�]k���@}�����\Y�1�^��K��0!���������>4�=�N�?1V��T�b��~�����u9ZU�c�����jp�GtŨGs{�����,�.䶫u�.=Kb�I/%�ʲFb������J�.v��*�U�=�����oZp�0�4���2�I �� �U� E�J�XA��Lm0<,ΟHZ��!��"���p\%G��:� ���w?Vj ��Xu�z���\�P��r��wC�F�o3XH�>bѺ��5���mڋO�P}���/q 8��B��h�v�8������kd?�غ+jWXg��o�k�6J3��^��<�E{�c�ǘ�ʍ��cҗN"~�Xw��U�f &�?-k�s1����~��5�_FA�(���[�xgEH~��oȯxq�Ǟ�X6��� l���Zn���3�i�� ${��TD�l��"&��/t`k�ޖuSY�I�%/�HtH)r�+�?{8f����R̈́��vģ]��VHԤԳe|�&� �-�fG�a���Q_���>�:|q����EvB0�E~�E�mA�m!�k����k$����N��k�� ��.�Ĝ�0��-B���N+����ys���i�ռ'e�>�I?Zb�d�v�XP ���(w��hzz�>�i�Y�j�6��g�^�6�!85���� �Yl��l��v��ĒN���U��j�+�k=&o�"��Gk��uX�e��@vb0�5k�����[���O�/�`KN�4�S��������"�a���+�}�@ y�e�H�Ӂ���%�TL��j���ۭV�݁�-��?-���T�s �ώ�68�4�7.���6�,i�I٭�vf!�t�$�վ.v��y3c;$�߮X��y��d��sÔ��W)^����,$1�Z��%�z�����)*^+��>��4�l_�B�� �4�C���V� �>�{�!�Ե9$��&<s�e���UI��MG�}t0ט�|��atS��T�G�QP�[��W������d�4L4���=K��կ��}߷d��V���� ��q��?�,CT�/��&�Ԋy��S�U|#��S��vl�@~��#c�&�^�V���ꭣ8x%(7�d��x8D���/اV����)���I�Mj�����:a��l(��7�}�|t���*s�\ؽ��!~�!rw��?B�o���u��y��1���G�;���+�����i'5�Z���ޚ�,�f������˃�.��21�wB����q��}l��i=f��Z�2�U����� �6��%�4-���|sQ���BI����]!WƦ��Ɵ�E���)a�yħ�&e^�%Z�*�L,����o\�6�[�OFm@�2��@�iT�n0蝎�u���0mF#QA2I���=H �#�rP��Fr'I�*G�QS���h��n .)����;ؚ���?eY�(a�3���ݧ�jӂ�I��лB�f~ ��FV��#[X���j��}[R�c�cA��� �b'�IB�fq�RkuI�jR! ���n��C�̪~Jᨙ��~�M����û�C���yce��?��iT�C�h�s �? Ɓo���n�� ����T��%~���#��sl�X��4K��"d�y���j���g#"�Ko�_�xa�>�bS��,�L��]�Ǖ���~�\ؤU����vԣ̲xކwV����� ��$�biIEQq�����cqK0��ykK$��GE�����~���_jU�����#���O��ƍ����#�g.N���1�w8��˟a��WW�z{Į�.�c�~He"���U��o��(�����/����@8���mp.�����uJ��l��0|tg���'/3��#Pq�"���b0Vs2��9���KB���=P�����J�!� �q" .;�j��t�!��O�v%��-L{��B�����ۋKY��Z�YS�C,j�����@z�<��%V�'��2�&VI.31�hr��dy��g1��v�����u��#Z��&��CY5>;��,��m� ��qu8`�[0�$�B.��a�����T�5��Џ�?� 2�dL�؝�a�#2�R[Hha$� EA2W�{�v)Ű)�*�yBO�������Ĭ�~f����5B�Dy�F3��y��52�� ����1�t�z���L+�� �x��������#��<4��H�>Σ�g;�Y��ryA�3�b���cD��g6��g�ם�l%��aE֨���������nW|��g^�68M�4/���{4��B�0�{��kC<��5�����f֙�q��c�?��еw�L�.��~����ÎY����"fkP��i^�&Eگ �՛،wN{�r��ϭ��3hק<������o�T�K��2Vr���3�f̛���h����@���G� �;�����d}V���'>Xj�v�f�,��|�֥_+�� V�72��L�?�Y��eO�-_~��6b}�o`#���XԘ.��60��V�f���������s$$��]��*��/���J�u��z0��c��k2�B�Q�!+$^�g�ө��'��U�Mڨ�u��}�lS�9X]z� �w܊r������M�X1F=�}> �пZ=��%�[!aw��#��/����{���)���E=LW����)�<����#�hBF����[�G��_E�Ǭ�7D;Z�+����?�L��<㹔i����)MA �L86~n����hў��;��{b�T��)��đ�����)W�U2�JN��#*���n[�b>q*V�� �i�^~��#X��f�ey�M捦j4E)��Vuj0E-��.��-r�)E�!���?H�!�iў#�����ݠ�X$���xL�d��dg4B�]x��j��u��%z��1��{}^�AN_����#-���F4QO���� ��� ��0?��h��4� �A.e�\hu��k{A�W��ۼ��U�،��?&�D�������`����[NHك������ԪW�p��+��/���������{����.�A�ju .�u�n!� @ �2�����5�D��.��w����B���a� S �,K��1=�m�H�y����ҿ�MP��"�����j�S�6-���cm�ţ�����?C�KK��������4
Static task
static1
Behavioral task
behavioral1
Sample
fb4797d4741a387e8746a6a698c32d279b115685a2a276f6345d52eb2729766a.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb4797d4741a387e8746a6a698c32d279b115685a2a276f6345d52eb2729766a.exe
Resource
win10v2004-20241007-en
General
-
Target
fb4797d4741a387e8746a6a698c32d279b115685a2a276f6345d52eb2729766a.exe
-
Size
3.6MB
-
MD5
e880294733cb720e113d9bed9c48f3b2
-
SHA1
fd0941d7360db65a3c2e2d2978d7c5885decacf6
-
SHA256
fb4797d4741a387e8746a6a698c32d279b115685a2a276f6345d52eb2729766a
-
SHA512
7ef32ddd04d4246b1bd2d79f7066b72add5d02b17aea61d30d58f65fcab4e8adf48f67e7cb7aa1dc972c6689e57a6db14078453605e902d769558d72da63b0bb
-
SSDEEP
49152:5vYrApk3tq9vR0p9SIaETUGurzBajpTCJtoKLKMwbONOCKAVnIhQLy7+ENQSIpaS:5vGkk9q9vuqyUGpuKqqARlOwSIpa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb4797d4741a387e8746a6a698c32d279b115685a2a276f6345d52eb2729766a.exe
Files
-
fb4797d4741a387e8746a6a698c32d279b115685a2a276f6345d52eb2729766a.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 499KB - Virtual size: 816KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 272KB - Virtual size: 11.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE