����ٳ-H����MR�U¬���TPx �Ձ�ŧ���3�5�o�E�[;�g�5��I���Cb�$�J�����CX5��� 2���[p�x�<l�`�iAT�jK��3nh��q(�W��I��E|rn�u3����N�#d߄JA��(��~O�3�$�@���g��B6�ȥ������ɀ��3�A,I������]#�S@ �N� #ʹ��?\�]��/�����&)Tc&��4���ӏ rT�ݰy-�}a1(�Z6R��u!s���j��y8w�o�ϊ�N��~�]E(~�U��`���ٖ�����˻>]�|�^X[<�{����k���G��Wa+)ae.�Ω4BN%�ag:����ȹ_��"��R�����M�+VYeH?�}���ݭ�M�M=��}{J%�^�rY'Xbck|Z�y[u�H��7�p��)���DorD�'(��~�d-��r��Kk%t�&�oT�]: ���E��AF���oQ�*^�a��cT�w�}D�>Y� �H.����fl��zߊ�V�qg ��>2����A4o�3��s �HM�F�~{*Mj���]�����k�~���vr*4�~Lȱ��� ��"��бK|��b(�Pt��/�LGt\a�s��}��j]4�^VE��4ٮ1jćqP��� �#�P��֍_�bP~���or٢���cҢxe��%��i�o���5 o��1�q�n�j_r�Kʊj�sd��"����oq�����X,�J���;����"6[����w�0+;�D�4����5H�na��W�/��G<C�sI�D���3K�����,�\��/��P��[���a)_3�;�¸�Q<m��.�P����oj�@�i�_pFe�x�B���ג�VR�F�?Dz4���; ���z`i8f�`?���0�5�^b t�|'��� ���������e��#Rlt�l:@#�UR��hJG�$<2��>��1^ ��z)!.|�� ��H�$��~d�٬�/�d��y�ґ&a@����i5���fR=�W1�7���>r�D�ɻ�=��v2�d�<��:t�$,��^ZT& �/�Tc��Ձ3��!��`3*�V�o�����e��Ta]}��:����Y,���'��b��q��x��֔�v� t����cMZ}'�g�T@aw�J�|e���(e�0˿e�3�XUG>���c�������}�F�o��=mW����yƤ����=Ҹ��<|�p�Ђ���%��U�/��vc諞4?��(�cKG�^���oY�yq��HK�a�#��.u9� U&�ޕ��,���Y��S���Ϙ�=u�Nh��V�� eU0:,r�h�A5��j�<kґ|�_Ⱦ�Px©�P:/7}�|ҷ�}F.�Ƀ�7�M�CвQ�c�=��X�'O�5ҟ�ӫc��R�sJ)n��*<8M�T�l�������: �F2ɹ~� (g�%� Ys4w {BUe � z�pfy@IG�B��Xf�_��x�>��R8jV<\6�+�t2��8�Dş��^u��b��b�MA8���(�[�L��[v�0���|UG�잮��*ޅh_��<��ri�M:'�f��L���D����E�b����m{�`%>�%��8���ѥ�SFQ��5:w�-��_�ِ���N-�פ�dz��_ق�-q'-8�$& ��=U��$N�|�����{������;�R>��*����m���W!��m��A~�u(���g��)w%g���"�Ė���k�s�R��Y�SR4�X�{����o����5�0��F [3�=����yh�$3��2����6shİ1�#��,H�1��X�!���uP$[��C �$�Њ������Sh����,T)��������8��̿0�L533@�2��>���|+f���3��n��1���+�?jXW2\����I���^m���d�ӝ0ڻ������š�����ɋaL����r���c�#� ��y��k��M�?�Y��0Cw�̣�ho�Xa!����@��y�� ������7�W��a�l�*J;O����$>hkn�� ��� 8���wo�-t��bxo��1����k}a�`���0���o���;{đX�j�%<h��U�&n�w8���gY?���w��}�X�s-�CӘ�=D�s�l}�)����WM~�Q��3z�a�Uo?�Xt�?��f�#s���K�!�ľf�<M���9���4�O�&{�A��ُ�7"��y�75_���%g �Ec5�x��T�#5H��1-�� ծ�v!�Ia�x��bb9��R��zo�O���WV��U(;�9#$_���F��D�B��Y���]�(-0}����If���^NJ�X$� �{�u&�ǩ.���L"d��lA'�6��˻eV�)�|�"� ���N�l�|�\���ū����Y�Tk;��2V2c~�3�e��h:ҁ�Vj�H��Y���K�*�߈�A����E�?"Tx 2k�)TOp���9wUԬ�r7Q�Mr"�N�(���h��B��JF���{��y۫5�Ƕ����it����R�:ܠp�uǤ�M�Գ��,��*�ҫ�x�x�S�r��klaVp��ق$�!�g+/��GVO�� ���x@�h ��zL�6�0�M/�3(Ad5�MN5�N�qn����S0���}<��>�B�}�4H��Sٮ^4̸5l��Q5�kF=�[u���mc"��%����J��y����ϛX�`�������uM�wX�ig�H��S���[��M���, S���fm�%r�G��݆��� |]ύ�Ի-�$���;n���B�������iV���PgQb�Y��V���̳�����*��a�cu��N�����8�ۙr���Q�������:���&�z�������H�덖��M�R��D��P͢��C .��m3�=2����M.D�C�=V����7}#�~��vDz,{��aV�F��؋�<꾡��8=�)�l��+���k ��u������L9� �ˏa���|ԡ���[O����,����x(��ڌ�x:���X������Ό�A��i��Ý1�z�-Y+�<X��5˘xg��k�:5V�J*�n���X��)Z#,ƴ�7ًB�r�i�� �'b����_��%|�mk.��\.w> �Gir�8Q�Ճ�V�6*$��}��\��:"ќ/�G���=����كN,��K�';�\&�
Static task
static1
Behavioral task
behavioral1
Sample
9ad61eec5fc430a1fff1a06b746b726fd2b9beccb20c6d6d659feab4fc339b96.exe
Resource
win10v2004-20240419-en
General
-
Target
9ad61eec5fc430a1fff1a06b746b726fd2b9beccb20c6d6d659feab4fc339b96
-
Size
3.1MB
-
MD5
12f4e8984f9f6db33619171cb74b4db7
-
SHA1
78a0df344e386a6d48eef2627ab74b47d1db263f
-
SHA256
9ad61eec5fc430a1fff1a06b746b726fd2b9beccb20c6d6d659feab4fc339b96
-
SHA512
e9e11bf011deb7311bc1c9005f2c04ceb4c5260b66db7f9c80711c3a6639e7045405756942a1f8824aee16842bd941a04ef3ec1438158d7030456025c1683872
-
SSDEEP
49152:gxhtIfQ/J0eMO3tIjfOQihXRT+TkXClvskBbau2jcZbPhipMu3FLb7UI33VMC/:YhtRWeMOefwhBTZyNsa52wZbPELOa3/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ad61eec5fc430a1fff1a06b746b726fd2b9beccb20c6d6d659feab4fc339b96
Files
-
9ad61eec5fc430a1fff1a06b746b726fd2b9beccb20c6d6d659feab4fc339b96.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE