�q[a!���D�����0*60^TBG�����S~^.�w�\�F�ԇ�'�7�Ȍ�x�q���Ij6���d���Oft�W���n��|�����<U����I �V�r����I�T��1�i�a��s��-���5sq,�{�>�!��l��N4�ު���vUb�N����с���u���T�e&��R�[Xt��ȭ�CVT!A�ڜ�s��B���9P����r&��n��!@P��$ p�Ӑ���c�pADxf��ƒ��?i;�2o 9���5������X(y.��k�M�gԛ�+��8gڃk�\Jxmpe���P�Z̎��'�gf��r��T(Y}��s4e�E�c/�:�1�V��p�E��|A��$��̭*ݧ��7��qt���0[H)�U���o�$��Ү��_����s�ps[fo�wU ��@}ɀ� �&�w]���3a��G9�o*2zA�])BƳ8e���pX5��]5�. `p�kP�:��sU��L����'��%?�*,J�O+��07�*V�\�,HEj�Q���7'g���� �s��� �g;I攲%��"�%�i" ���m8��:�Ļz�x�k4^�Z`�h���D�x���l��ɮ�����_*�G�@��:ri�o���@��|�H�^q@L����R�q°�ct~�Sj(�I�A����ho��ke��Dml}���n ���T�<��%���2��#��.}� ��j�ۧddi�� �S��c ��9�K�)6������a��_8-a����������\���J�[�m2�9k��{��a���~�?�jBv��Eا9rv������fb �9��ל�ױ0����4��&���`�\������1O��+�^�^a�����K���B�����{��������;r(��#>@�8�_ǾG|W� K�ق�����6����XhZ�}k���7�S�0�bR�Ԍy$���!~��Fj$\P��tO|Lj_m���Rb �$�c+�),�b�ro���l�f�{���8 L(ٜq��y�\@�� �ΣWf-��> ��)c\��y�:sq�i��=~�h����5���"W��2*�P������DA$�d$�2&�@��j������jIF� �U|�p�5$=�~�]����;0�Ћ���B�>��}T�!!ZAg�h�7���C�~7��T�@���ʄ��5���#�TY��q��\�PB�()���B���+�Ô�J~�Q�,���&�L�Z*�3���L�7o\�uU�̩P&4A�������}�i"�/ ��Xm%F�<�<Ys7,�U2�o�Z��a��MG��6�:�G^��{�����tKA߉��ڏ�'�M���; %#8t���u�__��F�$[9w.w�_i����>"��Ϩ5�Pg/��ff��'�c�Pn�����$���c�a�1D=)�p?x���Q8N�f�A�4 "3�u]�l�t=q�F������ks!�"��rK���9���R���g�;�(�A�&J��Z�����[f��SVį!%���:&{s:��9�$-����� ,n+v[zj<��h� c�AT���N+э47����������(�ijM�_�"v��J�>�I�hE�/��|�n�C"q���;�� �x-q����yPS�G}D��d���o�\��)��� �����Y��m:���k�F��چ��� h����Z2�P��*mJ(?�Ey�G1�H�=(hh� ���<��E{�>�r��V����C̩�� n��m��ݞ��W����L9��8S���� ��aѶ��,TL�9{��[e�K��\�e�6XԨ�ޘd����ޞLʨO���n�%��ώA������Qxt��-�Rh�_[7���j�Ns�<�K��Z*�[�sz �P���e~7�}�1�Y�D�]b����-,R����Q�w50�c���)��!Y�G�h�6��مN��|��@�G�c����N��e��!�xn�7f:r-@/�c�P���ׇ$�A��a��TK�<O�y�a�eQş��<�5��k"'f��� ������6��/���} "�Svt +].���#v�HKE#���e�;��%Iv��r�2�E��|ۚ��YX��x��j0� &ʌ�s�1ܖq���i�I�b��CFb��7-��R}��j�Ϛm����&L�b�r�`�4�2C�x�����'Ĺc���W�|����Ro7:�����S�3m�N*�@㔛b_�iN���>~��Jm�v Fb�j���2�8H��7q�=�Ls�%rsʮ>�����f?������徰H�9e��G�3fF���K=ࢀ�HpE��7�U�����I�ؙ������_v�U����9��?ҟ���ꨘ��g�`���3��wc���[k0)���e��q(S�<�&�<>b|0�-`m��!��x�M�l��/ׅDҟ���'?�ӐdNl�<�}m՛A5L���{����,TF����δy��U��`;ߤ)-���Kl) z�^U� �NA���� xM�jx��^%*f��Y#�V����HL�,Ȭ���w����%%�i����yQt��p��:B-_�IF�S�'�^!6oX�:g)����M#!.�M��sa(�x���_Af�\7�2�득�]'�A�#�~��o`?��pٕ���^$�y���L�����Ef����$^�f�c7�2��eȋV#���#�I�6e�`��xUfk#�0��T�=P�ù+��S�����+Dpa; kg���4��%���?�����L3:������U^H�'}�)���M���p}�O��-T�3ت���I-�7�����HcP������W@��D�z�f���R������ ;�zz�e}ŭS������e�W���-Z�j�W��S����L�Uy�E���=};�^��sy��ɔ��ٙK�[�{ ���1�r1����"����\K� UF�w�����cMsWN�u/0��0�?�Wzh���e"�bu<�����S��3p��[_2��U�*rF�1+$�� ��='�Zrm��6��~&��웲h�X��
Static task
static1
Behavioral task
behavioral1
Sample
78710d86ac492820d08cfe1ae2dcac874250fcf1c715f3aa6e00fdc3dba66ebb.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
78710d86ac492820d08cfe1ae2dcac874250fcf1c715f3aa6e00fdc3dba66ebb.exe
Resource
win10v2004-20241007-en
General
-
Target
78710d86ac492820d08cfe1ae2dcac874250fcf1c715f3aa6e00fdc3dba66ebb
-
Size
4.4MB
-
MD5
aeeb98440b7b384fceba2371de528499
-
SHA1
bf0287ce98bdc0a63513c64c2c82b6c963e4a3af
-
SHA256
78710d86ac492820d08cfe1ae2dcac874250fcf1c715f3aa6e00fdc3dba66ebb
-
SHA512
0d63f2690d81d9a80d6219149a66343905dba7b4844e168c6b850120caa2627760ee764ffacb20bdd783b73c51e10dde4a7f86a69c7bf9b9bc8fb1922a3f04a9
-
SSDEEP
98304:zdRd4BEIKAg66rmIvy/pr1l2NQWNRHLWyyNmip8D0QqaQA0u7G3lRAsO1zoFyC:hc+pmI2+mW3HpyNbp8D0QJGV9uz8l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78710d86ac492820d08cfe1ae2dcac874250fcf1c715f3aa6e00fdc3dba66ebb
Files
-
78710d86ac492820d08cfe1ae2dcac874250fcf1c715f3aa6e00fdc3dba66ebb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 1.4MB - Virtual size: 9.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 988KB - Virtual size: 988KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE