<V�Ua�N{��-��8dъ�'����HN��������5�����T��Bu�I�J�F�q��'�eV����A����j�t:@���;�=�y��=�F�+6G�Q��ĸ8��~�� |��0�3c��]eQ�ܖ��(�Ç�^�˴dK_�������ɷ+=+�Rq��*Cm ����/} �L�GS��1�{��D�LXr��J���1�O�b$�p]x�Ul�a�t&L�=����ڄ�QTӲ �6���.M�*9�E] ��:��v=���"F�~�+L�mU�+��� ������\�x�����.�*G����A�A��{߅���؏Q�f1��=�-��� �A�9���9�8a��H�:Z�$N�܌c����� e�S^pN�t!�صj^�-5j�wg��}�ܾ�O�����E�o��vF�m�ay��4�Qq��0I�[�� v�Z��;�C���m:j��c8�����\��u��u* r�-�$��[�_���Ŗ��N�YJ�xiN�r��%gf[�L��UzT�\^���1�����aB�3{K��p��vVD��2⽴LE7��1辵���wd��?�,�8C�0�<B2o�詡�,�ֺ�9��6h[��� �Ջ��Y �Ĺ��7�C���8i�&�� ������Aua�S��W��]��Ƥ9 I��wﻉ��^�l,#�����+�����WDX=i�G��i�1/?S�a���f!����,� $�=&`�5�\�k�� NY:�����&*�:�,�%� �!cߖ&D~e���i�����{�Q�#�؏;��T��$�K"U�ޟ��H[SARrC4�4\��i$�l��am� ;�AZval ��f|�Yx>�xSBS%ⷈt�� ���h/�>��I�W�ɋ&�!͔�� �pY����D������m�����+��s8�L�@^њ1���:8�e�����I6=����8'e�<�=ƨ�$tzK~�L�^� 2b�=�EV��rhN�Ӌ/����FX��.9b��qr(�v����'�ˑ�e�dyG���BzS��JNP��<m��.t��h��s��ȝM����m�(���V�����3-�f0aC�� b6�0�P5��`3�ʧ�x����|�3���^� H��<bhB'\���g8�jCB�T��ٰ8������iɈ)�3 {��T&���:�dˌ� Gv�k+"�l�/�0�c߄�cŃ�V�I6��_-��o�r��ԅ��=�c �$�P5���2T�s�B��Fi���<^'�<�جj����㚩� �.��B��j�k&��J���s��3��{5iD�맲pݢ�@A�j��O�����������RR��P= ��S���łR0J��TN:��j�z���R$�M�o|���ř�\��I�:�S���f?�-���:h��[��BP����*�<o}¤���|b��1��ބU��<����I�<��8�dM���h+���%��R��7qp�F �;��R��2�IB��m��%|��%��7it]ObX� ��铨���0�y�>�5h��kM�GyZ�dǑK�T�G�Ġ��9+����R��${�b�� �*�ü��ɾ���2�����l4ڈ�q���_~����$.>�#�������z�; �(�ï"@De�U����\���]Q�&vu�R|�Z ��zՍ,jm����{h�7!��Z��rE�x�-�d�/2rW"I�x���;a�Y:�bq�������7�{l�x�u�,�:��8�+U� �ƜD��_��k��P*�c�Խ���C]�~O<�C��I��!��90�^����r7�u�羖k=s�i<\��p��#z� �s��p�@�K��&�����Pۗ�:�%!�;�z�WYY@�?�M0�&�d��W*S�]/�V�t cL�A������-sq��\��=66� r�dP���AiV�}ZF��O?.e}��I�A�.�a�pׇ�KoG�; y�M���&"��_�,������rbK�o��<Vˆ��a|�U�['��T�r�r||0I�P�[&iub�$���6r� �"��>��b�V�i�զ��\��#��GZa�v��؟��0<����2���0<}�'�� c����@�A�ɟ��a��?�� ��hՓȠd!�T�࿀���hH��GĴ�$�Q��c� .������u�IF�4j�����vdT��-���P�t�Y �(q�[��>?%����;6C����LTFU��K&�!�ՊbE+��ME@��# x�$���D7�mt�%][��Ӏ]z��|�LFK����� j�� ǝw?Q��+f��*� *��uy�;�d�Ϲ�t�,�,V|��uhx�I��k��:�;A����q�����q�HU�=^�i��E��-�x��=�|�<��v���*n.�8`ƳN����v���lz��P��i�?��*`���!M���;�.��(�&!4_�u���ߍ{�z�x$�ѐ�ޑ��a��.�����Oo�ЧJ�в�q�O�-�_��4z�g$#�����j`//�F�����"�Qآ�Xi|��HVl��Ӡ���e����}��)��������Y{�(�uEtH'�v�� ���3��� }~-1��A�!�ų�@�:[W�[���%(��e=��X�� ��x$��Z� �G&9}l�m���@^�?����s�-9&W�6�pr�OO_r���D�]@~��+vvi!0J3���m �m qi{��,t�9�f���C�$j���Đ�8g;aʌ�daT��(f�]⛍��m@���ǐ��߸�j��ƅ�J���2r�&gaUW��z���F��3M��xK��b~E+k�� �{�Z}�EE�@�AibELvk�Z"0���?>GhϤ���� _������#1MK��\��t���5sJ�8�g�H�d�ZB�������۳��-�k��5A��_�����w�$R�Gv�8\TO���#�ڂO{��e�( Aj�}���p��C�b�Uŀ薥����uk�wH�R[��ҝ�#n�r��"�q_*+�\����UiRkj[M�X��<8��t��ɕ~4i\��H���Ke�DKN�8���H�_��#b�3JY���ۀj�^����v4Exͷ���)ge��T��H! LP�@-�ė�Y{5јm�FO�!s�0���B���D��WW��1��y��(� ��z�WMN C�0[�����V��i �zm��M�KWe$2:A�%�E�Q�>��tIrMz�}�{�.YR�abcaͳ{:QM� F�zw��Q���5as��d.f-�`��1��M�6Г�GW:�� ���P��C��P9�
Static task
static1
Behavioral task
behavioral1
Sample
d23cadd6e905563f0dad2ad88ce087f7418641f43106f0816f68f66ab6f1f7e4.exe
Resource
win7-20240611-en
General
-
Target
d23cadd6e905563f0dad2ad88ce087f7418641f43106f0816f68f66ab6f1f7e4.exe
-
Size
2.4MB
-
MD5
b034eecf4642c53db4eeb735c813bc27
-
SHA1
d6fef1943e0ccafbad7586dc4ecb1edf6c0707b3
-
SHA256
d23cadd6e905563f0dad2ad88ce087f7418641f43106f0816f68f66ab6f1f7e4
-
SHA512
68134bb53e2f1d09de06e53d397ccefbd4eef54fcee439ccfb6935fa91e595d52d4c3e325d5d2d54c0bbdf0e2a8a6264994800572bc8b468cf7e5a5d86e95c47
-
SSDEEP
49152:NqDOGdvl2S1drV7cMaIa/xx3VKfiZcvuk0OhR95Kj1AjHlWzOLNYPmPI:N21J1ZhusAcF3K5rzOKPmw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource d23cadd6e905563f0dad2ad88ce087f7418641f43106f0816f68f66ab6f1f7e4.exe
Files
-
d23cadd6e905563f0dad2ad88ce087f7418641f43106f0816f68f66ab6f1f7e4.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE