+iU����4� ̸x�e�ZM���*�p�,���Rh¦T%�]M_��-O�@��l���}���K(\�Х�^mY���KN��Uo-g�~���k�a=�o�>(d��ݟ��L���y��+�XK��~\�F�t�+e�_{IY��*��2��ۛz����%GN' �� ��rm0����f�����3�Y��<�FP�ؙ����c;CĮ�پ��~��@�U:���>:م+ֹ��u\�@��/��h�#Pi��)��>(�N ^p������j�X~3~��5T�M����� �vE�"R%�z�9 �vB� 5��M7S��_��` �]�w<G����ɵ��|s$ �a�f;�X�����i1��M�p�Ʒ��?y���Ұ�����X3 �ׅ����HAԏ��_�����'[$�&�C.x���P)#�����=����c�4JWz��6-�[��w�c(��+�鄨ֽ���a6�����C�J�xr���m�W�@�E!+(�8!��pe��Y5H�tiXq�^�o�����ұ2%��zj�ce�X��8(+y)�oЄ�����`z ��F�Q2 ���3g+R=�������g�!!^kj�З��)"���=֘�(������!�k��BYC�b���{^�|�A]G%��$h�Z-�}xo�PK��'x���V������w��Y�d9 �v��3iCq���(��^������T����?��ى$_����ۇ�����\����q�~=��ڢ�M���I�QYN��|~g�p�H����=N:(;:����@LxN��vJ)c!P��RRK��s>��io� p�'Zt7�NYr%��X��i �Z�=m,�Z�ٍT�{��t�p��v�w�m�c +�mfF�.@��zRe�. f��M�9'}��Q���#�9w������!��T�1;�@˳U^;O��Hew����mXȉ�S�SY��,�`������&�r焿BH��hc��*����yq���]�֙��_6;��H>���Їfx˽"\��7��`�tA2�s�x/H� �G�3�R�"�8q߬����V�{���\դ�k��}3�����oc��/��0��9��-�:}�B��n`�5�x����y_�VT��G)gϼ|!1]�)��Z�%ɽI�<�G*W�M��� $�e ��s�_�ւ^�`P����m. ��ϪLOr��D)�X��řȠD�\�%��4D��C���r}�˓� �N�3�ͨ����P����q9����WZ�-UX\]��9�vL���#[ �$Df�NDL��J7�1�,��^�J,��~_��)JA����?���g]C�P`G�/�9�3� �Pbf��Pj�Z��'�c�.�����8���fh��W�.O���Dc�_�p�mc���n��� ���3���j�p��k�-d?���4k���\lK�ޫ��;L�'ӵ�}9бu{m�UK��]zp��Ug���E��1؞���%o��y�:��{��m�=�H2��!�n ���MyЪ��|�H�-s��E���Z�Ř:� _��!\Ԣ�������(�~�W1�$g�������� K��"h/�8�t�Ӡ~�n.��%� �p��dN#��lȶ��S*Q0^t)&xgu�X]�{Vh�a�QD[��ҬV$��&���cS�4�9��;&��1p��K+!@�W�"�z����ªMܘ?���� ?Aާ����^F�6�?��+!� ����<c��+�x��S 2���&,k):=����5/@~>:�6�$$��{�Py(+�#��6�%�����;fv5.��k�"��%�%�G<Ԛ�YPk����e^����ܢ��Wt�;�NUw��\��Oa�5�c�ϡ`d�"'#k|o.��U)�H6WxGK;�N���.��u��J���y)L��ۆߎU���ي7��%L��� �!5�|_�t�\�`����0I�&s}0��)<�q��%k��B�&X��>�!����/� (�&R�ȱ`/ly��$&)�S����`�Mi��5�l҄O�S\�-V5�k2+9�f�,��+c�����]~t\��b*�|O��<a�� ���+]�<�jى���4x�*UN�H�����N{�9M���������Y��zk���y�j�b��냓do�l-ٖ �+>���~G�⡁���ZΙ�TQы�/��su���2*���;WbD�.�x9e(�����s^4y��W ;��*� ��<0��BX�xejx]�O�����%����Q�*�w��4s���f���v��T�U�J�?�� �W���fM7�Z�G�5�w�%<�JwRq����)�7����X���hDc����7�,V��J�� g�*��h �!J���D[�t�v]�Sç�N��^��q��ex��VI��;h�G��q�@�Eu��ĂɈ��=N��Hj��nY����Ri�j�_9��r3;�D'���s(SC_g�۱}]�Ć�M+͕ �cW$��`�B'�[`�p� �h3�EtR>�����A5�٥s�6�ac�~��~�J�'�����w�g���0��'����4A$-��'�y�,� �q��H�p gx����Va�0d�5�|O*-p�)s��أg V6����%Usl:�����FF<��{Q�܂ؐP��Nj��Aioc�PЏe( D�I>����(rV7>8�˞T��哚�zb(���\������ֶ&C�`K�`�����h���;�3`����`ͣć��ôNJ�C�o����~�<E�m*~�u�t~tAVə֦�^�� ��}��c���� ǟ���>H���;>��]�%�֙ ?9��S��/Ӗ���g&aqLj{�?�L�1D�:x�wg_M3�>�8���H�!ٹ�Խ�L���7������`0HAҋ$J�x�줘�=�Զ��D�e��,)��xNr���H6�W�Nr5J�h�V�H�H#�N'�F���Q|@���e�Ǵ�E쨕)w�)��O<e���\��\�E�Y�Q��E2�Bbƽ�����յ��u��⻲��bAi��8CU1��=�L��e����hT��gm�i�0�q9�����Y27I���nzS�^c/J���긕Z���������Ly�v��v��/лր���8��<���2AW�
Static task
static1
Behavioral task
behavioral1
Sample
5aef93c034103fcbac766f6ad34ed93b1a28ebfa01a4e16db3a6ab719738bb23.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
5aef93c034103fcbac766f6ad34ed93b1a28ebfa01a4e16db3a6ab719738bb23.exe
Resource
win10v2004-20240226-en
General
-
Target
5aef93c034103fcbac766f6ad34ed93b1a28ebfa01a4e16db3a6ab719738bb23.exe
-
Size
53.9MB
-
MD5
672bc8381740e119beda5e1bc92a12ee
-
SHA1
d646fb36067fb35448e2c7a8c8e01fbb2aab11bd
-
SHA256
5aef93c034103fcbac766f6ad34ed93b1a28ebfa01a4e16db3a6ab719738bb23
-
SHA512
960eb9a4a7f1e90700f5788c3f73b58cdaa998909934068bcc66493c6a8fb5f6990b868d428c6b094a92cdb4b003c7da81a5935d5640c717d2b01c5fcb6b3cd7
-
SSDEEP
786432:+5rRv9CpGatpGht73yyBWtOLvu29uLNUMRQhI1dk7hZlRAraptu9r7A0gPuAz:G9v9Cl47Cy3ONJ2hRrAraptuV7N8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5aef93c034103fcbac766f6ad34ed93b1a28ebfa01a4e16db3a6ab719738bb23.exe
Files
-
5aef93c034103fcbac766f6ad34ed93b1a28ebfa01a4e16db3a6ab719738bb23.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 488KB - Virtual size: 1020KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.6MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 536KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 204KB - Virtual size: 10.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE