��8��K��|p�rl��/�!3'��k.�1cdy�4�Cݛ �X��G�l��3a<���_��P~���X���` ��'F��,�e,����ܢ��(�Y�lL�"o�2R%���3+��_�A�mv5�&R��\] ��c(Y�$Z��-&SF�s��>C�8��Bfk��i~A\�ʪt|����~)"J����_�5w�Eѥ�*�꩟t&���F0�_��*^��F����q���Oa�S�#tc.�e��|��D}�6��)]/dw����ty���F��iP����p��,!��}H;7$ ˸:�5�� ����A�=��o�f�b�%_.�<n� ߱�� ����Hf�z�� �$��zi�{�y0Ŕ离ÚP= ��2�h�{s}�岻'BU�mQd��t��#���l�v �h�Q�=�Ѿ3E��?sG �1ʳ�D�N�3�Og�/}AjG��`�����+��(���u�Ǝ�W�#Q<������[���W�1�VU��,2�˖`'%n�n�s�O^�a�o���jsR0� �[�� ��C9��e"g/�/��q��B���P�O���f�����]ێ�.����2�~��( ���+���� R4�g���+�H���x�A��ݷ�m�t<��R��(�7��H����ÿw�s��%K�Pr~�������tx �U3�(�^�����3\��E��T���_��x:�K���b�Ԯ����K�to}�.�Js���:�F?a��4C$bh��I����o�t-��`�ҪsPK�l����ux�Ac��+���0��@b;��?����C��O>v��W�����:�u>���ң.���[QP���r�����Q�*�����u&E�W�����pg��/�#�JrR1�-���?D�-W�����L˜)�@&q�:�P����u���)����sEd�x� 㕄 ڣ�f��t��eN��V��I�6@#$�;�����:��Z�Ԣt�A��1v�p��^e�z��\�"�����-����N�%�s"��|z>=�,�@ ?w>S;��G,=k{�xwMU2�[�6S�:���p���?�Q7�HC��o�"���YW�$i �W?��=;�O����.|��$�Ȣ�<���PX�*W�� wXlj����F&��\�fB��o���n�� ���(� m�c�Gczv���T��!��S������a��+O�4쩕��7���t�X3���������ڙӫ��S�!W�i0Z�N������D�_����<A^����n|���*M(DV���nC��Yn����^C�� O����F�W�tRo��� �Y�`VI���������_����S�Y.�����T<�w�q7��z/f8@T$- ̭]��<3ԇ����W���9QA�e9B3?����(��ʌ�&Q��9�B�@t�X��9��2���J��z�͠�bO��L$lEv����07d�u��6����z��P}j���BT^��j\<���`>n�0�_����/F��3Z���jf�j[�'}O��Ԃ"R��ͤ+��C���)��ţV{*�;�UT�a�X;�`iH��m�A�la�6��5C�|7�k����8�+��r#��2?y�p e���٠\!��s��i���ͩ���E��43��"� �zl��\����z[������*�I���������.д&��:�G�_��#��烴T�C�I"�F�V�ʹ� ����Qd��,3?pJ���g�� F�ֈW���3y�F��Y�(��ö́�G�!���Pb�"�c����-��Y#���S`�^�R[�{,������b��;`�tG��7@��w��"�ʈ��#�c3�i7��ChYLdSa��� �K�5����C~��|t�jN��Ӡ��9�����Y*�<���f� F�'~���:(��ߵu�p�R�G��f����>꾡��C���n�� 7 7��&�$�FF��!����cIea�O~�uJ�1�!b�q-�a��~7�#;��"�8�qK�x�֝M�+V��"�ؐ3�j�n�1 �!�v��Q+�(���ԥ�X.��,V���^�\�&0���\5v o(=@賓m�/�K����?cl�/S�L-�hZ��K����D�g���(q0ah玁�m��ls�Qh��L���4��PUY-E2� /��"h�aw�]���R�ȥ��.�ΩfU�9M������݇��n7�s�=~>��ov/�� �~��-�ZPc �u��s������ΡAI�<PZ����$��G�����r^��+�>�Pk��,V��>}Ė��p�'$��}.5��MWQ��������K��4��K��[�0�+��x�DS���`�ۗxtj�au��-?�F�N�2� a~�ת�C�]�aW<ڌ� ���-`(a��|+�o9ۇ����R��C��U��U�0�]'�B�]�ç�������k;X��#R�+�DǑB}˗�=ب� �It 9��z�(H��2-OCY+C�[ش��aٓ�. ���&��;�[�?4��μ�,U�{�w�� �$��T6��}f��>���1��P��T-;X��/N���H@T�_%�kz&Q^A�?���T���T��t͡ ���i^���F�.H�J<�����ar'�����ؼ�DE��]�����[��1 �Q��+h4t��;��g���7D�\^1���\Eq�&��V�_�&��4��~ ����ƾ6�����ՙl3���j�I��k�s���9rg��O�8؞a�� w<˳@Os��Cs$u {�����p�}dH{�D7f�3��)� ���!�Y��������҅����+��0А�6����s�sC��k0�&9����Gr�z�R�s�L�y�1�$�������p���1;��S5-�J��˗ݗ�|�#�5sv��1/~���^�x�5� ���o�k;�M�Ԓ���,Z��*�g�Q���d+hP욏��&�e�ǔ����b!?НBb�������p\��y��9�I�h �<��:e/��cC����^��Z�2��vaC�����1��D-B�en &C!Ta������ucݱ�� ��� 1k�c�TH�"�/������*e��9��(nh$� ���e��0k�-�Q0�lm��6)����TpX���7�ЏT��)��R�q |�t�A�$����bw�x�>��{�9��[�A��t� �od§p=p�8�D�"3�.��i�47�%R]y����.����G?w��ah�՟�~>�}RC{���~�,���Ȓ0J�i Q?=-�7���+R�������?����¯n�fA�.5�u�xw��px}�wt��dj���)�̍�b�d{��@3�pv�܌�RRu���1,R}�\S�e�'���r�_ʮ�������M��ờZʧ����p��5[���� }a�S�d#/2AGϙ�.�[�^�F����5/<�dž"�r�F*MD}U
Static task
static1
Behavioral task
behavioral1
Sample
e05cf219e203803ce36edd61778efad842d0324e023efb2f8ff90750afa3716f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e05cf219e203803ce36edd61778efad842d0324e023efb2f8ff90750afa3716f.exe
Resource
win10v2004-20240412-en
General
-
Target
e05cf219e203803ce36edd61778efad842d0324e023efb2f8ff90750afa3716f
-
Size
10.3MB
-
MD5
b7c924c89c3e5c097ebb041353320bb7
-
SHA1
6490b9fa365236580d445bd73c45b97395675fa0
-
SHA256
e05cf219e203803ce36edd61778efad842d0324e023efb2f8ff90750afa3716f
-
SHA512
fc283c327195c49a2438db7482ee51c3f5ce60c5d3d0e380e797301dbbb6de52139ad61b8e2a67b65fcd63dacee58c0a0ec9c30720d97ec65378ad7907183914
-
SSDEEP
196608:yNjzpnj2KCTxZ6lfYWZXKFHPSa1kw9+G9/VhS/nCnZypamw23jSqMNas:yNjzpnjxCb8fYC6FHP7FECZyoQ3jSqM0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e05cf219e203803ce36edd61778efad842d0324e023efb2f8ff90750afa3716f
Files
-
e05cf219e203803ce36edd61778efad842d0324e023efb2f8ff90750afa3716f.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 54KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.8MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.6MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 536KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 532KB - Virtual size: 536KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE