e�D0넯�*��-y��\�SK��~,�1ī&���v��3%Tq����b�_sF�F]�+p���ΜP{�:�KQS�.�;���*r9K��KK}bG�O%s? �٘@�)�� ��s�8�:�<�{j���C�jD��᧺ �vԃ�ى�^"���?r�X#厧R.�c�B�{R���-������hU�\��u:�">�"�?�+��\���6{E��u'�Lc6� ��m]b��l���n7M(��A�;�]�^T{��P>����J�͆��[f|R��.�B�m�"������aRÈ�eC@,(���W-��f�<큧}��T ȉ���˾��CqPހo�*Mp��?� ���MStO4���):�w������& 5Uj��ˈh�l����ΐ�O8N�Y��c�DR�������������X�1ܺ9���?�:1X �/J�"�#>��G����6҅�\�p1�Jۦ�N�B9�����pz��mٟ!q4�a�B$;�u5g)+�kt�d��?�HAX��dI��@2�{i̝�~���D�����cjN?���]�!0� y|w-4�m�Eg]v����視 �:w�IEb��n���]0�t"~�ݢD�����t��/]r���*�B���wO�O�Oj�P���{�2�+�Xw:<�ߣ���6O *;�w��ݑ�B~ڣ� �hJ����K�l��#I= ��Є�����exN�~ڛ�a %ZmB�t��vӻ�i�P��$� �> �Rb <B�[��Q�� �2X��ޱ0����c����l����x�ҷ�V�Wf�"1E�ej;B�$Im���e"�zy���$�vn�e�3��6�Õ�%E��ZRѪ��&���2�/@R���34�$'���P;���ۖ�v�����7�-�8����-�a@j���:��+�b��L��e���i�8� ?���j��"��35�q��,�Ԍ��ʸ����O��`����^���ÁIM(VO����F옟�H����9�0����A#+Cy���m�D�� 2h{��\#Y*��q��y���� �!����G��L{��ea��֎�'�tIj��۸��_�Kv����.�0T�xJS���#��:p�;L+a���������Rut�ܺQ6�}3���㥑�)�h��6��a=I�c��HCBL�\"'�-������ *EP�Of$�KŒL���Ŋ�1�u�p���0���Q�W��s#clj[I,��ҽ@�A�F`Χ���ɖƲ�H8�Ҡ4�At�HJ�%����V�����:"!p����_�ࡽO������ϙ������V0を(V���Ub>p���k0�U�`"DA���������PV[�(�{N��v"�*d]Y����_Y���/�=<2�l�"c�-+�_�0���I�v=�X<[���,�M���3'R��6Q{VE.��brR̔�|��{�bf�F\�t������p1ґ���I��A\�쟱��F���NQEc�t�a�40���;����g,�5���y�������I��x���;�#K��0gC��<u)H��_��R��{���*�=���'�O�[��ށ�[��{-�Xl��'xj�sd)~���^������R=�yݬ������[��y��l8�nx����; k<�U����n�\SA�H�'�������������f���w\�n@�$0dk�|:C����aj��R�U�)=-����2[4m�å�{�Dt���a����������@ D{��$� ��(���Ф��,��;/�մ)��M�s��0�2��J�>;c����|3�|Et+G��Wa:3 u����4^�Q=�q��T�E������,�B�u+�~y��x�Dm0�#*�ۧ�@����kמqX�ܣƭ��6�%��S��P�(�)Nֽ+QV��6ШA{�T��ot�5Hŷȏ���`4�{�E���G$�f����:"�����t�ˡ@h�q!1d�̷j��GW�����^�0�Au� �Rʡc�6</�p�Z���x?��Sࣇ��}P���='�������~��%���`B�O߲4�]��]�ƞ<��Y���>p��]�J�Orp`�8��wݡ��'I18� myD5'�+�{6������"����S��J��<[��<����xÌ�Rm�A��u��������|��#���W_��=Uݯ�G�Q��pW����ڱ>��o�v�ws����Tc[T�d�������]Ri<+��3���8�:�!�c)sO& �#�6~o�ד�m9��-V+ı���硼7���}��Z�jj|�J+�R�[Lz���\i.������#2ܥ�WZ���_/��}ι����+�ǃ-�ɜ�bٗ{櫲|���kM�Z��|�HEKkVo��و%`� ��/^���n��-�'�mv�q*~���(�|�d�|Jb��@�^UP����ܬ�c���pˮoDl|i�����&���N*�Ŗ1��B,x��=I�1_V�oP˵��F9ȟGt5�:LN\�?��b��iK(^���d��&� s�=ߡh�~��'b����%m$?�H%�1 ������#�\S�����l{���I��}�~G\ ���@����\�U��Z�U���丹G��8��r��|.ϊ8�S�"Y��FP��q-Dj�ZY�P�%V:w2� 1y?�L[I|���[�꛱� �к#�_Ώn6g\VϞ(*�XG��a�_[��%%����+����3&���"[Qo����6|%�W�ձY�:��3n ���{@Һ���A��k��g^��� �� ��_֩H�Ob�̵�0 9�h~�_ܶm�Ơw�ػ/r�$㐡�a(��BD��5�h�t�e���/�u\�����i�cOt�D�Ӎf��'��� �_JZ�l>�Z���t�21�,F̃�f���(��&��K �?�VM�Н���@�/�7OOX�4/��O16Š��DMi�R1�ZL���;��~y1�[�S_�дF*��2�����u����c����,C�.��[�d��ң���@�(�v�T��N:�AR�h<c�J�8!��cai4�v��>��U�������%{7��������Ho�aXK�W�z1�)e������'�%xyߗ�ՅpD^(�ڸ�q%VZB�y�`���Qf)^h���� ��zh�
Static task
static1
Behavioral task
behavioral1
Sample
edc8f211544c57b2a218e0bb28cf8f6b7001ff89683c4155a1107dd3e6171b71.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
edc8f211544c57b2a218e0bb28cf8f6b7001ff89683c4155a1107dd3e6171b71.exe
Resource
win10v2004-20240226-en
General
-
Target
edc8f211544c57b2a218e0bb28cf8f6b7001ff89683c4155a1107dd3e6171b71
-
Size
3.5MB
-
MD5
0217ae2533af6de23ca1fc9f3a7b3d87
-
SHA1
7b2a5cdcfcffd12cd27682fd9bff89e0739045c2
-
SHA256
edc8f211544c57b2a218e0bb28cf8f6b7001ff89683c4155a1107dd3e6171b71
-
SHA512
c5dd4e91791ee0c081830f2294ae2fcba10b3726c84f3fa959c3b63b891d6fe5dfd0d5acaca5ad9f752a0a9796c32827c2dceb018a66f538a5861d8c6ca45fde
-
SSDEEP
49152:mC1ShxOVZIROUsyqJLYwNmc83lqqFcxwv/bB7sBYYb0Xt5CJsl8sbcgI:H1QxODfUsyqpYwuAqKxwvSmppisb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource edc8f211544c57b2a218e0bb28cf8f6b7001ff89683c4155a1107dd3e6171b71
Files
-
edc8f211544c57b2a218e0bb28cf8f6b7001ff89683c4155a1107dd3e6171b71.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
Sections
Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 188KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 297KB - Virtual size: 12.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE