3_y���j���J���u[��Q��1nQ�&�݁�!L��z�\�Q)�ݐ��2}�T�����ɀ�{eY�����n���"�۳��k���jM<��+ԕ8���#��g�ؿ��m��F�~O>�ϰ=U�W��s�R���^�G���6��>�{E���̀��E���,?Hkp���f����T�א��s����������r)�O��~Y6k^|C����L�LZt����1����7���hG7b��Kv���~|!N5��Q��>��G��6|��������!����j=}Y�7�&�-�.��\C��6j�x=$n�sS��7Y!���y�U�zε�~>�R�8*�I싚7근���w�,$n�wS;�u'qS�>D/;gBG�CՊ�0� �����͓�VL+tsY�~3𭔷��9CB�t�蒒r�.7�VW��<�wu��8A!�f�X�<��^�Y�e�$n(���a#s�|�^���۶�u���9+�^]���� �[/T����~���WuY�M��T�Z'���$p��/��Y�lv��h��r +���{�������Հ����v�,vT ���"G���W�E������x�����lBFվ�^9N� c&�Y���e{]���dž&/���-;���~LI'Cs��A/�le�3�sbA� ��.CMyk� l�� �r�f��)�����/M p+эɥ7Q�9#ȍ-�w�'��?@M�������I���G�{��������j78�m{%a�g�����Wӭ-�p��o��N����|������@'���GZ���+b��Hp ]���l�i1N�g|����L�?�n�T���������sd����ӔM�E�K�'�/�B�Mn���{�\��Zg<;�_����oM;��L�"��]�\ ٝ���v��z�q�2���C��`�^����c��#iJ>�!����V((�H��՝ f{0:;�l�u��҉�ǒA��t�$Sh���$쾩��k!���V�w-萲��Wy*Z^�θ�����(jA��w�����`�# �Ux�m;?- =ص�dK@g�9�z��~��X^���Ԅ��Ҥ/�1"���8�Nin�2 J�EZ�~�Ȭ5w�`\E�jP�����! ��c��)�Q��ccX�TL(�֞����_1+�4+�F��W�j��k5��̖O0�a�#���y��ԬY��`G�Y�R1�ԡ��!c�m_B���~[������ZPtH���_�.�C��6up�c�倡��oh�2̚p9X��-d7�v��(�~,F����}S�(.�j��/��e94�����k�/|8��q,��_fͶ^�V�-a�~*�U=|Wd������n�����������.�U�J��֏*�������Y�WC��f}M��V��C���q�1:I�d$�fT�v$:�8���Ez��NU�K^�[ ��@�[��E/��/M��8Z2@±���{S��Z��9��S�ȵ R�X� ^X�}��+R����5��h�tR�b%�n��ڏ �״�o���r��_q���h�u�~�>��L:��#�$\�l���;[/�ŗ�UF�X��b����s�(��O�&,� �%m���s����� �;gݜ��>�枬&���\C��TPq���;y���'ў<o4I�]h����/��io6Q����KҀ��֊�\nQK�b� �ɍ��nÇ&���Ⱥ#���y�QW��@έ1-H:b�a#E"@��ᅢ����/>���'4g�ʎGh���`,b��Ţ�5���P=��!H�G�ʉ�&���*h!���v���� ���+����ԿWC������1~^����[BӁ2 �L��g����o���5�9�m��I��Ӏh�}��2�W5�yQ�X�WQ�����ko�c����*f�c��Sy����d�.�oņ7������ddo�¤�"j�T��ȴM�2�f�n}�7�����|!ek|�A��ERyp��?�i.+���|�6����v��Ju�C�*�I����!�P���9��{|�!��d*1(U��Mg��(�i��TBi��l�0>4k<���G�'�>]�L�:Nq��^�,j����R&��?��#�1��d�Is��=<kǒ��M_P��v�Ä�m�`eG�t������d�W�LZT�֔qF���I��Z�b��2�:��ᕷImR��VV�6������ζ��rR���1�?�3��v���5ՠ���d��J"��Θ�W�7S�0�?�6�"�^�m���fd��ͽPJ�zo�kJ�]5��L��;����K�������u��O�UO�N�J0IH���1��s�wV�6�o�{m�xo��☚CK���ۓ�k����#3�Z�P���ju�)| �=2RX��sE�����ugM���m�ȟ��.Q�|=n����{��+���>}k&X�:�떈@��0�0��|�1���qUY� Щ�L�}����0����4Ij��P�3v�}����F�N��]�i��A*3��8������w��(��}�1w)�9I�:�U�9�)Ϥf�`Ё�������~4��K��+�FӨ�q. �Y(4y}݀��[����E���he���!&��o�H��%��1�Xa�y��;�Q�6!ݝ9����f���5���ySN�E�x�p7��g�y�I^����c;���/[���ۮ֙�2���r��E�u:�t02��'B�c%�������y��s��'�v�o'�vӠ v~�q�ّ��2Y�S��A�a�Ǽ>�M�|e &���u�%�q9�#���c����u(���!M�W@ꇀ.�.�3�~��y ����y���X���8-�����n���Q��cG�i�%�w[�� �,P�B���N;���nL��UQ�Т%�<�5���h5�_���V�g/z��=^R�q���-"3t,g���/����~��k0E�߯n�ӛT�3!.����mc��^s9�@�5:�][$-q��hq2�#�_,k�O�y�$�6V�J5U�/�����f������8�r�.�/%4�_�>g���l��5lr(ОL�O#�
Static task
static1
Behavioral task
behavioral1
Sample
166fa4d223ad2c31c71959d763d840b0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
166fa4d223ad2c31c71959d763d840b0N.exe
Resource
win10v2004-20240802-en
General
-
Target
166fa4d223ad2c31c71959d763d840b0N
-
Size
339KB
-
MD5
166fa4d223ad2c31c71959d763d840b0
-
SHA1
338eb35f5808005a9652d7a9d96aec2135f845c4
-
SHA256
525136b519223943ba85f5cee39475189ac702144ecfedfb479a656e98f6cd94
-
SHA512
7bd4e7451ae608f77d555bb2ccc41e643efe7d6dbebdd4cd82ab4484c2d69cab067b18725de70753e30f07f3aed26e83306915206a65c12b429edac6905e3fe7
-
SSDEEP
6144:yNKDHpwspcb4mn9Nr5OCgmzuBKBxOYMa2uIM0H0quEcRvT:yNmUR9ZgmzuBK7OYMKBF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 166fa4d223ad2c31c71959d763d840b0N
Files
-
166fa4d223ad2c31c71959d763d840b0N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mac0 Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 23KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mac1 Size: - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mac2 Size: 141KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.gda Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE