[�Ư�A�=�+5u�EPӹ�,u5�`����,*Kc���B�*WsPk���zlܓ�bH���\�������[Dzl�=M�Et�tI��#ݜ��z������g��}j �Ҕ�w0�� œ�! 'J�Z��U� �Ĉ������ϓ�qW�۱yM�է��tgeϦ@Q�����������p���|S�0>L�LcnI��cFW-L�_l)��u�)�Gx'�pK�`WH���Ñـ��q�L��)��ܹi��$��I�`��gX5As���m��sF��f@<<���_� h�_� Ά� ���vC���q1�EID����u^�0'}��0d\x(���#�����Ϭ�!��d�u"Gi�:�I�ޤk�N�G�p RJEPh^54'N�hw���@L����d��Ml������ޱ��Ə�6k���k�*z�ىc�^ZX���b~�B� =� Y��ms��� Ā�"��п��C"5BE�<��6ܷ`:��yL���2!��W�f��*�}�L3;��2�n;����������P�гlz�� �5���D��zQ�htp��l��>�5�P|r--T�ڦ~��n;p�`�T;���4, ;(R0�%�x�� �ty���IZܛ`�9.���J~�s|��E@��ufZ�\;��x�������=��sE���㒪B���+�T�4Y=��Ѻ�̔�����]�3�_E��86d�P~*A&���Y���jQڠ-��,fk�2�v�?�bJ]YBy�����>������S�Y)�b�fF^`ɻ��/�����Z:�e�1/ F�f�t�*�J�3I�Ŧ�����j�G°bF9s��d�7��$Ի�]��i���JԳ.��K�,�Թփ���>�5��X�������W:�:f����݆PR�#�^�ՙp�s�����8G�GQ��������/;Wc��tر�Y~ݹ��$�%\oѡ��0��X���u�� @V��x M;?�����n��Zs'��gĐk�՝���y��ȝ��:�k�&q=5Ka� �aJH����$bU�����d��[?]H���k�n�� Kf��@9*W��;���pQ�3�� 0�s�u ~� �&���VDE ��P��!�'ѼҬ� a�T���1��Iϻ���p�zȊ�0Zb��W�4M �)5�7O��u/uJ��'�W�-���hI��D�$x�╘�nce�)W�y_� K��Kwd�D�%�Y�\$��Н��8u�m2�`�OZ���T��N4CR1T1�+���|3E;'Q3B�/�G�\�df��|��R���u+��'�Q!ָ��,�k��S��o�� �S� y�.ٻD8����K�6w�Z:�+4�|{�[���'���L� %tj���v ��6E#��{8�S�EL���k�M������e��!� ���Ӑ腵��uk8���݃��cq��E�w�g�!2��9�{����;�}�2S�m"� �����E��ԉL�whP9�ݠ�OAR�skhB�!=x`�w uD}B�Q>'͋hje�0�q]g��8������CUR���D�3gMI�/��+�10�����S[>�x.W�r����v��w���φ�� /D������L��릏�@aD���CIN6�Z��}� ~��0A�qc1X�dL�fKZ�J�^���L�T�gK���@���W��P����弒{d�0�����o��ua�������X�)�{/l20�B ��+��!�����C �W�̣gû������l�^*����l\��$�:�d����n�C�Tcgu��|f��������n�$� �����5v�m��`@����M�; �B�p� Tl��>�Ԇ(a�]��}�����^6�"Zp��DՕ3��ƴ�u�Xוi���Z,K��H�ԛ ó��[�|9%� ��)Y-ӆ�R��y�| �(V��[�W B�n�H7��_a��o+������?*I�4�}G����D%��ߵ�|�w'~�rӮ�e}���� 27�u�������B���F��K�HoZq�np��|���ӓa�-,뜨�pn3��%�����Nq�}���\�OHƋ^�� CZ�-7 ���]-��ε%���P+G@6Y/����->��z�IdBz��_�Z5_3>ݖDC- 3��k��%�uz���h�4������e2V��G���� �s8vurh��k�T�����uU�!�Bn���o�g��L����U0�tyeY�?EWi"�2�Ȗ�J��|R2 ��s?��F;�c��l�6�,�]�.��� ����\PuX�+!r`D��C�`gѼџ?�'�#Xjo�m�E-5D�ް$Or���r#23��� �]�J!6��>�9>ϛ|$x�G��.^k������NV�:��E�-@���X�}���G��^�f����촽],����@;�Jw�V�/P��v8yN.�v6�;cF=�b'�_^p� �"Jk���k��V��M�?4��/�4��k�Br����܄�ts��:/���-s����MӜ�e4��X���<.ك��Z�*��c1 \?�����Or���M6��]3�o�p�-��]"�����P�"�Zo���oY��c���ψ#d8<��u-C�Y�DC=�됂;+�aT�E{!�v�A��m�͏��s~Ɠ`�*�v��\��ؿ��DN�GPBo�Q��f�-i�� ����\ -�\z�`h�g�����v�0�JXu��3��i o�,g�m=����жo�E����R7�M˲�F��e�P�ߧ�t�R];L��{B��73��Ɨ���ǻ�>�Ci�ٮ�SaD�Z`};�O�u���:&���8+2�)���S���p6/[7̅K��⢖�h����;���<`������Yf�1J5<�B�>u�\�sJ�U����ڇfh�Ȗ����V�����Q\��e2��ӈ!��6����aq)G ͤ��>��"�K�|$�61k̬��G:$ّ|�O����_j���=_��{pd*+�����\�(�<�=+��,��p>����k��3�m,�uD�L(.�sr����ݝ:�� <��C�Et*���[��8��XD�@2�w���@��L������:6v��eİ�w�cq[u�r��|7&>�a���o��-I_F���kSCˑ��h#;��T*���W��a�n�`1�o�H$Cvn���(�M�ܼ�)���nŌ
Static task
static1
Behavioral task
behavioral1
Sample
298473dc224fb854af59a745be4059e64fccc00fedc2f645a93e4b4ad9c85ad6.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
298473dc224fb854af59a745be4059e64fccc00fedc2f645a93e4b4ad9c85ad6.exe
Resource
win10v2004-20240508-en
General
-
Target
298473dc224fb854af59a745be4059e64fccc00fedc2f645a93e4b4ad9c85ad6
-
Size
4.2MB
-
MD5
fd6d141d7e0824ff95cadb8614eb86f2
-
SHA1
5d3601d4ef694da520b9a020a4e4c2756ea46a7f
-
SHA256
298473dc224fb854af59a745be4059e64fccc00fedc2f645a93e4b4ad9c85ad6
-
SHA512
3bf1a96530e147f10d2dc0e84069336e061147d3d621f88a7726a59b98ea35689d20e310d895d97c6fd5d123ae8b085efd1f86f2330eb62020a2d26f6b202519
-
SSDEEP
98304:Regj/wEi0uw/pH/Lm8IqE3yVRymtJjX7qGFyfx:Res/liH0TtIZyNtlX7O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 298473dc224fb854af59a745be4059e64fccc00fedc2f645a93e4b4ad9c85ad6
Files
-
298473dc224fb854af59a745be4059e64fccc00fedc2f645a93e4b4ad9c85ad6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 1.2MB - Virtual size: 8.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 988KB - Virtual size: 988KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE