�<�;�C���Ea\�&�}����J���>u[eH�����yhU�6�rX���J�Qr}�D���eE��*j�'-�1�ӹ�(�u_rM7�s�c��^����t%>&��u�M�w:�~+����/n���i!ͤj��z���^ɺ�.����\�o� �lq����O]qu'L�$��$��5F�q؉�Z�xa�ņKSJ���.���DT�g�V���{oV���%T���X��s�����)����xp�q�`=�.e�a��]�������%g�������mO�|��G/O�WT��UE6A'��s�������2X�w����+���L7��Y�q�Z������7����T ���%+��J�d�`S��GUG�%@Wo��D��J�E�̞�]���4��_ߡlj?��ǻ����r$�pvH"rf[D ���P��}s}T$�>-T6�E��!,�v�wN�# ����) �\�騗y�~~βm N��dg�� !}$d��f4�Cgn �5Ŝ�}� �3'm ��@�5��&/F7f��:��ռ�b����B,���.Q㌳���!���Y/����_�%G$�8^=�N%����� v�:^�3�{^G�9 X����W�i���-lQyu��� �G�z���yWuG$���hf���TE)�ìj����9���%r�V"�w^/�� �'���t�"�-���~nt�œJ[�������t\�����2}[��l��@�[���tײU������_�1|�Z�ր����Χ�,36�Q�o�j�Ll����B�0���@R��UC��!}GMԽ<�`��9���/�u@��١w�r���!b!Ϟ�}|�i4����I�+[��m�N�W�� ����!���r�ByG�u�y�/?���5ƺ�>�{�&{����å�,�V'���m�����[Xa��f���tj7� ��<�*�/��&a���t-�p4uV ����)y���#�^!���l��y��HOOFd��Oc�r=��Z�(�2>� �n��mx]�����Ճ��k�:��2e�u=�9D68���@�i� ������HLF4���C�)������Zε�OB�頞�KҾ���Z�N��r��5vr51�|���a��"i�?+�l#�L���H>�����5�4���� �7�V#���ܘ>-U^���̱�,z�< 8��-�e��˩ �)\�H��Gc���2��sO�{���X������Uǝ_T�<������ 8��3́��i�ˡ?Px$���~u5#ـ�K�+�'1<ѫ���g¬)��l�Q����O�mҵβ��E�%����ނ��|l8)i��of�� ����rŨ�Ry���Y%㲁{�X:�^���li�f�{�O}����g���%: �3q��F���?j:X�G��=s�zeE��QT��mK�^�.�{0#7b�:w`5����_��A�L�WQ��B����p���/Ώ�����ɾ��Z��Mv�~\�����sj�)4ݎ^Â��ֆ&dP�(MB�����:��;ߧ�5�q�<�wn�K�D�h��h�ӅsC�# d��#n2����m]��[ﳡ��|]G���D�:�uj���hbp��s0��#\wt� QE��~q��!5���N1ᩤ ����O\8�mr�hi s|K��Yt���U�K_]`v�p���Fٙ�x$T}K�a�qJ�R<����� ���cpMj�F�_�����mгg9?�&'3�jҡ�j�lj"]����OIkU����J�����������0��c��U�{�L�4~���4�GO��Q�����'ѰE��Z�.�0�V���Z �����5��ߦ�pD~��v�������u�6U*���E7�hV �����\u�,9���=@rM����ȂMb�%5 ���)BDT V���w�����k�5��i�StS�"�}$-�2��6��jy� '1���`���N���G��Bi`4s� E]��E�m,f��8�ێ����`�A�s �-:Q��]�yV�u�g-��S! ��ͧ�fiz��<�f�<�l���:=�{l/� �%��\���⍻����'��;|y����X�]�!N�Нy�����f��+�n_��o��:�@��c���ú�B>�\�=��� m���'"���O�/�m�7䃤��T��G]}��A���r�+> O$Y��Kjf� Rm�c�7�eDkth�K%�w�%��傦6�8�����C�`����S�����k�0B����N��VL(�nr��V��6���|SJL ��Y�֪�����H�N��{t�"�VW���S���~4�� 7�NUTV����(LS���SV���� P���93��*�(h���^l����V��y�Vr�����Z���MW�EtW� �O��8���R�u����g~�2���&�r�s���ý`�mzCk��(a��XuHU��t�hr�$#��7~]˦�Z�=���H���gH���(�e�ٮ�0BuXW�j���[�{�P�a�h'c�q�<�AA����ƶDq�����[��� -_H]mLР+���d5��� Ȃ1���$jJ�N+�"eW�Q�Y������3#�4z�t�V�̘�F�N�v����|����!)�T�QSVx��^�L����'\"w�q�5@'jw��fx���Q�����Y^g�'������Aq����%�[⌫�8&YQr����^ݕ�8��f�$��<Gl5b�tTjo��C�}�dV8t�h� 2mo��5�ㄜTm �+e�N����_�K%�����j[���_� ����F�?��9��{I���r�/�����nM�\�P ?�����C۩Yq+��@�{\0�OF�3�t�,j�Yة���D���z�Z;u�gV�⥆B�Q���Yq��������?��������ɡ%����/��y��hf� �i��Ý�&�7� }\e���,��x:2ʊ!$��oS�X�DdjE��Gc��F�_fB,C��i�y(xޅc�������s厭�쬼M
Static task
static1
Behavioral task
behavioral1
Sample
9e49de6ed1a5e530399b81c79411c7f02240be2e005c21819c5999a4157f2a18.exe
Resource
win10v2004-20240419-en
General
-
Target
9e49de6ed1a5e530399b81c79411c7f02240be2e005c21819c5999a4157f2a18
-
Size
3.1MB
-
MD5
92a589387c72fccc55483d98e60ee342
-
SHA1
ce17a8568fac4936718e4296db1af7905dbc4173
-
SHA256
9e49de6ed1a5e530399b81c79411c7f02240be2e005c21819c5999a4157f2a18
-
SHA512
2b12ef681305c2cb3fac9e18e7cadc866e0f8e2baf75265d568f729dcfbee4332a4cd03fa8027a6a089575f254af404e6012f323fc967b1e6ba72860198fe1e0
-
SSDEEP
49152:ivgtqPky03kXf7btxolT4k5IKMLmbbLqtqcJVwMRg9A9E4pcs+B1ez+ZqAx01tJh:IPky04WT4NsOR+74pbNtJwE3ZNf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9e49de6ed1a5e530399b81c79411c7f02240be2e005c21819c5999a4157f2a18
Files
-
9e49de6ed1a5e530399b81c79411c7f02240be2e005c21819c5999a4157f2a18.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 586KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE