� �'Ĝbw��_7a/���$*��i�5��T(�u�ԀOy5���� ށN"���v���5�E��������m}��b%����U�j<#Vb>�6�yq���\!ě@i{`�%�]�o�'�������տTJ�o���_��Dn�6�C�W� �Q��K$��;�iI5�� �_���GR�)7�[/��J�݀����c��B 8Ȓ�D@����8q��į:0<K����T��ɛ1�do�������,_�S�!�-RA��&�B��i���7*��Ľ�����Kk�����?01$�Cپ.��@��Ǒ�tV ��^´��&��)�|�z���-y(+�dA= �B�a��_9��*�㟴#k[ ������Qج�:6�����^�X��Tх�&�Ӫ(�y$pH!r�]J���}֙�8ޜ��?☵�����٣�a�p��_���f<y��������]8J���Q� d^WX���q�րAȸ��6�v¬�y�>��m�0��<R�%���;L$�4���k��N�V��]���P�~���҈��W����Q1|(�x.�FS~%��dĻA4o�A���p]w���&�JXJM�$"u��?�v���&��?�L*�x)*�6&���>ѽ�0奮�#�)�&�:���>#� �3;�$�TԎ�S?MWY=E~v�����G̳.Y�o��0��o���HC��g�r���j2�Wr�u5'�n��z�����ɁT��c}R�& ��Wil� 3̓d�Z�Ӽ�Df����U��H�c���0��GPy���(�ȕ���/h�~�#��=Q^�Z7R �bG����o ��"�wb���g����� 5Z�Ϟ�@�iCd�����K?��-����4� 4u#����M��������n���A�������&���y�;`��G��v.�!c=Wd�͒��e�v@ �{�i���Zp,0�`F���SaH t����w-���X��_��P،s`Ss�r9�/T�G�xWF8�4�*��㖋�<;^������:�I�۰F\�,��W�5�ax��Ɨ��\����Qu��*�<)��o�]�h�$_�I�h�f�J��߷�ޑ�.���S&�߷k�� ��$8)�{ ���7��D��QG�H�В��o��6k�$qF)����w��p��Ȟ������7�ß?�!3� [��pJ�:�r�:�M�%!I�w�JD_ca\#8�G����B�&���v�E��1���f^�J P��u�G�#f�_�9@�?/6�^�/�^��Z��ʛ�p����� ���d�j�A�4���)"��T��m��-��<,�H���0�wD�����]�E�&,��[W$nÝ��I�]����|������t���/+�_��c(xPT+�}Okӂ3LΤ��:d\�a>�C�j���k�k�p,��]�~5�8G��N;y�7��/�ԑ�1�d_R��w��[�e�Ux��$�#�UӑR-�@�}N~�H��v<`J��?�$sC��"���Щf>)�܌g�����k�J�i����F��Jij� ��2����$%O�g���v���4����x�$s�,Z ֙!i������x���Bix#,v���<2��/���io�hݑ�裇۬�c���~�U�|H�R�5(|�m`��T��Ӭ���+��0!�;�m��8���W��(���x�\(G̈́i-�tt���ʐ���S�EI������N���@~+����9����WW��Zri�S5��6)��N�Y�CzI\k���WE>��:<(��q�U�%yڠ��� ���!�#|�,��L�a1�k�;XMtG:��_Ɓ�9³OG��s'n����L'�Ə����3�9H!�³�|o�C0��r��f.��1�剂�,��a���^��g��An�H�tIJ+|����r�@m��kԽ��u�h�\�ñ=��M���a۬Ya�E�v��kMP�@�쭇��`�O�(� �)�ŕ�=[� �P��K�l�By��7*�7�����Tv��y*���f����.{��d�j/Ѣ��8��I���«�k�E=כ���K|�j�.��|e�mToc^wc��q�V/�2�7FT^��T={y�d���@��I� (z�ߠ�ƾ���.@��h����wW(���ի�#>[�P)`@����94Ƈ��Ny-C�b�+C�����_��U�x��'�^(��A*5�qee��3�#��@���� UՂ������L���vț=�n��iit��&fKz��}��|셬B�D���-��������������CW�OZ����}/Ǯ�p�[7<�� ���WwS�2ط9���1QF��\�gr��� ��N0�����F��N���m<�v��Q=���< ���OLH��gH5��J�;[D�v?������7�ov�=Uף����T���8N����bCM�KA�&��)�w�܇r��)X�u����q�y�|w��6Q &� t�-w5WcW� �TEG�͍f֨�[S�u ��|�)+wY��jC��韋Հ�Ǵ�ǒ��:�w��/��ݕ�����`m7/]?_Y��l��� �.�u�ޞ�w�_G��sx�����G+͐��E|�u������d���T��S>�le�� ��P/�Y!���8�|e����5���D+|`���B�����&%�Җu���y��lL��'3�7f�ԭ�R�CY��(z��&U��,1w��}�ܡwq�Z�W���������]�M�3���⅞:���Q�3���5��w�ھ�Hn�eT�_{�~j��;��L�o����YD1��ۙz�嫡����NT�����3��T X���&�%�W��&k�kgU�������4��]��<6�K8ChX��w��� P6�r����w�2�7#_���*��R��9VNX�J��յ�抿^�@�C����?(���2�o� ���)�N��ջ����4���En9�yC�Fh�'��y8K�Y�9�2�w2�ӥ�$j[gQ�(�ȯ(�C~�V�<L��V�覆T��Ѿ#n������b����7�O� ��H���Ù�]�ϹOgc)�w�]z��~.{P��b��0�8��*3�<,���0�+�o��x0dj����r�7�$�~����<�����P���B8�Va8:q��*��,~�;�?��pm�5�Ē��OP�\�#���V�L�0!����6-%���i( �h�84d��z��@f4� 2Y�l%U��j�j���I��y�&�%�ſ�T�� ڛ��vl�[̣x���Ś���g���r_�_�dR��P~ \�F�w�I�����E �+3D�z�5��+���Y۞6��N?+��Q�SX)��O���Y�O�S~��U��v�~��/���L��VJ�y�ܝ�v�ns�7ФT��(��Ѱ�"���G����O�-h+���L���n'�A4,�"��_�jm�y��Z11x���l�.Q���>��_t)<����B����G�hx��CKO��ю�uo���w�\���w�=�)�2?������4��O�A����7_��-�:�<>I�L��YA>�5�n��Ð%si���� TI-�h��/��*I�P��$y�O�x;p��p���D�S]�I����(��"�Y�v��CL�'��u/�/� nO3�k��՛W���B���{������;�%+��oe�;�.��HS�� �O���t��5(��> ��@.2
Static task
static1
Behavioral task
behavioral1
Sample
57dcd6a8cf65e0d862eadc9155e2111ed31303a20d4c720f55fe7e684d09c868.exe
Resource
win10v2004-20240426-en
General
-
Target
57dcd6a8cf65e0d862eadc9155e2111ed31303a20d4c720f55fe7e684d09c868
-
Size
3.1MB
-
MD5
57a9bc2021beb5f7f51fa11945db666c
-
SHA1
98511ba1baa014a07c78cb6e161f36b26166447c
-
SHA256
57dcd6a8cf65e0d862eadc9155e2111ed31303a20d4c720f55fe7e684d09c868
-
SHA512
bf687fa26db430510a4e935c88148fa8fe485a792d6a6c9b893e2c7dcec999a7311ac440392acb1bb0bcbd71d3101c570694fc0d9f616c60c47432a3e7a61936
-
SSDEEP
98304:ii7LNAtFJUcFaNQARoM2w6aeY4+8Cvv6HAI:ii7LNAtbKyIo3IBDI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 57dcd6a8cf65e0d862eadc9155e2111ed31303a20d4c720f55fe7e684d09c868
Files
-
57dcd6a8cf65e0d862eadc9155e2111ed31303a20d4c720f55fe7e684d09c868.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE