τ ��.��������>J��g�3�G5X�"�r3S�0�w���W:9��:����N{��*�L:m��3řH ������Y�mZ��p.d���������7��X�E�;qjrEp��n�u&�� +l�ƿ�Tc��[1��-��/�NÌ���{��s�,\@�/9�HM`��܌�"����+9�Vt�`��� �ԷZ�� �nع��'2r��X��f�jx���D���s�7q ���=�����w%o"�[�O�(W=�ō�� -͎���fz��GQ6��~��G̟0�B]�_�ܰB�k��^w-Nl���a8F��0]B��\������3�Y"p�c@S�J�+��N�:㵏�*�9� =���XW�3���)F��a�&��5�/K*UF8x���"W0�|c� ��8�*S|i��:J�K�# �\�؊@��} n��i$��{2�����1�n)���<�,CYe�uL��輚�t��/�h)�����e��+�0D@��S���7�£�bĀ�6�ԸL��^i���N�Q]�ai|y���v���p��5(^ǦdDzl�W����,�c}�vǸLx��P��2�g�A���@VdhGk{��W������j2�bύ�J�+�!�x���E�4n�o �I�Y���Az���2��<�������Sӱ����C�2]s��Ħ�O� V�'�܀�Ũ���+�v���pV��xH���kK��eQ�mi`����,��^�%z�K��H��~V��8-���%1F�y���W�A�d�HY}���e�l�Pp�،�>���;�8?0�� #���j�f9�y�*X߱Rei�#�3$ φ����y����UQJ��1��sfTkTS~�����QP>u����V!e܀�Gz��ݻ: �$3���o)��z�C�t?u�n����A�7��,y���Fw��^���z]�� ��&��B{Τ`5�J�����~����m�mok�6!�I�l���,�q]Fi�Faa��)�,T��TlL,5D'ܼK��G� >�*Ι�M�����&t��_�����V�otL���Z>�x���h_�#� ϣMj��g����^@Su�Z��t�z�K�"�����A�9>�Mu��Z����fX\��>q N?9G�H[�:VT�����dV�bb)˧�'����~�����Z�&�}����Z�V��QE��]!DŢɯ������4��˘����S�B]"~t(TQ��;���4H�iN��Jax'�R�����dٜVd�䎯�Z#β=P�¼�O'��� ���D҈�*ݓ�Eb,y+�����#d��y-��M`OwAl���M�8>�)Q���s�"2�.; �� �W������#,[�q~W�4����A�Ϣ/Ǡ|�vu�5���~x'H!'n��!W$e8�LB�x%�Sc����P߮� -�I.zT�S�5����&��v,R���ݵ�������Z$��3!�C��l��B��������+�Z�Xҵ ?�Ҹq%7*�/������e�m�l#�,��#CQs���y]�j1��9�ja�.{��E��F<S�h���:������v�=�VTG_����!-fg��!ujrL�Vθ>��n����c $��U��S�0u�2��+��i��3��r[`\�#P@qD�萃�.G�b�� 4���U� 0H��n�������^����=tD͟[�����.Xt�}���C��Ո�x��YEgb�OU�3&-��g�؉��oħAuw���+J���^��CC����8�}/��A���ݾ6�X0�_j�z�����o>T�Օ\pp���T�@h�K� \��_��e�;L���16=KN32| ���j��9J���5'����Z�m�_�Y�\{�IM�*��{q��ӥ( �=4 9�x����j-7��z8��.���Ք�5}n-�>SJo'�"��a �Yh�~A��r�W��EZ��l�H���#us�k��Lo38�M�{e8��5ncX�+!-�L �ю�\�#�X�d�.<f�>�hL�!��;��#q�i�y��V��0p@��ϝ��vt��$�+��~�����k��vj~v����<UF�HIr���X�WvzR�ˮ:����i��W��hB�����۵�����r��FS �iH��yhne|�T��sAm�l���s���3���U=���U���vp�V�`E���u�P��A�BdO��z�OU]�����8��X�I-~2 �$d��(�b0��bF��;������mݳ�=SO��mُ9�} :?�� �*����"��FR��7+IA[Ӻ, `�e'�f�`�Z�ssQ5�` ��#=D��7�#�E�NQ����Q+�����Y&G���$ػ�8����ie���8'�i�2I��6Sؓ�D�Wp���_�4s�x;�� �+�zr�u#|��&��I�L}���������l��Ez��� �CC[�X*\����� �������A�S����_����dƥ1�#9y{7f�ED��-�t<���5�dc�uqH�e��.���8����z3m�[�%��ÐZd@Ρ+�Xd�_7��6�aIԪ�\�W�X� AK_♪�n�|�� CRڇ�ixʓ�9�@>-:�b3/��N�57���Y��������� >s=T�曩� t�?�eM�w7ډ�t�ܛ�-��$�$�D`�w�������iH�=�W.�����n�d���o���͙�%��O;`j[�7�ҕmH����P+1!��m�ô�p|~6O��xM�wG�'<��G��vT��f`�`����r`�ލ�����siaívM�LA�༵�诺��K��x�M$}��#?����m�6G�T�2��yr�G�ą�H�7 ��������v��*�Nd��t�Ě`�!�6�j�z��e�����f�\#��B"��cL��A*B��ʞCFbu?�̻��,�P�7d�m���`�|N�.�i���CO�4�� �K|_�|k�z+�D���: �̽��E�[�pQ�D�r�עQ]"���5��f�6�/o����?��@�
Static task
static1
Behavioral task
behavioral1
Sample
211213ad833dd439f7147e7b38827b5640368da118124bfc731e98b988663c2a.exe
Resource
win10v2004-20240426-en
General
-
Target
211213ad833dd439f7147e7b38827b5640368da118124bfc731e98b988663c2a
-
Size
3.1MB
-
MD5
4887de96cc4f49c98146e2cdddbe690a
-
SHA1
85bbad83a862fb68d5381a44392cc9c49fa751bb
-
SHA256
211213ad833dd439f7147e7b38827b5640368da118124bfc731e98b988663c2a
-
SHA512
c6924d78de295b61d1d5900e15876c627d7f571f08c35b1224267fc167aac8d018f2fb23c5134c0a266021dff6adee031911eb3bb7d730fe164c1f0075281618
-
SSDEEP
98304:+eA4HLgvO2oNRCwEubPusPO4RwfSCLcONK0r2wgdg:+eJrgvO4wESP5HrONZ3gdg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 211213ad833dd439f7147e7b38827b5640368da118124bfc731e98b988663c2a
Files
-
211213ad833dd439f7147e7b38827b5640368da118124bfc731e98b988663c2a.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE