�h A0�Й��*h � ��y�!��*����{�4(xJ���1�3?�կAH��u��P���<��i)�۠��O��P�Fh:�/��%���o�M"*M4���s���S��#@4}��l�[�i��0O��>�P��S���H����ĸ����E=��c���������0���Xr�5�?|c ֝��/!���&����ܞ[�c��4��0Dw�7{�~�jū9g�a[�yu��E���W��t�MF���dɱ��{u����-�Z�{!V�����/sG~�{�b@Ol�� e�ή���U�)P*�gx��T�k~ �?���8���i��h�7.}��"'b��H�Q������v���3�K7<�#�4�"�E�P!h�ʾ��+��砤~VE�7%Fʓ�,F�y���� ��L�ti�R�}G����l�������s��W��wK���ji�Tn�4aK5m�Fav��O����+}o�S*������C�Q�.�������6���>���`!faP�L��/"��o��������a)�|R��#����B�<���*�:�붽K�V����8�����H8��,G�4�W���r>|�(���d'Z���YS����h��Ç<�� s��F�FQc.�7���"۸ى�.@��G<��4U�{%�&�sC����$YhD��;�oacN��}J��wP{tv�<v��[~2lXI��ʀ,Ӫڽ���ߦ��^�+����p��߭\#Y��v* VB�'6+"��0�\s^^@�N���3���L���R�w��;Bfiـ����U�z÷]?��[�9ʍ�8@�&i7���v���"����K�30�'����_�[�3V{�*���Hrp��l�C\|�IP�*Y��K���Mw��|�b�-Q�lI۾9�g5�}S*u�lD��,�������T�<��������e�=�ɹ��R���W1p����s/�w��ҳ�����g2A#$�wMd�?3��GSo2tm;I�~���T��K4��_E@,�^B�Z�s�+e�2馒=dd,��p^�����T��P ���Ӥ��O0'/HV��9'�2���MCb�q�`���}D��������f��V|h/O���jT�`�� 6��SL�*~N�8�L0� h01�StG� ����o��v������%4����(X���DQ���`�U��)���@=�TFb��Z����J���3# �b��$ôw�2y5�Tx�X�f�d��f�q H�L�b ��Ĉ�t�!�A</�s���������J���PM,D�|z��ߍ���/�������g���]˅K���hp@��.�4v�){/P�I���Pĝ� ͼb ���{eF�]�,Qf"�� @��Τ�ؘ��:(x�*|�@R�����n,S�0�?e��۩�lPZ(�\ՆS�VnoLʂ�n�z��D`�Ϫ`�A넋�մo:�k�K�� �ype����0��佛�AG��a�.� ^%t_�r��&.�C��2���|rQnGVT/W��ўp�=�I*�}e���s��@���[Wϳ�����_n!0�t^Q}�Q"0z����j���[ �6~�ڕ_�(�{G�6�Oe�����p�#�j/j�x[�վ��ԋ������������X��z&���t� &~��3�Z�0K��W��u,+g~� h�\[���p�xJ���A���:����[��³�yf̘i��b^wRF���ˆJ?��K*���xup��-�:���#���G)�k�E��u��E�`��j7J����I7��8S�A]-j��ep]��↦� r�<F�υQm�\]��5����d����R��ř+EL�3��{i��K�0pM��0�Bn� �;�W�Ib��P0�d%�]\�OM��6J����"v��S�t�dh�2 �ޢ��]y�ZM�RE�[3�!�è���L��@�M�l�l�o��A5�m<�~y�8�c���I���O��\[o��J���6J�,�_���G ����#�&'H�t�/�p;�헰T%�J�o�95>ʍz} �t�~�� �ťLfU�h��:l���1�4�fI!R�!�)/���F>�Z �ڃ�5���N�����#�vK��H���%�#�g#�TA K����$o��eA�i���-�<9��6���/O ͓[��8��<zɲ�b=\!����P�6����4�d6��P�Ӂ�����`����ZCZ���.��`F�$���3�h���U*���C;��>�o�@N*�-JǑI���0RK�M²�u�0�VU!�ҭ �I��&�*0�/|s,�$w��pi�F%������K�_EF���*' .��0���Q�� ��E}��u���E2��p����b���*���^�YG?�n�G�Us���I�R�Tc���1���F�J4�>�� c�;4����"�տ�8��ٶs_�'�ν���Թ�j���J�栘�+��&z�,�@�$��˨sw���뜗���V@:�������#����4����N��8��$�`�rn��,���1M<�q�X\W� ��+Wd/�nA��f������\�i�W�U�ߐ���:����C��buaEIKc^����B������VT�J��_��oCF�:�p�(��;��/��,nf��R��������h�^�:��Ɏ[0�� ��V�-�x��-�E�<�c�������N�̗cA�D}��I~I/�b���?Y���:�i���v�F�r@A��cS�f��t�Js��g���ݧ��:��xWZ�����B���^e�|�tuK�d�M'�o�g����V����;�9�����,�.��������J]�����\u���������2� ��g�_�j�����/8 ��n�a�4bSS[-��h���k��r�k��G�a�7kf��f�#Ј��0bō �ǫ7)w��<yL�g�����/T�$�y���R/�}?�PN���������E���#:���G���0���="ei�Lg�{iADh�!����R_��@���ov��^3���!b�P �b�咥h���� �㧚�oo�Y�Z$�!�,|�����LP. :V�ei���wh8�f.�^�f��N�wG8�PI)|�4���])c
Static task
static1
Behavioral task
behavioral1
Sample
31c1b7c9ccf144e1dcc8640a504c9d258169c190af4ad78849700c6b4fce0ee8.exe
Resource
win10v2004-20240508-en
General
-
Target
31c1b7c9ccf144e1dcc8640a504c9d258169c190af4ad78849700c6b4fce0ee8
-
Size
2.3MB
-
MD5
020b16f0322904361dafada2f7dccdfa
-
SHA1
e0ea9a5df396b05ddb82d1dbb2ad4c8eb2c2a692
-
SHA256
31c1b7c9ccf144e1dcc8640a504c9d258169c190af4ad78849700c6b4fce0ee8
-
SHA512
7139f3471191df4b7a8fa29aa19e3852f100282e829e0e53abe9b86328b9b888be0e2b58813b87666e547ff02b72a81bfba12dba93a1a156c99f7eff70168b1c
-
SSDEEP
49152:xuskjVsHox02VHq5EPmQYAxESN78MjFZZSJ9e0+g7Ir7yb:4sk6MoWPmWbJJme0Ir7yb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31c1b7c9ccf144e1dcc8640a504c9d258169c190af4ad78849700c6b4fce0ee8
Files
-
31c1b7c9ccf144e1dcc8640a504c9d258169c190af4ad78849700c6b4fce0ee8.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE