ൿ�b���$`�x����R��:� ��m��x�@�U�?t�tyc !�a�ٝ�pI��.j��#oN�C���aq��.<�&�ܹ\]�C�3�mG]�q��95��;�*���W�C(�T���Db�"t���Ӛ�?�)��`Z�����N�ۚ�K.}��Wht�A(\W����ո���p��_Y0Ӗ�z�����F�?�21�eO6����O���56��?������9v� {Jӥ���W����8�ƽ�G=�Eعt��_�� � R@.��@�a"�N�m����qH.y��`�`O��s^ëA�ݴm[|��)�vd����S��j��#�''���,/z�1A��i�+�ؿ��~��0:"�K /� O2��Ixd(��ƹ:��Lv�l�jL�_��Dll<�0f�e�I�V��[�8��âz������{�)-�1>�P�bPA�j�'������.M]��K��$�F��9�v�ge�g%������N����6CX~7M(X��<[ns��j51^Y&�2��FM6|�� ��Z�g��8#���}�&��4��x���d5��{ϻ�N��iQ�������c��y"���<�S��xj"a����J��5'] ��d�`�{zK�ɧ��{���|���c ӿit��~�����9A]���K��0Xn��`�����k,u��+��I?�>��o>��{�"��ko/�*n�H̠�M�N)O[?�=�M��������j�{�t��>L��/��� ۼ��j��*"����e��mW\9����r��mfP[)��V�q�]�:eXBb��n�d��P���=!�%p�<s�]�"�a&�'��J�>Ke�<!�_�������~�A�zW4_!Q�H��=���!Ŗ�ڵ���S�=�5IҴА�zH����r�����|����lm����Pص�EI���?�B��_�(2YB������_ ��֞�8������sX���t��+�FѮ]�q�� W�DŽ��}��x��]@y�]�����P�<@�dM���s�=:6��Ѐ�t� d�&����7�wi���ZZ2�D"��D�}p�����gO�¡�m"����%�ξ������+�d��������~F_��,�!䕳wżK��x4�O�x* E�V�ɖ�Qa��b"α���bXz���Q=8��̤�����\ow"�ւ��@���k��[� <��&������N����X�H��Ȩ@(�{E7�M�(�>Sl��&d!�����5�ۅ~S�����N����5:6&跰N���͂�����6L �6��F̡l�Ue�j�=r�k� oG�Y���<m��K�'���wQ�2���(���J� �3kz��6$;WT�:Ҝ�'VQ��ak��E�Ċ@��!N2�]rXz)��\�0˞Mͼ��g����ݲ�\cr��z�ˏ���9I3]�g��D�>}�s�2�";7����R�l�<�h���::�t;�q��BMƒX)�T� �`����2�|���)��/z�IJ�'���X�r���B�R�Kw)s�I���k�N�9&mn��k>鵫� ��jWh�U����� ��_�C�AO[HH�-U�6Kl�`[�XXt(P��X oɱ���2�U�$�w9@�P˦Q�p䁮�{84{���k�,�<���$�l��9뇔� ����ч�����(��i.8%�����Ε��QPs4�������]X*@ �\G�*oK���P ��cmemA�U�.��:ċ����(dkl��h��u{lvgu�������3 ��o赚�h�4�xF��Xy��y��k(�|�ku�ce|'\[$:�J�"z��o�����\���{�˸]� Q�=~���ж�����f��o\�|�n fc�v BQͅ�\�~��'̕z#F�w��f��Ȼ����4پ��iAy���'QdU��� �|k;1Q���y*�����}|%<ׄ���!D���)e��I���و�s G�v%<�����-��y4Ԃ�+����]��g�H���8��X�1 -Y��:�$���תo.܈]\i��:e���XU�ֲ_e�Ih>��9=�0����h�x�I�Ayp9&+?�u�&V[�P�Ž��)q��:���K����Uj�,Y'�ӯi�#^Us��8璈ӌ����j,`:�8JTϨ#�3��MP��*�*#��۵��8Vo��/nZ��'pf�L3�2�@q��Cֽ����:��8����hxh�DŽ�#r�X���܆Eek�V�� ��������w'0d(u,��m��D#J[���/Z���b�I�bty�������� �O>w@5��48����|7� �[�݆ 8O�����Gs�+W[-B�Oǵ�6�YF@:��\W�ئC�+�F)���ٽ;�>k�c� l�[%Y�<c� �,�5��f8�3W^��,��/�|����u��{�dU��(����B����!�%=�)@��a�bs:����r�&���Y�-���I���7j�y8+�P���i�T��[��|u�1��<����u�������|�W"ضm������h�.�s�t�<7{�odGT�5]���^td酛�Y�{E���F�g�i!��Aw'�(<�������F`��g�}Pb��7OEYǃ��үjR:���o���u�uL�J%�*#������ǮU9�hk�!���Dz��"������;T����E:e+�2�9�����e�-�B@T��b �lҏ%Fb'p|SQ���J:���������v�Ҟ��d���sJ����:q_n�Q��!J ��X�v���噳���rj)�t���"@G��}mM�=u�cwG�E��$9�!o���d)���K2�Ũ�)'LO�H�X�R��'`�V}u�5�'�B�*6Z�DÉ�Z��(�%���������Km����h��8�)RN�z=�@��T��`M}@eX�x5^o�<@l��KF8bD�A�5���!����)�4������zh۹����՜�^�5ʱ\.ž���L۾۶p�9U 2Ag���$VF_s&.\��r�TYu�
Static task
static1
Behavioral task
behavioral1
Sample
3ca73d89c40d2716f7c1b0bc14f39c3e6859b2644dd5bebaa4009e4bb1d30b75.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
3ca73d89c40d2716f7c1b0bc14f39c3e6859b2644dd5bebaa4009e4bb1d30b75.exe
Resource
win10v2004-20240611-en
General
-
Target
3ca73d89c40d2716f7c1b0bc14f39c3e6859b2644dd5bebaa4009e4bb1d30b75
-
Size
2.9MB
-
MD5
8630054516694926e0dd1e4e968f7629
-
SHA1
791b6f6a0a8e961eb56cf39085be5c2365d2ae9c
-
SHA256
3ca73d89c40d2716f7c1b0bc14f39c3e6859b2644dd5bebaa4009e4bb1d30b75
-
SHA512
c54c95c2003fcd2ead9b40513f176cf7e6238325e30e68ae1801fd03c7b80cf07249aedb3b80770e9bc63832dda4aabd43cabce3a42ff8a0e151303a077e2e2b
-
SSDEEP
49152:XnFkAhyBR3ibTbK8cZ+TUZh5Ri37Wrt6P2rPJ8RrofBXtvRs0y0xVW7oJs:3F+RabKpwUZQ7P2BXtJgoJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ca73d89c40d2716f7c1b0bc14f39c3e6859b2644dd5bebaa4009e4bb1d30b75
Files
-
3ca73d89c40d2716f7c1b0bc14f39c3e6859b2644dd5bebaa4009e4bb1d30b75.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 490KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 74KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 93KB - Virtual size: 219.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 192KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 194KB - Virtual size: 6.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE