�q��@T]� �ҧ�@ N�� �l��W����o ����=2�Q�Ҫ�r�$UL�)?�v��b�Kl������!g�ޖ���-\u}�uzm�~������U�W��g|R�R�evm���ͪ�ʉ�^d�Y�mYJ�?��U*kF6�o������(&xy�#"��'5'�G�շ�����ok�?�l l�L��\�����!`�ytO BJrui�\��q�,3�MR�a/���z�|m���o�����c"��@�J�u���Ҡ?1!�X��y(�Ze�[�`�8����, �;Š�{�-���`A*�6��P�0�Ҷ�����I)$^A.X�渁Q��@�<������zV��)ˡ�A����/�N�z�n�:�i�\��!���5xE�f���5w�&���6����F��dT|����w�瀘�%�� >^G��s��N��L�"T��H�{�>Z��X_�T�˲!�-w��J�?@�s�U�͋Mf�Q��ϕ� �:�Wc��y��x^9u��?����$��a�N��z5Ed���a#���F�����'��4]s���a�V+��H"I�Г;d(I�� � �)i��z/��]dŞoȴ������$��O�q�b��i��4 �V�Z#��vj�h�}7���#� �v��eTo�lϞO�sܐ�6S��\��r��F��ꉚ��v��ݔ2�;4�O�L6���w���g�0P�������N��2��y�� �saV�~y�,r��F����G�SK�����,�$%w��|��MwE䮔�n<���5n��y���~|!�� =�$�0��5�~%@�V@��Q� ܩe13��`kWZ�E���/I�Jah"�i��gk+�(�y�[F�[���|w�V7x-`2^y�ʎ�8����Ʌì��?�Ͼ��S��Z�3��chۜ<b�Q���O+������W��/��0�pה�Ť&`�,��e<If��LY����\a�}��)�p�L����Y���`"�}�c^c��^c��C��5�[fsN��R���9&?�t�1�S2�eY|�*n�ہA�Y4��;P���cb�ZOzU���4�&tqP�0��1��E6@�g�RR��%S��,���������3��j�U�J&�<���jVr�,uu{����*{� c�Q��W��U�0��Q;,���7 �٪M�å]�O��J�"�z'��f�����s���'ˢAƕ�$ ��=}k���P�`���7��~Pm�OA���ʡy^t��R���a�%[��j��%O�"Y���F3_����}�9��ýX"D�|�:Y3+0�,�R�-����d�jd�Pۍ@�͵wy̬��Y.���l��:��t0P�y��w�� 2 ��6EӾ��� p�jx��Z��&�V��D��щ4H-l�}$���.���C�� �Hh<~�~j�]���I����'"��"J�w�v����p�2� EyRS�Z>Z2��w+�Wr�S�������c �F}�=�?�ba��V���Wn���z�N����I�v�qwGOXvaL��5_����>&�β�S�hi�<���:��-�v!��[ J��KHS3�E����#�#-� E ���y�J#��H��� 33�؎Vn�3�1�Ղe,:�ѝa�BǕ��7�PXo�ܯ��WS�~�bR�\3�Ҍ�ی6��V���*~rcQ��@t����u(� @hȘ�`��xz�+��ɮQ؋U�a��u� �-�*��q>�\��7 ViH`n��\�Fsg�����Cg7iz_� �j�$�E@U5�����Τ_3�M�0wfe4�哬����G*���!_�����WӨW8��;#Eh��@�푮�},H:ѯ�����U_�1ܔ�R����X�3�T*�K�]e���Պ�GEJ]VHǪ���v+�3��:�N I�+O!^oAb�$��Q��%��;}��.��oͯ!�Ke�rMB驦�E�=���|J�iv���w)��vi � �����9j7����1,}槬�����>�J��'J�Uf7��*��Ϛ$)��H�ƪ<�����ow@#��T�+��N]�����_ͬ�l����J�#B8�7�������[� xsHrNF �d�1����=�遵�,���t��ۜ��mp��O���1s����Q]j��L)�K���<�,�������W(plH��y84���3�#��S���C@;*��:�(U��FGw�ؽF"�L\b3~�1X�E�(��9�0�E�)j��V6����z�H��cS�� �i�aX���3��~c�aH���3�eG��V�q$��8�~�u�Hd�H��I>K��jt ��1V���a_^���11�ev�:E:5z�� �(tc�Ҥ����F�����=7ì��u� Y���mP=�}�A:��'�䚨��$�&�+"���X��7H��Mv��O~X�xK Є'��SP��a�-�\��QF���*UY�n@I|`M#K�.��Brb�?�o��"�kQ�e���tW�P {���c�K�u�Kǁ^;ST�4H�~�)QD�!'?�.a�=�C���D�p���s�� �Ǔrm���t���$^�:1%�D���9�0|B<*�X~�%K ��m��)��6UO.{�@z8X��=`=�)֨:���TGo V�k�Q�@�����؟�k�+?!��j��쇂k~��{$62k�4>�b��re���`s�Y7⇍�����ͥ�[����K��3��$����o��-4o���%MgO���L�\"��l�(-栂5�RBa�08vs��ێ���b!3���}#l�� �{�[��9$���K��H&�;J�l��H�=]�kHpL��M���R���0M�5�S�����Cdb�]���M��s��6KкH�W��������kVl����AL�E���N�����S����2�1���?Ё�y�;�b���I�QJ6꤬Y+}�8L���x�w+�թ,��pe�^��͡�lV��Ǡ�]�=���N{�@=��Lh�f3��v����n"��Xt;�����'�_�p�t�6C`Y��zt=�5b�{V9*t�8���R�`G�eTEۛ�b�{`4g�=��Q�}�[�M�4w�o�!������G1JG�W������.����0�t��~�ht����q�SE]��ubV`\�c&����0�Ywx;G��vn��6sĴ�;&�3��$)ʠ�l��6�M���k�}��^����K��li�����|�U��Ӑ��P��,X��O� ��_�Ժ �HJ���ѧ�)v��?�J�p�h�^g��m����q(o�q�%*���h�$~�Uf/�=�s������-�����ŷ�'��� �%������#�
Static task
static1
Behavioral task
behavioral1
Sample
5601362741a3c49770857b3ba7691c810e242b65af9fa783b3d2e649b1ec8c95.exe
Resource
win10v2004-20240508-en
General
-
Target
5601362741a3c49770857b3ba7691c810e242b65af9fa783b3d2e649b1ec8c95
-
Size
2.3MB
-
MD5
a10026e6fa614ac472aa51df8271fccc
-
SHA1
cf5224e38d979f12214b307ef85f1979ae24b831
-
SHA256
5601362741a3c49770857b3ba7691c810e242b65af9fa783b3d2e649b1ec8c95
-
SHA512
29d87751ea964cf244c170eb4ae1ad38a1723c9dfa539e08d2de2f90ac0920423ef86f735b9e27e7c45470b1fa77209bbf7e757f4830f14abd96b40f417f74f6
-
SSDEEP
49152:g4hsR2RyddVEzQ0eWXABKaOFDOLxqNp0s449Q6vjUAWU5tgvrq1YWycmwDm:gpRNx0eWZdOLxYp0m9hvQXU5+Dq1wom
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5601362741a3c49770857b3ba7691c810e242b65af9fa783b3d2e649b1ec8c95
Files
-
5601362741a3c49770857b3ba7691c810e242b65af9fa783b3d2e649b1ec8c95.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE