ןx>�/�z�镖x��ՙ��o��[�C���bG�g��N(F�,e���rD�I�p���<S ��#;�Ho��._��������=)K�!e F̖;�~c��NI��pfv���;5�ސd��uyEP����k2��\{����QE@ؔ�gIƲq�5]�iC�����kg81�Mt/Yv4@����B�o�<D�9n�!% ]e�������ޞb�5w����E�������i����]@|�T�ZY��Q���4�I�& �~�q�<��Kełz��&`��)R��=ǭ'��Ȃ5�-����a�(�N߃�7��q�92��z�l��1�K�/y <�6��WY6c��+���ɤq`YH?��y�����z��Ò��� V� �(�\�tZw˕1�[����-.Nbq 2�Qu5z͊&�M���xo��Q��4���C�+��$I��Z�1;?n=�1w��N�}�E����F������0��� OY<.����1Ң���i�Ȝ6�;3��츑IZl�-���s��I��G4y{G��3 �/93�"g��M�0��ь[�l��pZ��;:!R�����BZ���1=�c}�ʛ���|��f�����#�7�i @� X���E8�z�bGnz�� J@Ėy��T��"�6������� ���Gm(�q�e���k� �Rλ���h�q 06�����p��-���6:/TR��(!��>2+��ދ��GI��:��_���<��]�pЭ�"��0;�Uj�{����gC� Բe�D�c����gO�p+��O�b�����'\f�32iv��0���!gk�x������m�덁*J��0�n'��<|q��Q-G��ȸ�h���% ֜{F�k���G���#f(���K$h�r���m��(� 9{D�m�v#0�Q��i��mH����4d�hS���"D�]���D0P���� 4E��U�bdN*�R�Kq�Ś��w��Ǥ������K/C2������ώ�YlZ��ۙ� V���D}�4��o�����7�[te�.����Vr�%3�g& �����J%���Ȧqu�q�3��̄��\f���*S褡�'},����}C)���i'�k��=�gP1'��R ��e�n@B�!��]�hTaj7S�$����Z(Չ�A���J-��Tel���U��߽Aу�ͧ�;e۷� �6�&s6�4��,�Bj�q�+B�SEf�����)r���o��A�F�>���hK� �� �*h:䞄�����1ei~0�������x����ubԐ�W����b�|-��WB�鵒b���B�N8x�ù��D��ǯ1As��bQ��p�}�Hٳԁ�����Mg��&or������M"�=�gY�NeŦl�W2|�Je�:|��jcW�!�� f]b�ks�'�ƶ�3u� �Ծ~.ҼqSl��8�~��Vl�^)��\&.VH�̰c,'�2��S��}Ϣ�rE�%�L�q����L3�' ff'�r�|�#,}� ����>#��LQ�F,E�ؘ�8��щ�p�@����`�X��ao���a����n���TM�!��FL�0���sٗ�ǍkŔ��R�Z&g���!��]f�O�I��^xu}�9'�e�������s����נ���&��+��p밳.��1��r��*������\�N��y��MK%T�lqȫ!A������"�����q|��'Fv`V�AZ�O��k�7�����@�q<e��T��)�������i]`�<ײ'�PH�u`o�v 1&��� ����ϯ¯u+?{e'��\ �/9X�̥�<�W��\�v�"O�e*$����d=)��R6d��m��]t��7) 7��6�G���!��.���*L]K i �,nY �F�����s����Y�#�O4���E�hu�{�~S��p�*n�;:|.{�ٵ+lq�fQ�a7x>�;�"��ϴ��&x����������e6�m�1�oR�Jt�.�����b�l̃k���M]�K�������X�oț��'y��9���mcH/m�+^�эnJ�H!�!g�BH����\2���W,������7F%b�@ۜj�l`���R���v1a�(6��r�]�<Wٿq06Q�mQţ�/��֟�i����˵�~�{坁����e����A9u�G�^4rW�| �nӨ��=ܾY�-bԴ.�^k� *��@v5ςv�4��D�6��#D�"B!��QW9��C3�j�{��㑈�a���H�A;,7��\���<}4�o*�2��`�&�T�J�S�o_ ��i���^�W���G8�����*���\��-��=��WslH�.�u��=���S���E}�a��nz�6����1gG��wWC=���Z-q��#�S8l?bTkl������e��̦_�P�F��6�9�%iN@ż�$�۞vJ� �遤�>,>䕣��;%(��^Z~\���Q{O�{�������8Ml�&�qUmF)k� �4~�%�.�_?g�H���B�cd���A��,ă#��<�dp�qި������"7�|*�!�2�F����ؑ;�w6e��3���Ĕ�D��H܊�L�)D�Ne�9b��g�=@&�z�&������PK�AV2@�R|q?��)ˮ!��>S�)��܅@;��æ��l�����^�_�|X���ۥE<G��" ���]�ad���B[������s�+�w=ۅ��Kn�� �K� ��o��ϐS���:����t�Y�e:f����r�x} c�ז�~�Б�2Ď�c ��c��ڋ��^8@�*�>�o����v�|�������?���M pZ�r��/T�����>� a�S�ˁ��L����κ�w�p�����%h��[�ٓT�V�����]0 ;��Xy�&:�c���S�YٗKKV�)q��^f�D4�|�7��q�ly�%}��7�`MnZC���"�;E{A�kN�A���h��L�{�R���ԭ|a�c|F�z?��[֪�����Nd��=C�M�B<F'X܇�䮖����^ygf�b����v�ҝ�_�j<�� �l�B_�d���*oӼ���������P{"�W�m���p�1�������9���Ц[z}���@|����6L;�Hp�������X�Y� H˙(K� ��B؏}(�ի���Fߋ&ޏ�x·�˦ �=�}�(������R� (2�#�d�c�#i�0G��`_��y/~2pU�������Ɋ��'q��QxH��wUw�����ˌM\ͥ`�*h���@�!x�!Xt֘`*�0��(�Ĭ���^���b�ضs(/�$����b���)c �"\Fh��y��l���q�Y�'��t��s)���3������<�v#�YG��I�d����j�Rq����uQG�˩�|�`Ѷ�q�y�v=Ew�ҭGER�����#3MZ���|��#��N�ϲ��u�����y����D�6��/��z� ��]��B�[�ǡ?�q �؆5&��K7�D�������Q�9I{f�H�"hrp�9_�i���I�%��b�+YO�L���1,?
Static task
static1
Behavioral task
behavioral1
Sample
2c8ade2f3d623f25c7844ef7598f069e7d7cac6039b53a6dff0858415bebe16d.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2c8ade2f3d623f25c7844ef7598f069e7d7cac6039b53a6dff0858415bebe16d.exe
Resource
win10-20240404-en
General
-
Target
2c8ade2f3d623f25c7844ef7598f069e7d7cac6039b53a6dff0858415bebe16d
-
Size
3.1MB
-
MD5
aa3d98b3d748ce855a4a68b6ddb0a6e8
-
SHA1
6612366422ef69b830ee2e4091648b61c3e0df5d
-
SHA256
2c8ade2f3d623f25c7844ef7598f069e7d7cac6039b53a6dff0858415bebe16d
-
SHA512
cb79b24eb20411957bfa7103c28598718ea951f36ee55508ce560143a3c1a12834552b9721c87efe73c9e07eb8c664df069bc799056ef49e167feffb7890eafb
-
SSDEEP
98304:cDDnhsVdo05C/BKhZ9t7MZGjYXRxHscfD7LDywz:mywsCZKkHhFscfD7LDy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c8ade2f3d623f25c7844ef7598f069e7d7cac6039b53a6dff0858415bebe16d
Files
-
2c8ade2f3d623f25c7844ef7598f069e7d7cac6039b53a6dff0858415bebe16d.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 589KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE