�A�k�&�6�����i����#*j��7xkӶZ��˿9z��]J�Y��f���O@N��\C1�-�^��Z0��Z���f X�#qgqS��h�Ԉ��=tXӳ&ܹ����~p���M�bԋ�m.�`��uM���A�W��o&A�U-F!�P!r�.�WO�=�s0v��ԁrlj�*��h ����7T�cx�K�Pw�7H��/.0z䍒�=�YC(z/����B�(Ћ��>�<��|�B���\_}|�Ep�UZ���a[�$]��f�Tw��%��ғM7�#}"b�8��l�k�J2:���;l'���a���U�5C��ӓ�ADx�Y�?;��Y����|i�\#�R�I�#qn��6�F>����=���"�$�p�ȥ�������?�Q�p�� \��x���%G���is�o�}�y.�E5��c^��\`>dW���`f�<���?�EN�*╇d��������_;���:�|x�R�Fo��W{~��@�H!&Z_ۓfO�X�<�F��}�ڥ���ې�V�V8��f�~�T�N�0�����ēB|�F�ZM��0������*y��ڧ=���c��j&&dc�8# ��.��t){t��F� �'t��ʴ�-� �f%�r�noVƇ�/��̸4�{����S�#+)��`i�[��w�Ӝ�5� ��%�jH���Y��'#�]y�Lc$˸�B�� "T��|��v����盍F�Є�F�L��&��(4��WO+�_ۥ5 d����J ����g�؈j����Z9R4Gs)��⠠��E�ˎ����[��9�����&�$H�4?��:�8��[���l�GI�H��τV�G')��q\�!uV��yaa���Eh'S��œ�I�ܧ��TU+�ۥ������A�`�x�y���{#]q�~�)]^��I���[��M�Zx���yZ���gT�W�+ gPf�����a�e�� ����������6�c:c��$�G<\�WObJ��dHś��ߓ�j!\�.���c(g���n�����vu�m���i#F������X�\���|��&���Cv u!M�1���"�(������o�u�EhaO�a��P��5�9��Ĭդu,T�C�-u1d(sy�+��L�o�XT�,Z��m�S�UїQ����i�FὝ�����u�[}�1��q��;h�h":J��`�':�I������n�x�G-6� �RO���Js>�tM'֠�h��f]����{ v�We��H{h�;����i��*b���f���%� �Oh U����ł�m�*>>��gxl�!ޖ��LXT��jG��teQ+���x�M���m�r�)c2X��Z�+NK�y�|]Sre҃f�!������j_s��������߉lZ���i�� 'k�CX��Q��M���.l��_N8��#�t�cIKތ�K�ժ��J�M`߰�F"�X�����O�W�`�����k�T�w Ohŧ�A{kF��ʅ���Y���ŝ�C�T��Zt͐� x�g��_ aC�j���l�� <�C�������Y�go�{��,������G�.f��{�p�F��#�o�F�ig~K�����@.�j��X�%k��5���F��v�NF~�8Gߑ�^��/������k?_�RBekx��|�w�a�@�'nw�U�:~����H]��@���w7iGD8��(�iPV��x��xy�5I���I���L�'cO�ˣ���~���%�v0l�@rN���L�yC�Z�J�����ﭼ|���D�&����:�_���k�y�EN���g5?e�o��e� q��r�˴*'��wL����u�&�%3����;/���-�4��ˊ�{'d��s#���k������'���7+�m�;����_��g?Gv�>;Ս]�@Qy���?���X��[������J�8��l�:��L��Y(X�Tu�o���_$��)�Rl�BP� V�Λ�ԫX���ݴ�~�����~��ʫ��c@T+JQ6z% 4�<��8�ۘ�Q{�U���L��>uoz�&IAw.o�łv�\��ӐDF��Y�����/R����tWߝ�$ηm�v�;c�SI�1ل�\�Ŵ?���� v��5��%��p�zd����,Jl�� �tDGj� ����&n�A,��U�\��燼���v(\!=Rt��*[~�ozr��/0��}�*@���x�k��|9��I���^�Ȼs0(xܹu�ϊ�%E�v۟,\�o�l�{�&��87B|tW����O8p��tëW�r*��*b��tu���C�},��Ih�*�r������=Υ[�����`��W����ܜ,d**��uL��ݧ >��(��H ز�ۜ͐�:��q�� �l\�Oew7��lP���+9X7�wU D�� e����� R�6�G��=T���[XE�~ �<"�?:���%d��1����:�L P'Bq�i�H�,eJV*��i�^߀����x��RG@��v�VRa��D(���*�0��ˠ�Ύ?�pi6�X�/������6ruޒU�s�wN���M.MP���BAӮ�cKҨY,��$&o1�7U�?�%�����^nD�?�s���u`��o¢\�������bc�N�����-�[ �)sZ'�).דp8�31!�{�e�|�h! ��N������?���J�>WU�O�A���������c}�yqһ����<�����D?�z:��cN���o�����Yg��D��B;q��½�;��2��e�lh���{�Rك�k���XAë��jH�E ��S:�䨇Tٮ�3��2��f���8:��Ab~:z��m��q�v�<�=C�13/���2 ;����j��iȌH��{K|ge������Vo���ǡI��%����Z��(7�WW�:��f��M�1���J:�]$,�>�_1�K� ��0� CNd,�\F5��Bz}� �<�h�A�Hk+��y�b�G�59?�y�j�Ú��)��ZY������O*�T�*�͙R�Ia�؏/+�̎&��UG�z�ɺ3�Ɯ��X,%���_!(4�߃Qɪ�O�\�ސV!<k5$�yꍾ ���=) ���ɁLBD[��3������1ה��N�o����_����~�]�������2t��� Ѿ9�_AS���9n�L�{>��;�r%H�_���k<���wz]�\O�˽ѩG!m����HO@���]����pP�g���Ύ'��*Ld��VE��sW�q(�s*�TԆ�4���hBM:߅���Y��o��!仅ZІR�|�pߠ�蠄�mi����T������\��L�9���ޜw��ŕ�aCA��ď� �x��+/3�/�HV=ό��k�C���I�I�^vPM{��e�W�ӗ jј�^%~LF���KCQ�;�;�p��Zqq��M3���]�{~)��cؼ�h�4��t�#�0�ݬ�U��L�*��N�&&��N���w�֗Yp(�{ydh���s+?��"(w{~̍���u"�ٔI+Ȉ4���B���u��9���0�d���;y�(����3������c�n�`Z��/Z��95|A��psx�c/)��z�+MZ�Q�D�z�Xq��9�
Static task
static1
Behavioral task
behavioral1
Sample
a8aa8bd9f597c01e2bb6347fae67465edd0c4c9c0367590240ff4eaa93014578.exe
Resource
win10v2004-20240508-en
General
-
Target
a8aa8bd9f597c01e2bb6347fae67465edd0c4c9c0367590240ff4eaa93014578
-
Size
3.0MB
-
MD5
c6c2983010c9f72131d4adb4d88b366d
-
SHA1
fbe1d593a90eb9a6bb30ba44287270eeb8220035
-
SHA256
a8aa8bd9f597c01e2bb6347fae67465edd0c4c9c0367590240ff4eaa93014578
-
SHA512
633b5994a40140cd01d753de96e2cedb846d54eed2de64847d065f48ec6112d8cb8cb16c803db9493a0d1d516f2ac678ce0a3a02f93b4586368102f46fb7d54e
-
SSDEEP
98304:+HAam8Z7tQ3QCNFdOzsMMegn17TfmlvslIfKNSL:yAEZ7tQFJOz91gn17Te5+IkS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8aa8bd9f597c01e2bb6347fae67465edd0c4c9c0367590240ff4eaa93014578
Files
-
a8aa8bd9f597c01e2bb6347fae67465edd0c4c9c0367590240ff4eaa93014578.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE