˟�IHbE����l6�c+�L�s��J.��C��>��w�]1�>x7�:�lmu�qσ�!&%�H+�~X�ݻ�:c�D_�/0W��C���ArW �<��Ե�������0�i�h;G�����,$V�+ �{E�V�)0�����~�N~ ,+�لI��>�V�\����ͭ�����:���6��m�W,�E���h���l��s�|�0�ol��9?X�z&����71��m@��S5s6x�B�cX���V\��&�7?Qî�/�,�|OJ�����e����@8�j���#g �_+&]�wqA��`���RY��K]��y�^�#����j�� ��������S8�6�v�EP���F&��$V������<�/S�yF"j���P���$�a@5O�y?���O8�e�Joī�~�C�kTDCf�ERl&o�3�]ޜ��#������ ��M�-������Cu�����P77�&�>A� ��PF����)S/8��PLݍbQ��O�ZKu��ձR��p?��A�5�� a�&�گ�Y(��CY��܄�X9�w�+5�ֶ\�'�g�_��U|ok�-iܳz]Kh�sh�-T(�6�J�Nr��F9�"�i�l��kG�Z!��'�n�p&�ִ!��s��,݈����b���y[..>3d�s䭅\� �����>'�e��W��Y��0�c%c�=}o.K��I�tg�Q#�GP�2=� ��9y��O�n�5;n)~{5�p�T}�_�ky���h ���,��bM�|��,����8y\<ZS��>�2�C"�"u%�]�dS�$ �}�!��x<�49`� �Y�ԏV��Ʒ���IF�Dc�����\p����[|�̹?�v��uɒ�|G��� [0Bʆ��=@~�E�e>�qN��خ0m�O����4w�*�8[E1��)�q�ᢽ�J�#���I}3�w��=�K/������8^���.@ԃm�҄�8��ݏ�����L���i|���F"��d�|N�Ԯ��ՍjF�nL��������3+�O�0�[u��`W�vXPZP�Io�/��~��S6{P3=� �Ε��ڛ)=�Y+��n���%v���c�RK�cW��� b,@���������H��~��N� �|2^I�q�fJ�(a�@Ps=�۠Zx%|��GG� ��;k9?���UQlZ՞�OlB�T��đ��u-����Cz�����l��]i2| �5���Lm}ڢLe߾��5�.�Nc�]�� Q�5XO�����b������k����ˤ�����M^Y�NA�Q̘&1�P������o�����ָͅ�'�jtυܼ㭝��i�B�Q'��Y��ZW彸���d�B�~�D���[�K�*r�k���{vD;;��2&}h�������(*�M9�F�휂4�L�hu~sS�aS��WCCv�������tf����;B�uuD ��OWs��q8��Q��TU��E��Mn��M�����r�_���&��E�2r�� ��B�vmot:E�.4B����ɡ�����1v(x��"�W/d�!-� ���]L���I$����#�]K��-I�E����PAbw O"2��Q�Or������+���U#�9l���Crlk�Tu������I��0ov�O&a�'�sѱ�#�s@�@䋏�I�h���'�πE��cL��O��w{��V.l�c��,�ˤ��%����yE�<�\c�r!BG*��_T��Λ���jFj�5w!ܱL �nj�/3�ڜ(ϗJ�����qÞ�0��vEe��Y�W�)_�>$aN ��l�`2�>���v}7�+`B@�Ah�'H�4Z�y��E��3������0�k`2����i!���~��n�|���YR�eP3?��˄��8��S ���N4�����۹���g:�S�M!m��90�ô6�>�PK~��+��)����u�d�º�O�?����S��3���C��c.�w8�C�e�<r&��;nb ��&uSP�Y�4��*=��a2r� �lMK`�pё�B�P��Rx����3�[�I���+� �-פ���@�� p���4��H_ϫ<�J��V�[��o9>��n���Nfɕ`P���,���i7X����aIvM �u�E�FWXWlڑ�G(��I�w��Ү~��Gl0&���[2)�)궣�\��T���J���.�7w�$�g͂�i�F�f�k�e)�q]>}ٯ�@)1(�3�I:���W/L�5f���P��g�Nd@q�Kk-��~���3V1���:�ݐ��}>x���Բj3��Y�ߤaz�6�/��\�u�����tס/T�Ii�D���k�K����RJ�� �Y�$P�Zm��$��7�?��i8��Gh �4 ^�-{��l�Ǒ(��h� �,�t`OgHYc3��v�H.2O O����w��^�6*��5^W�f<m7u�f�z%јI>��*��R����72��R�NN����R�� M~�����^Af��*�-o[T� ���=�>�R'����'lbz���!_*�j��1:�{���y��x 38Cd�Hp�]XҤ~k�A�_s�:���Mq�f֧Z����ڢe��M��{!6B �?��� �F�7w�/�ƺ;`���,4|�u"69�u�� ��-���t�y��g�w��$��Go�*���,(1�.�y���N�?R(} �cR��R ��j��Q�5s���\��[.�����}��V ��t\�%�a��� Z�{�8AVt��#$ o��e#�@�/2���P�Ad��V,'��=�%��ޟ�iӫ��L:���2��\ޝ����C��j����_��PZd�������C3v��ړ��RC�����,.3�c!��G��p,\E�c#�����!�Aܼ��m�56)��t7�~�����ṽ��Q�uo/�X�ɳ1Y�=���p�'��g�U��AD��Dj� O��pk�(�������MUh=G�ͦ��� ���!��$xw�*��9�J������������<��r�}������� ;�� Q;���N�?�h�+�7�a��I�^��E��ch��)�Y�u��˵G�־ո�%�#8�,n ��N�� ���zB����us<�Iūc�ʥ��t�*���sP\�w�\�ᰉ�K�=����{�Q[�7.e'_&N�D��s@���3�u����Ѝb��v���� _6@�lG+��[��)��%F_�q>O���t�M�{� ���h�~�ѥ�,��� ��D�����P+�"�|$�L�f��a6�R����ތ
Static task
static1
Behavioral task
behavioral1
Sample
4deb6b2c9923145376c327f258b236e86628a95c6b91840f790dda70c4e5fe8d.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
4deb6b2c9923145376c327f258b236e86628a95c6b91840f790dda70c4e5fe8d.exe
Resource
win10v2004-20240226-en
General
-
Target
4deb6b2c9923145376c327f258b236e86628a95c6b91840f790dda70c4e5fe8d
-
Size
1.2MB
-
MD5
10a29cd5fe1240890853e430c1f471ef
-
SHA1
3abbf833745c99d5cf82365fe108f29113aedfb3
-
SHA256
4deb6b2c9923145376c327f258b236e86628a95c6b91840f790dda70c4e5fe8d
-
SHA512
f765dfb427174e6467d0617b288108c83edfade597c08803b8293ff93d153512c5fad2ed19f25dde6b7ac0b99779b481a99c8efe01f582da1b8a1f722b78a947
-
SSDEEP
24576:mp8SeVPTXz1HMQQ40zCSAO6Wqd+Ey0S5fQ9NtZ8ClpMowFvyJGtVDTX6:f1uQp0zCS5SW5oJe2S3DTX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4deb6b2c9923145376c327f258b236e86628a95c6b91840f790dda70c4e5fe8d
Files
-
4deb6b2c9923145376c327f258b236e86628a95c6b91840f790dda70c4e5fe8d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
Size: 19KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 20KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 167KB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE