���bliǙ��&�>1��i� ��*F��` �1iv90Zd��Î(P��,\s2�9:Op��Z*���_��`1�����X�n�(Ϭ9G��pQ�/+� ��\�=0���?�$� B?�7��Q��w� �f��gEzP��=�����X�� Ē��������F2��T" ևE(M�7�vOG���)k��X�-���Cfn��,����IP������[|c""�7� @�-��/��QO���&J0o�g(wzW������Àc�-М6�P��d�L?_�N�B"b;��]�8�� �㘒��ZYr� -}+K-����n3^LU�X�����M||������ƽah.L�m:ţ����(H{y��?�;�b�^��Q�-�����#pW$�f���":�r�� �*Ӛ�2 �A��N���R�����+G�R���wT�`2��E��������`��1�I��ey��KBS��_cF�k����X��I��̏�6Xag� ��o��-t0A�r��7��K]����r��i��0q�3�E�Qo�v��T�� ���\���waE�'��7N]�1����JN�R�9�"�� ��r�� �'7���F��+�&���6M]���,�,��uee��%�L�Ulq�����)��9,���%Gf�1�.XU���l-��瞟�FCv ���*5��xZY�v.��s��9ҎLG�eߞ)"��jԓަ��o��K'�s����P�Z 8Q��J���śP���,�5G/<s���&�T�m��n�<�̄϶BR4�a#���diRU�i���dC�H]Ȉ;��\��H��Ff�KF�m����F0�^-�[�a28�� 2�K �6���-ل��總9dr��K�Uc��=�'F���R���<�k��I"#M�*>�けq�w���}�K U�ڑ��f�m.J�Vꃛ%b�7]��r&���6�_1�U��9 ��n����)#�����9`ِ�f�c��P�U��G��3`R]l�w�g������f�lD��٥�3d�T^��R:����������߯�t#[���>�Gt�+��!q��F͆]��]�yFߐ��m�\-�E���N�q��n'���]ܤA�~�<��E�V�p����tet:��k����!F��;[���S&�M�?�w��~�5�~�E4uN������+C�"X������e�T��h�����$<�?�x�%T�B6����kը������g���y5�d6�5� 4���P>c ������K���c���@�-��ՂKǢv�5����<Q����UNIYT�įj�ä�mA�����p��B�d��z_rJ�,�q�_7@ em�Ir'D'|��;�X�XZ6���$I��$�:oȊ;�{��R(���L�'�� �3U��. �7����~������by�������khMh)����a����Sk_�\3Ξ^�Buj�tlN������;�D�����a{���6OT�F�p̱"�[����?/V���o�YUM �̟ʲw����p�[�@��L��y�5��2�G-���H�'����SJar�Tyo_��akG� G�5�4ݲ��ޛn{�]�-g��rIN!#K;o�$H ջ�+0e�w�!J۵������=����3}�;2<��f��c�TE�u��;��15�W��ऴ�I�fǛ��;�A�a�+[�\k�_��+ ���hZ�0yҷ�?��9��~�? y��֠��փ犙W a0� G�'�ܓ����h�x%*���@X�.���L��i�y�EH��CR���b��e0��^<��M6˰����֊e���(�yD�4J圗��Go����w }��ɸW�N��v E�A.Z}k�'�d�S ������ns�,�2�����m���Z{��<u[�Ȁ�y֨ʜ�'6���5�����ׯ�)k���Ns�D �q˩�f��u�;D:�[u"��2!�nK�+��^�\�������ћ$����-��Md'>-��I��� �u ����p3|h����d)���w� ]�|5T� �<?�da�����1W(�?T��ch����36�H����ig��=�*T����-ux#��(�+담�7���g�pG\l��Ыp�������6Y̰UJ����Q6RK5)�Wk����/�Ia١���"5��P�����G�QlWQ���� ���D+־��O���� ���:5���#��R���9�4���[n���}�� i����B�j?4����� o"4�+�9�<N]��ur#�y��t D��c#��1�g�\`��X��� �����-*�U �����@ �k�z�~4^�Oe� �������&=tƦ��˕���Xk��q��������nl�岗F���3K�F =�l<���F�Xn?3�Q���� �{7S��3��xe�����9&�;�ue�\҆���nԈw+�� ���恻}'nR}Ld�֊g��V�* Կ�����)���$���ؘѹD��������!�_������j�e��턄F1U������:~����[��pD�~���^��"w��hFf ��\l��)&_��>���_�S���^�0�Z{ mJSn�'K���d@�?�ՠ����*X��}as���W>1-�C�}�w�!E��I*L�c��UF���[�����h��<|�9F��!���KOǦu�P;�Ʒ���g��v?(l!���QKMVt�M���g�nKʹ\�W�[���o4ѝ��4�����r����<��C��O~,5at��p=SO�Od뷕d�%�GO�7k������Q���wN:�Qt�ahB(~�{3?���&f�����"�������O�D"�wnm��K���ӛ}�_!�:��ҁ�9����Z}�A���/+���v�����zҺ�.ºV4��_[��ͫ[,�}���Hr��p����,$�`�+K��{�Lb���L�}����D��J������,]�*W���v��r#r|Պ�Ҥ��y�z�_w/%��������2gtK���pk���,|��Xj����`���JF����B�p;6ްZ�lF2:Q��\1�ޗa� ����y�d��P!��X� C��苕|� ��(W�����t9ZAO츢�tE~؇C�c���u����u�����57JQf6,Ę���q�_8����ua�k���K(.�34�j�9���u��z���ƒ��]9���f�4S~L(���e>�#��`��dY-���!� 4���A^��M�z:Yu�B�,
Static task
static1
Behavioral task
behavioral1
Sample
77843a79d49812478705a36e28074757af9d15881f9b53eb17a5aace7098cf41.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
77843a79d49812478705a36e28074757af9d15881f9b53eb17a5aace7098cf41.exe
Resource
win10v2004-20241007-en
General
-
Target
77843a79d49812478705a36e28074757af9d15881f9b53eb17a5aace7098cf41
-
Size
3.3MB
-
MD5
b0716876f6580bfffe1af2730642e70c
-
SHA1
e55b993972a8e048fa4ddf052908370e4e0582c2
-
SHA256
77843a79d49812478705a36e28074757af9d15881f9b53eb17a5aace7098cf41
-
SHA512
462ef263703e6bf24d6917f98b0b91f5156ca83b3f6f7283fefc978b641c3d911b9fe164de1f82cf85a53d6e579c9620d7740476c428bff4560310086882bae6
-
SSDEEP
98304:ONpL2rBG765+v+q/Zq94zw5PTguSrDZoMFueYF40vyFyugJ:QorBG765a+qhqCUP96zueAzvyFyug
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77843a79d49812478705a36e28074757af9d15881f9b53eb17a5aace7098cf41
Files
-
77843a79d49812478705a36e28074757af9d15881f9b53eb17a5aace7098cf41.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
Sections
Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 297KB - Virtual size: 12.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE