� u5s~��$�S����� ��Dǧ\��7���!��hR�CO�N�;k���r�!U�# f�q��H�qZ�"T��vv�������/�Os{����z�:���|�=KO3�'�&Y�"��\�q�O> ��y�c�Sۮ�XIRY�Ƚ�6Ys��E�������nZ0���f�B�`�� 2w ;3w� Ro��S Z�7D ��Q�i��K��� ��غ�j@ӻ�-�h'V��!���Z�? �n��Ym��\9Y-���,�a/8�[��"�u���;����K�E���L�e���v���J�=��<�ڊ,����b`'����]���Y�qAь�{A��{]�\���.4Y�N�D鳛Ke�A�wd� >OF��:=�}˙N`���=W�'�!�ܷ��I�����׳��:����A<�%g�XT#hU�W�GR �����xkl:�4�3�>�0�U���k� f�:��Wt)��$N��H������y��J`5*�]����f��byk7q(dZo%:2_�Z���mnd� ���}�ΛI�uU8M�B3����0�-xg//i{Z1���q�օp(25$�aŮ��J-2B��~Q�:����S��1e�oS�S�'X+� #�$sfb�vR���G3ʅ�s����!K,i�<������&>�-���H?{�Rw4ٟSϛ���C�����6�`�{m�Ty�]pd�{&�{��-�j��;�V�-av���r|Q��� �����A��k��)K{N:��g-RL��uV�;� ښ��4��&}�8H��N���ExD���g���Cl�D��{~9x=Ve9� W{� ]��y!����U��3���5�Zy�W��$*�S�����öo�o,�����di���� ���H"��u�~da�m��H���K��]�%��(pID�so�P`i�2��c��T��������K�%���A�`�>�,�_�ې���%4bB �}k��}^BL؊���ظO��}?�?���z�;=�9�f����IHn����-��O���x���D��s��E�Ù%����mZ��r �aԪ�Z4����M��9(������k���*��͍����q�R9`,��x9&�K5g���� ����>Ajn�y�r)������(�{�9V_��h��[��U�Jg:�I�JQ�חEy��W���*2��2�A�+� (u1�r"ʨ֩�D���%��*y����U�4M�YY�����T������f��6���7J�(�NA��P ��8p�^r�A�N�ֶj+�� Vx~C�M��|۽����sķ�K.���s����*�kr�ʿ2S]u���W�� �5Y���̫^��`���HZ%ͼ,��c,c�r?��������̗�m�\���4HY�WJa{ ߜ?��#�*#dX"��N4���8+lh��Y�.%���X!��)S�e �c ��^Zv�Q�Et�2ԯ�Cx �Z���\6t�"�P.��a=�� �J�?-��ag�"UI,Ō���:�H�s(�N���&�Q}A�R�@;=� �BA���4Q?��c��)�6�¾x7��pJ*&��.DY�K�T���=�-|dT��k� E�{!;K�@/��OD�������;���n0�iU��I�AoZ���\�wG��=6��ꎷt��hZ�vz���K��l��~��I"�� (l[H�)�)�-�6y�z8.hz�칎6&ϻ�c��D��`��Y�$��N^�M���נ�{��� Z�OzȺ!��(��9�'�����U "�Y�;F9s]��!��l��r.9��B�����8X8�Sr���vB�~?8��¬��!ˤ���bF�i$��vU��%�I�RU�{�jHY�m�_8�l���������z����{6�O4Ї������'�4��M�G"7��m�X�/,?�Z���6n��qP�8M�Z:I�.Ko�)-n�ne��3�|> �Ǭ��_�H&t������F��7�i�;_^�dW�������@��qSy���<�S 5���82�Y�?j�[�y���C����ĩ��EՁ�S:?cK,�X�)�=���(�[z̮��L��m�-f1ti�Z����ʫ@����}���Z����#p��+㈦�磁���AB1%���y�電�m �"�����R,Գ� b�A���bi��}�Y�L+w ��M��q.��Z�pi�e��{����ÖlB4��Ƨ���=�+�����7Ov�+e mpp��N:��r:N/���r�����:̇������_��80G �֒�"��� .�B��%̭�������}v?�$]\G�����=�v�>��%�!�r��47$�k��E��F�����fB3d5Az!�lG�[;S&��l�oz'Z����y��)��*��m@�Ϣ[��NGDfPfC{q�Fu�Z��v�!_�G{K��-���/��#����݃.�eX z�W� �6����������&��Ub���iq�U�^ ��h��-�SՌ�ۼ��@�e�S+{���]��U��4��+�{/.��vW�A�� }n�L�t�N��}.&d�fL�����rU:���SO��V���ϝ��/�f�ǥÀ���*���<J��)�`ʒ��o=��P y=LA6p���|�i�5M�g҉`A�d�-ĉ7�a���<Q�����;4R9�֑���W�t�KL�����6�����NL&��a0���0�wb&�J58�s7���T,�����������Xr�YE����R� ���40�ǵ@��UsJϻ�l�ї`�����#�o6�GL�)*��������_�P�����A7ɓ2܈��ç��#��[��O����SH�NF�,�˘LB�l�o8��X4����[&��,�)�����:�\�E�v^悓uL'�U���S.y�����}=' ���߳��.����G���=*�8���g�M,o&QQ*�Ri@�YYm~�Ώ�%��l T>3��'T���dV��u�'�?�u�h�N��hGƭ�$Q��/n�7!���+��8����d3��-VJ�N8��A������Z{�}eg�<���z���t�j�1X��+P2���� �A��Nb�İk�et�B�ڝ����s)*���8}���Φ��jL��+oT�4�; �0�����`���6b��l9��?������s;�˖��k�LS�h�;����f�ɦ�®%�gM�2��������Cb��R�;~1��d�%�t�'�?2<
Static task
static1
Behavioral task
behavioral1
Sample
2d43140f86bf2ec957a7394376a8ca45bd97179b1fe6ceb002f1ce08c3e5a21d.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2d43140f86bf2ec957a7394376a8ca45bd97179b1fe6ceb002f1ce08c3e5a21d.exe
Resource
win10v2004-20240226-en
General
-
Target
2d43140f86bf2ec957a7394376a8ca45bd97179b1fe6ceb002f1ce08c3e5a21d
-
Size
4.3MB
-
MD5
1eada42227619d748cc36d9dd9b71651
-
SHA1
c45a7b942dd94f42d8ba2ebe24f24dc08ff679ba
-
SHA256
2d43140f86bf2ec957a7394376a8ca45bd97179b1fe6ceb002f1ce08c3e5a21d
-
SHA512
81c5f81b5cd552849aae1b46ad8e5e4c7965ddfc1eca342d5b2a82c78eb0d4e70b39a8043bf97af59fc514bdf94b5bcafd9e137269456606d7b7b444901c061d
-
SSDEEP
98304:hgoKKw/7/SFCf/YqFg9PqHluQ0hv+eNDPcb97aelOlRJVL:9wWKgqm1qHN0hL9Pcb8eoll
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d43140f86bf2ec957a7394376a8ca45bd97179b1fe6ceb002f1ce08c3e5a21d
Files
-
2d43140f86bf2ec957a7394376a8ca45bd97179b1fe6ceb002f1ce08c3e5a21d.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 55KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 13KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 46KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.1MB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE