s�y���^��?��@�r��[dRi�Q�M�M���^J٫�y�JN��n��֗Z�9�����4��7�ͷ�M���~�t��_�y�� �<o�|��0�*�ks@ݜ ��k��V��t�9h��N�/%�� B�J&G��M�����0A�B3h(�SD��:9�7 eM�>�][�A�YNjS�NP|U�2Ҡ%��z��������֞qv�3�kTQ^+:c��,���Iz����D�ؖ:@�є��M�g6}��&��B�g)XR���8�qਊʉ�|Ҥq�ⷉ�!JvUmt3�z���SR�G��D+��+�Шr½b�H�o���hz'�t�N�y���t/]ֵ��Q5h2�����1�[lcǦ |cyF��Д�sS�>��G��`�vj�܈�����>e��|8O���4��i�Xƫ���e���L&��͑M�rD�B|��ƧdrJ��E[!�WE��DߒS��2�}�R� �b�f$�V`Spw��/��"���Ü�.��ơu(��t��edm��E=�����!�������� Xa�&;"�ѓ�Zk��Y�X��bT��Xj��{����X7�|��I1�%ג� q��i�2 ��¨��R�r��@[)[�VD��T%�q�;+ �I�~��\�V&-�%+�z1�E y�)��T�Xmd��r)�|�+-D����]�5\�G��?����;��bڮ��Yѕ�q��d�+�ڀ��_'��{N�.����e��t�������߲�kj]ѮI��m���R��ުh�l"���u�0 ��'ĥ|fKc���eY*3�;�|��͋N�C,��M����6!�����؆U��z�q�����fy[^U�k����S�߿�zD�����pU�nT:�A�"� �^D1K0���xp��ҁ;-������QH��w.�~t\���:W�������ƿ�4��>?�yp���=q���f�pq�uE�U4=dB���?C�'�г���stͯ��@W���/�T%X���+�Z��wa���bp�N�9�R�/}�6O�9�S.m��,�d��K_cd.� ��Խ ����?��oƇ�^���pX.�� �AQv�<99�������Bt�j�,�)F���J�"�sZ>�5�?.�vE��>�CY��nZ7���ǰ����i$�?@W�Ե���tr5���V00��n�,먥��ϭ`�[Y\��̿ �d7���䗤��p\_W|�����3TLeZ���:�;�Af 2K.��.�r֩o��q�������`�ּ9�cu+�$�'�K���5+�^���-Ĩ��V��������4�v 3��96�u[�K�D�b�Vt��f[�Al�E֊���g��V�[Xڱ��!���� �����RT�e� �2q:E_�Dт�_E�ԏ�߶����@�@[�j�}�)*��l�2�j�R)��g ��yL�4[�Ƥ'��J�dR�c�r��X�s�%�A��@�N[���xv��������g��m�IٛcK�̹� �Ӱ������4�.@ߥ&)�b䭘o�s��V�L=��x�s�ͼM�>Α:$k�Y�w^�X�l�G�x�*N- �T9���vF�"㥫1p��r��tơa����J�?��8|3V��Y�yR�HW�����l*��*�4F�;F T��_�Ѡ p.&S��/ �1��$�_>�����(5�d�}C�\��5m��f!mwir�{0�p��+ �e(�R����Ư�j��s�%y:���_MJ��r��/ӿ���i��U�*��G:s%}�Y�������}k&i*�(*�s��Zu��cn�@��q��x.4�Es/�����sYY�p�9v��?mӍ�Y� �Y��Itm�^����Q1�'�Qo�vw#���3�[���>\�)ԦWŮ�^v�%�°�8��Exv&%H�'v�)����z.� �Wv�����Jiq|�vF���s^�������`�TZ���a�B����{/0u�;��̏3��,YgNJ?��B�j'd��땃bd���_faX��«L�����k��6�}y 1y1ڂS�0�Yԃ��#�>T>���sS_ �*:���R���sj��Z��3�L�%�6�FȚ~I&Nvڶgjw��C�m⾾|�$a]i����۞F���a��m�w�ۂA:��w63_jG�R��*�AaxO��]u }7���Xs�J���%����JD����I�����:��V��"Z�#7x���L)��� X��! #b2l��u<�/����D�Z���_#�>p��ξB���dz��a�Dž�+�8 ������uQ_�MqmPzIJ���D/e6�C�+8�x�>���d����6��{� �q�/��eq��\ъ��<=�A����s3�n�-�G� F/C��Eyy��eΉ�����,߈i��k�FJ�ps�����Z�8{ �@��?s.�1rpn��FVe�ۜ8���&s��������o�n�J=����礷��r����9��Ȏ�M�I�]�|�~-��t���ƫ���&E2Iu��;�ޟ#iU,���N; ��͕=���KԌ�nn�ab#{g����߁�(��S��xl/** �;�(�k�A`�q���-U�*!�����C��3�sʮ�X���`�yV���C)�Y�LYY;{�t��:W�Іyh��=SA��I�ЫDz��G�B�vF��a��s�Y�ZS�I?�Ɗ�Ѩo)�fή4.�*�̿k���)�,������9��u� ��'��ϋC;����p����p��E�̶z��YZ�&� za�g��G��W���Kh���U� otCH�� `L�@�#�A���V�w��|�ͼՔ��t`���9*R*3�G}�{E��3�܄��䝧����?������UM��.̤�!��'��Y���п�ZK�_�<����� zL��K�8f��C����������U(�[˒ 7�-����>�p�"��B�� �����<2�һ��MB�6��8�=�t�0&q�WJх�b��C�v�D����I!��Eb�U������ʎ�Ծ�P�������Y�u�,Y[{� �B����zLvZ������GV<�% �:�l�s�?H��J�p<�|b�1�SC�ryb�o<LV���Opiw�e��f�}@8;����b������?{���6��I���g����{a,�,�����}Vy��yGS|�M��p��Uԧ��jz� �H"w4h�$��Xthה���1A-!l�ɞԃ �<p�;C���sPL���N;RAIX���N�@����9��ݢ�-�����*HNY��y�
Static task
static1
Behavioral task
behavioral1
Sample
2296a778914a3272886066a2fa11fd6366fd44c56251b577036fc3d228b0a89f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2296a778914a3272886066a2fa11fd6366fd44c56251b577036fc3d228b0a89f.exe
Resource
win10v2004-20240226-en
General
-
Target
2296a778914a3272886066a2fa11fd6366fd44c56251b577036fc3d228b0a89f
-
Size
2.4MB
-
MD5
226f182d10ae6165ce779e45f9eecda7
-
SHA1
f151622152a09bf4304200a0ad6bdd055364c6af
-
SHA256
2296a778914a3272886066a2fa11fd6366fd44c56251b577036fc3d228b0a89f
-
SHA512
157f3d3fb8f2c8e6f52492211c02b1321b7a8f6585aa0ba4be1aad374f1177ff8b2530f10301bc3346888a33efd1f40746a1d09692be449af3cbebfe42f421e4
-
SSDEEP
49152:WxuVOF3MeXMIs817dtZMk60gO5KIF5tFb8LoB4QsSt:ouVOJxXM9817yCLKO7yL44Qs4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2296a778914a3272886066a2fa11fd6366fd44c56251b577036fc3d228b0a89f
Files
-
2296a778914a3272886066a2fa11fd6366fd44c56251b577036fc3d228b0a89f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
Sections
Size: 37KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE