[�2ԍJ�3|������l��y�P�!Q�D��Y{�_ J��zu�ý�.!T����Y���"(+v(G��7�P��I��?���+�|�o�&�L��sxF���,����w�2"�ɫ�����12�|�\��9X�mx ަլW̩�1���ը2�ǩ��p���V� 3#8�;T�� k� !�l9�܊H�)�n%�0I�>a��sq,LB�P�j���DY}�x�Xj�ܯ#$�CQ�;P�����L�����"s��w軰�Yɱ�����n���1��j7N튺���f���$(�1S�n[��D!+к̍��c{;�s�y�����i7LE��$g�,0a�y��� Pe[H��GJ��J�{�uO�/,�?O��|&wA ���ʁ����<kЋ.�� Rn��<>�[w=��O�J ��[�A��~���?�N9X�n���1�w6|%֏w�.Bd�A��闑�0����p��o�����m��/9$�<����s&*�N��w���@�����h�5���n=ȍ�����9cX<r����Pԛ�r��_�0m�ƨJ����"c�q*3�����e�S��_a��@ԹZɎ����������T��{���* 2�@�����@���r�r_G���zy -�����i9���υ��m��q��F�<�� �jj#W~��ש�{�\!���)L�4�i}���98�nux:qB}ЏT2���C=���Z���ֱ��o#�K��<��� ��t��pv���Z�p�%SN�yX�����@��8�ޭ��������1�$#��{ŷ�䈋��a:c�ڑ�j��ݿ ���)��N&bҎ��-53�ԇ�ꍏ����se�!�#6״ڱ,-<[$m7E��F�C�*�T�2]�/n!Db����.e��n��D�yw�w�@C0��K���Xgֆ�r�<���%�"��mX]��-n�� �X�����.��SaH�`7$}n��x�>8X��j�8��jr�h��� �6G�V�����'�Sg�xH��1 ���%� Hʲt�������4$�!eqV�n��F?�F ��2�D��M��6�}Ut<���,M�w�� V"M8�Ι�}�($�����1�K �S�X�J'\����=���Z���}U6���%���!VX��Ę6�@�,�)�R�y��^|�KV~S����-���m���?�K��N�vg5sL�ธ�������?��7�M�T]�d�t�,J)03��8��˙��� �#i�e�ȩiUE�6PO�;�Y�HBSKW � ?��U��z�N�� ���*bY�Az�0��ƻ�t������"�:-���0Q������W�T�-�z�fQ��ĸ2��}��Q�}����"�ѽ�2 ��%N�O��ഃ'��zz�tI0A��P�n���b��j�L4>�R$'� Iê`#3! ��kƱ������ư�pK8��:�s��6��픟g�W�SJ����uIh"�We�4�#�,���ԅ����LFSd�Q\֗�~C b�%#��Fu���Q��^�G�A|��YCA�L�3��s�P\�3�!�!�����;Ct���!MU����sw�]}�����Շz�!�z��S�9Y���<;�\*��M�� �Dc؛cy�b��j�Ze��U7}���=��>h�|F�@7�������� ��vtrC�$��룢��Cb߇U���q�乍�Ჯ�a���ʠ�[VЛD�m��'�����D�l�)Ec�z�����T���E�li�>AƟ�����[�y��it�3ۏ8`���F�����[9��lA^�x��c4�E(6(Fs)�r#P$�\���e�c6��_7��9�mFP��n)ý\�^�?`�~���Y&֓���'a�,����_J�.�h����4Z�?]���ɐ�&d����,�R�ac��`^���O_d���ؠ��(篯�q�f�ׂ@bk�C1����%�*�!ƶ�mq�ِ�[|���u��<�8b��<�=�@vAAaȹF�:�W�J�ަ�t%Y{�/!�%z@��#�P.��꤀s���@VS�?��s��� ����?�̥$�0y�A��?k"��+֎r P�����)A"t�eE��q�����ׂ�y P罏� w�ʳb����,��UN��]4����r����L��|�%�6B�`�4ͥ T���� 9��V���~��z���~��ò�L6:!YӋIMr�7���C;�����lr�L�*� �[r��>d�qu��%�N��pߍnQ�F�^pM�5Ml%im���r�,�]f�H\Z��4z��8)�"�����0 �\�>B�[���K7����c��r�=}�.��̐~� Q�����s���3P "��ba]/��a"k[�� �� M�q��.�G��h/��&�-�X�P_-�í�.ۻ#�l�}Z�Ȁ>��]�^OPe!�A�mYϳ�D�#8n��Y4�Ɇ�$����w�:��i�"�<Su?tLQU#� 3��c�����-WVZ�aջS�4D[#l��ި����.���7���}ذ��y�fC��9�[��=!��Wk�a-A�f�ڕp�sp��� ��*��+��c��8����8�_m�K�|�M���g3� ov����G~nt �pC�Ǒo r<�e�e����!#o5� ѹ��r��?M1��Ű�+H$�\Y�-��Ο���������nԁ^�T��(��}� V&C��煈2�������'�1�n�?�����6��`tq�b�/XWAv'˴Y�Kii�Қ��T��:2���5��E���,h��܈A[Ј����稓 �g?6� rc�`��;ke�:_4����e���ёs8��vKڼFQL]?�eݠ|�N9!�A ��3�Nl�b�/�(�DFWz|.�9n���om��>o�6�����*ҷmM�]MF�]��vcږͬvc��()*0�ʂb�ᓪz�fD���S>5��� q,��ݰ�@���!���.�^ؾ���B)�~a�|C���@�h�����<Q�k�3!�DȁC 5��;��L��q�8$Cs���I�[�u�Z �)�Ak�48L�j����0z�Tq�4̐_��{�:+��#~TDW��V��p8��c�|��]y ��{�8Tl������}�� �]�,ټ��D���.>�y3ةu��+�Se��1$��&��.Z��[c9�;SD��AR�����K^�� m��^�}%V�.�&C�xy�/�W҄������~��;�G��.8�6�z2*���������NQ���L��X�k$9KG�=D`�b/<��g�-������Nz��*�1g���f�%]!K"0��ndZ�V��j����U��/�wd���t���]�1�ȴFpf,^b�.=���5���E,�܈�Z�H��"�VJ:�`���DŽD�!�zK��H5A��O�_&ײH�8����j�N���A��)�U� �I:�ẗlB[��]ЎZ�jk@]�W�"��}�4x�LG;4��2����eHMͷ�n\��"���^��jG4@��|���Ąz��/�b�31�p ����:����L���J5lIf����E"�����$���ϢW��' ϓ>���a�5���"���eWO}����QEM�����!����v��[,��<,�JG��m{ ���{�/Y1>����H��'�+�sR�~��gKٿE8j������U�
Static task
static1
Behavioral task
behavioral1
Sample
738235e5ec22a0b0d4618a2fd4adc80e047f55c16f60e4d85672ce39fc83e6c2.exe
Resource
win7-20240705-en
General
-
Target
738235e5ec22a0b0d4618a2fd4adc80e047f55c16f60e4d85672ce39fc83e6c2
-
Size
9.9MB
-
MD5
ececb1dccc7327c776fd3765f61ae313
-
SHA1
543b1602a9436860ea867e8f4fda785f6c8a03ff
-
SHA256
738235e5ec22a0b0d4618a2fd4adc80e047f55c16f60e4d85672ce39fc83e6c2
-
SHA512
da6f36fa4f5fcac3fec96758fe89262bface61400e8e02fc26ea0266a94fcfe39f751f0738440d2c18e8d6d16a606836a704ea94cba2f24b097fb580ecfdaec0
-
SSDEEP
196608:bIe0oZfvjUm35YbnZkFSFYfDeoJX0zfSV8S7krl7YwSKWFglBdR9f/hAYO1db4:bIvUfvjP9K4hoaXKeglBb925R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 738235e5ec22a0b0d4618a2fd4adc80e047f55c16f60e4d85672ce39fc83e6c2
Files
-
738235e5ec22a0b0d4618a2fd4adc80e047f55c16f60e4d85672ce39fc83e6c2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 728KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.1MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 52KB - Virtual size: 612KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 192KB - Virtual size: 6.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE