]`5�ճm��Q�X;���v0�!�̝��^�P'ӳ���b���X��@� ��អG�-z�D~�D��>��)�"�=OP@nW���N=2����Ԡ��M�wj��l���kj �@ԖZ1���nQ�ɔ� �~,�P8�|Ӱ�U�X�E8����HI��~�:����$N����̺��A�m5��VnzA[�,��"~#�绐�gyd����\�b��y�*��ݡ9��M�eqrp��}��_6��r�Q��QYY��$ؙ=���~Ҙm������9�7a���hL�aFګB0�� Ec�̉�[�#<,�@��s���t����'�|����*(�N�5������$�KT2���][Yu�W�cr�T_P�Ts����� ;�o#���OwTc�����vi0��|�0f�p9$�b�ٱcv��E���������<5!g��z��U��V-��ԗ�cqtJ\XA>�Id�e@���!������� �y�N�P3��Rc�\xE�����dy��2ġ`�4��w���߷�W�e~u�S8������ϥcN5@�K*W��:�E�(����$T˽�Bu�n3O��_��y��+m��I�:G5S�J����'��Hw��� �""���쉮��t �������#��=zǟ��}6�R�B���t����c^��CَS�M[̽��n��a�����In�_���j-�G��ybٶY6L���0�d���Ń��x����[L��݉>��B�jnR?��u*[��Ԅs�'3]Q�k���-#:iR�@t$���,���(��� �w��f<����1����_j�B�,R�� �"_���<a�N+�JJ�v&p�pȯ�X34��I������ԨM�Wx��B�O��a5��-}�[v�ɪ%���;�^.���#eYe��J�/h�ҁ3G^q��}�Y�3��K���[e�����=�]���+�c.9!�`)� �M�Z��4�x-[��{1�Q���z0���S��8�}�W�;y�/o�-���a?�9�����-*�i��9-&ڒf��w���= <(Y5���_͌g2٫��K]I�'��R��YzJ #f�7>�W�RdD�ܹ�aI�=aP�W�_�!�rL�N����mcd+������£�LʷhG`Xpߠ�m5���K6C��R���S��9ɹ��� ���~�S/�.5�G�~�>KI�;��:Q�@�r�V}� ��~�w;��yO Y�m5��ϥk#�Ţ�$趋���u��������.L�˵������u~֗&1��1X�o���"�p�Yܳ��@���4��$P�1������Ӗ�$E4wz�9! ��*�ܯ��++��H������T bS��\w���o�y��Pj�p���p��?Li_�z���x[]=�9}�2�d��ba��VE�þ���:Du�yj���j��� ֠�[9e���3���N����Q`�,�������5�a�*�N��_M��I'���ú9���0!�W��Uݸu"�ЌM�w94����ux���� jJ�'���.3ˣ�kja>��{3�� �"k���H��Ը�z;�̓|���TH Ӣtl�溚�C��A��l��H������X�p��ĚQ� ����g%g�j(�o���}6,��r[��R�L�W��]Z��!�������o ��rG��<�N<�d�r���+0������Qb(��0`�� �H������R���}���:�K1�ʙ�"���Vu̿-�T\�90�-�WDLO=�;X|̵��5#��7e��o�E��S�X=c�|12���>�UF�A�t�A����=F�tPO/�L���-}=<.�\�~7v�,�ga(˾���!���y��0=����tl�}Ղ�.`���)FkĸI����0��w�g�_`\��2���u'�F���d�d�/��&+��s)h�l�˗|�Ћ#L�{����*x��-_�3��U�6u�� ��+�����yx~��8��G�G�15˥�(9��<�g�i{�,�������M�bg5��X*���W+0 z&��G�t��P�ఒ�CMd/�1<���R���b����- �[�%t�/�"Zn��һD�L��.n����ޜ��1���a�Pm?�;����f�ç���Msw^�_�^����]��?H� ��*�H���?LP`'����كW����Cҵp�tc~%D�L�kÚ����*j�w�ؓ �l����yz�\�7�p�c߫1��R�=��8N5^���;���h�{�����(~>$c����1��H��W0�2��op�h)Î�vX�E��-��J�T�L�2K�g.�趦�n{����м���_�\������͞A�.�8���hv�e��َ���`(Bl§]�x=�9xha�@r� ��W�t)���=��>�5���f�[X�5��~"�����w:�]�K���'~�v����%��"�T���B�X��*�q�>|��;08 J�#��dKO�Ww�H���_�R�$���� cdR�3���Bo��o}�Z������D��ԏO�+ H��a�}��A��P�ָ��B36A�LotO�71_s}�*����������#X-��~���ӈ�j�������-�����k����sj�[d�b�ۇ����^�G�����P�rK����D�F��4V�/�����|���^g1B ����PAqT�������t7��OD�'A��������7��?#'6{����^�`�%�ND�u^s��P�p�e�vU��9�6MRC5��aB���D�������Ъ��0�������[6#=V�!���Kl,|�b�u���7�6v���j^'K`��P��`�t��ܤ��c�]ކ9~���Crg��2��ؽ�\����i�YR��"�s�\m�z���?���%��'�xP��߹��yUj���G���M�i'����j4.jg���X͉X�=��.C�JrX�=����r���ԣ~��m�CD�H���@��{L40�)�Y�U����Vt"&$3��QC�"�GXQx��}E�7���ü���mDjHC���+H��k��]���̃BZ�P�B�e��OK��X�F�Nq��ɚږ�'��?�.��k�"!U���_A�J�3�����[{v�K�!�����)���cG�f�-o=[� 3u=�\r��d�gq�?��������5�כ'��D\ NT����t��5O�@��-{'b;����^�hO�����~�b�x#��'0�f9wnǦ x�M�R�Xf�{������b�V��1s�H?��a��.��ȁ����Q�,]6�����}����p�3�>��,�p����M·��⠤���Qp�f=��� ~��" �a빏U\^��s�}�_p����Dou^��K`�N���)���/y[=xS��
Static task
static1
Behavioral task
behavioral1
Sample
33f1c46ea9e51e87265380463ae2d21978c4979a8e475597e868808d5d5e8ba4.exe
Resource
win10v2004-20240508-en
General
-
Target
33f1c46ea9e51e87265380463ae2d21978c4979a8e475597e868808d5d5e8ba4
-
Size
3.0MB
-
MD5
ee24b23801c6ec32cb36c046b942b8c0
-
SHA1
489cbfbc5c5d1a3ddcbe1a8960c573d054f613ae
-
SHA256
33f1c46ea9e51e87265380463ae2d21978c4979a8e475597e868808d5d5e8ba4
-
SHA512
e4a8bc512d40dcf093221e5cfd3278dac8fe723495eb7f93c47c649e46d673a26eaf18779fb21f57b222c658d76dd9070e1204610715f6e6c45b5a006adbb349
-
SSDEEP
49152:bh2j6K7kOYLERYU1g3cVtKpjlS8HQP0oMLw7hD2IcJL637SBJIShB0RQrgUMi3:12JGnUPeps9x7x2pJmqrgUMA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33f1c46ea9e51e87265380463ae2d21978c4979a8e475597e868808d5d5e8ba4
Files
-
33f1c46ea9e51e87265380463ae2d21978c4979a8e475597e868808d5d5e8ba4.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE