�ꡇ�x{M�#��Ԟ��l��H���{���P�Si�eQ���lV�����t���a(#�:�H�D�����\z�� }D`�Z�&�����?�Y����!3����hdL�$�]t)T�z�졆��=�}A�T-ƠC�F1���Rb$����/��Q�9��SqϹ���G��K����ˆ���&��,���5�a�Aq]�',�)kW����Fu�z�;��GR��@��d��Ό�bR�x=R��j�!��1�*���D+A��@�qR��"A���b�F�%�ߦP\D�ӈ��b� �e���pҮ��,��F�������5��6�;�*��D�U4v�t���c��Ru|�r�x���l�Ra(�;P�*�g�K���g���d�̘fF �B��j��+{_3du�q�Q`�9���M�f<b�]�]��Wmb 08��D �M�����:�P��&,Ѵ�#2x������U��h+<���#�$5Sk�������@Y����`��Qc �K�g�ON#�Ơ��u�\j~�$�82��0�7դ �Н����]����@GN���Q6�g��Z?�E,�i ��������r���/xF��!��Dž,R��.ENd07�掌`��5�|ԕd��3S#��78�����o | l0@�������Ήw�{�s��8G� �H�� ���i�|��&�!�.���w2j�`7���#IDTi����G��/E�����{�G� ��W��D؞T�]����~���ZY_�&Z�J�sl�ƽ��@G���R$�(6��W�8��침�zV�;�ݾ0%�h�> �a( =�-f�L`�ɬee��}��χ�1�͒h��j� �U�`J `t(ѥ�x7/6Bw�����\�!����������> ,>j�Z�����Ŷ�j�͘�Ym�����k���p��� ������G �&r�?4U��4�2��O�o�˷SA-�C(�ª�%` PP�O��˫N����q�z!V ��_�S��Q��B6Or��o���(t���i ��n�:=�G��m��Z��A���^��Z�< ��!�hs]c%����_�[�� G0��-*U�ּ�^*�/�AB��>8&y�]���F����璟쿍���ڜ�qY�ѿP�l���nB������YWľi"߬M�$�?��(f*�����}�!p��bOߥ�}&.�c�ڼ��cR�|0�I'k4��c� �t��G� �� DQ�����§"�I �-I�B&��:��Cj���Is�Ċ�ۋ8�ޥ�*gRM X�ڵ�{��%]����w�fT ~ZW8˥�B�B�wn?s��|¬%^��5J �6~)�"�N`-�����d3�=W�q�fVm$x '2Q��~��g˃���+����e��� F&��I��=�'�;R���^VXB�\{�'Ǔ�^��ge?����=k,٫;hn%/_ /�(��o�2��K�n����}Buo���������2�:�K>�Q���jv���VBA��]'�I� �g��d�\ԯ<)P��u��}�Z�<w�ѐ,�m���a����%����� �o����֗��|� D�1��i6�U�E�b@��!��w��!ht�LV��:��L����|9��d9K䨆h�W�wG֖@��Ԧ����C�#ec�Q{ؙ��;wL�a�u:���QY���i|�g����#���q��#�Y���Gf����A����X� a���tx�?M����u��Lke�5�B�����=Ti�@1qv1��{�,�|�q�0ɋX�^`P_��8���1�e/�����{����ްt�c����^�ش���"4e� �0���f�4<�e.=��U4%�]#Q'_�6�w�s�;E�i�˃S?�;����e�cS#�A�TJ՝�����۶y���4�e���F��Fr��lޅx"�+��ɧ�K$��r�{h�����k�,Gi�J�=+#����-FʝI�;-���xK$����J"��w��JR�ybO_��0,a� ��x�()�J�w::Wgʰ�"g� �S��V�dz�K��%�4�鲆3D̉����x�A�`7哏�.p�R�����{�N�7,(�■���ȧs���f���.&I�\L��0^ ��xҭ�`�^���,�M��S,u:@W�_��F���dv��f�Q�G�ҵ��)��,Q1��?�ч�.g6�_-׃<�=,)�;��.W@��6���z� #+�4��w�97=�3�K��|sG�x% 9�|S;�~;��p�Kܣ�W�����2`J8j��+�\���_���a�*)���Iv�]J���@|��Ʉ�ݑ�Y�ί�&dC�T�fRE�Z�?!�~�e�����C�(���>Ԩ����Jm�о�.�֕xl���n��" ��u`�^�i�ݩ�꠴E���ԅ�+Z�-�cs(O��;#'���3Ve��� �����G~�¢�G�ͦ���\ǧMѻ����t�Xlg�gO�Ui=���`���|J 4��~xH��OMP�m�C�������^ �gm��(��zx��&����6g��h ���<z�X`[��- �2��-�/.7�90���H�sFG�`r����,d?#�p�k.R�Fk��(��E�R�������J �Q�&봣�f}~�|#Tt��x<ݪ:�7t�>��z�n.dd2 �ųH�`�FY�I��3��;�<��_�7&�q?�C��0`�m��Њ*���F��e�E�ߵDF"6O�In�(�gCQz-��{�3���]Ա�F|���(ɩ8d�j����z���Y���y`xg�/!gJ?�W��囔 �P�{u�2_�$�++~Q�˻Z��{����vM,�e�EI�~��_�p�����Ѕ[�Ŝ���&���22��97�s�2a�k���q�89��I8�]��f%\���HW9� ��� ���� K~�0�����UsV��:\�s�Y:#Y �H��W��?��"��q��Y��A�sF����j|rvUlzӌ��>W&��rЇ�G-�H/@�' ����2(L�=�5��RO�̼����n����z�*d�����2���&w&�6�EX���p�.��%2J}n� �Ѓ�]�(�G;�Hn|:����Pk78,~.��FT��y�!���O'x��Z���>Gܸ�)%��yl��h������=䬀�9�jA�[�'��c���w�K3ӏ�`5��'+gNrvM}�t�l�[ .�-�#�CƐ��Z�v�����;�|��~�gv��;�6՟��3 $[9έ�����h�ԅb-��z9D�Pd��FK��V�L�LJC�gL�d�A�H�(V\>yZa��eb����),:�uH�I1�]�]�-��)/2n��.�x�Q�ޅ�`�j����7���N�I��|��5���p�q��a_/o�Ad9|+#o��+
Static task
static1
Behavioral task
behavioral1
Sample
93c489596a862c0df7a9a1c5a7136ad2aa31c246de8c286c9a7c0ad11b754bc3.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
93c489596a862c0df7a9a1c5a7136ad2aa31c246de8c286c9a7c0ad11b754bc3.exe
Resource
win10v2004-20240508-en
General
-
Target
93c489596a862c0df7a9a1c5a7136ad2aa31c246de8c286c9a7c0ad11b754bc3
-
Size
6.5MB
-
MD5
39d96a6cdf9746ea2fd38ace01f2d570
-
SHA1
714263dc52fb9d82441567016dd16f21b66e6f01
-
SHA256
93c489596a862c0df7a9a1c5a7136ad2aa31c246de8c286c9a7c0ad11b754bc3
-
SHA512
f6f6611f8b3bec3c3cf05913bf05b97f8fc234c7a0a2d3d7a2047dc6ca80a151a05df653ff4be07a63e12a27c9d6d23c1ea4c0ee701858d7dcde966bd2e2424b
-
SSDEEP
196608:gVDnX5TvyftT08OmYEhdEyBF7bNdc6MDvh:YZvySmYAKCbHc6MDv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 93c489596a862c0df7a9a1c5a7136ad2aa31c246de8c286c9a7c0ad11b754bc3
Files
-
93c489596a862c0df7a9a1c5a7136ad2aa31c246de8c286c9a7c0ad11b754bc3.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
Sections
Size: 1.7MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.1MB - Virtual size: 5.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 189KB - Virtual size: 568KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE