�N�>keQ�/�~q��,M��<��]f��su��� K~O8�[ki%��Ё�#%�A����&lp#�/��J�B�����w�v�D�� �Oz0���je��ږ�itUZ�<����zϬ�]�6�&1��2����W��0Ƭb�(!���}E[,a�p轺�r�ć��)��gķ�V-����P�����|B�6V���C��o_��x�"ۢ�ן���.����Z��8�� ��ɨN�-�����V�7�5��&;�>�U��遪���pU������<ղ��W&���2��$�����S�<����RU������u�?Y6�F�ã���R�F�r~����uo�V\�@��7߫e�O��[�O�> b3�cf�-�yK��8�RB6�N#_c`ZGY��0�Ak!z؎E]Raࡥz���y��.wO�w��_JNt�S_��n��lM�j&r�7 ��B�@���������+��CN�~ �Q�g�}����{��N���! �o���lҚ��El"�P l0:�,ݭǪ#� �]U@+���w�̫��g;g�Q�,��L�q�B�p*'��1�W�9��?�W��yB�Q����ad�f��|f�����ht'(�S���_ o���k4�Vl؏HՋ{�Gܚ�T14�xG���9��3�*�7pѹ9M�t����E&���hʂ�5�)f���vd.8˵ ��� #����Z����Te,xN��']F��Y�����QTgO���������`-BQ3�b�/�R�ߓvUtl>���7�8T��m�2k�~J�gl�� ���������!?&�,C��A�HT�4}�e���5- �2f��t�T3��sj%�X( ǡ����>\X`����z{��Žz�� �_ (䝒���;n<9����7��<3��w��C �D���"%�V0�L���,�%�����������{R�A�b�D�M+���Cm�aB�ׄ����;�վ$���'�����ǐLe��E��R'Du��%�DH]t�)�:��B�Ul���� �7u���hG���S#���A�����AV�u9�h��������e~R>7��{��s��ti�0�5݄�D����N;�ƊRY�bb�]�B��� /}�u�ߝ%��eAm�as��J�tu�[;��t���}�=a��;���蔒u@>��?>-C�K��l�w",{Ĵ��ʗ����� Yqynn�,� �^#yD��-̧H�x��@� �����%�Ѫ�L:�Tw���%gFx_auM5�}�&�+��\�j�⦏�L�CQ�"�� n����u2��gӹ�y�����~vwn��5�Q���I6Pai|�E���{�\�F�����@�� #�G+�n��|J}�9P����� �����ڄ�J��w�-�\�/kr?go��F��/�TVB�ޭ���:��JPd���;f��`d����^3\�Qy9�By���I�*sNBb����v=�c/;x�?�1���0� �*���/�P�*��_P�ngԯ��r�!���c��__8����0��gx�A���P_ ������� �c�O���� C�6~�2t�����k�����o�xn�.��ߕ�MZ8?F��>���H�1��'sŨ䘍�9mÔ��8aZ;,)�21���ԃ���A�urw�K��qk[Gԅ��<&0x��<�?2y�G��'[i�b�g�Z�Μ<�ԙ�7%t��t�~�ANt�WN��BV5JSy�eN�sA�Ŝ$(b����������9A]@��4����_�ϓ�+�hpԟ�`{7���x�9�M��Y1���``�S�� l� �����MQ�l#Xs�4^���szXܹ} E��v�jQ��Z���lw ���;x,�hK �\t���#�bZ��y�� �nfT�S������4R�3-��9#ʳ�g 7�H�Z%R[Cymb�=aqyj��g�;*�n91D�N����DV��'}(��C4�2ġ世��f��y��Ȍ�PE��*�S��`��\3�u�h6�-���}J��b�m�W�/�� �X���-����>1M:���%��Ɓ�=��@��t��q�g��S�����=��u�t��H���異����5E��r�����2�f�ɯ a5��,/�(�l�"?&�wr���}_氉���k�9�Zܑ_,%���g�s�'�y}V�>�V?H�P����r�ʩ���k��NJ�c���}rv�}2�ZK��� 7�Mm4 I��m���x&0��JP���53�hb�����0����i?e�-7�[J�i�٪�1��\��;P�YbP��!⾀�OV��/�⓰�6�<�S���a��`��h�5�H�}k&�I5`b�k5��5)������8:7��n~���ı��k�<,�ع "�A��!�\ ��6lo�*�~��qK�iC=@z{� ��Bb��\�Ex��B^dv��>#*C�������߳��o0B [> x���S�G^`S��A���"����(�aҟ�}W�pQnDv5>���V��Ԃݐ�����qf��};kp*]��t�*��iM4�� ؎H�( �w�d���)�o��@�v�-%�E�p��M�y��ֆO�V��ۗ�.�( f�x� Z��Ϟװ:�P�ljP�V%l�c� $̹�����fX���u5oٖ�|�{w.:@(���ibS.�kT �-�4m�!8�vc� ��1z���+4b�?xJ =�6�Am~3 +q ���-o6�d��&����1l�ln���L��jp"��V�����8�O �~����XM�l'��'U����X��Qb�Mk<�L ?+���Y8e5�PT.��c���Kb�yZ;�����3�Z�m���B��fA�A���5���>�>��M3�f�ce��LSxk������:��o�7ȗ�ě<�Hȍ��=�OĢ[���\�*�4���Z����%ະ�5�cUޘ����ez��~.�5/�Ю2����&�i��_SO���*�ȕ��6� ����a����|DO$<�<�1T7��t״�5���Q���~s*�:5�j?p������oHS�;sm��Ԫ��,D��Y)��#G%�|kC���F�����E�qlRm�;�w�8��~���$i_�٪-��4�W[7��9nq�]�B��_פ�Ou���9���w�l�{e�S]o��JL=�P1�O�!��Zbq��9�Q>�W�:��8��%g��Ğ��z��_ې�L���� �ЩJ�����FK!�*t��ZvS�j��a��C��&���������=^��b�����m�P��������PSm#�"���(���}7D�L���*�:�,������}��;{�w<���>㉯y�Q��j��a�������z@��������i�H�1�ڥ�`�]���QY�1�8,��3�������II�S�"KY��|є�|#����hpfBq�s9�%b*l�:ݒ�Ps$I-��y�oq��4�
Static task
static1
Behavioral task
behavioral1
Sample
27a2b4d083bc7aae6a397136a4d52d039c9319b41991e4631e8ef7b4d06da4ed.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
27a2b4d083bc7aae6a397136a4d52d039c9319b41991e4631e8ef7b4d06da4ed.exe
Resource
win11-20240426-en
General
-
Target
27a2b4d083bc7aae6a397136a4d52d039c9319b41991e4631e8ef7b4d06da4ed
-
Size
2.2MB
-
MD5
96cd78174dbf414f55b55081536f88c5
-
SHA1
416d26b7be5dd1b44018562fc9c40654124f6b84
-
SHA256
27a2b4d083bc7aae6a397136a4d52d039c9319b41991e4631e8ef7b4d06da4ed
-
SHA512
22567a7cd6dff3d3dc5e0622fa28b890ed6d49108fcd16e176bf502336d4d7a89f151b526aed17011b9262fa326ec45b1aabe6e092e3e9956871a7e89e5f2f1b
-
SSDEEP
49152:EC/Do3pHpw6yFXvBvu2yJJLoi4PsmAYTU9XEa:lLoLkfBG+UEIF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27a2b4d083bc7aae6a397136a4d52d039c9319b41991e4631e8ef7b4d06da4ed
Files
-
27a2b4d083bc7aae6a397136a4d52d039c9319b41991e4631e8ef7b4d06da4ed.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE