��@���X�p|0�G�aV���,��dq-|�GE���#&�iDz�#$�N��R-Jr>ʁ|�Nzd��]9٥b���S.�k�YSL���� O���z4SV)'�0j������hCJ��eO5l2���YD�2��w�U^��̵�4e�|�2�[�� /��p�n���J^ ���aK3wЌ��i�������fWT��_,b���&����ZC dQ�҉�| ��j�����J|��������q8|���?��y���ߨ��*�P��#N?��}����Fo��H����2:ey6�g+����ʎi��r`V�ƛ�i�I��{\6}G�`��_N���<L�խ{z�Kz�7?J�b�>��o���>+6l�]�"���`�ўR�v����<5X!�����,B�&�^XX�gL��,b��\t��4o�`�*�(���E �fQ�����+�-��#.��1�v��*_8a �o��h���Lyv���V��Ţ�u~Η����p����@����}ۊ$O<����()r%���S���O��F7|��r3�mK���6��)Y{����G�/P����!f���E�����m˂��OP̃rC�(<�����2P7sf17���n����9M<��g#yc��JY�@�ȋg��^`��_�Go�.=>��<�$�c�`�:����x��CO����E���Q�[�{�5l���4�Ӷ�G�� Xޚ1+K�E�~2�亝]�u��v��dkP�|�����ؘl�����d��,��)�Kc�C��.���U�X�gӕ2]�״�u�.�+@�CQ�xpQ7�� ��-��I�^���_�[�"�%����ɡP�c*��jx�%"���O�����ߕ�-�ɓ��a5Ur3~�R,+� `���� �Pu��9���an�o�T�<�����/�\� ��7y#I�G�`(/]t���gk�rgJF��Jl�(��B5sm n�#Jm_�<M�,��X�:�W���{�d���\'�s�z �Q,���+Z�,z�m�3��#gl\�(#y�c�l��c�|3�G�y���(�\�]���?7��M�-�d��#�I`���*�����H����G�w�w4�5S���v�����v=P�(��Nx;V��O�f�ޥn� Ӥ"!f��c�>UjM��V�)\�x����<�t=��K�&�^���W��Iݎ>�5���%���*�k_�n&�� '�����p%�y�'`WX"��hF�L�,�J{�|��/���ZH,�[�;��˙4v���K����%ꋪK�g����f���|[�z���L�� /FF%������iU�3���m]�ѾK���Х'Nſ�$��M����<n��f�ђ�t�Z^�BU �9���Զ\ج�w�S�F�����`O�(��hn@��:m%�sr$��еxƝR/�gXPW�-�k.I>�=�IKӯ���F��(;�����ܔ�Q�2�fO����G�;�ʟ�[���SZz�5�ߘ@ݱV�2W ;��⫷S���8�������� �o���q+�)XOl��f ��F�P %�yx����$JU��l!���I�4]|7]T7�)����F��w��!l�1KZL��2����yxq�bt��&'X �u4m���Ö�N𤵚�Y ��M-%[x��e�7@�*�.,BʿY��r*�}�?�#.SK��P.�c~��M�w;�M����MA1&y�۶�M�i&��Z_����ː1�Yj��$�k�9�����Q��F#C8]��H� �&�r����wnsM���e$��7i���W_B������M~��*2o�����O:@,��h��Y�A�"�Lt��Մ�����M-�/?�������|7u �й�m��yJe#��P"��H;�o{���+���¸�Mz@� �K�0�u�X�H�N�)�+��ކ4� ��!��.��A3�Su�W-�L��N��Mo��i4ؘ�[�96�e/ �B+��Sw��e�aU6%��gd?��)ܹ���ҝ,�k)��x����������e�j��w�v�ܻ1�<)$%�[DQ�`��8a��w,�{��=Q��ۚ�eM��8х\*`~�d��LݙD�\I��:멭S�d���+��� ��b^��fK��ؾF�[�#iI�� ����� �� �Kq�'�G����ކ0�q-I�2����s�C��}��UX���C�����1��`� 7`����� zxq���0���lE�l8$��T)�������'�6��A��7uhI7�i�1�v�}�1h�"$#rH�����V��j++ct�#)Ƭ8\u��[G��J1W(넬֩Q���(/`{Uϖ����h/m����6��h��;�"��U/5�S����M���K�5BE"L�_���e�����.�.�;Њ��O���j����e�0E�.:bףjFF)O�LRoz�-��m���֠=zk���c�4�r�����}�M��bv������2%�7j�v��m��Ε�-CK@+��}���< ���qc#�t0-;��Bj�y^4#��ݷ[�Тɇa���.���LZp����Ķ+S]�6��d�qg�G/X�����q��hW����N4���ɕ�Nl#th�����/0���Rm!���-��ޅ�q�:j÷�/�nl�;�������r���oa��r�J#(�B@]� ��aן��Kr ��O�R?��Y��nЉ��W�iX�v���Su�yD�|i� M������4�4�KNU+]n� �|z,q�z��g^��[�|��5cAD�%o'IS�1�:B��_���a|A����e)U�%i�tDج�ނ7e�d>�r���Y_QEa箞;Y�j�F�M|���Z�~a �f�UQ��*PO+W_Zi��rc��Pw�W���s/� �652�ږ�;���G�kf�4��G��XF�Jb�I�Dg��2���-��v[���R����l:�pB� ��O������m�3����?d�$���.Vy'y�BrN|UOJ�ez�݃� bއ�C5�7{��-�q�lж�-n��1�C��(*�&2kG�`�������2�@���g�E
Static task
static1
Behavioral task
behavioral1
Sample
7cf6b3dffb09ea7592a8c9546292bdd2ee3f252bcf899f735d1cc41f243186ff.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7cf6b3dffb09ea7592a8c9546292bdd2ee3f252bcf899f735d1cc41f243186ff.exe
Resource
win10v2004-20240802-en
General
-
Target
7cf6b3dffb09ea7592a8c9546292bdd2ee3f252bcf899f735d1cc41f243186ff.exe
-
Size
3.3MB
-
MD5
957b4a57f7ef6f07731210b182e0661f
-
SHA1
ff04968f5ce660182fbb724139e1bd2955591ef0
-
SHA256
7cf6b3dffb09ea7592a8c9546292bdd2ee3f252bcf899f735d1cc41f243186ff
-
SHA512
c5ce80953182ed9da60d095aac85d403f580e47bf1580b2fd4b7e7e6fa48fc561d1ab6ef3fd1f2d5666dd04e658ed8037fd72619616ff4a3ff95c6a9613a5fc0
-
SSDEEP
49152:kJi0G9qB4E4FzpjRS5VS1DhUBhlEQSToaRjqUtHOH21KfxMHgiykYvCIknqX:ki3hVJZRS5ViNeRuHRNOW4GykYKIb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7cf6b3dffb09ea7592a8c9546292bdd2ee3f252bcf899f735d1cc41f243186ff.exe
Files
-
7cf6b3dffb09ea7592a8c9546292bdd2ee3f252bcf899f735d1cc41f243186ff.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
Sections
Size: 59KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 297KB - Virtual size: 12.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE