P��*;�H�o�Z��zQ#+,��l֜ŭ��OaoT�Ϣ�!��ǤG���&����,)u�o����G��t7�vR� A���Y�u`�y����5� �C0�9k̙ c��g��H:���ȿ0�:�q?��۞f��bI}}����I{]Z�+����T���$���;y`�A2���]�C���ܚ��ClL�;�2 ���+-���7������z�M�̦<�r�xDbF��r��`���8�k�����A-aN/��yiO<���R/Hlm?G�4�M��6�=P��H�����8DP����4/��<Hmz�ij���@ܶ�g;�f*�����HqW���up���5��hh����oG���Y� �2~A�JS��tw�Y��&}�m�A��&'��q�O P1��qZ�2��3!IY6����Ԁ�:��N��ߠ���0|�vն܁��;��wG�^k�r�džf �-R㵠1n� �j&b���%�˕7*G�tS�.5M��,9�����:זg�E�hi�?����h�Y�|����{�sr���[|n�����/���I�a�^V��5��єib���6�����6�6W�( ��I�G=��z~8��w n���`���/�z�Pl#U�����מ�w�g�.j���$�J��ԗ��q�!?�+Ǜ�uS�{�g`p�at@� �钬�P'E���C2�d����o$�N�1z(�������xs����K��)�+C}2fY�����1A���M<���*e=������*B|�6 (� �}E�,�Yk�}��W"�aUŔc�G��&jINjΤO��"jV7sw��!�>����v��\��9Ze��T�&ሩW�w�� ]�,%�^Y������;�Z�P��m�-���2��><)Eϔ�O�^X�Mlx��Z�kt �k)��R�{2�D��5�r�<!�CEo4q��#��.��o��M)��D�v ��9琭�D�˅���a����@%M����YFf��J5E�M�\���pFQ2z���!v���q3l���:~��w�y�U��x�f[�XW�&�-�[TB$�Aֶo�c�R��i�Sd�')�(&���vK�N�0W�fT<�wG.��Ozۢ���>��"��ˣz��wc�]����ې���2/o���t#N E�5����6���֔��?i)(�H%~� � ��FL�Ei�p�I,&dkϜ�ťh�s�Rꦉ�X,,��?>�I��F�Q}绵}�@�k�dixV���[��Q9�A���U�+`� r���ܟ�<B�Z�:�T�k�W^D\�GQGc��B{�� ]�{X��9+j(1+�����O�����ܝEO��G\�2�����.}�6�vh�h�"�I��ԮG��\��K����� vڑ0Di�i���^��b���NV�XP�X�B���d����d���tL�Ou6|��yV2!�� !���gPd�\�/������i�{/�i��l�l�9�ƶՋ��ł!�-M��^���@�����91�%� k�|��r=�V�[Z�`����G�%�M��� ��<�!��κ�<��l��#m^�/�����PuTr��͝���8�^���:���i�&��&J��¦j@7q��C��1a�/�M!�J��dIo'~]C���(B��^isT7��g��Jt�[4&�%�����R>����ON�=����^�?^,�倲Q�o�D92-���G_�+ h�1�SW���v@�� â�k)D��Ӯ�!��F˙�g�<:���&v�l�(0��dɤ!+<7n)k$U�g�a@�9v�?���V?uA����r��#�؆K�+�a �#�/y�! -�9HG�b�9�v�!�� t|v��s����)۸��,�������A��"�DޒZ���=� �x�)o렝%D�Q�Lc�H@A8���\9�ɖ����]�Z�@�!���+���}C��if�K%��L����Yf|��������K���q�����LaԬU'����dr �����g\�W�G���fj �Cr����Q��H�$W�f��2���F1�I��C�k�@h菖�S���'�r�J `�e_C����<��&�Lxi�� �Y�1(��������Z �c59��������l��f�f�>�ğ̴�`l��� ���7���"D�?�F��L���>9�& ���˟ U�b^�����=�>��B\��O^�W�i��Ѧ5Ъ�����K�on���������K:�)�`�-qtp��UdL������L-��w-�$������|Dd��v�T���!�]D��� ��mHt7�}���U=�e2Ն�¹3gS��n����S�)�'e��Z U�Ta�� ���l��J��8�v!��\��[�aV+R��o �����r��Q�~�S)�*^t�.�r-F�`���z�3@pCA"���~2�n�L�r �6�2ՕX9�-Y4���Y�t;��V Ў�m*�`<7g�j[�%y �����*���ў�8u�-� <�H���W���j�4I���&ܓ�� ��;����A��%�n�_��H�N`�,�[�e2���r 4^� �I�������ܾ���?#��9���n�"�a}'�[�/�V��7�@��K����v3�m��!��w��翉��{I�����[�B��&����ݵI*]�M��O-H�ؑ�7�=Ao�cҟZ��iD��a�.�T`��r�V��ĺ^1��� i��<ei>18i!Mu�D݂*�������KP��O9Z�|K�8� ��6<Q��y?i&����K�e�K="�z9pp�ধ���Rg�H�ŕc���L��g�����v����5��O^��g�2���"�-i�v#�]�`�c�6ϯ;~�H�E�@=< �)|,��ٴU��7�����6�B������,!#��آ_b0��\�K��T(���T��<%��i�V�c��������y�O�$�Z,[�:���k���I�6���I���l�O�Ē��x6ac�jNEVEP�q6�&�^�5#�]����f���hO҈����$b�<4�� 6o���N���G���N����W�[F���X�����a�ةr�_� �H�K��> �qZ!Y��W�FʣM����J�g�x�Y��+�Ѡ��I��%[^�{�we|�(� M�4?����qଳ'��X�f�ho��k~:�f�i�����[`9�=�Vn�,%��Ms)����`����*����[�@�֫ޙ�.�6�2����]�jIUJ�``&���&� l�)�VA2�l�CU~Iv*��� �8�=-�(n��$xB�LJ�0�Q�Ф�7���sC���dȢ��urq�A���I�:l�BՌ���SX�,7{��LG������ m7IBf���"�ׇ8�9��6D׀�DXI��~�Z�2�),=V����K���d!���d�V� =<>5�`ǖ���e"�M��$_�I�.�G:y4���`\��"���f���e�� ��0P�fWR��SJ���~ټ�#S �[���l_|�Pk�8�U��8� �Ӎ:7Ѫ������Fu0����_��N���_=o�v�H?�i�\("9r����n��'�T��O��J&Q��H���h�s$�R�we͉� �ޚ�����>�96�������TD�w�`�-OKސpc=��)i'D����s�|+���ɉ&[~�y��W�Ψ��� @9ul�r�ע�v�����JPD���-G���(�f�W���,µ`��M�c
Static task
static1
Behavioral task
behavioral1
Sample
ed0162bba102fa5e5f3d12cd93e008b52786bf78b2178bb68f904fafcf01354e.exe
Resource
win10v2004-20240426-en
General
-
Target
ed0162bba102fa5e5f3d12cd93e008b52786bf78b2178bb68f904fafcf01354e
-
Size
3.0MB
-
MD5
e366f54ae083255944cdebd0580c0a57
-
SHA1
4b7290e023f36025f0ed97310e9466924b73d897
-
SHA256
ed0162bba102fa5e5f3d12cd93e008b52786bf78b2178bb68f904fafcf01354e
-
SHA512
1633fcd040a1abe1488de11ce12987c54f1f79a6f1effd66a3a1f4a14eb564cdeabdd6a7f27b09ec2b08f0523c61d15a6730104bee74217b6c2150fca8621a01
-
SSDEEP
49152:rpaLi25rKEihY/rSwxwESr78BjGIUUyUm6e7zVu0B2h6orL6hM5lZxI+7g5I4paV:Ee4rKNhaewx+78Bjnve7zBB2h62L6UZE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed0162bba102fa5e5f3d12cd93e008b52786bf78b2178bb68f904fafcf01354e
Files
-
ed0162bba102fa5e5f3d12cd93e008b52786bf78b2178bb68f904fafcf01354e.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 589KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE