�GR@j�is;EL�*Eyݾ ?$�&������`��?��^��kʤ>'���,���ܕ*"w���h�P�h����f����CҨ���SJ���j;8�t饥n�z�9h <˸l�U���_��!d퉮�J��N�2�Jhy�z-P�И ���#Mz��n�����6el�gP KJ�>m=+«&m��4��6\�G.#������j^H�� ��i��1�����9�TT�u � ��u�����7�r�+��r����>6յT9�Z�E�ֳ|��/O�w���m���0��cb����L�"��������`�� @j]�~������܀�H��/���x���+��'غ�_�`H�_^ZaZՎ��J��Â:�;6v�� ��e��h�QE{�g�{����\/�G y�l�5���XQB�␖�6�Tp��61h��0��^ �6� q��OE�Lo|@p� ��t�� ��x9�C*���m�ۄ�?��~��BT���� -#�3��Ȓ�����AOt!�>����Z� �.$˴�3�� Y����vQa�ˍ��Z�h�>���@���ѹ���������Q��ֹqڕ��z@�y%UTk���V������v ������\d��P>����v���g�c&�� ��"�ig���S���r ���,g6�cZ�v�nЮ���N�����Ѭ=idi_A "�b}}�g5�C�^��bF,����B�D���k��J�߃M�Ug�}5�|1.V4:0� ���9���CK�1��݄�Y�͖��eC6xx�T�Ю ��8���$`�L����C=7��?a�����Cl_f�+�]����n0a+�>F�n�*%U r����e*e�~G��f��m���Q�#<��3V��gl6����w6P���pV�Υ�inS��r�2|�lJ ��ݝWu�����3�3��s�"23ë���5�G�=u4����b��*}�san@bvT1t�k��G�s̱!{�U��S�� ���W�.��h9�UН>s���\�8����QK�P�S�M<X��BL�y �jǒ�����N�L@p�ݭ2�O-�h��� �u���( �| �����Tםa�2]I*��cI'6�s��mG���2��3��{�����Ƀ������֗'7��܅�}I���.s<����7=8�������5���Aˡ���n�?Acj������w[�fH�ϕ��v.��Y-Ag�-��8��z���� �W������Km���;5�M�ܾ�4�w�b�z闔��������H�����e�P�_wXRJp��=�c�z�IŦ���Xhfm1&�n���;��>j������l��n�з��(�7���{�)�|�Mݛ��Z�����$դg]��U$�j���g�б���Т���k.�] iY�E)�����\�ֻ[ ��SU��b nz��G�H;�p��h��F&�T�?�4���ii~o-ݘ�I��߀. �:t�����>�4J�)z<����|2�z�!�n%❥v���X���!�uUo�e��@N`Z���Xh'�@�y���=�r��L/����U��/�����0��iv/��K��̥k"W�/YDQ\]�|���p�(��4�A��R^R5���W�zgpK��^��đ�����r)�,���bB�͉r�T��v(,�/I�E�|#�k��ͥ|���K��*6?fO˷����#��Igy��._.��t͆P�0�-F%9�,;F�i���K���d:ܾ� ��ob���{��߫���!��:��6?��lן�.1�\����O>��3xT�·(8�˻�5��-�AbK��K&������O7DJ��f擨i{��בY�7����3B���X��Nw�D)ԩ����x�%���� ;�����u-����Ҫ�a҈�͉w��Z�b��U��Nsk��r�����f�Sy�;R�g>��[�g^��G P�1D.����7�Y��{[)�y����/�*D�#��m�zO�(9���1�M�����1�y��h�U��:LW>v�V.<&sBS|M�U�꜡�Eo��y�Â�3/�J,rW�,-;��պ$%H���g�"�/��Bz!��L��4� �0&�X@5��Zl;������0�l����#��P�G�x��+�E� w�N������O;S�l/b��*���#%>>�6���� M��M�F�= �R�[5� 7�53��jW��Pi�XG�UH�����t.�&�y{��k�O�<�SJԏU]vA����=S$���@|Ϫշĺ�` ��ݶ�� ��'��8\������ų�^2�ZιU[�,K�Ff��M�'�%�o<ԇm�t�i��=ݳ��l.���*<�+5���N�@�@�:����dh59SS�h��*c�P���w*�nK��e�@���ωf7�ju��w�����W�stʸxb�� �`�9�� �pb�uMJU���d���ऐ��Y�xg�D�� ���ޅkn��Q���.����r���K3S�φ5D�P����t�q۲iִ�B�^L�=ƽ觽�t����ǜ/����.��F� �����\rڲ�(.���Q�����6~,��Ϲ�EJ,'���V��*��V�� ��/3�F�Ž<qD��H�.��L<RDQ8��� zY�گ���gX���p�e�����)}6�MM�8B-���Wq[����*�gRL���Q���T���#?_]|Y�">Up�]M�*Ji xk<�템� �@;í(���sG�IY�RW�'��v(�M�Eg:��]������bk��H?�e����NY�"��݄�~҃�G&9�I�l��|�O��ʞ}|���G;�~N;Drz ^C�����֓�������% G�c�l�����e�ק���HPK�<#J����O0 �i ����C��m�b�r����t�}(coTȝ�SѲ�\E����t����&�Na��j��:n��0�v��5���F�"x�c�)E&t�6 (-S��W��/=\��r�r�@��V�v�%�8aS��S��1���WB����w��3�ڱ$�F��H����3�K(��4���V����J'��V�ƞ�"�lPK2}�XZl�ݻ������G �+�|U��W��N��i������w�����KL����>7�i^���BS��*.��v7�шZp��R8� N�����&A�%PBIy�� �W�H�3��,��{\p�`�}�/�[Pd� Ҍ��k!R��Lz�D-U7�s�H4?~d收43����B��G��ř��{��0*���d��G�5nR��0]����f^'�1�+�s��uD�؍q������R|�;3Y�?��t`a�M�R��/���>�S�)J
Static task
static1
Behavioral task
behavioral1
Sample
30a2ca61f65210f9c653ad703971bcfd223522973b216449d06fe9dcd7be5c65.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
30a2ca61f65210f9c653ad703971bcfd223522973b216449d06fe9dcd7be5c65.exe
Resource
win10-20240404-en
General
-
Target
30a2ca61f65210f9c653ad703971bcfd223522973b216449d06fe9dcd7be5c65
-
Size
3.0MB
-
MD5
8db556f041bb039f36fdc71d39e09437
-
SHA1
396080661f878a99614e790654677e5b755bdd87
-
SHA256
30a2ca61f65210f9c653ad703971bcfd223522973b216449d06fe9dcd7be5c65
-
SHA512
a75660b97cf3b7adfe601e15e4d530f5e01bbfe2e31dddb478738cae7e47fe22befa11e70873856619f4c9fad3aacb746c5615111b349cb79db09b3616085723
-
SSDEEP
98304:GsmArbuMUvRa09Zs2DuYElXOrSMSFs9/xWBjf5Mq:Gsn3XoRjemu/OSyhxCjhMq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30a2ca61f65210f9c653ad703971bcfd223522973b216449d06fe9dcd7be5c65
Files
-
30a2ca61f65210f9c653ad703971bcfd223522973b216449d06fe9dcd7be5c65.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 586KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE