�h��k5��v`�T=+9tW8n���^8q �T�0�l7�� ���f����b�@�s[�6�r!�"��H��ө��ɹ~]j�E���%_{n���Kϙ ?ؽa �� �T@�u���"D�c�+��Y~���7:�1W��|�e��h'��f�b��֭u8�.�"��;Z\��<�a���#|�v=�Ht�+}*0^cr`\��t�P�Ò8�.s� !��!>F���ߥT�h��O�"�;Pǡm��\-^�",[����bJ/�������{�_�J椛���L�}��I��Ϡx�*�כ��5/�C��g>h�j���Q1ΐh��N�Ը� �{�6���}?�!��y���L�����l��}I%��L� ВN!|�r}�3��Q�77�KK��h1{|<c�Ν� էꖪە%x/�J�RjJ��e&f��75��e��A����"q���ZUK���p������F��t��jj�%�Y> ���z�&Qp/��e�qa�M��qN��/n��0b��$���z������Ev��G V�t���|X0�(Ån��Z�iO�ۙF8�/1:�E�-��N�[Zbݗ%��w��\����4�.�$�%�6�45$���`�c9�0Z���e�Hy�@:�<��}�F��LR�^����(��ּ��RE�ɛ�)i8`Wz��x�8�q���#f��!&2�r��G���8���J����B�jK[�18<�qG3sgX����U֣P�b�b��&n�1E��6��lt��N�Ǜ��V�,χp�u6b�B�PJ�C H��3�d=S�(.��P�����:�� �P�j$�z�l�7 u��PH���vL�3��1�)�KJ��#�7ͷ�� �&��{a�K�}���>:<S�/=�P�@[/��cO��ꂶ-��N��e����|�Lj�U���F�tM5��;�3�1�zO3?N���]_�$���ސ��N}I�@���K�!+����t(%C���Q�ɕ��q�n��&K�uJF'�ɒa(�W�)�#2�*3(��)�S:��ccG�{�V_fr2�oR���n����2��{\MO�5-o��ʡ�)�$�+ʙQ����mc<��V0k��F1[�MO1�d]��zW�'��%{��|� [4�cKs1\C�~�rG49� ��;����(��N��Lf�&�H� p�ա)���x�72�吾�!)�GU7?�D���{Y�._|�W.���7zg�����E�`A��ӠE6~�����r�x pX���qz8[�����&�&L��Z6�ज़x:@�M ��lJ���� m��r.���@�6k������[ �˂A�=����?�s���\L�������@Az%����������J���N���ь�&T����yi ����HZ#���Vl:���QU�@!��?ێ��5v�Q䉤em��ڿ^��r��vѣ*t-#`����ϊ]�!���Dq�-����,%tDi����]=�9N0̬��ֵ�EQ49�JN(¤���Y�%��Ѕ�� �B�:���m�:�M^d+��|�-��8�e�Z<�^���5�~�w�͜?0�Y���\�O��/�Dȧ`��>��tmu���1{e͎T�Q=�9dX9�j�]� �f��~P�@���w�}5 IoB� "��S6�N� eIq#\����\��v�F9CV�;E���D�c�[��tY��t��Ҍ��U&-֑�������#תU`�8b!�:����]�I��yپ��U4(�����:�71�/��V�e>曞�6�����ҁ9c�j��+#�6Pt]��.���{�~R4�8����&��諪���Le2�bWx~;_ t@�܋�R������oI7� +1�/�p�:d��P�i�����ם�LPپB몮�y�k;��T��.�7���a�j_�V?��^�`���r�$�@�'1� �����V�1�,t۰����$jj�q��� =k�/#Q�0�j7,�����|5��ٜ��m��_���%&��S�i�ǹ9!:�������N��o��9�.�3%G_�D�������2f`_mէBV��%�� a��N"������%�kY�lg�:�|'��P�����L��Ky[!���^��o��@�aಷ$G�F��UQ�1oh��(��TFS3`����o���!���?yf��ͼ�7��5�]ەZY9��x/c[''����Q0�P�� ��B$ހ3�r&�x���_9�S#2�k��n������e�g��s�c�����dr��o����Y�Ռ�^��o�9��F0�q�]I��������y��oqS7�ۺ�8u��5lg}8��/��|̑��#��<6S �x(v��]����E{��z��m�����j7G�(s�������@ˮo,=췪��4nH��2�u��2HE���p��TN������+�J�z�\{�$ � �/G�iY����� Ĝ��G��8�ԵYѸU�m������v5*�2=���8�cmt�.��֓��4َ����8W,��� �(��:�҆v@�7,\z-M���x���0�Ν�l�S����!���Z���@��q�B�Tf��7�6@smʿ�X{z��Զ�0����(FHɋ� ���(���s�M�mD������m�p� "�s�f��V�C�� �bx��{:�e���� 6BN��������y��|�5� ?�|�z������T�*%��x�W��r`� ¦�ӡ+I����:vM.���sg�S�Q��A��iy�YX�G�ک�Rz"C� {;�5vri0��(��d�{�k+DCh�Ӡwe<��5��F�"�~F�t��Z����O,")�řk�c o�����p���÷�v�%��$p)3zH�"������+2k��p�4|�y<0� h�Ugci�Io���(�Y��L�o�^^�<�V�5:�6<�C����d��V��ms@���&]�� �?��[��k���9��E�F���,=��쥺�n"/]$�2`�s��|�Q�+�% g�I��I2縉��P���ܪ7�&�ndu-��ȸ9�?~ׄiR~xM!o��\����W����)%}Q<���:�\y���\Ŷ���"��w�@����|'�r~�蜏bM~�p�ͅ1��8=foir/�������H~d��*��L�W `-BTɭ�Zi���^b��la��8��!E�c����U����^b�b,�zn�y��6�bR����WP�"� �Ż����Qu���E�n�N�}RGB���~�� ���d�j�~h��|Ƽ g~Ŏ*Q"����d��Al�K���/D���[ �7U�n�|��7��iLA��v���z�
Static task
static1
Behavioral task
behavioral1
Sample
e1653f8759bdb777ac263ab33bf6174152daebe96dd929786a79664dce03fea3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e1653f8759bdb777ac263ab33bf6174152daebe96dd929786a79664dce03fea3.exe
Resource
win10v2004-20240226-en
General
-
Target
e1653f8759bdb777ac263ab33bf6174152daebe96dd929786a79664dce03fea3
-
Size
2.3MB
-
MD5
b87829c726b5f1ca4b4ba7be71ad7204
-
SHA1
df2b711dc7a0ef5ba63de56c466cbcc95db09a1b
-
SHA256
e1653f8759bdb777ac263ab33bf6174152daebe96dd929786a79664dce03fea3
-
SHA512
1bb5793a860dd18b343138b42e074c3919889e93d446efb5480b4ce790591965132673fc234a0928f38563a44a15c879fc7ac81c2cee26aa0dfa4c1b7993c123
-
SSDEEP
49152:VxOp2Elcds2J3VhX6tvJ4m8+NW98uytBreAxr/:j/Elcds2nhX68XY0uPP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1653f8759bdb777ac263ab33bf6174152daebe96dd929786a79664dce03fea3
Files
-
e1653f8759bdb777ac263ab33bf6174152daebe96dd929786a79664dce03fea3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 32KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 204KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE