�rDg"Ԓ㯧ne�/{�ZĚ>���d#��9�������W���2��,I�ۊ�����#p�_�E���ؿJ�wy��u�976gP��!�vúkz�3��T�PIX�[K� ��ڤQ՛�����l�O�����C��xW�K�� #|+wG��3�����л2ASTJ_�����mH�Y��uw�f-��)�:)Ōut����+a�wY|�^G3�M �}�R/��w焼='T��I��5Ļ���ε�}|;���y�ָ����'�䫠�A�L����B���ٝ`<�;0:��8&���[�#�JR�n�0���n�yx�lt����P^q�*�0��.��G��N�ˉ��YQ�C��!����!B=^�B�u��\��U o<}py[�o�4���E��k0�������sI�Ș��)�y���)D{��*����y���y��7z*���3��5��q�Ӓ�8R�&����3IS�-����VZ���dD�kp�*1=(3���¶UB�ь�h�V��V������h�r���P%s c#ʯu'���Z����H�)w���!�H��p/�} ��tzX�5{)�fL�fU�`H���v\�y^��hI�9�&��f�y��2E�ʹ��PO��u���$ocθ.T����\F�^TS}�c8� ��JaZ��D�6 D������[Q���}�2��^���] �����w}W�p��d>N08��z�S,� �QZ����%qb��7'�l��:����3~/dɝ���"�� ���m�i�ko�?,�T� c��S�,�A��F(**b�o=�>E"J����/�T>[�vJ�ۺ<g�o��n���^�X��BKb�����F��x�WNYQ�-]��pƗ��&7��O�l\Ͼ12��0ݣJ��.�5)G! #�od��P�OglԿ��A�2�aje��� ���mC5��/X�a<���F���Kf�u����oT5�a��`i��5�n��'���r�Ĭ���/#<Ƅ���i��erT�hd���T��!�`�l���DAZ\��8�iS6~��f�n��7 ��纄"W��%��۶H�i���S��̇����1�H�����8U��yX%9��Q��!��Ƒ�S��N�X/4u�N���Y�Ť� �!�*���=���h��Ă���c�0[�[t����J�'p�]2c����}y��Mv��Ც�vI��\j�}�.�6�i� 19I�L,�K��a�X�UT�[,��Υ?�G�sX����F�<&�[�'��'� u�����>�Ei�� \� /����S��'?r/=O�����*c�'�� _�^�H�K{m`������LN���9S2C&������o��Ԉ�lj�Ԃ�<Ĭ͞ɍ�a ����>+�(� ����*W��[��`�!���kAF,��uDTE�{f���G4Qo+�K7% �lG��~t��#Z�o�;�vZVx'jn�.�/�i*T�6�oK�$L-�v� �88�T@�����2�]�@-í1 EN�J+�V^)���N�W�?4i�yO�2�HqwKM�]z�鸃���"s��ٖ+U�A1݅D�tb�<SW�����W����#왧\�:\+t��f�_n���^�����Ro��jK����ņ@.�G���8���]�o��[Q���d\�ӤJ�X5S���Ǖ��lg�VS��v��(ܮ��n�x�� Q�K��+*~E���%T�t4M��"������'Ex��XJ�:�����Z������+��uf��f���B�rn�����e�I�:O�.\*wȢ�d�f�U����̍���Q�jk\� mS9|lE��Q�]��B)@�����Pb���;}���*��ʍ�������wmk����r���"���V����Վ����l�<�@f��tI @ٻ�R�V�&f�5����Ć�S⨞s�߱ױr_�%� �3_�.-�����Pg)���,��������?��^=Rs���1V0��o��=�ׇ�K���YI�PsD���N�� ���.�h�0�7o�PA��+�A7�1��A�e�R�PkV&���6n!b�~�]�ʪ�$c O��5tNmsY����w ��!;��˻�8�$"�L9U�"kg�Vh�[��L�%uQ�O�m��`���x#ӂ�Q��D��*����M��DL�$��HJ ��W醞�)*Dw�J|�%a��Sh�=���}u�b���+cM��O��$��Gd�7ѱQ��M��w��X|�N�Wν~r�ү"yʛ�1��.;�JfZ�Tg#4v��&N`�L�Ӗ�C�e�~�a�#o^�����ֻ��Ե �#Y-��[��q>�1�t@}�v-��U�x�%�V�<] C���U}M�oIH�@v'yMFn�e>8��99�炵|�v˖^�`��nM&#��%����(��ʨ"����`?��Q�ڲ4uM�^7�=�٥%c���#^�<6r���ZS�Ԉъ�3����ҾuL��:ߛP�\�c��Ek(z?V#�mQ��������U�3z��$DŽ�}bT��p���f�7v5�@�nZ"�O�R!�S�$��@�Z����)�5�E�C� ��'���^�Ii���*�G�k] '��藰$���>5�f�t�YU����y]�Ҍ|ˋ�E�Cv�n���+@��[8;��-�� y�'3�N�ҟ]P�_�g��uh���]���Y�]�VC�9,]5������_(ȏj�0���b��xkյ<�=�=���.CD�T�t���+��jK�k<��ʃ ���0�������^�����3�}dR�Vk�U�N�X u�I��G֤<�3X �Ќp'�'M+�Mm�0E�E����l1�� ���k@ʲ)��t�b��wr�k�^�[YW1f���KAW#��^�*L,�H� ;�< b�j2�������|��DЉCmγϨ[�~L�����ƹp��̐���n+]�T��K��!t�|�- �I\��n(��kG������ ��,K�y��"��Xi���b%�����1���aw���ɍч��FO��|�Y��#���`|+G����ƚX �c�г��z���s5�xI:�������ˍ
Static task
static1
Behavioral task
behavioral1
Sample
3144b89855834a495c31b8a3bb88302841d641b5df4ca4b591c2f10a11b9fe39.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3144b89855834a495c31b8a3bb88302841d641b5df4ca4b591c2f10a11b9fe39.exe
Resource
win10v2004-20240508-en
General
-
Target
3144b89855834a495c31b8a3bb88302841d641b5df4ca4b591c2f10a11b9fe39
-
Size
6.6MB
-
MD5
744332b131cc6e1e28b442c900a87f28
-
SHA1
8e44bce4af36d1542748e05c04773c1fc7d4b66c
-
SHA256
3144b89855834a495c31b8a3bb88302841d641b5df4ca4b591c2f10a11b9fe39
-
SHA512
3accdd9025a70e7d0ad5671cd177284c7a131e1b5c81396a1320c4f5bc5dbe97982f9b25e4bd0d00d9171170ba3d7f1672a81a51d36f399c1dd43254ddc37da0
-
SSDEEP
196608:upOQiGgeifmdfns1rimJLOX0SC+0Tu1J/:upeJ+dPAmiLGo+TH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3144b89855834a495c31b8a3bb88302841d641b5df4ca4b591c2f10a11b9fe39
Files
-
3144b89855834a495c31b8a3bb88302841d641b5df4ca4b591c2f10a11b9fe39.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 372KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 40KB - Virtual size: 520KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 204KB - Virtual size: 22.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dwdata Size: 5.9MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE