,��બƁ���;%�Q���w�'�����I����d��إ��/�6,��i�s4�r��$�*U���b�^P��l��:U��Z�!�w�$oa��~�Cl�[=�RJS�Q�^N��Z�>K��$�=>�, z{�9K}&��b���QX������:ݭ# ��獐@�=�\g�\o�}�<�m3����%:2xp�,_�4p'g�t��i+YW[��w)k@<����o zRwi0D��9;��}_��*Io����$��!�b\���S�W\~#~�rVF�ޔ\��B�¤?X�Mj�F\�.A܈N�n2���2C�R�jV�2�����E�7.`D��\�+�\�BM*@�m�^)s�J9}�a"*��R�'4���לb��Jfjm��R/�k7��Fj�m��ct"�ШV�nޘ�2VBD��($��3ݒ�C)F��%����r���h"����]I�+(V.��1�A:/Z�e�,F���+����Ax �����]gޭN-__ ����s��K-E���j���{�������#�Lm����:�) ���|VJk�:-��"t�+�)m��f��-q�������I��W���*����f"�lM�-.>��@��{Zm�(���û��r�elO �{E��QL.0�r���x0Q�~sgb�0fd5���B���i�&���)�ܿ`���rL�27 -?��:#f�*��� � 1�u&f9���sk�X"�[%���/p��W��-��{�}Q�a?���;�2Ov�����c�L�e�R*4U6H������ 0f�B��ӥe_�E<5�� � U|3�%gd�!Rc�(��Ո�Ս^j�6�a=�����ߺ�{�\꡷{���pq2�x��:�t5�"�L-v�Ģ��D4Y� �u�|�}ۺ�Z]+o�A�2�������:�g6���K)⮉ѱ��9�.\�p9ԢU���o��r��f��@���(��d�%���E�O��;������}ۭ�� li�2��tj��5I�#�!cZ�SB옵�5 ���(�C�$�%T����`�&s]K�_����e w9���8Y�f�SLr1�qv����d��&ʰ�#s}Đ���@�6#G��ڷ��*�4+5B�� 0�ڦ�ea0?���#"A������2m�H��%�����|��qp�Um�����Rӯн{w�u��l[�����km�բCF�UQ9$I2-��f_ρ�Vh��^lMIt>s�e6j��d]�h�e�O���j��A? Z��P� ��(<���4��so�^�w�{Y��Hז������qP���4���}y�0��O�X�d������]3t�i(!�� /����0hvA�4�V���h��#�}� _��G�)�����B?&��DS&`��в��ʦ���渦0@X���u*p{���j�F���x:D��^%�����K�D䵥�|`��1�H9ݱ����BM�Y��Z�l��M��k�Bl�ǰd�f{y�߫�>#K#I]ԇ+���m`M�<(sX=��9K��RJk�(��WH���ޓ$�uP_�z˴S�:��h�G)�Nv�!�&��=Ig�W�=�uˋ$2a�8p5��]0%��ȹ�̨!<���s��!���t?��+b���a�T"���j�wH~��1�ݔg¢D���9���ü�C7�� no���!`�����&�{�ˣ d������P^�d�x�:����W`z���-s���HmS��l�����=�Q|c�b:��x���}��E 4�c�0p��T���_-7�����-��F�vC������_U�5�D��o��$`n�P�~|�{��By���'�_�j�2}�����2�w�?��YU�h�P$��{F��I���)��Y�ȔR� q�997��%���me3ᢤ��H�âv:m�=h�1b��6�Ji|,#-�@��-8XR�^���`����j}�M��[����J T,�ۻa���4������c4��c�|�B��Mt� %�J��ʣ �4���Ȭ����;4��I��cz@�����b�g���fF7�P@���jH� ���F���ә��W���������̽5�b�"I�@�{���IAFIt�Ɋ:96��P�Vօ�Os��t�u�:��bW�\-4P#�3B>���J�>;JW�dnyb!��*�����6��zB?Q��b�� �a�s�b]<s/�1����\_�n.pS;��y~eQEF�4��-�TgO�v/��3r ��\����#�)$��a���=Ց��������� /�V�Y����5u���EY"� �BJt4 ���%UkJe��T�&+�e�(}�7E�T�X_Mp�"2�.����YJ*��J;�z�2T� ����=:�V� V�2[�歵��̵Yv^�m�f?�\\o>�i0��( nf0C�Lnt��T���u�8�U�����d}��+W9���B?�����1NLAi�h9 �wD.����U� l��-օ�>�J��#+d�Q�>^����Mo�5ZH��d�s��SG�����f�l�߄�LFi�>�U�}��J�!@��̝́��K2�Z-��$�}m��NTE����8��[s*'�[���� �n��}�u@��y��������OFU���b�_4�-���l?��9�(0škzmB,W��좽.�i]U7�}��c����94����WfI+C���pNL\,R��WVꄙ���Q�d��ڃ���"�BU?&�،����{s��[LRpD̩���;o�6C�缁��Ø��SS|��b��A�R�$�ۜ��M��o&nV'��/���������ց�nT���;�'TJ��,�������덞�����f�ϫ��GZ,ϗ�E]+�������8k���F�>뗨���-'���H��o0ʯ"j�ig 0.%�z���ۚ���_�8\v X�J�|�t��R�j��� ����6" �N���8���xނocГ��B3�,�5W��B�^:���e�.�{_ ����Oqd�_��K�p����f���B'���P{]n�'��h�� �.����������Ƥ��D�ix� ��D�b?�C������PP�r�@:�䲙�h֓� A"�����=S��D��픵jP�UB��b'�0����L~ ��J��C�:� �¦�3��?n�/�r�9҂��#a8Э͂os\�,�}�2Y�+߁�Խ!��Hl ������*��6��1�Jlb�5v\cT����OL/�"���3�2���4�z�w��Pq;�2OՒ_(wSZ �]*��[�/��8G`ݐ�ޣ��=��������B~ew�ɢ".��q�[%aî���1/vR��z;��Ym*z�������Coֈs���O��Nw��0x���+�#��7'�?�߬$���a��I�8:���W0�){�x˹�7���j��h��Qt� q��N�?����j�)h(?�,�{3ʛi��Z$p��U���3�:��I���!� �f>��B�85���MX,Q�sЂM�����h$��W���Xp��S{ 9��s�G"��!��;�����ͮ�J��u�1r�I�Κȏ��l�����y�^u�T���h�5��H��Փ�ʹ -[/�p��ug���Gm�;x�]�o�ǖvX�G�����TjA[��8�rP!�@8O#+��|�%��6�2HA�a[���CI���!b�<�s����x?<a^ۖ"J�1_��m;>B��Ï{A��:�7"A�Q���;/C,�B�]Zx���(�xN���@0ń�����HD�
Static task
static1
Behavioral task
behavioral1
Sample
821c67d47a3b956a4b1cbec51c9d7497df03ffe890ae97ea26aa816d5ffbe683.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
821c67d47a3b956a4b1cbec51c9d7497df03ffe890ae97ea26aa816d5ffbe683.exe
Resource
win10v2004-20240426-en
General
-
Target
821c67d47a3b956a4b1cbec51c9d7497df03ffe890ae97ea26aa816d5ffbe683
-
Size
3.6MB
-
MD5
a462d3bbcfea1fd44b76729c6f8f57b1
-
SHA1
5542c247830591cecf382d62c53ef64fef80b286
-
SHA256
821c67d47a3b956a4b1cbec51c9d7497df03ffe890ae97ea26aa816d5ffbe683
-
SHA512
a4039f4770214dc10585478c8094a5bf7feda96e65ec8d5739ed77dd01c1f5491669e916758278b52706e7acee9e583899e30d1d317aaacb72a9f83fecf07151
-
SSDEEP
98304:2cU2h6BqhqJro6XhlMDElkjWCB3H+DABbn4kni4/HYQCMzrJuK:2czh8rogMDElkjzHPrVniwHTnJuK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 821c67d47a3b956a4b1cbec51c9d7497df03ffe890ae97ea26aa816d5ffbe683
Files
-
821c67d47a3b956a4b1cbec51c9d7497df03ffe890ae97ea26aa816d5ffbe683.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 492KB - Virtual size: 1020KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 824KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 32KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 192KB - Virtual size: 6.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE