��x諙��iH�l��:l�6�1"��}����G��9k��X5���Spd\0y�݄���=��'�Љ[�ڧB�|����'���tF�$C��0�J6�*=��*�ض�N]Лj�.��]l��2�B;���˷ێ�>K�`��{�j ~��CQ���8K$8@BԆ Z8�פ�L2֡��������^��L���}@�c�$�6@GC�4���Z�p�-��{7Ej]�O,Q`��H�$r��%*����|a�`�Um\����u�T�݇�fZl�\=�(����oQp��Tx�f��]:�쇘 p�U��~?�ݱ���p��be���<�8�u��g��&jM�������<�V$�U����}�-��m�vpJ�y���^���S�Ch�{����<Hv*-�N������i-ۙ)��&�G(�����yVW)@����� ���쀵.���-U-�)s|�D}�O�@6�M�!���������t�j�Wt�w��!��f��d���Y���{���W6M�*���*��I�`��r��P�S�>�[��w�r�꙽�)s�>y@�� ��;�C�%T8�C�{&�=���`,�|.s{-�@�j7>��9&n������<�YQ+�B�r�H�'��j�}���{�Z�������Zc���z�\�%x��7^��&9+����@d��J�:���S��/���'����X��+�c�ۍ���I<�ȝ"�*��.Gfv�P�z�L;�/�O�'*�ۜ�X.�Q��ہ!_��C�2b̿y~BTFN8�Rx�R��ٱy'ޛ�����4��D�`� :��A&[���;5�{>���+̗M� �⊃I�s���=�]r �O��A5�;<Z�Hbqb/>����'�!bf�0%�e�#h<�E��Rx3���3nI�m7h` u��m�&�y����� ��O����̨�4�:����u��[�F�xiZP;�[�j�i���A��08ߢ.��Hy�L��:lL���i�(x��J@�����c��1��J����u�(�|� _�LQ�U��0x���`�S���0�G7W7��U*(�a���f��-�Ώj_��}�[q�x:E���\�I�g��C>�3��<s�ܦf��D�7_P#�����,W )X�n�(V���`*�*f�<[����"z�Dj�n��,�S��q�Y�7����3�սP����F\"M�ywȨ���0G�>u,���$ڜ���+�A;����m\��^*� ���LCۦi���ךs���w�a��0b+RC���ɸ�1�����ɏnB�e p��R�@���">>�џ�Ϩv�!ڹ�1�K�־��!<"�a�͕��4K�}@x���o��m��I2]�����]%�nxf���$ ��|3���)�^�۶rZ�m٭�Z_�Z�P������O��k��n��p ��hx��Fj��ޑ�,¬sR��8S����Ȱ�QJE�C���{z����S�'�_����,K�oU�`�)��S�5b�F���o�C�� B� e۫]6qJ��������8�6!���Pх��_���}��k��Kp��ve��"�^7N�����I8���������H�� fc�_��ҷ@�6�Ք�p����qB�#�v���c�ū���VC(I�� �_!���Q����O�9i��y�JحeF���uZ�J-W�t��d�a��S��^�K9�йp�tB_�/R���y,m���Ꞿ �����f/V��s�%^���o�C�J����5�NV��,�#����H��A3��,�תƾ���&N��m��d���˛c/17�C��rSO���{�K�Y�yI��/�K������X�[V����C\~~�5�RE�1UE'��ц�b�_��*S�Y�P[*9�ڱ���Th�C�L�� )�N��*�Rt��md��K#7��߫Caj?F�\4$���Đ�u*�K��w��+��³S��V��7s���cB��V��|.�Ǵ��\��1R�<�wLe���y&Tϥi�������ڸ� L�KU��*��u��˳���ǽ>��/��ո�W�+��n�)m[�*wT}svk���u zB���.G��0��9@c ��_p��V��W�L�5@e�E�a�KKY/�s#�'h[x(:���p���Լ�#<xr<kO�AQ�a�3f�uM����ƨ��Og��dL:R�4�A;�v\=�����l3t���K�M�ţ��t�� �Cd�m�C��٭sm��}=|)���>E��.;���Y��5�kJ�b��6���d 3��vL��u�3�h�2�p0�%�C�.zb�O�Y%z�R�$���;�̂V��v���e��IX�F �-PI�zt͒�@S���$Nխ������1=���`�|Cmdؒ`��נ���MA�H�w�g�MD�~زN&�lO����(7n��w&�lw��Zoم[:�\�<%bu�њ7~�LϮ�j �ƙz�a���[��IّH�#)��(��Cހ�� <���~�G�CB �{y䐤@X��A���蟶oV�v �V2����ǚ�ݟ}�x�׀�����;W�8R9�#":��� j!}���W�=���_�L��I����0�oO7�P(�<������$��TWM����;�l�d��u�ݛ�ɩe�3�;�U?��f9��YZ���\ �W�/Ȏ�t���`�EZo���� iV9t]eFG�����z7]Q99����X�V[�U�`q<4�����r��-i�_��t}X�'P��79�l'�o��,WV�1��L�x)�;��+�y�a��7YS�}WlpV�:)��8끢@�D�uȂ����D���\i�q�1P��v�y>R������B��B��R��U��?/�«EtZ�z��Q�Be�3�b�����'�T MH�JD������-�&����x,����;'��{N��8��DE%!�ˉ3\>?�<�M��&*t��A�l����2y�`&{8?Ky'�n��ͣ��O���F߁�u�F�������E��0`�.���z���*�I-H0�K`8oB��T�BU8$����vu���`�����Ү-{��(�Etĸ�9�|
Static task
static1
Behavioral task
behavioral1
Sample
a086435b006e78ab300895d3af3ef0f5e570e887eb8b0619a4d173bff071e1ac.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
a086435b006e78ab300895d3af3ef0f5e570e887eb8b0619a4d173bff071e1ac.exe
Resource
win10-20240404-en
General
-
Target
a086435b006e78ab300895d3af3ef0f5e570e887eb8b0619a4d173bff071e1ac
-
Size
3.0MB
-
MD5
a963e443aeccfeef283293e3c29ce2ac
-
SHA1
4be0904573e524d678c9c9a5a88560415262a9ca
-
SHA256
a086435b006e78ab300895d3af3ef0f5e570e887eb8b0619a4d173bff071e1ac
-
SHA512
9baa8231a5f9aabb422fc917e184ab1cf5b99e73eefb0081cb2d1da956d3d16b4888535c1f97a682390cf2fd4062096d46ccdaa55f472323c9037ff94f6afe83
-
SSDEEP
49152:yAbkC0VLcqqrlGPw8anJfB1z5HGneG/Oc88piySpK6kkhjdVN007/XCCVtR:zwzVLcq+MPGnxB1z5unc+10Rhjv7/1B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a086435b006e78ab300895d3af3ef0f5e570e887eb8b0619a4d173bff071e1ac
Files
-
a086435b006e78ab300895d3af3ef0f5e570e887eb8b0619a4d173bff071e1ac.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE