����5�^5�[��_��]8MR�. ���qm��B�A�o ��k�9�h 1t����FM�g��z�:c�%l���b��ZaҪ�RSB����m}n߰uԐ��:zig/�w���[���2<�&��VbM(7өj`�"ݬ[V&s����������P���C ���^�2�%��mr�r[��4h�a��)�����]R �qF�@�\"(7����7U�j.��W/���5f�X�y�Os���\o��<W��3��#�Z6�l���� �9vЊ\�,����<�24ȭ�@���8�)�i��.�Fb�>�i~���"�1�-U�%�}\��rٶU�r����j>jL�ǪУ ���S��� ��뀁�'>���U_J����haL�9���� �����.6�{�C�8$&-Sæ�[)(?r^�52骝Z��?Q�� .1��`��c��� W�&�#U��A��K3���гDϠm�:WS�^�n�����Ss2��Ar����<SQ�o_�I���/���ILX�����g��yeB�̭���i�8�� k�^4{�WV���ƹ��7u�+��o�>"삽ۇ�x������gݩ�|5��[ɠ'���E����>�܇}�K=kE�,Y��ӑ�1���=c��<;B�9�[h<(�1�]�n�u�c��_���#����X�!3J� i������TI�������L�fa����.vooY�7�9{������][bB��Q}�+��}k�$`N�xVұ� ���/�+��=v�X���As�� �$�Zk�tӒG�؊����t�m`Y͝F},�A�Z�K��NT��){ۧ��$�p{�TE�{b堯�'\�Pα'! �c�K}�o,E�_�<�.�ck���`�[�Y��g<��r�|����=�>��@7���o= O7s�l�E�0���a�)���{X붗�$��d�����>���;dSP�jR,��� ����ky��{Ds��6�֗���N�}�}� �,L��t8یj1ʶ����7U���>���� �:��m��z�����o�~��ԓ=@�MӿlM?���3��j��'����Z~���o3�H���I����8��u\9�����x���}X��4Dum�L}_;`�>�4��"-�"%������ _�;J Y|�W���hk�I�0��dC�� ���Z����6�SK��StlQK]Bt��n,C+�pի�~E�� /z1��Ebf���m6ϩ��Y]p*�ys��&-�sE�$rzsd��d�q!Q[��\�6{uH˦���:&�y��XnN�6`�� $���9W/R���4Rq��ZP��3����*������F��(*�|��� �~�R� ��VR��3�t֤�����X�I�!Z�ҳ�Ȩn��yՉ����b���Ǐ����,<s�J��`�P^�f�}+����ǎ���]Z�~���²uwl+�\/警j�������y4�ֿ��1��}lBox��Q�~Ba�������M�������)u��c�J2P|Z��[�ŀ��%� 8�OE���!������N;�TT���7��A��ءA�Xg�p��nM;9cM<4ؾE͛�"�)��\ ��,�z��i��N �=�O� lZVJ�^u-�K�����/n0�[��Z���-�5`�<�F��U��9ꑜ�E?�ӯ@��5�x��~'WNA�)�:����� ��B�Q�1& �����w��㻔�J�Њ�ۧ���$@�R-UU1\�#���O�硂'&�.������g��Ĩ0�$�)6���T˾\��q�)�qk|+�9"�k9��5-Bػ�^�+� �?��IP��ε�?��7�.ս�\���?�V4Z̓��O��MF=d[�_e�'���ң\/DhXy��K-�.�yQ��_;��S�g���7��8���ă-1w�4즈�LJ-���NB�Kf��KXU�f�L��ڔ~�MD����1Y����ɏ�Bv��ݯN�W=6�.NpX�αj1�������!Ͳ*3��rY�ی���r�ځ9̂�6�NM0�ۿ]/K�������i�S��:��������Tb�m/���z4" Rm�@N�{�b[����j��BP� a�+S�p ��?�e� h��=�3���p'Ρ�L��S@K[x\�~T$߆0 �r|�ߜ�"��( \Uk��;֯}U��ߓ����֬8v�k�Y'�n��W�G��p���w��/�����#~R��~J8� �˦jR��@FK�@`��P�Ne�����5�B���$�DHjc#B��_�o�B����.����8�I#�v� Q����B���P��?�]�i �W��="b��'���i�|�]�3���Z��W=�ks�k\d�S�}���LW] �`���;9X-q ��m��9/Gs�KEB�BBz1(,v�l|�62Yj ���Q��Of6!1��'� &g:v]Hb�R`�O����ݦ�[��521�-@�������(%��*��X\����]4j)�����o4u�Ty�/��#A�� �k:����V��l��]j��c���e9z̷�xķ���zp��Tk9w(?l�� G��Q��,ww�� F=2��'3������ ����R��w"���ihAfv��9��&'9�T.b�Z�S��.i�>�ej�����b��o�ؕ��{���e�_r�*#u8T��7H%3S��)���͋[����u��6*D�_Ih��%��@���c��pw���}q�^5Y�R<�&�p6RpY�����m�=������o ���b�s��&0���:�o�O��߬���]�һ��%�����%������&]���2�����X(#����ÿ�Ƕ��:C��i?dxG���z�i��9�Oz�VL-�*��Ё�`B��C ,��u�t}A4ʯ�c7c��R���N����,Lj@B�&���W%4S�=�$ͼ�^�}P��a�%(�B8RA��R��\�����%�bd�ǽ�6N���������v����� �ז���z$����x"8�$s�E�p��ڬ�%}��KSʖxO��s��e/#|��K�<M��01Va�q��s�������kpH6��=oĘ��wY���60�3��z��"�n^|d ��0�nsaZ���W��`[���b3w3����+ˢ#��(��� ��o�*s9�v�=�İ>]���p��v��e9�h�v<a��ilB������Q����U�����A44�'3�|���m��m�$�����7ϝ8� ͻ���� �~����ƥ@���v,#�{�诏
Static task
static1
Behavioral task
behavioral1
Sample
a75c86155c0f793cb25274287afe170be36f4866be1ac9706c3264edec231990.exe
Resource
win10v2004-20240226-en
General
-
Target
a75c86155c0f793cb25274287afe170be36f4866be1ac9706c3264edec231990
-
Size
3.1MB
-
MD5
c9b67e2533e6a3775ecee46a280559f6
-
SHA1
9ee7de5ef78af4d4567e86186e4716f2549a2609
-
SHA256
a75c86155c0f793cb25274287afe170be36f4866be1ac9706c3264edec231990
-
SHA512
da47caede69c7cd4ba835550956f8957f541e5a44b8fa94e368148e4fdfe5e3fff21ffe8ba0a00bfdee9e1785615b8484beba6c8fe3f748a9068cb7258f5883a
-
SSDEEP
49152:iNB8V9/FxHElRpfNFodtlDF8Yeq6Q+X4KeQpXc6i6ROiW1fjKRvVs:iNBO/FxkvVWlDKYexQz7QR86RaMNs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a75c86155c0f793cb25274287afe170be36f4866be1ac9706c3264edec231990
Files
-
a75c86155c0f793cb25274287afe170be36f4866be1ac9706c3264edec231990.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE