NI�g��F �J��EO�� N�ĕ�W|L����'U`�\�a�����<*��- �U-M���d�w�yE{d�;K����f?����{z���4*��c)���?� R�p)U�@�3����+zϒ�z���?@�k^@�=[x�)k������xY�k<��ԛ}~���]p[R�;������לA��u�����ep XA����7-G�,�:�jI^�r��h�\E4��!�9�+�)��_C� a�� �Y�|�H�<�p뵺�?v�C��L�z����!c�0bK�j5���q$i�_ �K��0��*J�G��}����C������C0Ay�yS�Α�\3'���3F"�;���˥B���+�{X:!=�LM�] �4�G��:M�N�z�Xk^!�b�N��I�!��+J�w��Π�o�rņ��:K�W�x1C�T�=R�����P���;`l��$c�4z� \�Q=�nG�*@�H8����A���ۏ,�#UIX{eW��W�zF��s��.��Z�p֬�Z�<k��Z���4�ՓCOx3���&JjR��7�Mk��֫��^�ۓ�6%h�Z_�?��"��F���Wj_w��əK�/��r٠=�{q��lq��>?��(ے�]���ė�y�q5�1q��1��*xZ��zqt��UN$�/5�՜�nas߰��3�y��g�V������3&��4�����4�U_�gN�;r)ʦ�L�;:�C����ʢ)&��y}�폥"ȶ\k����r�ZXG�Bػʙ�!��������$���ĩ��Z���I�;�o��a��e9)��X���;���ULkB�I���Z�����Mh�J[.������� �!г����f�n ���R�4A_���.�*�q����T ��5��&B�qϽ��� �������^)����}K͖Y!9�M0�[�sd�@�T�%^yDK�'.D�$�3���|H��F����A���3���?�OO��h��uC�=�C��!����`|�L'x}ڕ:�x�w���v<fH쉔�彤�Q�@dQ�]�#���Z�9ݩ�j�":��o�b���~au��m�N�#�eokH?�)�j?,9o�F=Xe�4��?��}�jS������t5�4�u��]�h�A�eR�s��C��V���Z 8�_�^��Ȭ�A�X{������9���C�o�x�䄲%]�vܶ)*^��Xȳ�� ���b4���AXn&����7>W.��6�_�����t^��,�1���m�F����d�x���KM�h}6~Q�y�0Kp{��?mG�5���J\����cy�����4U�P�*�~��� 籵T'Q�=���oc�mE��N�@�o���pqz�5Ě@N���>`������b$}{�3-��&P�����zN��[�Hg"B�=���ҝ�J��.���~D��-z�I��k�a�$<�B=*�� �C3��[w�`��#�\[Lƣ4{�'-�̏z�M1H �qxJ��K�/������BL�y#19j^S��^#< ��6�N���B�I���o�Z �7T�������bU��oRa(N���E-d�h�oȗ{��o-�8UAT�_��B��k�a�пo\����1��7�uD�!IG\��W맹���އ�'ȯ�y�4�ZE����g�J��*�ے �OY��R�<^V����MB(��F����b� m2|\�Y�م�)��(��NRm��-u�SQA7��#",��HR��-��aDB��ʆ₸s��ʅ�E�����B�!G�L%5�L��l3O��p��e�ϵ�p�<�z��cF��<m���¨s���I��9�R M��kTI���'ٞ�e�[$�����vFc�������ԡ<]��e���+��� ���T�M����y�tR�t^���AS�W����Ԇ�wXC���0�h}��"��Th���zaH>]�dsڋ�a�;и~ټ�B������pOK���r����'!�;4���i\��O��l�+'�.ESp-��y9� 5쯹�E$ #��B�B�~u]����3��n���o&ʬ]Ӥ���"����J7��~�����3x���*���5�~$�1��V��q��w4�6�굔�;(�����q����y��e�U [3�ш̘��0�B��e�wʁbU�m��i�y����9Ɛ�(��B;���8��v�V;�)(��\g�b��|�1j�iί"���~;��ȇ��'�]u�Q�$��(^Вa� bWʧcͭ����ĉ}�E�7��:�]�%ЇZ�0"�~���#PP"�ޖ��<��U�y�!Z< _�f��:�eC����*J�Ih {Vx#֓�ۨ�.Y@0]1|��g��y������Rh�W�d�?�a�<�fg3�U;`�>s͇W����X�A���v"&�n����N�f8���pK��U,Y^b'�͆ه�LG�^��h�h�nN`���щ��Oͩ��)�l$����h�F�y7b_]���D;<*s��a_A���z�oM@岊��p-��"���v�����Z���N�P��Kق�a�R���rmݾ�}[�`�#�ٸP�y�l�c)J�=����j��X�0Ux* ILJ���@�^g������O����m��Q���1��G�? �դHK�����[;<ي��MFQ��B� ؾ��@�2B�ȑ<���w'�=��m�-�5�����S��]���Ɨq���Z��f+��T��������%R� �����̹����X�wM3�y|��v%体��xy��a�����R�N�{C�%Y_��7� ������M�=k�� ��(WrQ�W���̽TI{X\� ���y$D�g$*h{�%7K%�-���h���!���= ��Gz!֩g�Y,��5�b���z�l�sG�i��b�8�*�K��Go�IZ8K(3\�51��KJ/8ҍ��.�G�� L��1[��ƫ�Xǖd�]�N��h1�6�p����1��3��U�1� �%/zH�n���ʶb'#��t��l�:��������� �M)k���5�����e *����[�C�����K���P��k�ud�/8����}p�9T��C�4��J����Xe"���L����ށm��� ����<!VRs�����7~D�l�j��ɞk�5��!iM$[�|{жyZ�
Static task
static1
Behavioral task
behavioral1
Sample
76244ccdd68ec711ddc966da515332d391487bf9f25d4e115963fb20969f4e9f.exe
Resource
win10v2004-20240508-en
General
-
Target
76244ccdd68ec711ddc966da515332d391487bf9f25d4e115963fb20969f4e9f
-
Size
2.4MB
-
MD5
813c6100f58bc85dca48211bd6e40fb4
-
SHA1
5207e73f0f7029e1f1aa7d871530a62f489feb75
-
SHA256
76244ccdd68ec711ddc966da515332d391487bf9f25d4e115963fb20969f4e9f
-
SHA512
b5a0e626c1bf8471c07726862470fe6d0d8f1afd411b84e1fa606e288d88c5210a08d55997e784d83d8229257c0ffbdbe1dbc574d372ea7d259b1d7f9acd75ce
-
SSDEEP
49152:d9sEEJGTnRREcF90KgsnMBRgA26WoX549rnWiRngqjJL0pP14lntAamQok3:HsB0R9F9JgsMIA26WQC9rJRnT0pPGuj2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76244ccdd68ec711ddc966da515332d391487bf9f25d4e115963fb20969f4e9f
Files
-
76244ccdd68ec711ddc966da515332d391487bf9f25d4e115963fb20969f4e9f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE