�������S<3 @����"� T����RaJc���>�v����]��6n?����Í�%���� N�5����]���4~�������tߵ���5��Oz��D��oi!S��oů�c:ё ��v�$*(�$����J��e0�틏zF��]�D���}�[D��x4����'��˺����~�rC�n�<��'��JO�&�5a�ⱡYH�l���������=�u�a�G¿�S>&�=�(���,���S߳����ps�C�\�1aS��t'A�7�ddK<�J/3|֚�n����$H���]���$��:~ ~d?}g]�y��,C�D;s��R @ �#����b��v�����0�8&N�kD�շ\���`�6264r�*��qt +�V݄lء\Bv��b�:�w�dlқ775 8�f�j�S�h���F]��:' �2?^��ѵJ��2�:���}����t\v��1 �[T�a��j�ɖk��ܹgą�2^j������@2�zC���^|Ϻ�����G��P��(�&b�*�=p) Eo�ۧ���N �a ��0�z2`���l���Z�C�yy#���͗�Y ��Cr�$1�;oj���THN�~LW�ud���ؤ$�(�^a�X�wkB ��;�zp�e�-Zs�լ��qdnF���L� �/8n1~5��t��|�ѧ��;|���t�4��,�o�鮫���7JPO^��%z�k/RG���iw�KL}�h��?װ��qr��]��$?N�^n5�>�v~�� �O�i��� �U ۉ�:9�A�3;jd^L�6:�HNݬޕ��gP����J1脪5����p�ב��_����5����\�� :o3�+B 1� �]`$!2�K>�8�hH1[|�uA*�!X$�/��\� ��3��Wَ?){��\)q���t�/��ɩ�V^�����U\�� ��yBz���&�ɡ���$V,-�|���g��ҭ��� +l���a���$ ��J�SAԪ������&�,�E�����M�z�F �1��ECD��p�og�C�X�s� 5�e�ut�> ��{���I����/v����J��1�P��|VO�UL����5������Y�e��a���Ýq�MTZ�Q�����[dbAww�SuUZ��n�S�<������U�o��>��~�W��ýo�U���=�{�.�����5w����g�:��O�(�hߟ����GĢ�E�%�KH�����L4�� ��<�e��O�[�����q>�e��nu�� �A�Y� ��,U6`T�̨0�h�b��Q���<���ɳ� ;Q��ǴQ�uu���R� �i�Ş�x�Ԁ�!w�GtC�|_���v�����8lll%��h��MS�)� .�u�%fXi���2�?�*��1��k��M�F _�D;��o��<��� 4�b�|�����/����Sl�Y̵DT 4�ْ|�y�!�*�F���u�ѡ����������� �0�,���!�K���Һ�چ�B�$A��~>y���n��C*u�K�r3�,��f��/�ʨ��l89,��T^�"F��q5��ń��i�=ue*��,������Gm�pԦTBi"��� ���@�� M}���� ��1^/�� �"��F e�0;U}��7�9^�n@�=�`�#�~~ �hn-��2*�Y|��z�ʓ�Ԭ�~�T��dV.�d�RĶ�B���mM?r`�8Ò�2t[�z��/x���lp��Qo:�@��4�Q��X�\��<}� ����z4N9���ʴP�`�v* d�Z_bV��W䔕"� ����!��ea�~+�u��aC��Z%cC����6�?��HSy�0sG����<��~�U��+֨,mK���eӖ�Q��yT.�.���[����/�BUi�w����g�� �o��|?bo'q�v���%�v����`i�{��RT� ���J����K��JBE��R���xn�G�?n�(�fz�&��<�'x���~:�����u(��%���g��^�=ϼ*8`�^UN���>���Y��3��#m�?+S+U�ȷ��d���N��p�Iϛ��5҂�7��$4�;���' b6��S��d���Kv�X�ܛ�������ˈf��'X��*�m�#�8�N���jGi;4����㇎ ��C Č��,���Q�GL�?ɨ�����Ê;S�b"3^ #�T�<������C@�a|p�x�1i�!�?_-�(��P�3�S?LP_�����!\��C���l�+���d*>������Jt�� ��1��:4����8��ߢ�mi���h���'��5W�v�u�3�[L�#�$��I���+ �A*}�݊5�6��%�D��ӝ�@��S=iL�ʸ�h>��љmM���{���r�t���M����"�` <�X#� �� j8TE��uh�ƍ;u�Q�;� N��V� &0Y�쟌/�,/-N��W��+/յ��/�w�il�KR�V� >r֤Ϸ��U�������OVk@E��qu��.؟�̎�z�{N�Oe�䩙GIxF�V7<���dW݈ܷL�������2E�N��A�������|��?�<u�!�0�"�Q�yeIr �\RG|�zf�x��J&��XB���G����F���P=�,7 ��z�� vۢo�qW�� |�w@�+c�[����ُ4�X� ��٭+�~�%7#������ge �vیpKx� �����Kjy3=p�vv#��ۨ�+Zo�1�;�ͩlWD��z������S8a�mE�������idp7��&!A����h��$�|�/��h#y'h������=�� �?�d���*<ͳ|9�����r�:����x�״Sz��bC9c��/4�3�L�VM�R�6 &?�S���� 9����2� Ƞ�5!(W;�*�x�4�Ye��KK�u1�\���"�n���,`�)y��j�8�{ۇ_�ߎ���������1�h�`d]��mT�]�[����湙������z]y�C��L�d�-d�v f^�s�@���P��oe�0�ko��/~P�[sf�_��1�W�D\'o ����A���P5%��i)�3E`m�k��Cõ�� zLg�>j���W�y�C:�9t1�::� m�Qi���D&`%@�U"�e��z�� W��O�Ǥ����.��e��5"b"��Y� K��k� "�p��e�����dI�Y��C*pOY^�^� T��E`��;!^>±P����N��+����sɽ3K��ޗwZ��+F3�h�3< " }�\��*4f�d�l����l� ���'�h}��&Hc��Rrv��`.����rR,B]�����;�������Ѿ�-�x�f`矟i���:i�6���:�����w�����~ي�HQ���(��8���y���w��Q���ꌎVph���n�]����,$�(z����x������+x����ް ^��y��nu���pc��"Ft�C?�p�Qs!O�I!5ĽY;��N���#G��v��w��=�� oV�� .�C�Fx�U>��!��j�BG���AD+���i����i��@� ���dզ��z��)0����>�{/z��Ĵ*i���ͼGӲ3C�9Q'�y��zX㺬I-��k�P�m!�Z��s�M���G��Jڒ����+/�&���_�)d�R �5����"�>���Kf� �#)��@V���d<iV��+
Static task
static1
Behavioral task
behavioral1
Sample
40f2617cfc50b6e9db64c830f38e25cca0d2bd2b2d27f155cdce68ed6c6b26fd.exe
Resource
win7-20240611-en
General
-
Target
40f2617cfc50b6e9db64c830f38e25cca0d2bd2b2d27f155cdce68ed6c6b26fd
-
Size
2.4MB
-
MD5
3a56a5f933e6b97840d88c99bc445f7b
-
SHA1
2406c6ebe491b5d3660b66922d90f250eeabe5fe
-
SHA256
40f2617cfc50b6e9db64c830f38e25cca0d2bd2b2d27f155cdce68ed6c6b26fd
-
SHA512
31a48b0e84b47527a1dafac792d831aa57d94adf826d947ac293a31c058e8f0054ceba4eabfa608829fc9b9608a844069b44298e4bdfe4c29ee8cee01ade765b
-
SSDEEP
49152:kCO+hnVrWzfxoJTlPQBad67HnEjtMvg1FyFQsLblux7z0Rncj2mcQop:kCOqnVg5WWkEDnEqveyFZRumpp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 40f2617cfc50b6e9db64c830f38e25cca0d2bd2b2d27f155cdce68ed6c6b26fd
Files
-
40f2617cfc50b6e9db64c830f38e25cca0d2bd2b2d27f155cdce68ed6c6b26fd.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE