�F.�x��"$^����}/!�hy�c߽X��0�(A�o�4~ls���|��J���P*-!&�]V��xV� 3�>�k��2��/l+<�G�5�翢���<�JX)����P�I˞a�Ɯ��x)��K����\@ _+�z�b���:H��qvѮ�ۢ�N�C�V�����ʴvy�~Kޠ@J�@]ҥ6��\���%��&Gp�R{�옢��8�J&_�B8ǰ<p�!D�2 ΉB"�d��!u����Iڈ?��}�/�l �_�e8�M$ \���|���N�y2������6�'w�L�|Q����,��Vc�!⫈]{�TH���mF�v�|p��e�܃�G�ڤ���<t������i��3baN�j��ȷR�y0+e3��z��{�kJ�ٮA�A�2 �^�ڋ��� m|{N���z���V|@����̤ٵO@���P�w���cO�b�gA�5�DZ��ʪ�d�X脀V37=�V�s�b��oJ����c�2�2�eF�їn�����̘c�`-��i�TXl��������7�-�[�JR�ҕ�]�p/9�����E�����N +sR�S�x�E�`t���� ������ ��D]��s����ۿWJ�b�L����sy�z��C����O�j:˝���^�3��f�5��ޚbj�.�i`�U�{���pZl�BAXiA�ݷ|^b��[���*�q�c9��^9�k���eyp�:3A�#@;��L�=��MٌC:e7������<��bI��Çj��}�yje ʚ���X�:�D���=�32��B� ����'�� �Ze����hY�>w���K���-�������P ���v�/a"��_FF l~�������+U��`�V�i��Ey�iٲ.�Lq_�Cy�ү�9쒘�1p~�eq���3v��]�[��P��!��*��|�����h �4�b�e�ILqX��A�<����W�gK#Ֆ���G2�{]�bUKy �7�Nx�5��=������Y�<'��<S5���=���!�L��=$u/>�U:=j�L<ogM ��w�_����w�l�ݔ�˖އ��o4V���� >���S�s�z.�I��%�F/��(kb�|���r��6O�%�7_�~u�92�y������=�'���K���;r�:�$u�.|��*GV\96�t�����u��p7�aS�0aq2( ^ɷ~�o�0#%*�Y����p�� ���>���l���=�w�3V�uO�W���� $�5O��tL����|���,�.��:�hד��0�?<�$�����+�:mp۲:?�M?�WU�5b-Qw؊r��?Ȭ|�j�ǝ�r'>@��B��ۻ���e!b�`/�����A"�$��aG�9&\)<gK�݃�*<Xd|`O���%���cF���M���#;��>�d��f�hy{���Z��K~)�Ag �إ�H"aH��t��nU�M�����O$'w �9�0���am�7��nJ"�N��V|~�p�nc�����1 @����������Z+��P<ߖ��ErɄ9n4K�ڼ�b��i�O�|b�I��P��SK�b�Ҵ�m![m�j��9Byd} %E�\��dۘK�xoF�/�v� �gE%�,�̍�k�Mׅ?�.��nG�ȯ�FF�~A~<Q�j� 7}��>X+U���u��W��b�#>�X�8����v��iD(��!����l,�nqJS�rY.0n���jF�4Rk�J�F���IM�%^y��8�Pؙ�=v��^N��y�?�0���*��<s���+p��u�R�������_ɽō�Y��)�~������V�<�O�-"���kࣾ�g�VȚ���+�u�6�;��f�/�#s�Z%�,�7�������A�� �L=�ye�ϝB{w��3-(&�J�>#F��e��� �p�g�Mf�� �M�J2h����#he;?8���5�g���*�D!��G�CQ5BWJ��c�F�53�v��Z��جog>��A)��R�9����� U�`s7/ԅ���j�(W��(3*6M���'�lgYP�C� kP��� �h��T�ۈ kBX�(����z>nE���K�Q��B<֫����Q������ى=�G#��Dgk{Q��bKY��ɽ/d��A���\�A%.������o�\{��#���ly?�x0.�Y�o)�ͥ� ٰ/���0,��c+�a����:�wQ���H�M� ��������z����� ������ Y�l쨝˨��$fm~���$� ��K5?�j%��4 �&g�"<�tM}`����SJ��/��#�1��QJ���탱/��@��r��G�W����Z�~(��Փh�������#��5��If;,��s^؊w�@�X��+8�n�F�X�-�<�oS��j�Cԣ�����t�C����#��Ey��p:s!��s,щ�����.;-���/GN��E�+�bC2dcS�݇��䂿�zJ�*�m����XF����v�-��JE!g�vy��%����Jx�5����U�B�e�~�7�W�=)4¦�/�*z��ʥ ��5��:��6r��Q@�%eh�� "�V�� ���z��� �:�ߣ��]��1�7�����6֭YY4�i.8܍<�����E�2�k���R���4���Sv��Ł��sb��H��6�����uFf#�F#N�a^u��Q|;��-�����e�/��Qv���� ��4�*�vb{�e(�� ��i���h����C�3���.$�%��Y,����a!���^̃^>&ے�����a�� ��_x�M��q�l���j�\p �@�Q;�S���a�9������+��P�����d4+k�A��ʴ^D��f�/p16�ӳNF�+*g�`&;�����ݕ�p,Y�n�=`��鬩���:/�Y���<�(��Zj7��} ��Z8'ռ�F����m�_�=j�/l�2V���*5O�0&�g�΅aJS��?�:OfX?b&�ذ�L$�ZqP���R`Q�~S������WJF��bC��j6�]2N}o�*��aneHa��Zƍ�č�5�� J�~Ր�*V�1�z���)4�S���
Static task
static1
Behavioral task
behavioral1
Sample
7c5e32b0ce9b9a938183cf34bcb0822dd1e587928fa33b45fd69def25a4d4889N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
7c5e32b0ce9b9a938183cf34bcb0822dd1e587928fa33b45fd69def25a4d4889N.exe
Resource
win10v2004-20240802-en
General
-
Target
7c5e32b0ce9b9a938183cf34bcb0822dd1e587928fa33b45fd69def25a4d4889N
-
Size
4.9MB
-
MD5
46d7c6e0939378ddd540ee6623e9c0e0
-
SHA1
441ea8f931abc42af7b2deb9cf6d4b219e7c350e
-
SHA256
7c5e32b0ce9b9a938183cf34bcb0822dd1e587928fa33b45fd69def25a4d4889
-
SHA512
5fc5829f0cdf5cb5bc2532199cb67cfdde789890c36d95926eb5861a36fb6c256b9770b15f11fc16a3fc49c6dfff1a188cdeed75fdebdb16fd8658d7edc05afd
-
SSDEEP
98304:rguIsaOsBECMnbBYpi7j8eoYr1ujXmNAzN+L53rrlJ7wBv/X:rgACEVlYgkdYvNAzu5bMv/X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c5e32b0ce9b9a938183cf34bcb0822dd1e587928fa33b45fd69def25a4d4889N
Files
-
7c5e32b0ce9b9a938183cf34bcb0822dd1e587928fa33b45fd69def25a4d4889N.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.text Size: - Virtual size: 643KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.VCrypt0 Size: - Virtual size: 8.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.VCrypt1 Size: 6.8MB - Virtual size: 6.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ