d$3H���4�Q!8�ǩ56����V��7�P����t1($��.;�t��o��M��<�E�g���1���� �e%���y�=������#�N[1�t�"UF�����͒��ܛQWڀ\�]����f$�+'0?5x2�;�~�0���]���5DHF�a'�)N�fn���~��$���%j'��Jߺ��UPݻ,�����+�pA��A��Rb�����JjH7�� �*a��7!)�W����@�j� F|�1�Uz)� �NJa�n�������v�4]����/���-��Cl�j^%BC�+���0ԛn�h�HJB�M]� tѣB����\رC0{�e�RD�E3?��8��(LyB��TRDŽKO�z���gl%�R��7�m^�sUͱۨ�� ���G��&��bIҙ(��F�iƺ�,�2�i���XU��C���q�j�A�/n������:�DeOf�c-������������^@+�:ۋ�_T���J���qgn`�S�H����ʡAc�/����H$��.>Ԍ&Y1L��za���'�Ό}�$�"�CN���괸���Վ��g��I�>G���)�؝?�R#WQm�ܴ��ϴ��1EI��c��_;�������R�ԗ�8$\!��ҫ!�V��' �����?�Ji��X�~Q�!t�wd�����^�%J���K����]}�N� ]�0m�pF��} � 7�"�W�}O�b Y0��;@&���NCs�*lR ֢&��^m�2k��h��Zj���ڠ�b�>�D���4k{��TM��� c�W���dG��Zm1�'�K���Zs���<5��#�3��?���|Z�NhC,�\ٯi3���}0N�ZU�j�邒`���{:�����c�E䃱�&\�v�ё!�IN���N6^/&�6Q��9�4ƅ����9+7��kL��@�@�s��Q��_�2p���/����] �@��H���ii9+L��W�owf��i�Aɏ�h6l�B���^"R�O%�i��G�����J����HH�]`��?č� �g{���00�S�Ti�N��.�W6�������E���J�������!��~E�پ���=�Ws��Q��Ly���\%�߃��o���]�,X:=�cbF~� Ao��ș��%�����P��VJL�l�(.z��)��/1m�jg*�tV�D* º��I�oT���r2[Ș^��[Rg|������[����b���v�c�+��m:��WY)�y��A]����mk��asÍ=}C +k8F����t����f�6{[0dW�MP z0�̖�R�����'�Q����C'B/1`�Z/�<��G�))�ӕ��+����%1f ��v� e����[����wٙ��i��F�z�60���8�� nZe�o�K���KOJt��\���q��2�6�#3V�Z����[w��e���V��Ȕ�������Y������C�0�!��K[&z���əM�n��۰��� uLK���Rb5i�*��ʯ�,��?����H�����6������X���F�)Y� ��0�M�����jF�'���饰� A ��{۠�*���/�xyת�|la��Θ��r5�T_���=RNK�M�⍛Et�&�;�B�l<_��Y�+8�����|NK)�(_P��y���gm^��4$���<j�˒oó�����r�����~AD�� �,_�_~��x�B��}�(�6S�q�'�˖�D|f���,P ���S����g�j�cV�i��*��0)��Cc�1B�p���W��X`Ir������SZ���4N�̴[e��0-�6�o^`�sڃ�Z�6c��M�C������0�}k����������� �/�d��nR��^@��\����d(#*�����.���=�i캊� ֻ/�~���B�u��^� �_��5?c%� �iXMo�d����k��� <࿎��U4�u±����;���NK���xL:xY�*&�lF|B�&=Mb�>|4��i�[Ɉ V'o�7�]mH~��܄C�������,;"�;�*�g���F\�����T�Cd$���Pv�GIX�8�3�9JNBP��u��m�� �n�X:�ɬm(t����'RE�Y�����,ccP��Q�3c��w��5$G"}��8M(E����$xq�)��ۡ�]��&�q�{��l�j*+\_���x>L=&��W&���'�g���:BĨ-�Pc=���7�V���:���*���ri��"rX�5���L��_����:ݢ��H�O�#2.|F R'�9��k��� "wL�\��~4(��D|Z��/�yn'i��|����������J� �2�Y9�^�U���zw.��Gs[7�K���di�@���{]T���A�ͽ�т�3��q;�Y/���:T��Ե�X�����ueIj�)���<��C�i5VbE����&��5$ D�@��v��*������ 2(������/U?�W)�]����2ݬ�n1f[=9lK�!���,��Rp�6]��_�X�s�"�xwn�m���KF[FԽ�P8���S�s�G].$�!��Ë��6�O�P����=�t�+�F���.��o�������${m�\�d��Ŭ�Z��z�!W���(W�����Y|�2d�}��+U�SX�����l�F|�7Wy�?5�eQ�|���bՄ\�+�� ?'�؇��l�f�g&m�(�F�.o��e��!��3����單V��L��a��sYXґ�H�9�|,4��>�n�1�՜��Sb`(˖C[TY����ﶭN��w�h�;t�aF�_�l�^BU�QC�� Q ����6Դ� ��K��8����n�CM�TWT��Q���t��a"n��DKUR��}m�D�m����� �.��������o���1� m�-��y�T��4�r�<d� ?���E�܂61n<�Դ@�� � 3���W�{���'N��W�^��@�Qg�IP��B�W�X���V&�{����I��0�/�U����v����1��tH`���G�t6C0��$13)wPE��*��L������S�7)Ga�5P�Ɯ۸��t+v
Static task
static1
Behavioral task
behavioral1
Sample
4513cc2c68352382da2b90a7a2f6b3426dcee708825228ccf566b1969318c5ef.exe
Resource
win10v2004-20240419-en
General
-
Target
4513cc2c68352382da2b90a7a2f6b3426dcee708825228ccf566b1969318c5ef
-
Size
3.0MB
-
MD5
0e076ad1fad2d7b0f328273a5ec203a4
-
SHA1
854b5e5317feebd3744b31851ca5a55d72716ae1
-
SHA256
4513cc2c68352382da2b90a7a2f6b3426dcee708825228ccf566b1969318c5ef
-
SHA512
93fd0c1f1350cab58a6f093ee0ff946cec909502a8b54fb5d285d8503470244e5bf4535da2af0a539107ff611b84a1ca13b0d95313b074e7c639998893e6510d
-
SSDEEP
98304:rjqUe3n9OMZvqq9z+eIPDWf+p3FYfFXRoyX58xHRqV:rjU393Zx+DPKmpVqFhoCy+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4513cc2c68352382da2b90a7a2f6b3426dcee708825228ccf566b1969318c5ef
Files
-
4513cc2c68352382da2b90a7a2f6b3426dcee708825228ccf566b1969318c5ef.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 585KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE