�QSɤ�u��op&&��f�u\����11� &� ��b[����,I�PNьS��"�T��t-���U%�GQ^zN�8X����m <�` ���f�S��W ]F����JI�%&��=:�[:&����5�y'����\��F}��(s��2�d\}�O;nd����=�\��Ǔ����|��, ����JH+���bL�����XjVE���}���/li)�C�a <K��N�弩��+�rM>ji,�+tř�8�`_���'�-`��C`ʞ5my6�8�� A뵏�(V�e�W�a�ǛU��1]��i.>�}&�4�̬�a~��Z9Oi:�}Q���P� Z�ը�������n���x�wZT<VXh���'�5��m�)uWpʼnW���xsЅ�n�ܥ(ӧ$����*��}��D��>�ؘ>G�H�c�S{��>��������k�ve����g����L��|�n](�m�"���&����p�B�P�z��#�A�[��#�wdn��j*��_��BQ�|��$i����,��;�Kiκ��2��O��.y���1�>U^ɹ���)�������-��}��˵G��u=�C��:�U������P(R��nXcG|�g�r���F��I%�K�ɐ��Jytϛ����o~:Շb�m1�V�|���3�G�4� ����:"�x��:.'G����hc��}&]��7�.�o��o b��8�vFt��5mht�h9�åˌ]�B4�+XxXL���7;�����"֩�ހA��t��U�.��\Rj�nY�)فw�,i��+X]�KY�yD/;h�Qg��$i��k֙�rfF/�w��&�YP� 8��kQ�7 ��"r����e0����ƕ�ER�hו2XLc�ܾU����Ii���q�'��v�����M��52������"��N;ܒ�&�m���f�*%��]MIR-mbe"V�w��ZӮA�Rs ��tG�3}h�wD�������~<2A�y_I[H2��{�mN���k�M�y)�j��lԗ����3��+}4*�����j*��8��x��y�b� ��B��A��5d���Ui&^db�~�FC��>�oEK8A��vM�<Dd��`:�rBi���]�?��3Z��hk���͛�H��av�G=:97�;��o�<���vRyj� .������R]���z���f!����W5G���_(r�j!eh�* O���2����dH"�akz�������l��J�3�9�K�e��;F(�4ڀ�u[SijZ!�0Xn�!�����.�Ω��VE�VDa!�!?�)�� c���߹5 |���(}�J]��>�;�o)�����֞��p����m��[���*���~~/`���-��Q�އ�ѶKz���w14R�{����!�=V;EV����*WA����=�1�z,!hj��^��ʅ��c{�}����5�#�`���+�����������>\��������������j{��^ 6"�Z�X�{qQd<���Ф�KXkG���o���<t��8�>"T�u<~7������uAn�5t�1B�4�@��yMZ��Z�ͨf������#8=4�9�&i�:�?���K��*�gЁ{����ѫ������d2��C��7��������i�r���8�& ��ք�7\q~W-ou�ԝ�5\�����eC����HW#e��h���@?G`�P�7��|~�J��m<�=�@( 1%��)pa���k),��������I}\Qf���s|��S]���l����Zs������sY�!tc�7F/to�f��S�A��:��yQ�Z��4�?�3?��Rd�� ����p�|ǚ��zYZf���M�������!�Wj�%L���FjxPm+�oKG�"������X ���d!�<��t�<�Q��1Y c�{�Hxy��I��z ƍ��H�a a%���ɲ�Yכ�[H�֟���Vd!��㴅qD�=�@���z�h���?Q==��g��DOS���<֘Wʜ<&u�obHz��^p��\��P����h�1>I��D!ˉ2�&�DG�9�X��T8�m�*�Z��M W#e���8)�+H�aj�++��'��9�OC"pQ|��hY��ՖX)ϸi0S���Z_���'��|�V�U-;�۱��+B��c�������q�y���� B���:�������틑1 �����t1� ����!�j�_�I��.�wT�x����ݹ�ח77��k��W����������7�R��� >*Y�!�1sf��a<�� mߓ��ۖm��m�� {�� :���dl�y���+Y���%#Y�"�RE��P_5D�� �K����~[�LCS�֑��/%#DZ/��6B�`�wjn:,����@|�p~%� j�X醁�Ҽ�)�St Iο�ZLCc ��]�ޒ|�m�h��cT�+���Ϣq}�vR�U10���S* �I{�<{�j1����K���3S��V�:��m��s�J�y+�yR(����`a�W ��P���^B��wk"���j14��4��$���S���씾\���M}Z�fZG<�Jz{��l⪳���k����Ph��&S'�Xe���Q�cGV�8l/���:0��?����L�g}��t��³^��#~�C�R��9�k����p2G�pS�vm(�������AC����R�t���{���|�����U�P�;�l���U���^6=�.B��F@��}�-e��h����xy�g���NR��ab�gKk̔͞5B_�Jܭ^|"gw�kѻ� ���Y�1�R2h�~ര�j��sk����X�u�6<9K�������3�XR4|a?~����q�(��3<�^����A�P�ܥ����Y[�{�P������P��k��eRQ$ дb���Z�I�ư���@Lo�z$>O��0��F� N�1r|�( �1 �.M����q{dM�v�Lș ���D��>j���̧y%�����Q���ӛ��wNj`Z�M����ẖ��#�P�2���j=1n��3k��7]���zW�:H�_��l���jc��䤺�a�H�F� p��w�D�HęS~>_�U��V���g|��:�+�� ?#Z��= �X�JP�Zs��0u��R�d7p�ֿ��?.3��M���p�+�h��Җ�n��z.�LQ';F@�oK��X;�]q-���_��������T�ڪ���7�iΜK��K�2�_ �X��kbʪ��zTwQ�.��D"hyi�)z�x:����Z(~��Z�.#�ap/T��������?��:�Ҩ&���
Static task
static1
Behavioral task
behavioral1
Sample
83c9541a8adfe830f86460597f21f5f13e782689f78ab59a455b7d4c89473ec5.exe
Resource
win10v2004-20240419-en
General
-
Target
83c9541a8adfe830f86460597f21f5f13e782689f78ab59a455b7d4c89473ec5
-
Size
3.0MB
-
MD5
678ead554dc4472b529cdc8e2ab8f317
-
SHA1
d6294faae73e6d8181edc2b41ccc6609a8e4cd58
-
SHA256
83c9541a8adfe830f86460597f21f5f13e782689f78ab59a455b7d4c89473ec5
-
SHA512
7b2846829430ddf27123291c7bc162a869aed2194fc93a7ddd6795aa249fdde0bb6dadaa84bc044a300648ce751e7b990d5fcb1f6603498b76206a80bc69838d
-
SSDEEP
49152:fOPDVuKEq6FXS4RoAkkRez4kq+Gc9ib8gOjRu45ZFzAegDtVtyU:aDIZ5S4xNRu4/+r9HVr5ZFzpCtj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83c9541a8adfe830f86460597f21f5f13e782689f78ab59a455b7d4c89473ec5
Files
-
83c9541a8adfe830f86460597f21f5f13e782689f78ab59a455b7d4c89473ec5.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 586KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE