_>T� �;g�{YM��1ryn��Vz����43���_�lgv㦺)���JV��yu0�>![Z�>3��,�^�f���,�w���[���ݓ�<\B�k�*�����d֕�j�)�F�]L�+,<���@y�g�l��W֨�>�4�"�K� "z���w&���4�=��(�vl@;/��wg�#Y�Lە��e��-�4]Z+�v\X���H��&�����̣�b�R)���4�z�s8Eh�^��L^�*�2�f�\~5#���`��Z�u��z���6_�]��¡RS`)H�l�n�����y��#�vJ����->�E��D�쾢/e���T��k�:m�Lg�GI��6�uMO��9-����[%s�c9T��r[>���$i<pdS�/�_u�1i~��Z�����5�P���eW�)����i ~`//,N�0���� �m�9�$�NA���������&����@��+�[K��gM ��c$G*O�F�5����4�+A@��Gv毈���n'�1$�b���E�K�c;B�]%�yu�!��g�p\c#�R�9�e6���J�s����6�X��M�h�[�s''S��v| ��ɊD�ʸ�� �A���HZ�ƨ�Pvl}���k���/������i\C�U����/���ye$Ҩq����;�������qN�B ir��*jw7�nكP�\�K?e��rxژ�ƀ�K� �і�L���CLC8d7�|j�d!�> {���AW�{��Η������M��n�?3[�PXH�h�W)�d�����dG�� ���rI�^}�G�}!L��Au��FC���c܂���Q5|Ċ4��k�9?��?6�Wc��?J��/���4N�A��$�������`m���&���0+�ܵ� }MU�南��,j��-���e4e�nJ��fpDŽ�#�4�il1Ӕ.�;C"�GI�%����+Gī�暙� DE!�����]�Ny�/_ePp;�<Q2�$l�����]@�����dEw>D�EA4�a��J�3<��[��\)(��a��jovOT�'-P�����Q��Z�/r�S�]�h��yE���Na�ؒQ�,{�����^.m/\�x*��] � T2�͢P~�� �@��QHd�Z9���i����l'Fq[ �2�'~��� g��\?9�-*�9���>�A�j;��\�"�7=W4�FBҠۮФ�ހ�SxDž�s��s�S5E�&�u���d��4� �HòD}���Tۜ�7ZU,�3��9SO�in�]�*��@Қ^���(E�������������ᒃ�m��p[;@�����4Q�iS���s��M�?n������{�d�yL2�i3�?�d`#@T9�f����;ǹ-����"2Ò�~��mZ����a%ȳ �'�V�S�<�/1�:V�m` KTq̐���|\��-w����֮dxd3��� � t�Ek�LB�1����$*H����'e}����D��U��������/��ܠEYZ��9;�"�V�N��Rp��?�мo/� �P�HS"��r�O�Biv>ԗ�t&��ɧIq�9F4r�|��� ��g�z�l?�TM��}�,z���5K�X���q8���0Z �_u�Ȋ��n�������WE&��m�R���5Aa��?���eB�<�19�W�mK���n$�LΆ��:��0���OL�Z�b=-z�830{Y�0J+�!e�ՅX|j�[o˜����v�l�5ݛ�#�m����R�0S���X����^�oM�hQ u��@�ן*f��ƠfD�:D�<͎��R�G�[4g""o�u|��er�iN���8� R�f-�̗b�Q|�d�W��-l�b ݠ}��%�<%&�kM��Pz����^;�����@Ư��Cن��!���˜��Q���$T����y������xCޑtY�i����H� �(��y�����KW�Sgk��w�D�J;����ح#E��0�����@>���U��V?�*� l�F���v �AE^�AUcÑGqS_��q]�!�@���M��E��ⶭ��otu�.V�� ��uL��N/�F?��X�e��9V�A�a�^�a�4�\���@>�����H�W��F�'e�'a|^���w" �n��=v����Z���l�UEY`�Rb�=Dr|�<V�`{������l�z��S��e�.�8tR#��;1�P,�1�`�^ �Ѭ�H����b�[H��-܊N��M���C��}�N���} �}aߏ��4zK�������� _���'��̚��Gsl�~י;4��e��s��13�M�*�NaI�Â�Ǎ�D{����=r&�T���Wܾ��"�� w�$��o�&�{=�/�aҙK���kgc�Ij�N�T�EW�� �{�����eF�d��#�8���U^���0��cA��m�t�)n`�R�Ǵ��U���v��j@��!G�x�?�lk&�) ���XEB$Aoaw]�;���=3���l�7�e5�{�H���;'����b�\c[}�Do��]��iq�q��t,Xp���O���e��P�I��t[@a���� ��Z�-@�� {A0��ea�K�����Ԙ%����ϓ�xW�f��p���*��V�F�z���P�Y��)����4nQ�v(�ua0i�ӊ���������n��mN8��0�_�I�TCB2�hv���d[�O�KN��D�O�e�9u�PIN��n�_�8�o*�"�&��v{�p����M���,{2��S�����ܮ8U|��X��63cV*Bb�?�GR�F��+SV��-p�v�4c@�J��T.��{�.����ȗ4��dWo&<�#�u9v�jP? ��a��kh��F��Mz}�����v?�_7k��BC+�Y%L��Y��"��7��Hmz��X�h���^+�Vq�W����$�\�Ϗ�2"Ūm�G ��Vg�m��?���& C@Py�� �������x��G���0�s�F����)��Ы����%K��U��O�u"�Q��Yg�0QL-�F���G~r;�����̣fZ�G?��?�>�N��:Y+%r����f6�X�'�I��"%>I�-g0��ɜ�Z�mu�s �E����,�բ�{�������P� <!�7]:ރ:,w���Q�M�jv&?)y!�b��|")������6�#3�˽�[,���D��ޜe���k�
Static task
static1
Behavioral task
behavioral1
Sample
c2f744136de4039a436654cda07b67d0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c2f744136de4039a436654cda07b67d0N.exe
Resource
win10v2004-20240802-en
General
-
Target
c2f744136de4039a436654cda07b67d0N.exe
-
Size
5.7MB
-
MD5
c2f744136de4039a436654cda07b67d0
-
SHA1
4ae1023226af6ed5562b01d198b3f75f4e9cff62
-
SHA256
1547651715e3b4fe2bf7ebd8b9ce2bd9a4992f95966c85fee54c8f849084dd66
-
SHA512
558ba13094e79f4d9b9475cc47498a9bc6adf442d6da84490e2b568cafcc7a35da6e73291367e56899797f22b3b804ecfe5028e073ba32e7714e164ec3e6e37a
-
SSDEEP
98304:e+fpRvFzVO7zxYpl5T9DGs7T5zEDT5NCarS1joL8ZXKhV5RuEhxXFTibCZjvf0Mi:ecC7zxalnDB7NzEBNCarTeXcV5R3xYCc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2f744136de4039a436654cda07b67d0N.exe
Files
-
c2f744136de4039a436654cda07b67d0N.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 45KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.4MB - Virtual size: 11.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE