��3u@�2��Kc��&ژ��hl�6]���6���#f|j3�NP`m�q6�S��艳5gKZ|LoÔ�DvK�_�Y0�0cU��\x�u��\�c��Y/��|͟��(�)��t��T���������`KӳY� ���ڋ�{Z��1�3����%�|W�$�m>e��� د[��������[M"�c�!���{f�S'��-�^�����-�/*J�����^�vf�sP���̏����ex����视wb,����b[�����j���_7�s�W�m����WR�h�6Ե���A.")n.�ha5E�=�(Vg�����%F�L��Ӊg�V�B������Y�Ǝ�f���٢l$�=$vC�0�d�[c���`������i�e����`�eMgU?~����6$�`�d���p�����M�gY^����2L�&��n6g&��!�n�����,��#�sNz}��>���ǧ����X�D����h�,��~�v�w7�J�(��Q���]/%sL�̙H61�q�]�=8q��F�,$�a��|�0�e�V<̾�GtgL�X�f�|w���g4��ګ���z�[��2�7��������-�8��T�J�n�%�uY�pv�)$rG+�0-F�, [�I�4Zws�@��(QA�Ce*)R^��}�Q����PN0!;�-#$O�ڰ�sݼ�(f��[�&�>����ʖ㏮e��� �b`~�h���Z�V�]Yq{#�-�Q�o?]A�lC݃�!He���5��8/����J���x���Y�)��&��$D��Vm�.��bH((p�Jzj"_�a�k�S6\.:ll ��9#V'�_�c�z��aF60G�Ƶ+Ľ�0�p�d�&����h���SB��/��(�rQ&Y%�@���ڤ[���i�l�)�5��3��{xB�4ǜ�bm�$��s��<V���Q]�����c�m�1�f���i�V��O�T�6j������/�ekJ�ɵܽ�g�ڨ5���ԃv���/s�K)JR�:4� �㎇��y`�煫�q~������<�ycK+y�,�( BL�����M� �ֽ�*ަ��w��#i�[�0fU���SFcp40��G1�HZ�ّ��*��<�8���!�6%���3ү_H8�Z|����c�6�b��_ď����+F�{)i{�hme����\#��|E�+}���á�n�~��˖���_�̅�[���� ���a��3̲������X��Z�)����8r2�N,;�2�hG<I_}���2�;B�S�Y��@w�� ��O .�R�E��fE���߱�5���|E�ͰG��bp�X��>���2L�R�{��>��a�nl�e$�Ӫ#������p�.]��H-ۜ(�es��BtB�7Ž�Èb�fu�� � xK� @�0 ':6c-�ݩ����5�s�7�+�a�=J}Q��ٸ,Y�!�X�嚔�^y�8�����Y��x��no�� 4�VRhn;B 4OI ѹX��x�hb���<K�6x�� 50�n�t�Ā1r�\1��Y��CyNg.�R����L�{��#h�ڣ���� `�!���s G0)�!�R���Ę*��A��>���w�@����*\��$�9�*n��~GԒS� ��,���X�J�8��?��͌����Ђ���$?���(G ��+��ڻ4�*������������P��.�|D�%ް"�"}|M��Ds���)�C>^z��SI����]�3�!��F$�ۀ_��P�vC������tgr�Y"2-�ԉm�r�Ԓ%6m��67Oję��7�T�b��ѧk�*�Nr���l��%f@)�@٦�&����e/��-o����hW�E��h�H[-v�ᒩfXjoJ�_8k�����!�zKz��pa��,-0ꓷ��Zd���a�4j��yR��he��[���kPM �+�S��.�L=��ug9A�1���f��יa�bpr�A�9�!|xX�u����z�V�$�E����*1L��a]�����f�I��7HB���@z�d���f6�CC�6h'u���3sv��hE�*�b�]�2�.5ܛꋠ���jW�u�eoG���jM��Q��(�!��WLj1d�U�A���o__�8�����{�z����M&[I��4<C��X��8�P8�����G��E�O�%��C9��y��3�5�9\���Q&<�OG��u?pГ�[�hUr�CG�Qh��&����6HLJ ���� ���Trh��_+acZ�驾�i�"���ϲA���m������ٝ��V=���ȃ,����(nq)z���~1%KQ-ύUdԯ)�W%'��Yugt%W��}����J�K Z\x�\�>A=���{�,�T���i�@�çtp��J��!E��6�]���G�í�m�����9Fk��K�k�_�-�:L���+ D�A��j��CJ�V�% D֘L=y@�a����eOk�iF�\x>S�'��̊�ǟ���ˁ[?�$d ��P����r@����NҪuީ� {�M8��yx�ճw�e=<<1s�'x�3�Vcs�I�Q�|�E�a$% ��4��(ٖUr�b6"Y�A��T�\B�������u��:$'=��.��QR�g�_�-F��l�hSSC��.s����9Ο��&�����ǠQ�����?������U�=����&�<Bu��\b�� 28��8r�,��k��^�k���Wz��sY)��g���|�yr�6h�`���ž3�/�n H�9�'��1F�O!�ġ�gk#���9��=̻4��y���@`�� �|ê�����z;�w(��=�ߢFt��};Z]sy�=��%ϻ�����|������g�ر��ˣ��C�����zB�¡��R|�����r�/6� J,z��)��Y�V���)��6��O��3�62�Qѥ�Ư�9��^�<a� OQ�ǘ�~w�K,Z�������F��vD��!�����b��:��|��p��'}LH��˷$���IhLB��fU�0���2���ǂ�������*-fO�v�
Static task
static1
Behavioral task
behavioral1
Sample
1d8713d69a0a06ee85e49ae0eda38fb85fcef0103e30523d99733a761760d909.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1d8713d69a0a06ee85e49ae0eda38fb85fcef0103e30523d99733a761760d909.exe
Resource
win10v2004-20240508-en
General
-
Target
1d8713d69a0a06ee85e49ae0eda38fb85fcef0103e30523d99733a761760d909
-
Size
2.2MB
-
MD5
28231a01eb9c763a2d5f17884b666d58
-
SHA1
0de4c9c68988f7f30518c05707d2f6f58a6b696c
-
SHA256
1d8713d69a0a06ee85e49ae0eda38fb85fcef0103e30523d99733a761760d909
-
SHA512
2696c152ff143c6eadd8ce4cd6a1b44c64709645077155059f8aa060a20573894032137b63ee35641fd77200fb2a3d5c66a9346682346e752d130c3563590262
-
SSDEEP
49152:nbr8wOWlG5edTbZVbxwiB9lV40AxLtLBicmC:fzAITbzbuklVPADmC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d8713d69a0a06ee85e49ae0eda38fb85fcef0103e30523d99733a761760d909
Files
-
1d8713d69a0a06ee85e49ae0eda38fb85fcef0103e30523d99733a761760d909.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 504KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 124KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 40KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 560KB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE