αT{5q����� A�ś��,�0me :qx�S)��]q�Q���'T��H�w�J6Y��)Ot�W�x�5->���k���\t�W�I�u0���K�"^]t���ז�긫Ћ2��u�V�v�J������ƈۺF��Ӧ��nQt��F;�0~��ϪW���de���o�S�n��A�t(nގ2�~B���8 ��Bnv +)��0|t)*�Jn��Y+u�;�g*�8qKg�5Y��Sw��Y����Ԡb��;���\vA�I� ��a������3w��1rW�H�2�����a-y�3F5�@�X��ͮ+ �()���)TfhwČ���`�:��D�n�,�r� V���1�ҵ}�8�:N��a��RܾX] �ê�eN�����eɪ'H���3�9�δ3;$/N���U��(���BQ��%E��NWh;�3~�z�����{7�>��<u�յ�}���xH��@TL�R�����%/[�ί�9:<yt`��0c��6GD�7��P�a4o g�E����c@*�UvReb�2ܡldsk)Ѯ��,?L#_/�M<�f3h�\f�Z����K���f8��x������s���k:̷@��C}���c�!Y9��C�!NULs��1ӓ�6<�Q��s����('p{��?g"�-%+���j��[��[Q�i"p���%����=NNљ����F8�#��7� +���}�k�������El���l8�$?i&��zE�ӧX i�y0ߚ����vi�]�n5�����3�b���&�0��x����*'r��1����@����f��u�D�0pP �Qð� J �f�gI�8qL��O�鑾��;<uL�f��?a���x��>��q�cp�i�Fc�D6:alKfK�\7 b>#��t��f�J��܌��1 �'��o�z B�&�?|hfWo�A��6/֬����Kڐ�D��:�z_n�����/�2�BE*�~t*������ �i�yP�]8�GWa�LvӇ�U�c$�a��) �1ή頭�E�Օ0���kH�!�r��} ��K'�L� �e��g�=�ӡ�7#�J�I�ɵ�t�ud�6-�4{�a�_H�m�宐Z���R�Üs�q1�C����@�����w�b�b$��%�����c䨷�jH:ª��_�y� ����N�X�A��xb?½7a�b ��Kk'���3(a�c��B�1饍���8g��"�11ۚn��N4S>���#ò~ }���y6��ȥ��4�E�:����99��3��<q���z��/l�>����n��<h���N�þS/j7�S����zK�;n\��fF�a��.�gE��1���ɭC��k��,8+���B�z�f�3J �]��`Ә�ھ};��M�g� �����Q-� .y6�?Yb�i �ٝ���v��S�%R�K����f/yDtj�;�s���H� 2�&�c$��A����N��Z�wY����!���}��3\���u�2͒T��$���U�D�D�N��S}Z�N&]����zSp n����}`��+�o�?�g�ui�+�W�=������YK��������ڏQ\#VlZ��wQ����V+d��xϏn`D%¾�����8"�{i�^5�����(��l����yr�~��П��8kXj+\�=�,|푲.��Κp����Ґ��д ����.~�>Մ�+�s4p�.+ P���f�=٦!�kw�C�@@3>��4s��O�A����t(i7y �6��ӎr�s�| m 5��Jk`x��Q����9 ��Z|�1��%��� w���"�Zo&�țL=�Ѯ)j�v�<:67w�߇�Dv2��rֲ�A�6s�|��uz]�L�* ;i�w�5���:��� iI#j`�4f�+_|W��w3.}m5��>��p"��pID����'���ip;_��%����!-���G�)]3`R�I����a@�T��A^S���W��=���:�����l���S���rd�!� ��!������d.w��fW�Г�~n�{1�zE�����}�D�cJ��t%~��v�q��*�H]m�G�RL��(>D��~w��&���J����V����� ���/�(K�~g_�*M^TL���ɑ��}i]�{����֥���e:�*��㷱s�f�%D�Ȣ"w&����EH]pڑ9��?�|o '��������m[Z+pz�v�m���_���*�`�R��6���k-�@�ʲ���pq�y�sJ����&�\IV�Q�����L��0��059�-<9�K�x�O�j�_$���PA,�U�I�ZA�tK���T/Y�@nE2��tp��Б�������8Tui/Й��(�? ��ȪD�f>v���>@Q����SxH,VF�V�e ��_=��FL�UE���*쑞n��X�\&��#�`�/�X/Abh�� �,if�:���@���(Wmw�&�\�]2o��:�S�nn��I�[��M��=�����X��f��U���J����������<��le��VA����3y6��d���F��0l�|�79\�Ejv���PW�P��Hj��$����B� jM�*"ǡ�f��2�;!+9�V�Q�v~�y�=6�{d.��G<�� Q��D���~���dve���EoE0;��kiW��Ɇ'\�b]����4�p`�؋t�jvel�������j�Nu�rW�� ���8N�Ȭy� �{ Fl�#7 _�ک��X|�Q���*� d$[C� ��l����?]m0���"K �.�@�i.`C����6NP'eP.��HkvZB��G�TU��c�� [{3G�ę�\w�<ˆsK��� : Z&U��~a�SIښƕ��.^L,����ɎY�oc �I� � �����HXH/ABX �3��rB���e�U�"R|���T`Q���-ަ��$���7���G?V��W[�R�]uF�q� ��+f���6�@��t��mR��R##��fx?m���>3���mJX�L����Q(ݘj��?��f��?nދ�Co�"r<n��f#tb�W�5{��?m���%��ʙL�qK����j�I\������4��J���{��I�2UP w����i�����Zrx�����n���D�����~�2����*c� �������7���Ӝ������<¤4>/���������q7��s���y�PU�M";����q�q��]��}��� %���U� ��a����7 :y׃}� �W�+er�:ʚ��� ��٪�����ſ-1������ӄ-�T7a� �{&=7� ���fO��Z� �� zx�'�d��/�)<D�1rm��[K���z!˻��G�l6�>N�4ޑH[�d=Q��e����_k{r�'ݮϣ�P!)�pS�.�kF�H��t_���^iNLn��q6��OFa˯/i��{@ҁ۫�v�촃n�0+���r���Y�c����.��C~}�3+��-#��)�ӟ��!���KDp!�dr�|�
Static task
static1
Behavioral task
behavioral1
Sample
7d094695351abc8285aea7a0612764ca1d12ef7b0c44aca25ed560ac1d407c3d.exe
Resource
win10v2004-20240508-en
General
-
Target
7d094695351abc8285aea7a0612764ca1d12ef7b0c44aca25ed560ac1d407c3d
-
Size
2.4MB
-
MD5
b58a3998f5ce749fd2dd6b8651fde46c
-
SHA1
94bac5909d2b5f2313d810f04587db3c67c9dd5a
-
SHA256
7d094695351abc8285aea7a0612764ca1d12ef7b0c44aca25ed560ac1d407c3d
-
SHA512
db074390fe7b8dfa26a10d0dcca56f3d66d72eba96ddc6b7650e7b8c45e0de58805abe43d8f93e3291687ff075d900676552d6a3f7ac3c7b2d388c9f52111da4
-
SSDEEP
49152:z9hJ4NktFt2HtfCdk11Twmv7HjUYqG/jZ2h1gd6X0145:/WNkLEJC8T9LnqG70h1fX014
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 7d094695351abc8285aea7a0612764ca1d12ef7b0c44aca25ed560ac1d407c3d
Files
-
7d094695351abc8285aea7a0612764ca1d12ef7b0c44aca25ed560ac1d407c3d.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE