�;ņ��̵�]D?W�[n\Q���48u$���<�k�}=x`�"��x_Q����Z3.�J'��%v�)��z��C�>o���п��E��e'���'�b��m�=���oK����w �B�?2܋蛡����}��MDگ�q �[��;j���T��~�E�D��zDӫ�,��_"�h�U-�Ó蔝��F�=�8��yc�n\� b ~� pZ�z��^2`̃dX�Gu�@��?�G>����>�Xo��������k4&Ɵ����zs�8�F+��\�r��Z��䛍3�3z�k��3��2�:_fEiTu[% ���&A �%;�;̼&dF����9G����f���N��� Ʈ�o�� {2L�D�N��R�H�L���4��Ċ�=��'��d�-�t�VG)ݵ��Y7ƌPEH����L�ײr�if`�D;���@]�?��T.��n��~��`!��}�2���h6��z�����cI�^�=zi>�*[qV�>�$��l���/nف0�n����3�)cu���b�=�ex�������:���/�骳Ox����T���y�3B� ��yS��q^��Vut��,JV��ٚ����p���Y�g/�z�G*>k�����((�#Dv'l;�����S>������?�9�<-�r�:8�D|B�Z�Q�3���5,Q�%��D����ޚ����B�(k�~�K:��T 4>0�:��?��NT`#�P$���熯�HR3�1J��<��� ��=m��6�"�`^`}���% @2�1+{�/���.�w�cJ=�xo��w�k���=�<6�&={n�E�|���("�X����h{k Ŭ2-I�xV��� ��I�/�s���I�T[R�����Z�w�B�[T�#��~|�p��+��p1;��/��R6P"�3&�y����:x{9�/��_���l+��#z�=cti���V�̖QV~�Vl�aM$²I�7}�W�X���{�����jȯs���!q����,Rw��h���p/XF��l��&&�M5 m�m�_�q� ���h�����7���o���e��lu�0i�M���CT.ݑӛ)��C�?e��Uy�QZe���_�rxqz�}�l��$�]��;}��c� �&孄 �;0T#b�e@�'3��p�7+�ivO�e:��y�p$���Qyz�F~E����R��N�5�md�=�������}����3�z���cN��9��T��X�+ɴr�O��OMZ�6�#<Ǝj}#�BK�%��<�I3�5�É����Ш��8�8�; �bC'�?Ě'��b�h�HN`i��AP��ӏ�ǁ��eZ[j?�B?�W��rLx(�HS��h�6��G��}��:�q��s#3^�l���H��ǁ&y��������d�����.6����Q{6�� MP��B᾽f��<]5�Sr������d��>�g��W�������^�M��\����� ��+��`���XD�7���'{-Y�!�8y�E�����=a��҈���_De=:[��c�J�/q˱<�q�u�_����J�Zg��]c�o�.�5 h4�G�7�=������������h㴽���~����:5��iҚ�:7U2�©��Y�}���hd�ܵT��nd�M.��ȴ�߳��^��+W��Aɀq�Mm�@�4��j'������N�\��o|��*67�}��7��fio�$��g�h]E��K/cX�Sǘ�Y.�w���y����#]l�7ķ�S0�J�JF:'��yѰ���`���²l�:V�2��;��}�iZ��?�;@��p���zpB/w��[d'k��� kv�_�9���"�H=^J��y�:?Y!B��V!�"<���om�Y�Q}PQ��.hxtM�~��PgC��Gm��Nχ��9���J������h���IVl�oU��V�䪊�H��e|8Hy�� C1@���H��u{x|���@�e���Fl0��ތLꘓ�(���q�G��ck����H���%S�Byb�m2~G qg���#L�Uq�ບM��u]G���Kv�$�����'-�0@IY�2�P����b.���1����7U�8�dx�a�]��\U��̰VU�?��4�dᲦ���}��م�_>/#���ǘ��*���� ����ʘ���P3�mjx~�ۦM� �.7Y��骩��`�����X)�I����O͜�,��;��F�i�#�7$�;B�x��+7kVB�����h����9O����K;��="�';`�8_��)Ra�E�������X���vW�s?������z%��.�������f�'��~N+3�U[ iշf�HC��}O��@�&~����+p̻.�5 ������K�+f8n�]�1���.� ��J�D3���~L��z"�>��TX���������sf�Y��S�R�d'�������Z��+i=����D?�/��]�f�Xf����`��IeZS�X�Dh��.]m2US��y����ʯU�ԊF{�A=~�/�A�������Z�T#�q_Nc��< ��TR��>��UX�����`>>�����H%}�1����/pP]_����-��F Ƥ>Y�nh5�s��bg��������u0�F�SX���`��2n�[��{�2�}��鯋_�o��1!�-����@�LD{�*h�\�90��y�|�{�!;5KZ���<��b[�|�_:�b��.�Ղ���O�7 J�a����jM�����TmI21S �xɹ�zU�� H����&����V��n� ~�_g��P#�S��-;�%r��g喩?�E����y g]NUЧ�����}8dT#�3`�:tq�J�E5����*���Oظ�k^�����]��fZ���Y7��g*�*ˠ�f��䞟F��S��o6�q|u��`��O�x�C���X���HH�.�<�0�����[d^#:��H)�T "�Ҳ�[+��P)��}J?^�n�}i�p����<"���؍C��;������M��h)�*䟏�_�����˖����ʷ�ZB;�%�=Zl7ot�<�*q��T$�+���,F��rCl���#EVq2�U|��)�f��p|�b��Q���v0�����s�o�w�(���RŻ+�3|G����Y~��yo4oD�ߥ��V��'�u�! ��I����_�B�c�/�h"�Vʬ7�^�E쉔��< M�f\���ul��S�kD� ��E�K� Wu`�����3)�P���)h���G���48��T}��z{�K����G��)�tΐ���9g�?�D*�� ʨ��������]6���q�!���������$\Ԏa��]d�=+uF�����ة�T�3�lT�l���r�3�?��z���kh�
Static task
static1
Behavioral task
behavioral1
Sample
a5442bba48726e3425a93537275e4e8115332d8fa89b95e482be12755cf462d2.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a5442bba48726e3425a93537275e4e8115332d8fa89b95e482be12755cf462d2.exe
Resource
win10v2004-20240508-en
General
-
Target
a5442bba48726e3425a93537275e4e8115332d8fa89b95e482be12755cf462d2
-
Size
3.5MB
-
MD5
beb19a0cda549acfa4a5c222167bc957
-
SHA1
764dff708cbd32ae4457597620a066585a663680
-
SHA256
a5442bba48726e3425a93537275e4e8115332d8fa89b95e482be12755cf462d2
-
SHA512
7cf57f0ac560eb45f9f7cafc2bbcbae20d97edc3e2eeff14e9d7aabd7840673f1289ddc0766560d8f8b3fbdcb99694b1ccdc457e29aa7b46aafd6a88cddb78d9
-
SSDEEP
98304:4ipmfAbR8esyNxjJ3Qr2XjstLEuKZ+WwuVhK4q:4FMR/BBJ3Q6cLEuKZ+WZhK4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5442bba48726e3425a93537275e4e8115332d8fa89b95e482be12755cf462d2
Files
-
a5442bba48726e3425a93537275e4e8115332d8fa89b95e482be12755cf462d2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 492KB - Virtual size: 1020KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 824KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 32KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 192KB - Virtual size: 6.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE