�+�z4����*�P#���t�/u�$�f����NhJ���;�LS�^��R�~����5��fŪ%�8%���rs.ka�3�C!�1�n��2�jj�]��ӗ����U�5�9��pAˢ����Q��2윅���&����^�|��'�H,BվK��' �����w0�p�Wu4V�c�9��=�9YO�s��B͖�_Đ1_�����z5>g��Xl���Vt]踂@w�L4MH7e���錑�u��?ɢ\�)�H� ��&��k�6�J-���4�[�G��g���OX��ʘS���L���D�W�:��n�����3�s��κ�I{����ŗ�mVV/<��Ԣ�vsH��4��w�{� ��1on�h���W��fa]�gJѤI��©c�r�lb"�@+�_|,����Kk�Y�q�76�Ib�y�Ɵ1������5|,�1h����@�(&;0_��x���#s�x��jk��홤��'�����\H@��j�E�8�O�&;J��-���a��czT �u�� ��� ^�S��ńI�:L�>�BP�������� ��[�Pz��5I�Z̻��6���� �C6�A떽2b,�ņC��P'zP�))e�_�1�@br�ͣ�PE�r;�fL�����C��&��h�w��0�&����k+����^�п�� ��Y}���`n���ע�WJ�yt�%�>.^@���@�u �z>\����rɶ�(-Q2��~��:w-��+%i(��I}zy(,v��������j�sD����s����F���U�~�HA2wA�>�ȂW���iUu��j}���5� �v��(v�,��=��U3���g������U:T�I��%���W�*�j���gT��?la�TOm,,��j�)�w�Y0��뤌9zn��{wFVa{�� M/!��ަ�키�a�q� �G�U�:���X���<|��kj�,��'���p9���Z:q"D7n�G\���Pq��k�=�}9T��w�S�N^4�0�gW63Cd,6�G����$��Q���K��^�����:7ƒ�وn�}�<�m&?�1_�3H"6���k_�Ov�q!����mv�ʱ�ްN۫������f}�� �t8�VUrco��_k�iR��)�A,�\�lt��f��!쯪ly�&�7�����A"��BNԞ/"��;�,u\8-���n�������]�5a9h��ґ���U���A�U)(�A�K玹���Q�r8���:W0D�?�,�� ��Q�U�ݘ��|S���ub�5��5�����N�{�{�F�F�5�ш-&�� ��h-���DBڧj����C'1'˴�X��f]s0yi_���ޱ��w;�� wp�����i!s�ky����G,��]�j\1���VV#�r0u`v��Q�+�J4x���,XP��+f1�k��@�ӫ�l�}���?灃}-�k^ED%�+1n�T� �:G�-��g������K#6w�W��u6V� +�v�R�Ty�L�s��: X-B�Iuv� �c�[~���o��"L�O��@������&��@t�f�ě�AZ ra�=eCٓL���.� ��~E�?�YR�U���,K�9f�����G���k���Y ��M��"v�����~w:Y<�+���<5dunF�7�~j��٧Q( :S���\ a!���������˳����I��@�o�"V=��_����YT��Gݑ&�b�wUz4�ݙ�n�u;�J?Oak2o�2Axu�����W��p��]W<�Q-R���v���F�/ux�ɦ�ay���4Z�N�|��~$DE7�#U�3�v���u��-������҅���4x����oB���X��=Փ6*Y�I�6_��]iù�����*��!���"Ͳu�<`ee��Nu���df�Ҿv<�W��*�g�'��5LD I�`�w��R�*���m�w4�\L�p8۫��9��;d�cK4�hD-ɝ������.����7?��@9��1�^�#��:s�N��:em�=���셝&Ys�AN�^eJ�얿���RZ�g^��F������y����?�L�-���L ��[b��g��@KI�H3f4��O �@/���h٘�(1�ٛ'I�=��?9�%�V��$�I��')��صX��(����}_by�����Y��oӊ�ݴT�HMz\��l�W��р§�B{� �w�U�$�w��������r����Z���nގ?�H3i��2���vS�=��U��U�������R�T{��i�<(m`�آ>�`C �뭽;��7F��Nj囱3}�^�����Mu�l&��]*�c��97���ЇA���Z�Ƭ}"jDƯ�ύ�}�62l�e�:��`�n�Vt����_Hl�����ZP����cY� ����/��B�e� d?lg=������dk2�,��2�[�XK�ts��.��g����Q�罤rj��P(˃���cJ���~�x`)9e7�|�^m��2v9<7��J��3��8���Ug�GL���)GE4W�OUF�����#��h��Y��7b�i���ϲ�L��_�Ό��S����@���u������` �>�H[YMGq���)��\ؔa��IWI�g"D�uR �=�n�&C)�|��5�B���Q9��'�\>�4���@t��n��)�S�:~�:��_���ep���/�2[W~Uœ���yA��$���pF�I9���{]��n �\���h�<dr�_)� ����ؘ}H���0�e���LUD ��Ԇ� ڄ�Ȱ�"�w:������qH�A���@ k\��-_=sH��-[1 ��Sמ)�ZQa�[��j��zW픔De!l��������k���4(�v!6�����"��Y�u�r��O�9�/��Z��[å]SoVޗȹ����� ������w��=P��{�ֆ-���]5�g��kr�}��4G�͖�Gb{�C�4T��ذK@'X�d h��Aq���9j)����!<B>C+�����F��7~�G��/(Yː�P�S��D��h*߉��ը�Z%����e����m�|x�w�n�J}/ODk�s�w�D� ���r���ia|���Q����@��LF����ٖ?�LhO� dG[Q��r�r������w2�dOS��QGȰ�b3�X5��#�����}�����J��Mc�s�c���Rb�[�'�$�����g�h�LՈ lǼ �Vp0��d�P�BT7�)!�8c�0��
Static task
static1
Behavioral task
behavioral1
Sample
244a210d981a510ddb06a8608f33e381455c4974ef8f7d04c0a6b1b4b03b7f2f.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
244a210d981a510ddb06a8608f33e381455c4974ef8f7d04c0a6b1b4b03b7f2f.exe
Resource
win10-20240404-en
General
-
Target
244a210d981a510ddb06a8608f33e381455c4974ef8f7d04c0a6b1b4b03b7f2f
-
Size
3.0MB
-
MD5
13d5914654d4cb8bc7f83755d869ae61
-
SHA1
7e9816c9174b8bacc95a92f6bd84117455d072a9
-
SHA256
244a210d981a510ddb06a8608f33e381455c4974ef8f7d04c0a6b1b4b03b7f2f
-
SHA512
7515b4b00a7b58b1accd78cc518ec64e79777305ddcdb4b35d2fe0894032ee2b2dcb395d2829acde009e8070e19f9513a7df7f78aa6874d32e7d861b367ce7bd
-
SSDEEP
98304:/l7/Qdmr0MIE8qigzwNAktNpP1SuJEXq9t4MPf0PelR:dsdmguigzwNAktYBAt4je
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 244a210d981a510ddb06a8608f33e381455c4974ef8f7d04c0a6b1b4b03b7f2f
Files
-
244a210d981a510ddb06a8608f33e381455c4974ef8f7d04c0a6b1b4b03b7f2f.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 586KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE