�{z�K���g8[�U=�������FT���Bl�D��d���m1r�N�K�ϴcA�P���^>�jU��/d �;�b��y���,��I��8�ˤ̖���}.xW�!r7c[4���H��W����5:��ˁ�Fu�����"��q+gz�묠����Zs�k5��b��y��G/P,}1ռ��)��,�Q�#|z�Y&�6��4.�=$��XHux��Y�֞�� f��[�狝��&�(`�2U��YW�$�1��>����J������B����j���f�.����z�Պ9Y#���j9��)X4�'P!/^�w�$c�|j?w8�/����c�ש�[�t�������=��WE�&�:�h�b ,"��y�M)��mU��8�����������)��u-<�7�,mC�s2Q��U"����Ԝ����m���)Dh�m'�S,Q���,>�F���U"��З'J�Z���8��s>��W����o�D]��<R&��}]nl����.��tcQ�2��d�Ip-c:�J���f�A����5QD/ru�ȹT�&�z�jW��W>G^W 盏ϝy�߭���ҺM�L�ne�q�pXWo�����c��Y�s҅)٬���,���3�Y/Ι��H��\Hi�rlC�dv� vP�}�rG�s|�2z]�5���ݵO��`���������{������Y���w����ʷ��&l��);S]H��>wȌ�D�Ż���0��˴Cۻ, �����%X�m�7^����l�t]כ�MD�ǎ��m �h�<�7�TKޘm�jJ�V���is �i��ދe5�@3�K0�Y��m�� �:.�$�1fa{�u��-c�*}����6��N/;[�3uŰnr��F�y[��~3æ9�9����t�8͞D|����#��j�d��|��+���?Q=s!!��C���<R�]O29��9S��œ�q��F.�"+�G�[�9mK�Ki���?]��:�Z1�f���s�;�]�P�dH@�$ȮU�?���[#�^f�1�ܒE�z�����->YiL��V��F /7�8r�)(��G(߀���L�=q��X�AL��^�gBE�8�����3X�m�N���nPo�-���uE�e����i�Qm�-�2����}Y��&�M���Tsx��j�l�㷶�1o�T����7:�0*�d��G)����N����x�s~EE��X_=]����6�]��';�����~�)��Adx��f8��Cr�߀��?�Fij��� %?��c���`����-�3S�l*I����H������0�/�% w�g�(ܞ'�'>Rf<���:e_Rx�O�Ǚ��ZK*v���c`^���Jyin۾�wG��s����q�=>������A`r\U_;uHC��_�Q���x����3y��a��~�H��`g�#\qB����ɸ�%��E%H!��ɦ]�ʃ�^?�D��~�_��K_^�� D�)?pa�t��v����4s����mӏX���#��������ҡ2���M�mNnU���Wg��t���YS�9��/�6|G�Sٳ2]��P�J�VN61#����>~�`�m��<��:~���H���F�����k�� ���F�ݓF�.�r3�E���S>�:9"=i.����Q��Bm@��~:��9�^���.�u�%�|�BY�8BmI�Bj~ߚ��C5LȯR(��k��7}�Uw����2�kV<�� �h��hh��܋�.��\+��im����.ն��2���3*)*�d}а^��.��`�N ��%��7[��$��Y�7$����R�����Д���h]�4�R���AMW�k,7I����y+A���}6��g�I�nJuR�8��/�����6����q�T�6�n,"f{� ��x#r��̚#��Sdt5j�#���ge�+��f.n��/j�d8��0`�_�TMհ��M�CgK���e#�1;�� �i|. *>�C��t#Z�����tl(m�uH]�KLy�����Jʦ�Wg�o�������l���Y��.��2�[���Rҽi����r�ɑW�����$�N�Z�;qBr����#|�D���%@��f���\=���q���1%Fģ6��%R(�� �;Mlg>��@&���_|g��|Y~����kh���-���1�����d�{C=P�T<�|��?�|�ꋓJ8��?��a������a�m贚�����O��O��j}B��*>�xS�Fb��)�'9���YS�`S�!�\�b�]21~��<����g\)�*��,�DD3`.Bj@��s^���t##)�1� �����ּ�s,2I5f�~EW�ϝ��j�5��CX'K�T��'��4��$�(��ZK��F~9��yN��M��Ѷ�Mi:��Q��Z4jOhrM����n�:&H]r�^�0Z�~g(`v��{��ƒp�9y��iv�byR�3���G������*��4(�o�eO�%T�Ix���V%c��#/�o��I���H�\Ob��3�rǤnl�����$M1��7u5������.q�RZ�`Ԟ��1Q.���qp�m@�mi����q��2I$tL������én�H�<���H<������`.i\l��J����Q #7�L*f}9tX� n�A��N����#)���L�7j���wB�(�[��Aa3{��]H�?<.L~�1A<��_o:g�==g�F���3� �����r�{ӬR�r�p1�e�/���Ǫ��JqӃ���D룘с��������Jƕ����8������O��q�]�v�em9Q�F�^V�N��E#�� � ���9�b�R�`,�v(��"U�h'�����LZY��R)Y�J�K�Q:_�'V�DŽ��P�6��)�/|sR�'o}=�B�#����C�5j�F��X���J+0"z���r����¿�A}�xa���T��p) ����@�Ss�ZȖh��*6;\6���W��(� ���V�a�k�X�SD�@��70yuٝ��zꚆ#\�@y���U#�^��� v")��h> ��F̭���"RD�_St�A"O�����p46�~��#X�ӹ���pT<T��9/%��1��Kv�F`���S����F��l0nB�ЀU���^Y�|�������r��u��eQC�� i��[��Oӟ�&�J� -�9qs^��@��� ������H��a&~y/Q2Ǖ��3�%]̾�;��K�^a/���.����~�1�d�q��V굲A�$lBv]&�����a���I=e����A(ʩߵ_�ǚ^k��(b��ߠ+m���v0���ޙ�,w6w��v�5��R�����9(�Z�o5�O_���n�ۉ�T����$�K«�@�~�i��>j��['G���[�Ve��M&¹T��G��u��{�8��լ�2-yn��[��? �TF#�_��1�S�CJ�'ʄRhHM {ޅ��& ԝ��%g�9T�
Static task
static1
Behavioral task
behavioral1
Sample
c74a5f1406ea1912c82eab27f4e8d84590a3cb627635f60775a6fb02fbe68f3d.exe
Resource
win10v2004-20240419-en
General
-
Target
c74a5f1406ea1912c82eab27f4e8d84590a3cb627635f60775a6fb02fbe68f3d
-
Size
3.0MB
-
MD5
64443bee7cfa7c6610cbc40d0e464fac
-
SHA1
c80e5680b86c3287e83651deac784fb5f531009d
-
SHA256
c74a5f1406ea1912c82eab27f4e8d84590a3cb627635f60775a6fb02fbe68f3d
-
SHA512
21eba0957fe765f374a2e161345e8b5b22951e0fa94705ca91f7dbeddb6cca96b3f6e848551411417e07c2adfc32e7c1436dc2d6463e3798efdfe72df2dd44c0
-
SSDEEP
98304:F1Ir7kiomRXxDHAgrkCZkelQg1Wr6fKA5:I7kio2BDHAgrkUlZMr6fF5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c74a5f1406ea1912c82eab27f4e8d84590a3cb627635f60775a6fb02fbe68f3d
Files
-
c74a5f1406ea1912c82eab27f4e8d84590a3cb627635f60775a6fb02fbe68f3d.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 589KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE