� �+�(���0hԨ������2��j�2��U_h�o��ﶢ� ��bǍp7���?��"�Cէ�т����WQ�ۨ���uu�枲*G5/szT�����Β$x���Zr����G�t�H�Q+M�#��);sk���1�{��<y�>�y(���"� a����A��'P��"u����qT��2���C���`�xVk�m+c��̵Qv����;��@�$0� z���E��'@?�ȈF�n�PH�ݻt���]aY�fYa�J����h^��b9�3)|���ب�&�g��$L� t�݄~b�fřD_�9�3Ci��`�������n�\���;�r.L�A1G�� S��nѰ��˒��)H�/.R��A��o3_x��TU�^��\V|��wi���m.i�#>�悤&���V ��A�(�Xt�Wmza�B'�����v�&����o~��g��\�>:�7���h�s8<��2�&�I����ͮ���5� \�o���z�T��? ���V��g)VOFOR���Wt��Lu{KC5Q{�x KkT��w3(ЎZ�{����g3�2�YeJ�I��\?O�R����I������J���ڋ¡�E����Ӆ�@Q!f��4�<���_M#�j3e^�h��}U��b�H&�6�U j�S7����Sf��2�3��q������)�Ͼ�J�.�@u���vV�MC�L��Eiv"#�����J^0z�s!y���\�$����+��ji�ޓk�H�3�ܓp�y:��hP���86�pN#2����d[�>��4|?�p�}�uU=�7� �y@_�J(��9�kQg��XL`G,:6��k��;�K>.%�7!ٿ�������9�]��Z�K���}�a�̶3<�i3܁�*�EX�$�@Ӓ��Y9�����W� ����� ^��!�=�w�B���%�J/��j�T<���u���ḧ́�NU��}t/�t��>��:A�����o�|e��-���C�q���2>·0�����B�Y9�3�os=��:lJ>���:�Mx�W���Y���:Yw+c��a�+ag��g�T�a��~��h�u|+��1�W^�������t�������f�hG 9��_�O�Šgz,�7'i%��*s�py �$)B�i�`n�9�gAʈk2�8V#��ڋ�^fZ��[@�fI���Rh�L%_I�}$�?�y91�z "-�Ln�m��'0\(T���@��T*�0LD5�@�!%f@Mp�Fc8B �.!=��=���FT!y��[@��5��~,^�2��?��2�G�� �\��l��Rђ��.Q [[>�˟S"���2��u�� =\�-�zf�=�.��ô[�Tr�P���o�j���?d��������.���=�x��Fc�^��&kڐ���j���F�`�čꤳZ���!j��2iž4X�י��0��B8�e:��c{��m�����y�E$�E��5|8�Z���t��ˡ*4͎+''<���C�̳ ��ɼ�Y�$�S�;�nv�КQUÞQ����ɏ80�P���Z�8�a�w�M�C��gr�����fo?�� �\��������i�P����'w�8���� ���䎲�zخ����QN /s7���K�23lޝ�E����< ����R� �Q,�~#˛��h7���i"�z �a��,<�FIH���j3�����#���J�gUK�� �'�KB�V�y��L8,�(2 d�\2����+ T��q�;e��{B�iQd쏐s�:xZ��������չa��z���x8}-㉂���!"���>����a?S?%���8� #�КX�����=���C�#��G�FX�+r��OGV^� �i�.�%�]�X �>���0c����&h�Mxm��Z�at�%�;X�C��wԧ�!&��m�7�4��<o�M>狗mUE>:4h�=����Ԫ�r�� �Kҽ���6�{Ȧ��s��QΠw9�47D\\������d��i{ȼ��bϨ�����ap���Қ/���C���4���^%�������i���qY`>��µ>����$�\Գ���7_��FZ��^�m�c��ڣ���&�2iϜ^5G'������s�b�m�`:^8C�����b��P�A�6fB���J}|����=2>�Z��.l�1ZGUxPC�_��������X�v�Ay��������p��I���SZגټ����Tn]X�I�Y5���3��Y������č{��6i�������(�����4Zʺ��y�j�W�����_����_��zZ���ucE��XVW����Yw4�&�3!D�|��8b���݉Bi�H��l4R����1{�5Z19����i�OD��؇VD�� W�X��ӛ�s��3pm�H�>V��#���D�(���{Lg]�9��2����~쪚o���R�$��'����BD���.juw����&��"��K�������OMx+=��'�C��-���"��ɭ���%v�k;�T�.��\8^�o��:NF���5t.@H�N�0yp:~t�d&��+`O���֊�[�Zr����6���&<|g�4��SS�Ge2�׀aH��:g]3��������n���1^r��Ju��l���P�[h�u����l���/���2B��m4��S&���MY &���l}����K�&���Ja�q�8ټ�8��bEX���П_N�o簲���D�}~V[�y ����I�~�w���C��A�u%��g��&��Sl�����ϟ4u��L��`Py5ϡ۩:^�O�D19��0/�vGzk��D�H��G|�� ��TH(��q63�y�K��;�-*�૽���4y���-v?�����T�4������kO��3�ފ��,���Q�9D$-��Om��[������ytUR������h|6e�c�����&^�,468���¾i��g�#YO����*ƘW�_��"���6s"*����D�����j;+t��\StA����!���-��1�Uߞs��1X����c[���L��39����q����p��g����������M�SmT={$vK���WR4t�ľP�N�HI/O<a�&5�����.������_s-���<�[٘�$��2��o���q�^�[�s��'Z�VQ���[��5��ưaEۚF5K���������H����!��ߍ�~P���ty|N�pْ�5�n������G�����%��F�!*64�,�2�����/BQY��������
Static task
static1
Behavioral task
behavioral1
Sample
a3c226cadf15f608b881c2a19283919b411c2e0987041ddccf310be2ad3c56d9.exe
Resource
win10v2004-20240508-en
General
-
Target
a3c226cadf15f608b881c2a19283919b411c2e0987041ddccf310be2ad3c56d9
-
Size
3.1MB
-
MD5
12e4ebb19ddca0f57dc7ccb27f75f223
-
SHA1
c855142a69ea03df3bafc3f65ca903f16284b4e7
-
SHA256
a3c226cadf15f608b881c2a19283919b411c2e0987041ddccf310be2ad3c56d9
-
SHA512
c0431899a7702f7fdf258722dc6b79c182424d37f7df93c14e16e4c789d36f0df1dbffa04b15ff967dc6a9198fb0b02033d9cdbdac372625d3c4c330fface774
-
SSDEEP
98304:CBhDu07E/qi7QXE4uLpz+s66sem4o9jLNl:CBhC07Sqi7QVuL9HskEdl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3c226cadf15f608b881c2a19283919b411c2e0987041ddccf310be2ad3c56d9
Files
-
a3c226cadf15f608b881c2a19283919b411c2e0987041ddccf310be2ad3c56d9.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE