P�V�Rl����:��Vx��d��l���|9���7� #f� *&?� z��;�+ɚBV��j�S|kû�?2RO�9�Z�5:���쏨�Na���E��#po1��e���u�M��}��`D]Z,�dGT��էMbSn�-�]1 ���~-5B��W=�pq��h�΄$�Ua�~��Afy�,%T6?K� oB�}y�6F��1L(y`N*%Q�̃%=Z��q� ��0�0�ͅ���%$~ �`>�p�l\o0��+�R�~J��`4̈� �#6��7qڊ5Bh�[o�#&gZA�_�Ô-B��f�2#�P�3��Q���cS/�h͈����p���C��3D�����q��K"8�zn6��1�FD��t8d��$l2��_t$��`�a�j��G��^O�>�����M��Ϡ�$��M�=p����p�g�=_�6��7�g�)[O:�5��a�#�:R��Xr��K?u@��_��B���O����D��>����nz�n9:�����ӥ,��.����� �II��\m���\M��E�j��հ8��?C|�6U�v�:L�W��������_§�q�Xj^cn���%��;G�����;B�}Boh�u ��e�R�,����D��O�]��{�0���\����-\Hom��RE�>78�v��1��A�9�p?1/����ݚ0ї5�+�㐼� 1�ȶn�M�5�Bm!�<�Cp�ŬS٩r�p��Vx�<�e����3]Xg����zv��)�m������84[�l��Ig$UR�P:��K��͵� �����ѽn.��tn6��=�������y��W@V+��=%L,^j�u� �n��!M4����WP4�9i;U:yL����@�;$-8a�{[B^�n�����E0c<���Ɉ3��Ypͬ�VW���x���'����g��ěk+a� x�Eq�/C�� 6������!7�VU ��2�-��Pg��i3�x�Vm��+����;HV����Ed�+QH'��Z`�O���!��j쬙b^�a���H�_N�(��w�0��ӑ��A8�|���]��.���� ���3�|M?aΉC&͈��q���� a�:��͐�>�>_�_,�])�C;A�ۖ�8���7�0y��W�S&*�[�iQ['��ژ]��a<l��`?�XLj��5`w��Y^��?ܖy�c���D�;7y"WU�`#�]������#b;lڮs�X:.�E����Nj|�6���0�?'��>r����$(H����v��Zk��l]e{�ms���1��1 N��ʳ�O�ȴ�BO��r�g�����˽�uX`�_��" �b<�T��78��}|�a�ӴC:,)��zp�Y��v2/v�]�������l2y_�����kY��Z���γ�w��������O��JW���/l�,�%M����9(�XZ�[�9ҁ� ����B�C�$��S�,��"����Y_Fߟ�5���c=���ePSk��ۨ��6����4^�����ʿ3#u� �!% i���F��u�5'�����q�w��{H�� ι|m������O��Ȫ��qȼo��i���Rb��k]�U��DA|�f�n�5t@\�7h�_��Y��І�C���G�7+�����P���kX�O_��.��O�Ed��.�����K49��ڻh�e����n=8죿� ����x)�D���yOf��q��ô6��W^U�dK�搆����<�ZŦ�~������\�אUxFf}b��9�_����9�<�*��\X%�� ��De���9��i��( �o���1��>"�^c��O��Z���N>��:q� �!��2S�I���[�V�ư���Wyet��ousnOE��t�>�=���F �7�_~�w����9��U<��3�a74�����B�� 1E���<8�&T�)P�x �j�4/��_�����?��1/ph��~�'gB��M|s�.�ÿw�c����\�Wv���=���}(OV~ka�����P�4�F���L~Nz�O�dP�g2��Y��V?�C�$��j����SwBx�C�'�e�k���f۵�����U#w��*�Aʽ��N�r�~炪�UB��=`�CgFLVi�����t�_L<h\��/4Z'#+��D2���*�Hs�h�c���������+�p��������*ZF��F�F:���<[k1XYY)?<��p��<֓ښ"5<�^O���$����j09����k� /���U[e1W�~�沚�N`��L�q�(��4�@R|���Q��\Ljzy����}�s���<s����M˫���W���\C�#2I�]��Z�M�����Xu5�撃���xw�V�Ҝ�Z/B����.x�>j�_��/�̇j�,b�$Gg>�x����� 6��QCJ�ˋ,�C�1u��� ���Q���L��<�������J��u�ϴ��q�ǜ�����k�6�) zO��JC�i��Ji��8�hN&@?��en����&ⵣ�P��9���^Q�NP�%{�+&:�-� �d����g�=U�5S�'/{[�����:��p�=��?��.����3S���/��j�Ou�LH�m-�n#���r�V�)��A�L4q�Mvd�_��a�l(���sۉ�,�0�k�����M`}���F�m�#�4�'�m�����p}������M�(�A@V���4��[���� @ �iB���Xϴ��%:�&~2$�f�E��3K�Հ� �)��;�ܶ��s����*��8�nK(� ��E��3}Ý=�n8���*���i4u3�Fe׆�p,�y\2h��q������#5��P���"����9mY'�/VT���Y��Vm=���h����~� ӕ�M�`{��/��*� �e�SgH�E6�ґ�]Oc����|���"����`���t��o^j��q� ���3��� �< z,��������>�QTrC���.�Yχi�u}���K��z����Br��2P��P]���j�Io摢Bk=�;BrY��9Th6����%��a��� p�% [��G��?�ɡ�b��ۺM�91�2x���.��m�%�~�Rl�,?r9�A�n�0�gP�W��zS7l�;,�+��6�z�B�x�S�y2>κ籘�ο?^����t�}R����C\MobE�:�#w7��� ץ�C �aCw?���{� �!�?Ɠ��:R�w���xj�5Z��e#�ɏ�����`����(-�����@%pTo��p��8sK���'#��m-W=0 �>�� 5�^�g2���C5�"��ʶ`V�wY;���62�f#�.�J�������S��$8�����#�1r{R9�Ȑ�dD��Rm7s�_� ��\O�~/�#X6�c֓��a 0�V;�S���r�dě��{#U�&[�\R�_�}��1�x�_W�%�AHV@Z
Static task
static1
Behavioral task
behavioral1
Sample
79cf2da3073c778ac05fe9c8450f7c1bea71709142ae8711c7e3d37b4c853f39.exe
Resource
win10v2004-20240508-en
General
-
Target
79cf2da3073c778ac05fe9c8450f7c1bea71709142ae8711c7e3d37b4c853f39
-
Size
3.1MB
-
MD5
d070a515727de70408f7718e355d11fd
-
SHA1
c0acf9c3873466b1172aa2b5785136dc3e7a87ae
-
SHA256
79cf2da3073c778ac05fe9c8450f7c1bea71709142ae8711c7e3d37b4c853f39
-
SHA512
d38c7028b61b06d1dd84021cf6f88677f21cb21ed12db61317942f02e5ad6c3be6a8f446a313c2c3781f36998a76687095c7d240199a7cae58dde1c81a7a02d8
-
SSDEEP
49152:B3kzQVxmtAENS3kJiTrF+TD5S6XqSk2TMcXuzbL/Ev6pnF839C0X1b8v+ZwDjYiw:h5VrQ+fFED5S6XqF2TMSuzfsS8NCL4H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79cf2da3073c778ac05fe9c8450f7c1bea71709142ae8711c7e3d37b4c853f39
Files
-
79cf2da3073c778ac05fe9c8450f7c1bea71709142ae8711c7e3d37b4c853f39.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE