&鰎8=�f(L�ʗ����.e V3���aǑ�x���$т���>�$�Ʋ��M��K�z��O����V��^M�١�L�^�ݙI$��)HH~N��G�/�,X^;q�����>�\>�퍁�z�p� �ء� �e�E��l�J�=�7�'��F���9s�ԕ�{7�l�7�ڎ.nD+"5�h� �M`�ͫ� q/�9��@��o�Y�)���y K���[�����N�}�N0Y$ �S>�]�h��%�7����j�K�(��-5&�JX�� [����y��'��& �7 Txc:�J$�]�F�X�^,쨆�(�ݍb�?E/K�xp���W����ߓQ�S�M�D_��Hj���Fn �oէ�G�z��+u�lO���I�pv�X�5ek&�骦�P��?#6���tʳe���'S���j29���A�p�k�B���&+|E��>-�Zً�`�*Cl%��)˕��~�̴-G���ܾC)�d$�1MF�aI�.M����e��:��H�qD��0�8�F`��2��9�- �;���{����(-"�N���O�� �5�L��_d�Bm�*hϿcXLtY�DR�e�f��Ȫ!�KN�\��"]���m��}Y�8��� ����ּx� ��y��k��ёz��&~K����_O��T)�un��T�֮�Xq�6�-'-;X������������\�"+=.��@E��R��V��]���/��z#?�R�֦�=�AK���C�֊i[����7�����bY����#���E��\����yF��U��ǿ�k��=Sr1�JNXOs�YMj�}j��FĔL � S�&�i*�t���(�2m��+�U;�υ>H��|���ʯ���/�^�x�^��xG�l�f+��]lG��9(���bV��,6����y�ƚ����t�?���� �քگ�/�����fXP�%c�{K]Ch\2��>�%|Gf��������G��Y��~!*���u��`'mP�Mzqp$�"n� �7f"DmN7|q�p���|V�Υ�"1������TPQ${�L�s����!��dɃY��t��l�� ����]�t6����� ���uጡ-���p��A�3��GP�"L���� ك�3x�0]��Y^�͡G�J�n*Y�`*�F_�EEQ�c��ݶE1����E��z>�I�� W�w]�����7���p��0��b�^�V��8�:��� \�=������M]D���fΑn�����R������棠���!+���$+v��:��CD>4jFYG�̀/@��k��ĨaWD1o�2��y����"'��Hg϶��뇌 {�H?�1����N�ΰ���=�x]���2�y���I�8��j}n��� K+���?����W��U����P�Y�8P7#)�V��%,tL`�<Wru��j�h�7��p!���4����x$�_B�qӆ��0�čy</�7�����Q��I�ވ��8��2@Od|y�f �͉�Jy��#��0�Xh���%����&}֑ �z�ҵb��3)a�βZ[����^Be+�d5y:[��be/M�����A���|��[��T`j�&�1��N�K������M��|I�DuN܋ɕ�� ������y�:��hQ@Y�����ޮ���������O�/m�|�뷇+_U���@ ��<���Ŝ����u�W��Y����T��3���ⱺ?�@;>�IM� =�������1Q'漉��M�2����)�����-{ע,����x��{������0֏�'BƔ�GP��� Ze�B��ʩ�����I�� 1{� )h��'��?}�~a���yJ>���!�Xҭ�H��:����O �&ѥГ7A[��1%��*��x��u����0�G,�U�8&g�������]������������0m0+��o����-�����k��C�!��F���Du���,��>�Sw{��_�8ksmDO�}������}&)$q`�su����Z�G2���J��1Ů�C;+$��\! �(�E��m��ˏ���,8�%7�*�H-Y�V���L�ֲo'3�s�\q��W��*�m�)۪"�ʽ�.�x��=� o�e�c�T';�b;ڭF�� �%���7w���ϯ��r�8�}�2�ܔ��\����F� ��,���Rƌ<���I������o /�U©���d�����W�v�����0�G���|k�jZ��/�T�F��I����B4�Tj��8��STi����m�i����V/.=Sӳ��X04��ۖu֩u���"�|8�������,���ېw��±���l#�>F�F6����$�/K��<���L*R�i���H!{��ANT��5���Ra���x��00'NG,P56���rXӷ�uo$iRQO�ƙ.��e��K�FW���cɄ"���6� �[a7D�MTsM���C�_�M!#H4��Z^VB�X����=>�}h��i�Uy.��>��`|�$�AOf!�C���}��?����I����[� �]y"1_f�N~V1d����*}n%Tjk\P�#稧���)�4�$��P#�]vŽ9(� ���<���)[�P�~����L�qc>���1��+��o�[����F��Β��''����h�gĪb��������z[�?Id�2| ��+[��<�гB"�,W �1����E���J��"l�NL4��x�kTl���gٸf�� �b� ӽ�����X�RmDg��M�tbBM��k�4��������⍾F�o�R�UK��d<�cϊ�����^1)4�2������{�/QmX� �Ș��s��G�ل�;�0��o����z9��>~nsS^O�k����0��gK�D$�� G�$�i6?y�.�iy��v\+� 06�� ��HSu�zB��ÃgB $���I}o/^ Z��F���$��0�V�c�D�Y/k_-D��0�� /#�X۩���� �M���O����$�gz���>j�i�TU��@���YcQ�SP�8=u��Vy37�Y��q�ǎ�a��J����k��Й�2t5��`i��V���M��a.ppڪ=�fF�w '&�o%*�Lʕ98w�Tl�:���n/Cn*��m�,�l\�i�ܘ)�1�q��Hn���pv��jk#�7�v�L��>��,�v�&F���t�o�0|�P���!ΥPً)֊��~[�a��0)~��«ܞ��<��6 ʓp���e54��#u_�ԅ��yFh��N�Xk]�P7Z �I�#J�N��-���D��Sz!Aq]�����uF�g��ܷM ґ�H6�T�7�H����N�oln�g���r�2�u��eo7�د��G�S��e����zc}�E�Q��A���'F��zs�ޤDA�0����\� 3���e^������7#8�f:W����dq���c52u-��z��j�D�L/�eG��]��Igb��(31_PK6@�.�V@-r��k�Ψ��k�Q���:����}�$0�+<�┓��g���z_�����O"
Static task
static1
Behavioral task
behavioral1
Sample
0421b28912b47fde34fb2b392452c49981524553352fbddde0e0584ec52b21bf.exe
Resource
win10v2004-20240611-en
General
-
Target
0421b28912b47fde34fb2b392452c49981524553352fbddde0e0584ec52b21bf
-
Size
2.4MB
-
MD5
ea3e05eeb3b7ee4f1d64cb116e080348
-
SHA1
71e0152c02d114d9c6928aa50ba0e539e4dfb5b4
-
SHA256
0421b28912b47fde34fb2b392452c49981524553352fbddde0e0584ec52b21bf
-
SHA512
197a1adc8b4f22e1408644c3ab23d3a2a9fd2b435ec3d32f923841cf475c58b9f5c4e2b77decfb19fabb8a2f2173cec15db46afcc8ca6e46186a03059d11ebbb
-
SSDEEP
49152:S1tL8u45YfuWPJKg7/xUVzPmc73X3z1YmTGI583I0eOTahFGLiVhy3FrDP4:S1tL8b8X7/xUVzec7nhYmTGI4//iVsrE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0421b28912b47fde34fb2b392452c49981524553352fbddde0e0584ec52b21bf
Files
-
0421b28912b47fde34fb2b392452c49981524553352fbddde0e0584ec52b21bf.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE