 ����Ǻ�� �������O�����8U�I�\�N�Z�T��@CQ�X&�0G�J0V"�k�O"��ᬨ���S������bf6$�A��;���M!��'��;?v��=@�Y���N���ط�p�S���χh�� ��J^PV��^]�F!چ���E��u���d���W2��ˡ�� qs�p���Z݆N���0�����O~���N��*l�?oC��gt�q����^*����>���V�RB0U|*��d�0�JF�?1�Aa����L9�ui�J�0�����v ���z�f����X/k�=ӳ��&�i��-o��ox�1��5#b +k��l����Ch����tOq9|�G��f��-��V|��Mf(7���9�;M��VOV[e�4����0�=��Z�3�4k������Zm���6~#��W)� ���"�4|]���j7����\^������ߍqV�J�찶G^��6��Yd�M[~��:B@���5��L �܌D�� ����R�= 0|�ލ��?d
Static task
static1
Behavioral task
behavioral1
Sample
fb79be82eccae5b639a0b77e9ab1bb50N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fb79be82eccae5b639a0b77e9ab1bb50N.exe
Resource
win10v2004-20240802-en
General
-
Target
fb79be82eccae5b639a0b77e9ab1bb50N.exe
-
Size
2.4MB
-
MD5
fb79be82eccae5b639a0b77e9ab1bb50
-
SHA1
09b6e8449ccd65e282d98675f82a1ba57f441679
-
SHA256
58ca68dc70a1ccda2e5d97ea5abd0382454ecc94a00dc34b42d0c979b8f6fc81
-
SHA512
77b9fc6a6f8e4b07a6141c312b467282a0d65ad15a4bed062423a8deec2322c08532da74c7ca6f51223a9ed648e3585bd0c50a221c9f59c654f4e6ca3cf15d85
-
SSDEEP
49152:MDhuyj6pmh3VLKxKLcFAMqLwXrOEZy/zGWjXM8Utf7qBP:XyjGmQocFs2y/jMf978
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb79be82eccae5b639a0b77e9ab1bb50N.exe
Files
-
fb79be82eccae5b639a0b77e9ab1bb50N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 32KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 204KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE