59s��+�~��1f�j���3E �F[��\�6rc���-�{%6���b��o� �X�7�$���������Y�Vn2�]l�O�!�� 8���q�[�~X0B�g�1��}X$ߟ�F������ŴK��ݵ��~���Kګ�;/:Sh���)DlaՉ�ls����9mŹE��TB=��(���6{�֣�M�Z@se��}��Y�����$|E�\e �����^�/%�Z�{tğ��n���y�<��ca��}�cTŎ1�9�sϠjU��~s�4�4�[�tN�7R���V��~��k��Rh����bepj��k�`�ĕ�&��Y84����1��ӆ��ś��$t�p`m4�i�8�u�7(b�4�r��]��zN_�p^�R�!�Ǹ��� ���R����ȿ����e�`���R��؏�W-�1#3#Kݮ4�Gh�umC��%9|<NW2`�V�֢��5�E� '2:+���3�5>m�H+sd��V`*��o�,[珀-�sh�HՎ~Y��~Y�0��SXqP_��XH��*�c�D� 㘤j��ư$�!h<�8���rI1�١yf�.7�����AC�R�6�e ���E�^�/$sZV�ޔ���A�Z/�b�K �>�~,$ �"'��מ�ӝ�d�'܀A�)BWS�M�/,Ȑ\3?��3:���n�KLϩ�=�42VM��,�߈�ӛN��� ���Q\z�.�v*`���T�{���7�!m,����q��:�;ߚ��1�-�٠�G�� |n���r9���KSRp����ėQIi)���Tp��WQr��;[����%�D-����:���\��(F�\w#��h2mB@�x��-��Ә[���ș�p�.�8����{ez�U]��ncIN���e���`v�A�8<�c�vw�����X*v��s�%d�.TK����wW��T{�۷�VZ��🐊��[ֺ�9B���T�Ֆ�-�?P�M��0�F���ir�����J����mM�I�l;5����Qz���e�7����̯��J�|"�ʅ:fE�HV�/���W�a��C�,qޤc�������//�`d!��^���"MCY�@�|`��%>������=�z� �1�i�شċ�����>ǔ����D3��-Xj��Qh�16���m�9�D��g ���䏧{4l3��y��|W�q���;K-���8 �B��P��fX���Ke��*�n2��C����^��>�b�E�"m����b��MB��n�<?�";F/� �ݱ��,���Q��G���j/'����>��G��NR.j����Yb���U@�!�5pR�����E��nH�F�$_����pU� �������5~��엇d0_.QD=���f:�|;���98#�k�H�pN�P;צ�˓�?�V����#߾Aw[D���.����w�����~��i˜#�5���������zP�0Y����Q�e�M�i����ַ\���� y�y�!�PR]��"9h�@��z��:���Onq?X"P߷7F�7��@���zR�Ԡ ��zN��G/�( qݤ� �_�Z�\��\�]�d&]sc�ByY(R\�Q���o�F�JU����'4u���qO�0f�]s��-��<u_��*��c���E6<c�KL�醻0��WH��J˸g��0�F<D������qo0����1�6��tu����)�<!�;�h{��1b�IT��$N�F΄PL�(���������2O��7�����&ԯ��)��GL��~��k+%���K��.��מHw ��h�����n��Ꮷ ,�`�h ^�Xz�{'�z�8TA~�ƛ��fr1/qv�|*a�> ��a�R CT��*���Ռ��22ӪwZ��P��Ra{f�tħl�l�^�[��@��S� }���3ɱIv������`2U���cDr��r�j���E:����W�����Y��8٥4������!!G˛�@�������P��-DX��U ��j�T��N�=-�\xš�V�vA#��(���0�j�DA)�|�j?�O��Z���d!0��<6ڰ�_4+kI"���YP��Q3n)&��t���ԣ��9 £�C䒶�-�ۺGo�C2˶���w>]]�^�\�����̔`�_̀!��T��b�3fP��|��?p]xW�wX0/Q��١Z��CO�7 #7����f���I)�{�`W�~K�4w�z _�|ɻ�;��e�,]��"�\2M����x�ɕ������lI�=�d��h��34%|���_%�W^QM���z��e2�^��@q�E��aR��P�(y�e@��Ȭ�[���S�U� IKL.!<��9R�C��i���&�8��Z�(�Դת���p��t;���m�*I��^��)+��J����z�ε��mN�) ��l���U���x�ʆ;�; KKxқӹ�A;��e@��v��g���dȰT.]���9��l����4�PB�@Q���@Ai���)����?�f�@�!�g a�}����r�칡��2���3��[�2``�wFɁ1��-(Ҧ"{p/b$C^�}"���$D�����l�PԠ�rC��0"�1�����C��|�܁Lr��?F+�qu���(z VC/d�u {��$Ѳ/U~J�9�b�]Y��ҷ�^��KRz����Ĵ��Ϛʤ��hŲj�u�� 0�5��0W��@���p�'.��0i�4�|oNGh���=��XF��E$��:����q�1>�k�a~l�H��@DOO��1�}0�*��D#D_h_�hـ��R�#�]��������u�X�#�U,������c9�y�����r-�ͨ^����������F���1��L��@�y�����6$��.��1�R1ljꄮ/YbLc�̏&Yᚵ�9;�,�4!>C/��/7 `��*�2���#�a��L|Z8+�S���a�C�c*��e�.o�PϿg�Q�gH0�U��44��\�}��s驨f�ut�a��ս������~�b���q\��X���q)8��y����yh^e.�ۃt8�ٷ<Z�?�={�c�$h�i�fn�"ײ4���K�lw�,���/y+��5oK�_~�!�f�&�|Ù�c���zdR�,ޟ u?�̶
Static task
static1
Behavioral task
behavioral1
Sample
4ce20cc8e5491c5253df9cf17c487459d5db19e8c0c5cfcdbd89d9bee4adb4bd.exe
Resource
win10v2004-20240508-en
General
-
Target
4ce20cc8e5491c5253df9cf17c487459d5db19e8c0c5cfcdbd89d9bee4adb4bd
-
Size
3.0MB
-
MD5
074700e58d02f6dc8d6b309c417f62f4
-
SHA1
262dbb5d56d4d4a7059fe0e8344a1aa07f8baa76
-
SHA256
4ce20cc8e5491c5253df9cf17c487459d5db19e8c0c5cfcdbd89d9bee4adb4bd
-
SHA512
34933e2fe9e15018f25e2b7c0f880ffa77cc73bb976965066da48ac7a79fbd90d574bb166d5a835e88a14cf4fb84d8916b934f2737dfe7d848b1fde8c7560f3a
-
SSDEEP
98304:a+VXgv0eC8hSjyxrehLlFcvuRalfb5z2:akQsH8Mjyw5FZRY1z2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ce20cc8e5491c5253df9cf17c487459d5db19e8c0c5cfcdbd89d9bee4adb4bd
Files
-
4ce20cc8e5491c5253df9cf17c487459d5db19e8c0c5cfcdbd89d9bee4adb4bd.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE