��z���z��ߪF��������������,-��*���Z�[�K��T\P\19���V.��Fs7���9?S(�� h��F"*(���4��-��=q�',4(����_`xl5�R�����u�e�������;XUYp������%�z�~o��Jo6�4�ǼA��D�`ѕ[z�s3�������wor�S'�A Un�_ni30��љ�=�)�j'�k��݀4��QS�G'MJ�#,.9��:�i����瘂di�?�u8�/˕)��I]袥�0i�S�}̝����q���_�Y<�c�Ac��� c���w�&� �"M���R�VhVe����^J$\KU�qr]k=3��b ���G##&�;�+2�����N�u�5K��l9�q��bp��Q�� �7�bO�t��5�\|�Ji����1�|�r�hƵ���D*g'�]�b,М]�0}o<=cϸ��s����ajB� S-���P�^Ό��� K[��欖�d������,Wjj �� n�����;�b���T����P���S�R�AV�Z���X��W�]X�| x�i�� �mX=��6�5M �?k�,k��_��@��k�ȃ~�뚴 NG߹7�^�~Dvg���G������w��ۣ��9�ӱ� �}�4f�h��T+���Xy��k�?� �� Q��:Q�:֩����R�AP���B4^��x1�:u}�%*�y���L�u�ݹ�C8���=k�����2r�O���n,����R���q���`��t.���H��= MGE( �*Q�K4��UC �1No�.[k �@Y�SE�<�a<���5t�s[���R�Q�9f�|�Ay�/W���"��ͱ���2������T���̃�t�]::�S����i�z*t���d�mWTp����y-R��ۘ���ɢ�Q�K==�����E��pר��.����j4���^�:ޞH��0 2�&�P<����x����O�����mk���N2�Jx)Bϙ�x��Mj~�o������"��[e�����c�y���`u�������8�a��Y�Cj���@��>S�U���1R�S5�hufW7p�W�-�륣�����=V��LX�xd�B��Z����4���Et8�*p�*��_�&W�6� ��7�GEo�lV��\��+��o2nȒ�D'���T��c���9�N�#6��'��=�`;�+�+��(�?0�������((��Pc�� 4w���E�qE����B���8,�$�9������ڙ�酚.q�.gj��g��:`InU4�!�t��`ABիw���)�R�b'�zɴ�+�#}�q<"��I���=�J�G��VB��H���c��4�;�d ��6�}6�OgR+b�ir�In��[����w�!�,���:?Kٝ����x��WьL���o��s�b�h_���L�n�{`��٩OGվ! ��T��.l1����~�^xhO#)��y�/�.�_|O`6�yBɛ+��g���Z,$nV���^?R�Jo3S=V,�R1��5�4�G��.��w q����*��"Ȯ����P͌��i�O��~Ϩ&�ÀX��Y<���@l���t�Ax������bR��^1H[$�H���C��"h9��a�5k�e��9b�G�Fr���E����2w���E� >�;IKOUu��=�&�&�_y-��������1��MI6o����2i%�ԑ��^x; N ���C�p���л*|��|���/��P K��9�l[���Z�e���4��z���͚f3v�*G�4��!r��ϟ�f��|�9�&D�:�G��!��q�'˞������@[��I����"`nV�No16�<ݝ�4�.ڹ�'�^�e���)6zr�P����/�>h������5>�4��ޞ��<����ⲖͻN��C��{+�$��7�Sވ5/؎����[�hT���@��A�[�IN%-.�C�� � �F���p�Q�پ�z�"�B������A���P.�������]��SY�G���&��tɂ��Rޓ�W��L�9mjE�3dAz��x����e?Y6��jKX�j�h�-�� E�9kq!��8 ��� �r�V���8I������@A1��Q&u�9&��L�'2�|��-��&���V�<��jW.B�ey�'m��w���8��hFgco\���4pP�0�TvE} 7�-\,Hqo����a~���>��<>1��t�|��S�n�Ye,`Y;����}�f��}�&��"��uH��k��~����T����!�'��*X��~�Uף����F���ؗn�T��4Lv���2�s�z6�z/H1 ���V�O-ؑ�`2@З!��ٛ��ѵ�g��G��{!S��p+���L���A����$Z 6�V�@%�C��R����Ad����N$e+����w�:�:�{��q ��ى���ЂYI�3,R�D� �߁�Q�/^Ι�����+��w>�RM��I�^J����sC`�7��Tɢ��l ���:L��.�g�rv.�^�*&'t����7�Pj�S���^Z(���yZ��"�.���?�\�K&JN�S��l4��h�L!6!� Fh5�-"�%��5>ٺ�R+pw�+�{���!� 3I��ln]~��lrʓ���ϒ�� )o(����}�8�����X����[#(�q��(m��qYR�@\�<���������a�d�S��I��g�[�����]i��>����ʤw�鐄��e��crysg,cy���Zbk�lCF����|��J�n�WS@:K?@�����a��\0H� �#�)������F���(P����.�� ÐU'���ż냧�RI����0.V���@>0m]�貜�"�q����6w@9�P�/��i�/9i;�������F�8 `�.J���=�yx���S��q�M�90Č|����oi��,;/��,a�';/}�HHMG�\��V���6O�&E����!��5%�� kv6(v�u��e�jv(���; ���N���쐱a�$�D���{H�#�c)�B�h�*��A�}�w��RZ��k�Q��{r�Y������)�O?����]�N�/��_TRq��ƈ-�w�*E������/��tD��|�\�=ixq8g>�:���-�� o�~�r'I,|J3�Ve+�&� !��*������<�!>��JÑF�pu_d27�X�:�Vb"e���H �i���Y��s5���D����Y�*e� �)۹�c��U��}���e��`qd,T�� �7�g�s4��V��*�`t��=$eڻS��`ܘ�U|�"Re�#L5�[�x�M���H ��O��������~���X%�����i�_Z���J��?��Ĉ��(��Z�#�WSlo��!P6�gKvv����c#m�~Q m�,dc� ɈH��1i�5�w��w�����%��q� �t%��QJ`�t�p�XA �"��
Static task
static1
Behavioral task
behavioral1
Sample
8f2d99ca04db3fc50810158be6f60f4df8df819dd30227d58287f71b220fbfb8.exe
Resource
win10v2004-20240419-en
General
-
Target
8f2d99ca04db3fc50810158be6f60f4df8df819dd30227d58287f71b220fbfb8
-
Size
3.1MB
-
MD5
89614bcd95a77224939391e14e6a45d4
-
SHA1
369605f8fbcafdd3cad56c3cd22c3c0f468d11b5
-
SHA256
8f2d99ca04db3fc50810158be6f60f4df8df819dd30227d58287f71b220fbfb8
-
SHA512
6bc5d01e5f492c4cd895f8fbe6ef3b4822909503e483698489153b643da7ecdef2c562cdd25775cfccc2f041b93a199ef99280aac0783de122e25d18328b3987
-
SSDEEP
98304:ELczzk0Gqz5w0oagqMl293keG0X3ojOIML:EIfkGYnqMi3k3tj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f2d99ca04db3fc50810158be6f60f4df8df819dd30227d58287f71b220fbfb8
Files
-
8f2d99ca04db3fc50810158be6f60f4df8df819dd30227d58287f71b220fbfb8.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 586KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE