�3+�xT�v�.���N���S�j�֎j���:7�r��}��g>�͟2��g�sUhF�Ϙ�$U˽3[�C�I��kZ�l��"jr��T�-#�+��n1༵; ���}x��{�bT�NO=0�߸-��JW�0��}xi�5B���SO��(DbD���' s8�:���Z�i)�v˦H����*�8�jvP.nON�����v���O�Є��<܈��9O�-�2�*����$�Զm��+*������9P�3��V��YYC�P�O�MO����|s�rR�l�%�`�fé2�x.jR7a[mrO���!�Ȩ˘�&�D��j"ϭҿƯ�x��ߓkx�3*œ��!=�_�ГK�'�)��t �v&%��]J��7�={�89�*�ǻ7��%8����M����V�l�ʫ^��D/���s�U8�G�S>Qh�W�����u.7�B��,�(��6���t�E<wA��M�Y_�x�.���=46;�{A�����dG�8{Ϗ����ϝ�,���}[F .+�N�ś��#R-��=I6�F���$�ҕ܂+mA< 5����Cg���s��d̻v�e� ��rI�&�3M��G����/��a&mY�u��s߳<Q�mL�L���^�,|L�lv2�.��hw&����Fs '� ���|�j��Ԍ�x�!U%r*� i�P0��)ð��?m����Ngs}C�_b�O���i�M�т�/��7!��Nzj�e��w_��E��q�E}� Ӽ�V ''a�4�_2��r�okr0( P%�1���u����li7�\:�_i|g��C�Q�@�d"pG����3qjp2���X�.J������Lsd���\�D�7fVl���@��.���oC��fў�z�\& �歈[h��:L��0w6������ǻ�R����|$%�~#}=q��jH������N��\kyi;1�>�sP�~����� ݎ��{m�����AD5��ҁo8�!�����cg$����*@�h+�\��~AW�<�Vi��A�v�]��zn~��~�X�j��em�'>4N��$J,��@����O��B��Q����Yʚ^t�N�{{�\��������x$��͌dv8��1��>r2�DVH��ٯ�li���6��xl<�3l��4v�!�J&�iʹh�� x���\�ihC�BN \Ñ���O��.�$I���Ć�X���Ȉm�t������t���Ο/o{�/�\�1��*|�m���P���9�)���O��������k��Z�솽&�o�j������ml}�`�y�Y?�C$�PI.�CK�x��By��z��.���ߔ;h����=� 8��.e�lX����4�`n��M��Y���c5�I�AG3�e��r�Om#HKq� ��?����r |��� 3f��Ρ�F��5�i��R���?<����~���6���,E��}]W Ύ��K�4Oئ�0AE�o�'�*#����][�Z\\H�9s��)�xV�DM��Wgs*��Xuw��U[�W����X�1�I��x�#��g�=R���E��=?H+�K���)��q]���uNH��m����!��nӎC��_��%]�G7� ��V�t;��nw%�86R�)��M.�yT� ]�R�R0W��Z�B�N�+c$�r�\�Hp�U�u4)����?��?�J_7�q���wX༁t������9��czR�97��bB�xܲ���ގ�����4�'ڃ�i裱�(4��:F����2U�>.���jETS��25^��$� )��4����5�P�j�&��f��:����s��O�X��oj����^��j�jH;�N|�1K!wТ��Ob�Snm�g���;%vE/���|7_��1,, t��{\0�K�Y���+7Ze-����f� |h�-i�WX]�|���0���v���zop���#"I�����L��$��$���U��Yg�����6]h�n,�k�T����0ۙt��7$A|́��W� a��3�3��.�[�<T.=ē�Q�v��� �5�c���-����&�W�Be���)����-�W��Fb+�.O���|,��+��c��;o�VpT���nȻ&��O��b)-�.��M�}��m� �z�t���F����������#d8��2*�)7�U����¿�����y����a9z�s�>�(��g��T�@qqۓ�I.��@8V�}o�kY�\����S[��7�؉�����p�)Az4�����>��Ԃ3e�.G5h������V~c6�%����Nf*�Q� v��������=B���nXͨ���_��h��1r�^��o{l j,���xQ�\`���.��R﹟%2{�,���������F%e��l$��. q�40�)���{��2墄�X�.� ^tq�?��n&�C9¶k*G�;�(L�-(u����I�B*յ���\MԤZMG�Nh��5���/����kx�f�5���[)r�n��G���,QfTɟk2Ӥ+I\ʋ�۾�-� �חr����1���~��D�v��霡g:�x8������Ѳⰹ��{*Z����5���7p-�tsBJb���A}iԉV䷢\��)zd�n�!��6<^"nZ>'�nW�QO2����z�U����v^��жM8���Xx����ա�5]jP��:5�&y��C�1����/��ZN��Ѿ�!����� ^�1)��� �S�j��\�)�L'�d�m�,<ܳeS[;�_�6�R����4x�3�\*���[�<�R�D�d��k�Pxb�l�;`tQ�F]��k�����xl��9fЍ�-1%Z2-Eh��*��K?\�]6� �z5N����B��RX���F��\rV�%�C�*s�@�����Ed0��Tj�L�X.�t�n�*n�HY�EO&�� _F�P{إTCk^�% �P��1���;��UNN6O�&X0Ϗ���ڌg��o�����5B��d�Q-�b/��4]ްx<i��G o�(4<��C+���GM���#��4y�S���;ZE�����b�sضvi#�`XC�1ڄ�V���'q�D�JD ֡��MO=�zUY���
Static task
static1
Behavioral task
behavioral1
Sample
e0026135e0d122f46732371192a5f3269d717a4460fba4338a3b8e17fb41225b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e0026135e0d122f46732371192a5f3269d717a4460fba4338a3b8e17fb41225b.exe
Resource
win10v2004-20240226-en
General
-
Target
e0026135e0d122f46732371192a5f3269d717a4460fba4338a3b8e17fb41225b
-
Size
2.4MB
-
MD5
790efa3716853062460e4ae3a6f020f3
-
SHA1
2cda99332938c4230fe7b0f3d5461d1dee0e8be8
-
SHA256
e0026135e0d122f46732371192a5f3269d717a4460fba4338a3b8e17fb41225b
-
SHA512
41938190ce572a42bdb713469fcbd7f2b0d80dc07d9c5a0d43b79571dc233f73ae58f1cd41df7b984e5537e1165f2ee0fb56cc33443b87486cebd50ed6531ed3
-
SSDEEP
49152:eleBj0fSXhvmhsq256/+GuPHVSW0+JQw2tX7t2GallnnBQIi:bCfOv4sq256/+xHoW0uQw21Ze93i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0026135e0d122f46732371192a5f3269d717a4460fba4338a3b8e17fb41225b
Files
-
e0026135e0d122f46732371192a5f3269d717a4460fba4338a3b8e17fb41225b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 56KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 204KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE