O�� � �1�5U[�n�����H�&Z���-�uS��v�Zr�Z���w�M�����m *4��m��.cs�,��9%���3��2��rԽ�>�5�(��&hRyZ����7)H� �{_:��Sw}���q�kdj-X^ǧ�k����hӈ�N�{`u<���lYዒ1 t�c��nhw����f�,�$<:��d�?���c«MoXo�)6�A�0��e v�¬�@1��9�72(ix�AC��8�(G6�|2��A�,bBhA ��o;AT�h>4�R�և(����G � 8��K�3*;3[�?���kOG���$�z�Ok�:��-�3~?�z��mӭ�����.� Aۆͺ��l��+���N�,e?�g�,~D/��Td^��J�][��W�jM�Sk;E�� ��Ö����@e��a�uu]rU ��k�[�G�!���lE���e �4���%�[��{��_�D�p��[]6Ы���FOb�}�;���x�?� ����Z8)�YV1ο���K�W��f��O��GԀ�����@��O�鳻����_�{�{���_3�J�/��4&�j��K�۾n�ٗ5w��z�J�Ia�Q<�?�ȼ=��-c��Jh����B��_��İ��>-��%�7 �2�%N4�:0J���>�ĝ i:�0�M|��t�Nh {��j[�c��!�<���B��F7�oO7�}terZ �IU^m��/ۋo���p5��n��2�e�pL�QRj��M�ĉHpVGD<���n��@��E��3'��b<K�&� `a�8%w��:���U,���r�r�x4�~�a��1�����^�'g�@�)����]���Wy3����J�ۥ�MwM�>$�'�0�����JR� ̀k�����+䷘��/3����˼�j�=q����XSq@�`o���L�Su���-�P�YB �����J���^ŭwI�d��c��Yu�l�i�+&�Y~��\>�?;�H^�� Q�_=f���Ӱ��MQ�p�>��}U���Y��L�ӫK�c�l��I��6��1��7�D�fb�`@l�n�T��8<Zl�{��5oj��T�VVc;���Kl�W��qTϞ����ש��W ^�[�%G�������~�s�T۔d�@w��~�� �ݞS��Tcn) Ak�O������?h�h���mS��+��p�������I�w��� ����P����4�!>F�3C�awf�����]�a$�)aB������]MxCF_��"8#^�)��CwqH-[���P>�/)��Dž�ʲ�ô���Y��c�O-��M�M���7&UH�M��' ?f��>� H mow�Uੜwkz�*�N^��f��W"��*�e�V��*y��H�qhf+A��<����B�d���&�kƿ��`u����B�������A�}`�Q��Mn�o>�XKi�_��k��vqs�3�N�-��~�8y��+�����Q��[�� ZD��d�B#o���?Lˑ�����7��~w��D�B��ML���Q� ���� ��,x7�1���c���]:�q��P~X�PW����c4��X���K��q���z��W����H�>t9�`�CY�贔S��н|��>+��Xrj}����맨>gHG��r�d�G6��ysmuOS���7�>� 6mCI�\�h���̯�y �"��cjh ���;2TGhE(gq�>�4@�\��H �t��2�fT|�c�Aۛ�����7�{�j����0�~é_3w~��?0�D96���ߕ`e�����H��L=C��]$���gC!#�f���:F;%IyJDt�wA?�Kz��Wk�N�����(i �tX7�K?�|�g��+7>�AOG���� ���������{�/��{Gw�S��e��$t֖G����J��S�m�:8c��� ��'S6��Y���js��Ka�%��O1%�P���'��~[�Z>�3+��ɫ��Y��Gx�ͣq1����xb9e����mC��L�4O�7�=���s��Q:]�P���5a�t6R�G����y��4�l�#Puv��ꕑ@�Rj����D��o��N��S�b�33�M���A=:#A�-���hW`��&�F�:ڧ�f���T�"9y��m��E~�n\����*�Q�b�vK��|�b�!�O o���3g����آ�XW�Jm�!�g��W��c���+u�Sy���o m�U?��a�Lg_Pwaj��(͌YȮ�*�ɝh5�W�����>K��3�뺗�}����a�����$�#z��ˮR�֗��� ���f�����|S*��L���!�+KN�\l8���ca���bS6��Xf�q*����kz����[2��[�����d�Lm�$�I�S��-;��l�3�����4c���WX^=�Z�H�,7�I҉�W������`��0��6`�8��_a��0��������C[����S�}��Ǡ��%0b���uj(3�3 �ZPp�������v���ݧ8WP��7���_G�m���Y^��7��څaiƍ_�EJ���{/�HSJ� �!��m��̣��_�8���μ!-u�F����Z��R2�y8[�)� �����fX���}���6��!4�m�g��뀜��u�>>����<~��8���;�'��ɏ'n���S�ڃ��bޅ�@�4�c��͗6��|ݳ)qui�Tu�,��_w4_��lb)�%��}�M�ւ��E���gØ���10��;�}�9)"yI��r� sJf;�\�?�+�A!i�D�R{�=WL����[�if�9ε1�����P��~��u<�d�I����"R;�/�q7s]��WZB��wJ��pLKh�ߢ� �����X?P]�R��%���1T*�!ϲ{5m���J���ͩ��g��f�%h����w���jѿ�W��t3?���66Z����O��.yG9�"�'�j� Dd��l6�~��Ȩv='��|�{��4��4�Rߝ� Q�&*v:Q�� цJ#�I����UWc��z����Ø� O�o�D�$b�S�a�9���555M�R1�D~H�1����{��ڝ��1��a!��F4���A)}��7��V�2Cq�n�b* f;r���r�1ڢR
Static task
static1
Behavioral task
behavioral1
Sample
a25a7ea81fe613939c111e833e3f6335406f788c2c73220d893d65b8919e61bb.exe
Resource
win7-20240903-en
General
-
Target
a25a7ea81fe613939c111e833e3f6335406f788c2c73220d893d65b8919e61bb
-
Size
3.3MB
-
MD5
9864f180fe6ba36961d20acb9f61ea62
-
SHA1
dae87fe5dac27c7340be6ee9928720af8c22b9df
-
SHA256
a25a7ea81fe613939c111e833e3f6335406f788c2c73220d893d65b8919e61bb
-
SHA512
c053c61035231752a409dffe4da1a9af2b0f8ceb0fcf265be685d7949f5c16f2424704b49a08e8d0e62d2355d1bbacd5fe92ebe7bc4cf894fcd5f8697f8dcac4
-
SSDEEP
98304:7S5ZkBnLE4okpzJOGESh8v67fPY6bGo1xElDiVZr0TDpP:S+LE4okpzJESOv6zYSGtDiVI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource a25a7ea81fe613939c111e833e3f6335406f788c2c73220d893d65b8919e61bb
Files
-
a25a7ea81fe613939c111e833e3f6335406f788c2c73220d893d65b8919e61bb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 316KB - Virtual size: 668KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 252KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 28KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 216KB - Virtual size: 916KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 204KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE