�bcq{�����6Tc�`�!�e)��j����9ٶ!���Y�"��osa7�آ~D���x4u�������d;K�ǎ��SU�H��>���|���Z��m�K1��g_�˫S�*�&g�G-��#��I�E/�z��d�~��� ����n�Q%�"^�uhF=�m�FG��9�tIs��;�t��6��՟V�J%�⒅�M����]��.���*��Ӭ��Z��_�Ǩ �i�sL�6�CIVCHv���|(��1�O6��O�Ě<����SB`�aGh����MdW�ڿ?�iưF��d�gv"V톚�����f�>��=��%�6镕rCy7�yZ�A�թr�&����X��|����p�@�.zq�DA넙)�f��y��� m7Hʋ竌Y���/C�y\��ۂ��j/�Eا�'��$�s4�;�`��wNDu�%3��W��W�WBN�6�E%���_�w��t�?у�b�E��7�=�����0�a�%ZfU�W �$��O/�Ze�>R9�'F-��3X�L����k�< )%+H���X��H;B�s�O#Jtڮ��'��w��B۹t�U��2��Y�HZ�N~��>�Ѧ\���6�c"X��qn�9y�xG2����P���^��j�!����m�=$�e�c�@)�f#Q���rF��� ���?4�gX�J_; Vш���q�Dp�孟�V�<�F�R���������4��6����F mx �Fev�u�*O)��������`��~&I8:l����`�zCG�oXӥ��R��5�>�{h�P��v��ԗ&��%��\ȓC�����d��4�y����o#1����V�dt��'҇��~�㥭 &U%��h�/��St�c��Q��k>7�"����� �8,t�vŖj�w'�CL�D��!�|�҈�(13�� ١���7�p�,L����<C�$!����:J����VBa�c"6Q`f���0�lT���#�EZˏ&��}s'4���Gra#� ��S}b����3��K��$���x.���~��Ʉ���yReSz�l���K,�e�0��G�m�� �ID0�n�?t����G�_W��F��vN��0�vb1�S.c���u��=�zg2@�5�|�1$���E��aȸ �3��{�R���n��3<�7�f� ~�$�Y�ſ�V�3�)���a��O}�Շ��ћ`�&�T�sM�u�tr��㿧���`��|�7T���2؋ ����?ߢ�r� �,*iz)���כ�}c�E�Y�R���o���1Y_/ ���s����S`f��dx ��6� �>Cn3����}92��~+�fk� �/P1�L�k���z>���ڗ���o��-�u`5'��g�E�*b��z|��̐���A�CԦ d�/A����%VW�;2��9j ��]�ǷG�����3 ! |+>��Ć�G�C�<���(�����"cK�������g�Ԑ�e�M�h�6jq25`����s��E��I�����L9)mu뽑�h�bab��&@ub?<�5 �:#��H+� ��t���1'��W��"&�����i]0�K���܄��Qn@�����t���v�E�������]������E�b�KL����6a�l����g�Q!����* n[++��G���} )��UK�I��_�/�� �d���4�X����B��n���}@��`�h�FX{����6�+�j �jIwИd:8��T��-z<�}��Q:C>B����U#`�NN�H�f��{�oI�FE�����r�3�Q 媵��Ò��)�T�#fDH$~�X�MQ��+����[��驣#������V�n�W��6Y��IE�h�*�j��S���y1�.%�% ��D��x���ʐ��s����}1�*������8D����H�k'��%q� �ZI��KŮ��Լi�E��A�YbS��� v���@��T�ʂ*@s\�21W\�K���Ue�?E%VLQZE�=>l�~��Vޙ��v�0"�-��34J�G�|:�RҒ8Y�:]A���]I�����}��`��x��WPs��s_B�(��1k�U-O���S���䭲��M+����.oO�3e�8imѭK~�"&�������ϩ��y����K�{�����������'�or��ՙ����+�g��ޞإ���<�@ ��U�Ix��&;��ζ�4i��=]�L�_ 4��_G����A��â�C�v���K���ܸ�����Ň�c�:�i4���[���\pP���B���Ō���~<�ʀ���+rit��z�\NA�AC��t���;j#���'��F����B�������,YE�n��^a�xd�^gx�"�2���D�K5����9����H*V Խ���ypc>�+0�L+�`*��!LpkW���Ep ��[ �~��J�o��g�zU�Ŧ`ɿ������=�M5>��i��3�����lY��}�"^�! s��)zOO&_�9���Vy^槥#a���0�PQc��X�y�;�ZO�U`e�i?G^�e��H'�}]�\]%8�����_?� �[�,^�u�9� ��W���hD6�y;ǹ'�F<��^0ccOW瑸��z��YJ�@Oy1P�M�P�)� +��SfM����Jq\���]�[ʼ�'~�-�8�69�M��6�UmF�R�>����� �4���9Z�k=W���є���8=�;���$�c�8�J�EG�Q�6/�Dz��z�8�:q8�u���� E �!~�Qa�"���6÷���L�%��A�9�9W��kM���g���E�ą�*8�vހ�17Ȩ{[M��o)̪�3����c`;��%]��4S$v�f~�9��lm07�K��ď�Ʀ*�ڎ��/�O���,��#����PUj*��Ƽo���d���o�gB��l��o����=Ϟ�T�����o�AMA\i/�"~���s�׳˓��`�)c���9��G�U&7��h�#H��\���y�ߵ�D��|�E����}���o�ĎT��&35���
Static task
static1
Behavioral task
behavioral1
Sample
9f5b516487cc6c3218efb06cb2ebcc72ce724dc64aa84d217464af873c048b7a.exe
Resource
win10v2004-20240704-en
General
-
Target
9f5b516487cc6c3218efb06cb2ebcc72ce724dc64aa84d217464af873c048b7a
-
Size
2.4MB
-
MD5
9c923d102f7688ef4e407b893fe8d448
-
SHA1
6c994bad35a92e0b9154684ebb8e73d9684b2e61
-
SHA256
9f5b516487cc6c3218efb06cb2ebcc72ce724dc64aa84d217464af873c048b7a
-
SHA512
3e6738d1665255515f38b0500daf7bb1b261294afef96107bf5d5ebc33a4571583262eb4b60ad92751ef348b195061510b876389d760ccd83d71c49d6ba828ac
-
SSDEEP
49152:dc/mElxBTP/0/61ZoXBVkeqDCltseXUKiOUqhpNWLQ9OYwQEUs:LiL0eGAequ4KVJhpEWO5QRs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9f5b516487cc6c3218efb06cb2ebcc72ce724dc64aa84d217464af873c048b7a
Files
-
9f5b516487cc6c3218efb06cb2ebcc72ce724dc64aa84d217464af873c048b7a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE