6������ә��t"xX�1o��_"����9��[����^��J�. r�Q����hfWE'.q� ����� �ͽ���o�c��(��!u�{e&�ϐ=�����+`P�7�{J�_9���#��-��b.��H���~R.K)� ���_�^��`�@��`���>uUG�R���v �����0�,�'[3 ��rg��Z�%}�kL�a׀�Smg���q_��"��|bƎ�E\��p�����x^�R ��28���^���z�&�ABoIi�T�7B� ��Ɂ#�/�ߎ1n9�z��}�#�X��7� 1��ވ��O�4�;-쨵�ʉ�r��t���W�jW?�F�����m�������F��N�qd���5f����h�v�}M�ʼ��s���̜&���k�n�sp��@i+PqN�i5[4���,��ƞ�y��%��:"D"���:��(`��C���5��}�m�����&��;a�N��,�� �Ә�1����?L�2��);s�Oawy7��W�t��X:�D�p�v)Q�y|��p�ij�jd�2�X��ynWGuy ��v}��s�5�'jC�xd) �`mV���� �.t��Y��!�#.�������I?-�PB��p�ې�ʩ;���h��eW|v�*F�M�ig��J��g��,4(���mC8�hp�^R�*`�F�� f���ܹ�|�'��p��fÆt��A��ʶ6KpR'�/�$0"@�6�Ȫ^�|�&!7 �y.���~��B!� �Ƶ�:��.V�; ����7��������;!��q��(��{�ez�ks�V����&�=-�Y;R��:�r�K��;�"����=uh�o�%(V[����ۻ�Y�K�by�eI<��A�R� ���D���ͱ7��VR���n(Q�e�xWV��>��bry#��(|u��.�������4��v ��$�?엌��U4��hcwx)����SD��\�z�#Ч߀�'��=���Д@�����5g`��X��˵|^��&!�!�X܁S�`_�#�頶"q���ٲ����/�W������BlCe�g��*qY�:č����j�����͊��3Ӟ��j��HB�U=�E�v!;Aä��O� ��:[�,t'�}<j�b�0���46:"j^�߽��� �bN��&I�*��y��l�������S�Q2����JRuPҬ�~��BjЃ��MkLUo��Z�`!�E;fZh��9:�H�F��+ř� ����Ņk��� m�?Ucj `��U���H���W�g!���?��6b�����v#t���nt�1�ج�����fZ��@'"����Y5Miy�^�8!w+��+/����^���Vw}]�3�M�A�zz� ����p>���z(��c�n�+��3�_��������g�0���8)f���L��g.Xk��*`���r���iM7���6���s�B*n�����(�d�kOe ��>�~ֽ߉����[4�>� �]��sa�(�lڛ;��{�����(� ��|^4����"��/��R�U��`��/a�Gs^�(#�x���B�gn&�h���6��X'\��ã�D�������:)e����A+��y� Ӑ(ʐ�_K����\�%��dA�1����:���_���ݣ�<L!Vx+�K��v� =Tq�.����������|BF���D`�,�����;�ՠ�Q�ç����v��y��;5ɩ��q̑��Z����h�Qt���X���T�L?�}_�2�s�D�8��)�����,M� 8�@c�-ˡw�'"�f��ggj}7�#K;���3e=�A*���F7p�E`� ��@�M�b�k88%P0#!A���U<{����/ڻ�.�������jЫд��� �3�GN�w;�h��0u˕�b�e�볓�4D?�Os\�����W/���3ñ�f�,ґ"���w,vJ����/���N�h�gW8�-�9� �` 9���ӪA{�m�%�^!av-�'�_�T���F�����?��[\���O��}6dr7/��_!��_{�����X��>�����H�N���V�M�E�����[O�F�4PP����"��Z����\i+���M��9A��"�yw}�ʉM��3�O �]��E#E��^Y��~x�h�f�D�U4B�E�|��mm^��/;N`��7�%N�U.��xV���� ���G6�����qx��j�2�_�̇�HU��(TF���f�g0�]�`~<�'�AxF���yym���x4�AH o����+OC�������+�m����x��O��:i�������j9�fc��2eɮ=��CA���h��,Ra;j�S}I�������c��IK(��&ԓ3<��6��E�o5�:�8V,�Qn�ɪ�rjU���van��V6�e�Ŝ�s�\�vf���]��2�GQ�� �3��j)�����L������i��zB�S��bW"�Ty� xҋW��X�ZVL>�`Lr��̡a)r���������o��%s��~�-��&�OE�A�:a�K��~�!t��#�Y~� Ut�t�3&�u� T��<��0��kPf���-z'������M_�nV �L���T��m�:�n�2��8k���ͫ��#چD�P�YR�����/h�ۧML�J@���ڀQx�/��?�9jo ����g3���7r���?������uf#��nr��|,�G�����i�9�(��76K~u&�t�?雈=Bw��t/����p��,���~�b������&sM��}��n��t.e��jF�O.�M�u��7�|�T*j�h^E�#$�;<����}���'�x?�k |��Ks��6��d����QX�_�^��G�B��-��"���-������m�Ͳ�96�g���< d���ɞ�:_���`���+�E�oU�� ~㓗W�4(z _UԾx9��1�2$Z�pҎ�fiJ��?�Єӵ�?�� Z�בV��zǿk忩�����K)^2���`��o��^{gm�tT�� ء�
Static task
static1
Behavioral task
behavioral1
Sample
a9874d97f1e3c4c35f0d0ee4f4b2a31ab20b10bb1b3967eade2d156b2e37f5a1.exe
Resource
win10v2004-20240426-en
General
-
Target
a9874d97f1e3c4c35f0d0ee4f4b2a31ab20b10bb1b3967eade2d156b2e37f5a1
-
Size
3.1MB
-
MD5
b412241190bf449ea67d41806b5e607e
-
SHA1
70c43462155c20fee479d820a5779a264492e542
-
SHA256
a9874d97f1e3c4c35f0d0ee4f4b2a31ab20b10bb1b3967eade2d156b2e37f5a1
-
SHA512
0778dfc99524910c2a9bffd3d63ad2af4bbeaeb22cc2ae1605bb0e872bd61c150ac3075abd48194f0b866cebac154a66a98954fe14437e37a4c0e44181c56520
-
SSDEEP
98304:bIkkof2pnMQdJGspTckISg6iTOwR1Cn8HWo2qj:BepMwM6TtISgn9R1y8HWo2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9874d97f1e3c4c35f0d0ee4f4b2a31ab20b10bb1b3967eade2d156b2e37f5a1
Files
-
a9874d97f1e3c4c35f0d0ee4f4b2a31ab20b10bb1b3967eade2d156b2e37f5a1.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE