�t/+��� �37��+��*$ZD��3�08�i���[���8��Q������F �����N�Ͽ#�l��[� QSr�UX~trh��E4����9��`����r�`�o�5ȥ ��S��\�w�6Ǩq$:Y=~|v\�ܷ�4�X�[�)����ġG_�� ��,7��̜0�qj��X�*���"ڛ��e���M��7:��%�h_v�������b����"B�hN`j�ْ��Rި��{��q���X0���M�_�禅 �>��$q�GF8VAh��.UтjҖ)B�V�1�=�����^q�$v?ۤ��g�փ�',����Sv� �����t�~��1�[c��^Z���|BXTh���k�7 ۥ��ٜ\�����F��X��B߄+����'���g��W%f�� �[�+pX�=u؇zqS���8���}:ĚJn[���RA ���s�wp�N�U��7� Cb��ޮ�]�`���,�hM;��ܘ3e��94���U�pg!��.������Xؤa�����2��o�d<>�JrPl,�k���Ipl�,7�H vZz�1�ni��U���r���{st?`�I)��0M���h��bo�Ge�yEy]���G2e���n? 4`�q��g�q�/���w<��X���B��3H^pǽ��o�˘x.�R����#Ln�Y�"p�OQ1�{*�9������ӵ"��K�Y/�`2�2x\��p�a�-M�j�C�p3��Ds���]d�f�/�$'B����a�,�����a�I�.�^H}�TiiV�sG�[M�9���|����6��C�;w�?� z��w�DX��7�����hԻq&�f��OU�2z�S��$p��jȒ?��2�I�����y �w�`G���|�5������ce!1ծ�:��;q0�BH@�rg �{i�}�_^zi�+�;������ޘ�Yg��n��O�Ϫ%wr'�Z�!�� b�}�ݒ�_�`G���N��a��L�Qlؐ�"�9�.�<`Ҏ�VZ8��6V�G1뾽f�G,/����gI���M���P���wt��?'���mE�ށ ��b���'$�P��py�� M<�x��~;��{��p�ӯ���ce5 ����!��0�[9�V>s_�*Ń�}�����y�j��q��>���i_���J�ncs���w��Ԁ3�u��i����k\60{/�wm��Wԡ��û#a�PSw8��;��c�+N~��]�g��#���FI~X{p�٧aǃ�}�j�vcy��H�2R(��i�H���>�� �K!V[��V�;�� ��{�m� ����y[劅����n�4jB8�V�����R�=��������n�l��h��+�Z�M�K(�,�����tK�t<w1��H5m�x��7����i��������X�����ߙLe�걄o�H̠�s����e�p�٤ ]S����W��0�&G��s��kA ����;=������0$?5�eZ�åPy?C��.h1]}g�HF� ���:��j�/�[���o��&/�� �T ��\��w��W�r0��ziU�}�!� i�]���o[�"��iP����v�����oᅵ����8����L ���)ǝX͂�SE��\��!E�����x0��$�J�?;]C�=X��a!l�����:��&�S�`1�{��5��H�'FG��?^.6�&�S�˛����9�K��C3�����ҤA����f���y�����x����B��E.�&�e �u�mM�PE���o;������<���߯��qF��m��Z�o~�K0v���F��MMʨ���=��h����$�Px�Uݣ�C���O7m�l�����!g���#�&Z&[�q�ˏ�x~�At�Ԝ��qE��}�Lڲd� �꿔���8F�l��R��,�I�/��z��gd�^8f���0 ��oN�5�R�B�F����!)+���� ��}om~�#��"���70&�4���{�q*��P@�u�?j�\��F� Oni^ x���<�ԭ���1�#��,|�B�'��W�(��Ku��v�\v��Ӡ�I��Nӣ�'�x>)V���p�z ��Z.6y�O����rvS�s��xQ�s+,��Z����*�!ed!-�T�#%�ī�M翘 ٭(�PZ~^2�x�?I�����.e�W�_���7�J�'q�p���3���ljO���~E���ŃoWN�7϶�*/.$�1�T\y�+��z�h� E(���S�`AY87�2d��7��N���}�~���T���i3�<����5���Y����=a1RA���I>-��3z����nG���}��=DT�yCV�s�����Bh�'0��G(0�H�����*�-�QuO� �qbS��Z�y�K�����o��#���i��.��v�FQ@�q)@�Pϯ��JHDV���#��'6�)a��]�f$_����j�9K��+(k)];�©ğ �x�F�����L �N����I��yL�������c���0u���f&�E�VZ�� ��*���` ���[�G�2��H.h2�~��}�W2R��do���cѝ?a�������k�a,�a0*[ Y��j���N+4f���.n5�_=�_|��ek�fh5|�l!�8Z��b@8��K�G7��G&����w=��k�8��E-4|o���t�e�kc��B�IK-}WP_6�],j��;X����Z|Ǟ�Ֆ[���d���u����b� �`XK���i���%pp��dړ���T�ɋ� ��5���v��#ܺu�@U|?��Em�0����jޢ�#7������b�e��A+�a�C�{ �������5kb�oL���B����E¶YT�-���E�8#ub�W�XF��&je�^���h��d G8Ҫ3kN��}��6���L<b�����/�|Y8���q!��z��:�v�HlI�/Y�˵�i��k���ۮ�}xR�P���<z|�����[���� yJ��fW��s\�.���^n�Ll����9{2w� y������2y��1� �\��grښV�ҽ�;�����!�ez4�z��:o�z)(Pc5y����-�N��v�FhW2��x��@�urNY5Ap!Y�[PzS_��q�� ��!���i����C�i��=#�pt4 ����M��I���\ڋU?c�T]ekԟw�@���}})Ls#m��E�e:�"���L ☗��^�rH� �Xm��q��
Static task
static1
Behavioral task
behavioral1
Sample
e70f7103718e6bd8be9619bdc86f8e12b0d8f4f5cfc1abcdec4fe4d0cd299f2f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e70f7103718e6bd8be9619bdc86f8e12b0d8f4f5cfc1abcdec4fe4d0cd299f2f.exe
Resource
win10v2004-20240802-en
General
-
Target
e70f7103718e6bd8be9619bdc86f8e12b0d8f4f5cfc1abcdec4fe4d0cd299f2f
-
Size
3.9MB
-
MD5
b8f9ebba6fac782df79790a8f1bbc3f6
-
SHA1
c6c10d3381fbb27354f08f455ef88f5eca9a4390
-
SHA256
e70f7103718e6bd8be9619bdc86f8e12b0d8f4f5cfc1abcdec4fe4d0cd299f2f
-
SHA512
8d29ad8eaa5e1146866e4e110b235bcc46341e31cc7a57e9abddd633e76eb948c9ee8185b9f003fcdf2bc0ae6333296bc42b60c166c8596f9e77aa6d2bdf3bad
-
SSDEEP
49152:ItRf1XePWkk/Y3Fs5bKvcT2SsUsJqHZrmfQKYBlUm+G+szUd+bpimhBVQoUgz:IAPWD/jEEHJmfQFvhkopi0fQoRz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e70f7103718e6bd8be9619bdc86f8e12b0d8f4f5cfc1abcdec4fe4d0cd299f2f
Files
-
e70f7103718e6bd8be9619bdc86f8e12b0d8f4f5cfc1abcdec4fe4d0cd299f2f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 14KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 22KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE