Mr�ΒS1t��:�����zX�^[:5�v�4�yb����Hiik�gX/k��i*����)\��{���Ïi��յW�w�H��1��UXc̕�7�G{"݇� 5�[3`���Zc -$��Ƈܚ?�!�ٴ�v܂R��C��4j6Rmk��/�`҂�B�Vވ�WHs1:?o�w�*�;�\N_FC�.��j�8�i��%��c����C �`�9l0�2Y�1� �R����j���+w�Qr1�M��**�f�Z�X����8��Pg���>�yʒy�wl �G�7�����l��C���w� �I�m��+֒��oj5�U!WXd{�?Ƒ�<��,�oJTy�"��1��k����%���VI��e�0��+�&��J.�=C�3 A7j��X�{�n�[��"8��@�yQ�fQ�� �s��bS(���n�թ�l��nt�/�P��ei#��b=���Ef=�c:M6�*���gРRp�9@�X��_=�����'x^j��#5�'���"��l��k:�Sl����i4;�(�cn�C�8uث�(�Q�U.^ј�<����:t��J*鹊3��ECZ�i1>��;$�GI%0q�u:R0m�KN�u�ܕ��c��;��D�bɇUP 7�}���T�ci9��Eb�aK������ge^ o���߾0(xIY��.�*GDN�e�L��cMtD�ܫ�������Rb碯 {U�c��(䱖��C�vcha�/��H�YRD-_���Po/z��P�X_���.���^Σ�PЀ����Ow�X(�����4��)=y�3�\R���+a;�Jn7�S.�M�+,~��&� ��xi#���S)�.\n��8�T�:^*_�#�4�g�z�����%��؋e:k|[V�|W!���P�L�Z��Y%H<��E�d�����>�Tw66����=�p���H�ҪN'�mo|����ƥFe��V|�o�Tt2���A��yۙ�U�ٳA�U 9��HJY/q �xlYm�¯�s3�h��!�GG�ՙ3tWxVf��\{�$W��I��+�i�kj?����l펑_&3��������ϔ`��̨x��#�u�\PL�hwu��Z<���eA���Y]��M��1_~�c.&D��/(A$h g��y���5�|SS�\�&�#{�eY���3#�$�����x��c�[� z0"�,J��m�hu�����$:�;���@m::� ���ޟb���^���D �<:�Q���Nx�Lե�i�~a��v/êA�.�i��:� �Cܣ"r��sd ^��2����P��������6�^yŞᇮ�%�D��/2��l�B�� �Տ���Ј��.�ni�Nøל���D���.i�#鬽�Y��j�1��Q�%���߹J���$�����t>V]� \Q��J|����j{0�����r>שr�ҍ���T�+;��:s�)�*��=p47F�q �|5�F:;�D��ԕȨ�?�;ǡ4yЃa۷��:�b���Sz�<n����`v��jG)Lmk'�n+�S�[,w1=T}B$y+�m8�}�������`�NV���L�x���!����oO��Ѯ�7E�D�!�s|���t ܻ`젯�xL�S��o�O\�"c�+Ǟ�jN��|���l5Z(%I=��m�ظ��w�t `���2���%��!�qu��U$���D���\��3`��%a�����~�5ɜ}�-G�?EOq%?t�G�n�����v�����S�ꝇ"��]ws&<D����t�\ �^a�b�L��x�sK�A��P��F$�X2�;IЂgi�J)m{�)��I� ���͋擤���z�"�zMł� ښ��K!�?��C��c�R,����c�v�kM��~u���z�/�|��>�ZLV�Qu®�/�sX��7K��B�q��E}�`Fu���a��H�-|x���-&iHw�qόߠ� �i)�e���!%3�I4zM���>�Ċ����Ͼ���|I�����(�� ��[�O�9�>��M1�Q�M��.��;���T����"��8Oǽ�����g�1�ݼ�@��)��5$�DY���,R��ϲl#t����|��`��k]�U�/��O��|\�]�h�R?�����6�(T�F��)"�่߱{"�����g�m�B���݃�,�0n"_DGʬӷ��T�o�#9K� ���/!O|a2�«K�k��?ޥ鉔�p������Sa�Ɩ���5�~hW�9!�,�� ���{�8�ԿV�굠ζ��r�b�n�^�i�|��������r�3�^��b������E�䀢U<��g��g�e[��e�zU�b�$���w�m�.*��"�=��aJ�3��)r��i8�7� �(�$�Q4�VY�m�#Z���r+<{��?�8)����/���_��2�r �'�ӵ����t����V�=Jg��0z��Ϝ��%{��\��p:�Ba�'��N���X=.-nwhZ���D�K���a�m� ��2�N>�+�O��ȵ/��RCJ���H�o$��(�Ꮷ�̰�Z�ʧ�����(���_�k�I���"2�7 8A�A'c����w���N����+DG���/`�������x��i��m�-01}�p�r9~�[9���Bg������a�fr���VQ��H���N`�U�o�)"�L!^# �>88 ���ze(h�}u0������s[����飖eI�!n�:��_�e�h����)U���ď�jp#{Rü)!�b��|���%(E���:5ru�#n1�wՖRh� &�v�9V������m��q� [�R���-X��;�v�OX˘.���wkv�1+��(/��.���l�H��?㭐K�p!X.�?3���M� Az� �,h�}v'H"�b�oJ������Q��t��z,�,� Mu��[|�A�5�f�A� �($)��~]������ڲ̦%�7�H16�6Mᾘ!��*!�c�� ӿ'�� WpGf�QN%����Vn�`2An��Z��l-B��6⤴;����%_p��Ə{�b�о��s-�ɵ^���R����_=�B����� (�z�tjm�� "�1�\څ�`��a���գ�S�I��Y�<�����Ա�Q�,��d�`�#ä�Ѩ��kʄ�&~j4��&����ӂ�a/w�f[|j���Xzn�M�����������p[�&�9 ���\��L�~��,�r�mI�M�3_�р�jNj��7���\���XD�Y��<;lss�9�%�˂�<f!\˞�'A _�\g�7���1�.������K�碣@�V:��
Static task
static1
Behavioral task
behavioral1
Sample
2d8b80ad3cf233aced448d8f795331503b501f62010e73dd6b94151f8687d82b.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2d8b80ad3cf233aced448d8f795331503b501f62010e73dd6b94151f8687d82b.exe
Resource
win10v2004-20240611-en
General
-
Target
2d8b80ad3cf233aced448d8f795331503b501f62010e73dd6b94151f8687d82b
-
Size
2.6MB
-
MD5
fd3f61fa8e2399b2bbfee13153a3ad84
-
SHA1
31cd10f40b83103de4206143a4bcf6f01c0b12aa
-
SHA256
2d8b80ad3cf233aced448d8f795331503b501f62010e73dd6b94151f8687d82b
-
SHA512
59b509e3e2b5bf69b5b69a0646871d3e77013603a4f6b73351d44e6b1386443040ba662d7c46ddec29334189fbfe546b1d473274282889c343cc7ffe8b3eef71
-
SSDEEP
49152:eLeCklDz30l5uHvi4ZrOGJAIuZVsZwxSMulAtM8fDbi0K2hJJ:eLeCkRb0HuHq+rOcuZV3SlAtM8fDU2hJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d8b80ad3cf233aced448d8f795331503b501f62010e73dd6b94151f8687d82b
Files
-
2d8b80ad3cf233aced448d8f795331503b501f62010e73dd6b94151f8687d82b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 304KB - Virtual size: 612KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 28KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 192KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE