���&~m�71t^��\��OJz�� {�%��9.�0,������mZ T,��X��s ��a^�������2vJ3��Q��pY�wAy����RJ\W�6D'����]=���9h��<W���ҳ'�t�X�i�k�}��F���C���zb&L��~�) M�����X��Vc�[1�C�MD����0ʮDh����<������k�b)ھ�M���E.�������(��� E>h�փ�~����;Pv� �%l>�!�WjF��kk��_b[x-�5-IP5����e�B�pB��:���4��ִ�7�ou��B�8�p���4�~������W=jZ_}��h��S��1��dv��R��F3,oKp^����o�Ʒ��Eƕ����&��1�^N�P��k�0�_�ϐ����:� ��3��LZ $�?�;m�� 7F�S���-]A�B-].2����xv큣�I�G f��j�;������7��7藓Ԑ���/��o���cxo�w�DI�]���H�����B%����q��Ie����pz�lL�#�6� Ry�n��ak��ڽ���p�T+��1�;�Xu����N�L4�#xأ��_���% u�EI�Ff���Rz%���<�l�=2�MV���پ�[���դ8���וֻ �7���᳹4��H6�&�����Hw 8;4hY��/t�9ʇBs��n���;�dz�;�U�i�����E�h^6��c�O0�Y�nŻ�O��.T0�y�֔�jЙ�>i�;����"9C�R)���ɉAGʶ ]?y>7P��kb1��{z�1��nI�Bs`csEf�8�eW�����*��}6�ac\)�m.�V�y��\�@��;���\Rv���H���{A2�q/�P[��9��Z�̯��>�`�������GDxovW�c�5� �w��4�(��S̮�c�Зa����ӣp;|� ,^���j�)A���Eo,��F��T�F�/�[ct(��Q�Z%`"�y�Q��A��J[��,L���;jFݯ �+�ɸ7=M^M�c�w�+I�R�^��?��,�L>��G�=��&0�>�>o�1H�����TG4�9����V��\Yq�1�r�a�Hc!E�,<G����Τ����G�4���h4P>��ZQ`Y�&ӯ��pO0��cN8v�rAzc%H%�YL&�e�4�ɩ���\Q�/���+?�X�Ő�d�)�E��]�??Y�f�P:�Tn�@�'�����rk�A@��?�6��������ō�����w&����9&q��m�k���<U%���t� �zB�{XX��T�ЃN���)VHR(X�ý-�r�����:�6�#��PT7b�� (%w~B4��5��W;��� Y��5����X��:�m�XkqkR1�,�����skM7�g�Y{�ߢ� Гހ[�� g�1�e"���h�bˠ��B���C��G��;ڇ��7d�%%�)Pfw1��g���m1j�h��/Ȕ����6���dv�1j�k4:T8W���P�lc�\�E���ć�.�Q��=z^����t<AY^�'(j��~T��D=]! K.�z*��XT�8��,;[<�T�5�_0���b"o\�n?6�B��� fZPo�7��5�d5���.EG�����F]�חo����XsSګ����ٵ�Bb�#���ᬉB�����J.��|9X�m���zq$'d������`�Z�,,�����#.=��c�K�M\U�ZŮl:D�y�ꮛ��?�-¢sh��lzK�7���_�,�b���ȧkB�MѰ�yg�ه�rC���4WЯ���Ӷ�|+�V�������.]�������Z�44���K���=y�#��l wYmnޤ���Ԯ^s������y���Z��xnf�MM�lth|+��B�����t�v���N�n�#����%�����Q9R����9�d̵ Vfa� G�*9n^w<�7��P 7��$6�Cu�"$?�S��W@����<��w���bsWL�2T������n�}�AQOAM�ur�`#���Fэ@X�d�n�DH��)����)����_����1"�|�5���V@@�Ǖ�~ Ѵ��6��*N'����PJ��j ݀̏�t� �zgQDӕZ�M���㱇�����;4�!�v|ή�L3��F�������6�*��B̘s��>5�Z����v��3��8������_,���J��s���}B�#~��]�^�3;��/3V-�ȫ�*f?�ϓ�A�Eb��7wQ�r�M��\.�z@��bcǢcD��5q}%K��j���QLۯ����K�O�iij�Ed��`G��-Ցz3�&7-�]3��ڍ���A���^��j�s��ɋ�)|�?��f�lkg��b�� �>��K������,�ʶ<�DT'jt���y;��������fM+, ^N�Y���:�iu#�� �2{7?�f�@�]HĒ+�0=����b ���c����Z���l�{�I�ΨS$�t[��k��t:�V��3�">���fa���K,�S�/��y������֑�+?̩�a�ݺ��˄Hh\��[�8<i�dJ#���<�]���lf(h���=>��C��;h�����������5M�C}��ߞ�:�M�����Éc6a�&l-'��, �v��V;1E��~N���i�I���h`� `�63�X)/�eZ��6@ܯg��Q��Ϩ�<_��}�k��ӧTC�H��%$���^\��0�Mܤ! ��e?l;�+סq�㱟f�������74~�;�S��ffT��5�`m�!q����.���}6×�-��ފ{�Z�h��f�� Jv��_�hK��C�&h8����}�7�OM�L3��"�(�d�W�wK�]N'3���/Tz!qɜŚGz�*��r���n��"�'ְ����q��BF%�q�AV_��!˝�%��!�����R]�_�u��\ �L�+�hvp/8,f��^���d���^��R�;�dn5`�C�����X_aUG����!d��ӑ �1y/~�m��fm���參O����{@A7*� ���`�00)�=�ݽmW�� ��H��27���F���E���&X�Z���&��<W�著]}� Y�$do`�z�&�Ct:t�x������h���5�fBS{��\��&�x�z��'VG"� ɸ(�UF0��I?p�z��L�N���U1g߰����U6QX��ٮ�=xz�z��a�� gQ�!�l�kS, b��I��R�{`S�cF�����b����~�*���]����Ew�_�Y��UV�7�&���+��DvpJ�jO����C�?i�\(��b�%��?�F���(�heKpnѽ��~:��y ���M��tq{<G��О�z_j�^{�u{�P0��$T�R9���$KS���Uڽ��3H��*���������t6�ʗ!�-p��{�h1y��q���u-UE��L��#�R-:J��ƝQe���_=����C� {��7�͍�������?��:R<f�S�>��Ø&t���xV�%�BI�]� �����#�{4=��*�P��48��J�C�BZ�S���+��/�z5�1eTN$&j�yٞ=���7�����S�@ �H��;i�͑%��'���kΰ�- t.�י+�������&{��]0/��%��s[���~��}�2�
Static task
static1
Behavioral task
behavioral1
Sample
4a286f708023c508fe683a8865e1a75508cf55baaa1f7779d449cfbdb6bcc54b.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral2
Sample
4a286f708023c508fe683a8865e1a75508cf55baaa1f7779d449cfbdb6bcc54b.exe
Resource
win11-20240508-en
General
-
Target
4a286f708023c508fe683a8865e1a75508cf55baaa1f7779d449cfbdb6bcc54b
-
Size
2.1MB
-
MD5
4f288087d8c1ef5e58ba4a1e07eda9d3
-
SHA1
9b46e3335f189c898777aa86fd135878ed7ef4e3
-
SHA256
4a286f708023c508fe683a8865e1a75508cf55baaa1f7779d449cfbdb6bcc54b
-
SHA512
74ddc77b4c4700511323fc274437b8aaab32d7e3cd056fab473ebfe85c67e482e3f71969c2d9669ab23240dae81ed730008b42b7254f102f45bf49a4c6f15947
-
SSDEEP
49152:qv17xUgmkzI41N8JXfGn3FG+2yKm9OQbQKZNCqqkGQpVEIN/nDaOhJFBm6F5:qN7AWI41Ncun3FG+FE/KzCqxP/vJGOe6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a286f708023c508fe683a8865e1a75508cf55baaa1f7779d449cfbdb6bcc54b
Files
-
4a286f708023c508fe683a8865e1a75508cf55baaa1f7779d449cfbdb6bcc54b.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE