9�r0Dž���tE2�\8H�lC��0��f����D!��5�s��:mhǎ����E�����V9堛�FA'����p%�C����&�·B���5D`��^�N�5�-�����{dM+S�`qW��S6R��X�<��Ozvý�}j[@�|���-��t��@"*A����'��S"������PE|����mr��Z���oZ�������� �C�W� ~T��1�X��QZ�I�-���7���4O��Hp`��7�����"?7q�n��a�ڇ�L����?�oqO`w5�h0�4E�m�m��=2�:z[�ڿ�ڒ䉌�țNl�{,k�6�����WA��8ސ8���W���:�]�T*�a<K����dȚ/�a{W�+wD�t]��nE��u/M|,�B��b��p+I>')y @ԃʝ�G���mޮ�]�-�aj�Y�P����M!��E� �,���m�:/�D0�gvi�Fo�<p��k���oZC�ݾ|���>1ě,�AD���^��$ ��x�ʡ ��1h��!%dA �TE��Wǘ����Ȱ�����F��\���^7J����Wdc<�|�� �5����U�@ �˲w*_X���5�镦yϰ����0����x'��kR��0�6h<� ��T��=YHp��ǵB&��_rW�=}�$.PFE���T�xDF*[kfȇ�� Tqo����BIYFb\,�=u� �#�yu��o��]A��0cX����\ ��֛���5�s�J�]��Q���r\�F�`�S�UF�GT��Qe�c����WԃR3���$���nVȃ��N�l>�K验c�:ϣ����Z�D(-bh�o8���D�>Xh�����ޱ���"X�4+�����YW�ǯ�-H�#"ȝ� ��k��]��!��#��n �Ӡ��Ovm�W�{{� ��p�_5uvL�X���"y������J%�:M>�_�D+��OS{����6@DX �?�vn⡨��|d]Eȩ��#�7�b7�5G���x������< K�p�\��*7N�8�'�����HIz��g<@tƐ� �쨰P��V��.Зb�(I��k��p�mkH0R�aP���D�,��+!IeXH�A#fb���3F��s���a��FQC$��Hy�P*��t?��7q6��#?9L�Jbts�Y���z�a�+�ɯم`�?۲��ᴵ�jI\c��}�I�ܘf�V�{K��;{�F��*�g1��S�'���M=&�6e���W�B���B"��y��Ђou.���澮y�Q*@H�Eʞ>�� �u�[�����d�-�����06?=w���,�5�L#��%*6@�0������S}t���(��zc�L������� H[&�VBfk�6;[~���:BC�stLe��i�����l�?k!��B�N+��7��J�Ũ�QH�W���s2Ś��3��ݸ|O ���,f���Kʹ����OE�7��bq8l���ߌԸL��{�^-fgf����g�A�C�eHl5�� �#�'�Ҋ����/&3Q"(-'!��ѵEIa�CڇY`��e`���"Q�(��� @��M�ʼn��v��><)�h"'Q�Ufe�{i1͢�'cr�(��2Q���K�=��!�a�����KQ\D��mr��>�<�e�/Q$���Gp �2#���-I��E���RG?�p��>I&�F�a5���xGѬ�v�uz]���U��"{u�M����iK���`͝��Jɩ}�ڗ�|Yü:�������4�S��3�~k a.�ŨQ-B�P�XVx�?��؉�k���[M|ֿ7�F�3�U�j˶&+��~�1{u=_� H�J�U��������(�m�VG�i��ޥ������9�4t��&��@����~���y�dM�� ��c�rȊ��Z��{�i�i��Ub�R�'g�b���7���'*�Kǩ��(�Ɨ�q�w��,x-�Y�@��(8^(����������sM��V�?�S�J�?n\�qY|��Z��$���f�˺H���������>��DI喙��N�,߽2������ ��OIE��D��Yb���S� ����7���L3��d�d�²O<��|�"�2�E,9��7̱2�;�ŗ��"�����>�2O��6���0'��7P�k�P�J?�&�*�o���%v�v���!�� �둙�,㒃i)̒�� �|�0�h��Ǚ!�-iG0ф�I�}m����d%0 4�bzE��v$� muBo�:��uӣf�~?�4r�i*��r����q�{���3� �&��R��`S*�V��G/�5m)�7o��Xu�BP���~ݓN�~G*�3�e� U��_���p��ߧ)��AHsc��9�ĝq��q�,Lα�q5���Z���D�Cv��:d�VE��!�6�N����=�:�תNn��g&���pN�w�^����Ѧ:�`�yE���������ߠ3 �el�S�MT_�ҲC���U7WŔ;��ۢ�����l/�_q��H����{]�8�KBA��"��~2�Rn-��K����%`�h�`�j��PR�N��+�x�g�Y�@҄Uͧ���Q~�)?E��L��h��e��!��͟�<�gL��$��ځE� &��c�:� �l�2�GH������Q�a��K]��ܩ���-�}a P�| ����Y�bφ^v���Y=�3Y���T������P��� ���#` ^I����Ư@�ߔ(Xt-�h�㘿9<��O�\�B���!V��P_q[����[U�$��}+���(����Â�N?���CCjxx��u��f��DG="ҋ�Z��V��q��?RCyn��u�xPA�� �fV濺�N�Q�lJ�-W�-�ވc��d/l-��`V����w u����nd�my��m�} PW�B�+۳�*��n�{b�I�1��X��)G�zx�f&7ro"�-�|#������W���&�O��Ba��i4څL��4�j����yД��M�j���ގ�E2�b�hr����[���{j�3Dk�����n䱱�\���4o�������M{I�?�g��V��g'���v=,�Rʯ��g�rH�T�6��#g���U�����;8��(�� �����9�^\�}k-gÖ�&�T4�C�P�xH;�f��1v�>�M�4u�����N��r���]�H�Ы�f�`u�܍g�N��%]\u�'ބ��W%mjB��G��b��5|��H��h�W�-��|�9���-�����+P�k %�֠��*�C�`f/М�!بh$��ī��A��59(upZ_E&A2Z�&�_+��|�*��\[�X˻��[��NB�~9��ۚ��W.���G-sĢ����C����\{��t`{P`4`��6%H�;��������y/醩�,�� �8��U�o�T����8�91�R�|���3�E������?j �,�4k���c�=�[�$�f���`�up��&��F_��*�ŷZ� G���CC�L9�{��5lZ��?l�K҃�8�C�n�����s�?s �h�lQ��Wiv�e nR�a�U3�R��jY����u�Np��^6�߷����r�?��@�}�|�g�v�� 4�
Static task
static1
Behavioral task
behavioral1
Sample
c4d58df758c24d568bbb4386a4ca3f4d2463fcfcee5e71ed3304b4b7d916cd9a.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c4d58df758c24d568bbb4386a4ca3f4d2463fcfcee5e71ed3304b4b7d916cd9a.exe
Resource
win10v2004-20240508-en
General
-
Target
c4d58df758c24d568bbb4386a4ca3f4d2463fcfcee5e71ed3304b4b7d916cd9a
-
Size
2.6MB
-
MD5
039d97aec80a365a65f937f3d77ccb9a
-
SHA1
ee1be30e5480de1a7a82f0592c113b135b46392e
-
SHA256
c4d58df758c24d568bbb4386a4ca3f4d2463fcfcee5e71ed3304b4b7d916cd9a
-
SHA512
89a89b7f76cb2c8da99ba176467caefb3bce27f8b88710854399779b3d20b5a25745d376396c6bf3f7af4af556bbb6155dd9bc5b1ed6b1ae941b48b979ae3d01
-
SSDEEP
49152:TeS12nRc6C5CEAHD26ICQVt1ULUQRP6a6YPkCLJ37xbIjNyX5Hxzl/9:6S+c6ZEmqCMtmoQRP6aZtnsNq9l/9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource c4d58df758c24d568bbb4386a4ca3f4d2463fcfcee5e71ed3304b4b7d916cd9a
Files
-
c4d58df758c24d568bbb4386a4ca3f4d2463fcfcee5e71ed3304b4b7d916cd9a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 36KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 192KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE