�����M>�D\酖㓑��[�K���Gy:���\U������ԶᷭL����wߌp�� ɭ��Zc�6u3jSX�@5%�eϮ��}B'��̅+{����V���I�N�(0�ļ�,Z�½��F��{ z��˛��Gɵ����М��".�Xc�����S�h�7�^� җ��Ez)�s4����~ؘ����H7`�ޕ��=۳o�F���R�3˸x�>������;_c�V�+{-���"����~_�i-] w��x��*1��j?�h*v;�����t�bL�����Y��Y͏N��p%@%֢�o �E��t<y�q@��y��[��#�6Nj���t��jN]�7#��x _��cp�*D wn4 �}(�EH����D��ۈO�j�E�>z�����*��6����<����3���!��k����?����}Bh"Z��КB1�_v�q�1%Z�X�}*V�5O�(�_��<.��k�P�ʊs+?��U#&J�����ɣ���U=����4�����s'qK��/�2H��"�0:ʠ�/q���;n`���� �pz����1���!�?-�f�%�tsC`��7������#,����ca�%����|���Ā������=�����yo�ϫ-�Gh�����A:'K���E��%[��`l�{w�^�eۖ�У���:J���gM;#�/��\3�~1\��u���g+;��m>C6ˏ���m�_����T��VhN�}J���8FV��C�?u�))�]����U�:6�(�E��i��B��ͤ,�_g��"���!n�p�K�xj�p��p�7�q,[���p��-��x�8��39�Ok�s݉��i�)��eG��i� ��w䤦cE(ϰ��^jV%Q�ٯ,�ݠ����Wo��f������eU:�=W�C�gW�rG[K�]���xft[���*5�uš�"#����ʄ#;�A�9*�s�dmQN���~���p��PsM��$�܅%����P��$ݷ�$��7��q�����G/��`��Pw�'<1wY��=�טꏰ�g���~�zB��cLÂ��h���Ή�B�p���ew��A����{i[.9����m�#@!��I:�x��^��NH�����P���E�������M,�Sz��6��<��9�OCV�g��b��r�6u��M�x��yO�B��05����ڐ�P�SR|]"��<��KT�=���[vE.��+�v�=��W��w4�����N� ��Y��̡X��+g�^�_�'9(��j��������I����?�M���y�<��7ts�0ރ�N$;�)L�^��U��B����/ *G>Ӏ��p}7m�2���g���Fж�բ��>�W��9��D���Z�&ܒ�`a����@�n�M�t�+ �rƆS@��ԏ� ��`����*��Va�#l�R(D-\���2�����{��C+�%����@�*���4R�>�m*+4��6�`Te�2`���{2|��x���Kl�����f X|��;�GHJ{k ��:��.�����3��'"���\�;n�1v�m���aw�E|���cC̘�v���Ġ6�ן�gA�r�+�OF�R�zGdU'?8a����/ZX<��.�q��b�J�F�"�����%���8�&7��������a�Ǿź�D�]U�"�|��~��pXrA����P�,x̼���j�g�_�.F\�h��̾���0�;�i�� r���[��I5�Q���� ,Ӈs X���F�k�M*J���/�⅀(�>����(�oΌ*̎�Fby*-��e`c$����B��~;J�dIZixi%��T�A ���ߩv�o䡕�Ϗ�����/r6�0irjΓ�������M5�m��T(X���0)�K$)t��,)�i����*��xS���9�\.R��+&;�-�+^����W������8)���u��Cr�����d���ьQ��˯�U�&�<�p9O���[ Z�W*�L@�5@@�e����G՞����_��.f�;��0\�K������(���t�]Ӭ@e4N<� ��N^�Mp���|��Z7 ���0�//~{�0��"�12��q3��9���������1rmy��q�,����#�T�����vF���WW?�E!�<a������f%������V�β'{��:��7[>_K���vw�hh�:�h����j��<�Hg�M�t?�ߘ�H��2�5B��=G��;N���{��� �A�F��{���-Fs�J:E�d��u�3bg'��4�!vXG��3q�e�AĈ�U[ˠ�\H<�Z����6������Ov=vH׆S��t#{;���K_�Q���wn��Ȋ� �'W?���ȓWȅ����.c�#�t���kg�n� 8��3~^����G6B�ɠ����fP����b���QK���N&�\8��!�ǿ�5l��O�.��腃_��V�gJ�DV���Q'ةy�n^�K TB)xv2bW���9��w���T�e>,���+�}�<i`?��Oʄbҟ�g�g���)^���7�! ";K���/������k��"� վjJ� �O#���O����3�*tܳUhθ�����a��A����vg�As4@����b)LnI�|I�"g�D���}I��ڑ�� Pm+��NV�úhR�,:���Ge�b�H��=��uW~#3��s�D�rL'�E�`����ȝ9W���s!lt������~s���t��_k/y� v��z���g�p0lY[<б>�HĖN��ʇ�-�ě���{��P��Φ�3�q87�L�0앥2s-����z껇d*]��sf��{�)��d(� �i��.=f۪o,��@�܉�}��<� ��K�12B��%1���k�_l��� Z�E����g!���5h���� ��qU��Yr8��-��]���y���E˘����W�}���آҊ|NǴ�bmҤ@O��`�Z����H�[_u}��)Q�c1��YHQٳ��:����xW���{}���?��i�:/�������������T"�B%������x�z �Q㢗��4)Ϟ������(�ܙ):L����Vv�l̴FGQ�6ڒ�s!�@�♩���BϜ�:+8��y����h��#ѧa�E5D������f%��)s��8�٣�{�v�tI�I�f{c��C���eY�*�q�H1:��1z�Ї�&����q�p�A�����N2�#���)<|�����|?�m��{o��ј4����F�Y�������.�NYh�G�Bʧ�4�GΜ�F�$ʝQ GS����=��hU ����Lzɕ|٢��=.�^ݹ/ 5f��}.C}yTB6 ����̽�r��0�=au�mu=�W���)�$�?KAhPm�യw~(��Js`;%����]ֳ�"��vWT)m:m��'�ar�$w��Z�I��7�eN�rHY+����c����@��~�R�<�����*������L�A2�:h9b
Static task
static1
Behavioral task
behavioral1
Sample
ce3eae1b5ee9329aa39b8317b8965ce5da240275d21b84793ab59274109bdade.exe
Resource
win10v2004-20240508-en
General
-
Target
ce3eae1b5ee9329aa39b8317b8965ce5da240275d21b84793ab59274109bdade
-
Size
3.1MB
-
MD5
2708fe8f7c8cd46754f3d60ba1ee5244
-
SHA1
c3bb723717c63487ab9c0ead737fd637636446b4
-
SHA256
ce3eae1b5ee9329aa39b8317b8965ce5da240275d21b84793ab59274109bdade
-
SHA512
ca3912f7acfdbcc4ea413f2a78a5ff0d33e10ad72951c401073c45981d70297544ef9c9b87624713c153801a12cdd7235a87611cb9f1882c8d3b829e5bc9bf78
-
SSDEEP
98304:4p4n0LfoKJ3Viz31JXhi366C0m4usjXmknC5jC:ln6SzlJXO/mpsjWkC5jC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce3eae1b5ee9329aa39b8317b8965ce5da240275d21b84793ab59274109bdade
Files
-
ce3eae1b5ee9329aa39b8317b8965ce5da240275d21b84793ab59274109bdade.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE