�� ��V�'�Ih������Mê����7<��M�p�r�|PeB��A�<NPǬ�Zb�sb��G7e�J���1�y�~���n.%�'1H\]zDBN�����1:�A�ٽ��n26���[��ښ��2<��j��p� lCO�4֫���2�n@�ʐ}�)B?�r�a��w � �4\����A�8n��*1 ��� �^�S=��+Ƙ�0q]:S���@ �k6%�9���h��#��&t���|�7<eb��ۇ�>ꅐ`����n�Rp�䞖Z�s��`@���&����A����K���>����Ffe����W��n��Rw�eTԙ��?��T�Σ����Adl,�ZIoRf��W�F.�b�S��������bh�[�� 54ɒ'[%���m�����J&u5H�Q�oa�E<Z�㻀�� ����F�� s�д��v�Q:e,I�KhW��8���M���73T��2E R�זuI�Hd��#w(OV'����w5�5���3D���n�Xe" }���O��%o���F�p����7e͊��)���YIyk�[`�=�é,�� �Feh��Y��M�bNH�x�CO�`{W�T�\ѕ� �� 6�C�1M�/��Xd�S�O�CS����$�/����#b��/�eq��i�Bc��H�Ꟁ&A����Sc�N_L��D��7^��d��D�R�[�x��Q�s~��� d���7Y������f 5�^�í�Fɇ��,� ,�����5���>;>��`����Ė���-��FI�A'2Qz��̑��sx���o�\h��dF���� Ba���iob)�Hqü��ԘX;%UP�@]�R�2Ho���)��m��+r���7�q��(-��GL���ez~$P�M�0����R'���ب(� �����f�����4�a��%ja������+uU��y��N�U3WZ+���5뫍��#%��T%�'f�4����8-_UL!�BZKf.M��rʰ.sɃ��)��UUW��fUv�(���c�ly����!)��X4���?a`��b����+�C�-ΰi����<���s0���,�D�����7�8e��i�U���R��Z����D�ꌄa�N#]�Ր"�S�^�B��|Aɔ�D�`dI����,4���Q4��|�Qȷ��e�,��2e1z���di1�R��~�4h����vi���Od���D����51���*n�Sxgy��*"��ރ�(��<R��9�gT����@���PnK�nV,{��)��e���4�GL�iP���,�C�S��$�5Z/��U(�*����.�yi����,־�G�a .��bo)L��,�1oצ}�W�5�r��sRps5�7�:�)u�%���K������s�W�hv���cSa�x^����4 ��>�JR\Ol)�������+w:=Ʊ�C�%��D�a)��Fpa5�)�%��T��]�*/{�~����CZ[R��U�R��<t`�.�W�ɐ�Z��Y}58���]9�i�NRWY.����T��>���Z�v��??T!�֮^>�V-�{�^����S�_�M�^�z�>@��Zv��{i?��kmǕ��\�8j�mJ�j�]�_V��������.�# GgP����$ryq�����O l:�__O:R��ڍ�( ����(d����f�{�P��6I-O ����[��FL�v9�t8y�B��gAZ��O�Jh�x4DJV�@�o�<q ��@"iuƣ�>��V�}� #,��mn:o� ��,9�ԡ�S��#C5J�Y��;��&`�"�*D�r���!�s ��][��kOL�48@�L�wxm��z�M���Ln��T"���,�oqa�n^�'@'���q_�B˹!��|��@���ܨײ�g�7(�������H=[k���I=4r�v���ܶ�����,]m���]��4�5)7�O�Y��E� �ҩ��<����غ:���Y8��_���V����Ib^����Z^�} �=�ym�r��ϕ��̌��`o�DT��O-I��.��5�p�m���1��<��=��+��!�Gv�y[0�e�>♷��UC�U��8i��m�ٔ�T�E���6�G�]@C¢Ƽ@˗E?�^Qf���Nl���S �Cӟp�� t-����fW�TM<~y.d�u_2˵@� XV�B�{����@��Hѧ^��3q~n��HYY~V�.��D�/*¨�CQP���.��=R�a����F������7�V·j��c�w�Ehp��cV�1�4c��$�������N� ��3~�x�{d$�'}M5�Jy�5�~��������Mނ'#��W�] � �* 0�b���@���g��>��o�3L�uu\_w��Bv��zz���B�A��- �x�/o�]��_#���>i&W?��ML���h��(q�Q�����0doD���B&�J��n����!�g*:�\e^�R��.i��Ed������T����{��17�֚AU�Ƚ��w~��R%<���|��_���aJ<>Sj�yL�z��Qi�6QuaB`��*�����n�=4E�o찋<�W$;ת�L�MVNqW�T�B����� 6����(c�O݃�Gm��n���\��Z�,X����}U⾗U���~J�W�t^� �NFU#�,�7X��� ��_���Ζ�~�A�?�pm1"���l�ڗ�C��6O��|\� 1i*OKڣ�3�b'y�����Щ��d�-��y)^���^Y���O᠁�$�1z��Y�Ư�#��C��&���8��[ Ic�.�BS~"�36�m��-��{$_#p���}�\ib���ʷ���Aђ_���,��!�����TT�I��X����-�::�����f����Oڈɵ��|�sl�o#���Gw�y����&���!�P��_��RX�a��C�z��}s�Qզ�L�O��k*ӵ�� �Z�6��'�����mESA��k�t��3��V�C�S�ǚ�a��\��)�g$Fɛ$5*��)��(B��p.CS� '���{�I$T��e��4�z� B�9�Y~�|۴f��oD|W����^9�ds!����ү+���R�q��#8�q�x�=!��)�y��:D,���-c�O�宰 S�ޔ�xorF�RԃY�\���x�6�����kank�H!JQ��q&�b�ܬ|� щ[m�2��X���|���ū���kA��M�!$�a� B�4 �)c��yY���n#��\�F*�:�:�]gR <�E���4�Ok����ܨ+j�&�'?ă���`�-�E� Υ0����ci^0�:���xn@$��b�,A�s��*�$�*9�ci8��a���m'���K� �/�f��S��GI�$�Ã��7d�?�j`_���yϪ����p�y���D��m��χ��g+t�� ��~tPT���1�ڲ��,%�>G)f���n#1
Static task
static1
Behavioral task
behavioral1
Sample
50bda577b0e8d4c2c06059628b800efa6f167b06b7f41a0caa2c46e1fa7bbe4c.exe
Resource
win10v2004-20240426-en
General
-
Target
50bda577b0e8d4c2c06059628b800efa6f167b06b7f41a0caa2c46e1fa7bbe4c
-
Size
3.1MB
-
MD5
54b85f1c1c48276cc293a0e21746fcef
-
SHA1
5f10d9bce76337662f55cd1a3d08fff67e97ae03
-
SHA256
50bda577b0e8d4c2c06059628b800efa6f167b06b7f41a0caa2c46e1fa7bbe4c
-
SHA512
2050fa6faee00d91551e44f6a31011d06a8dff68fed5b91dc075c71c99f1614bafde11c4c716faef62e50597bd7e1ef5775bb6ad34345190ad0f45cbccad92cf
-
SSDEEP
49152:ftk/UyCj6uRYmDW4sZuZQ2T2ni8ZE/1fgfIEWSyMa+6IEX47jHcvFyv5:KcyRLmDWtuL2nxZHgfTtdX0j8vFy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50bda577b0e8d4c2c06059628b800efa6f167b06b7f41a0caa2c46e1fa7bbe4c
Files
-
50bda577b0e8d4c2c06059628b800efa6f167b06b7f41a0caa2c46e1fa7bbe4c.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE