l'>k �a�I��@15B�����-#.D��Ү�^)9Cː<��(�ֽ��oҁ9lO��['�%)丒SLez��#�..�J^�>�s���;I�鷻�v��c8D����~C`��7�Bj[�� 9�/Tc!�^�c{\Ɨ~9��Vޒ�SD�iل戴�k9*_ץC�_�/8i��n�B�N#����L�'����B�C)p�XZ��R���C�R���竳x��Š����-CN�}�����]L�j�m�|�.7������֯$�0�����̹�ZU���{��ٽ�}�Kh��XM��A�HXقe��7[�������u�T�����eU��M̤��n�����k=�y5��p��S��ӯm���;�̯���>�~ d�;{[�*�uHF��_��.u�4�l�+)(#k�n����9��e'�����H~�U�0K&���ȄRa�XT((}����Iy�[�(�u��˂e��{`<�Z�j�KV�0��䙸l��?J��0�:�=_��&�P��~[��Y��|1��W�3��9����hr�+>*Z�� �x�����i�eu:#?��87Z/O��M���+��d�$��� !���l'�i�����,S���sBn'�L\#@���B:c����V�WC���P5z��5��L�+&��������:<��Rl��a�bX@t�x�5W�ud �5*�_Ǖ>9�5l������zS��$�BP�������ĸ�uN�ք� �IU�� ����edg@ʑ��@.�\9sr��u��I�JO��v���q����IW��P�ХӔV��lt�xIo������k��5\T���F�M@�_��W��J`��� �u��h�� $浯gI����՛�# J��ɭA-Ntx1m�*�㛉�� [��`O^\ VM<�;^E)6��f=#�VDez��XSj̐��R,�?k��Qa4�kl��؈%���归�'6�<Aj��F��8xLV�V!F�[��jӱW�V� ��(�����Z���7�{÷�m��>����_� ����{*������8�'0���܄����D$2�K���ݪh�g�����$uy�CW��v,�jx"�Q�8�7?Ԝ�/�;tK�/PWO#�j��-� \[f�Z�D�a��t)����}�V2���N��1���ޟ�������5n���F��" |�$�OIr ���=�Z�+��)1�*D��E�X���V'�J���N������RhK"M�wٿ��Q`s��6xq��C\��! K�\r��wS������unO�! �?4V�<WYҠ`bwq F��^���+O�"���9����Qb�<sҷ9gɼ㠋�6,Dp�Kⓓ��S$��zD���w�W�;�@���U1�[,秴�b�-�)�Qin/��� :�v�}n�˺c6���5V�;W��R?��g�a.�KY�"��F�G,����S�����㖋�u�����IN1�'���"t$]�<ly���gx���P�e�q��|���V��c8�p����G��S0D'��|�*�jγ�%�T!�C��9p��;|�i2�|���1B<�U���y��<M�œ��X��$���g����X�P��" ςc`_Y1+�`�L���X��Bq�6���M)8hE�<�]�����N/�2��P����>��D�B���Lt�\J�v����.8m����, S��9�B�o?��Q ql����t�օ���nJ���2�Ŷ�%+��P����~Gl�6gZ�/�^c����_c��T�&3��d��yc;c�G#���h\L��^��V9�b�E���!���5�hDB"��f����y�����*ƪL��l��t)"��®%�p���ء�� � ��!����J��i�I�yo���l�߫��nx�G���ý�'�=��$ �/m �3�������8C���r���6�u�i�F���6GZED�O�N|�fDM��gB�ֹr�����[W���iʋNkp����h7��m�� �u��̺�[y@S�\�����4���I\$��}�ͦ�l}ۛ3����p��Փ���)�x8���c����Y��C~�z���l~{:\=`����"�zW�d.�y��N�#����a܈G\l��x��ȕ#�d�ܧ�ga��(��{1mF��f&��y�R ����r����k/�x8̓i�ɦ,��D�g*5��M�'�����&u��R��i���MD� �{g&�M ���M����S4j(El��xu��S8�<�p��\��穂��z���%([s��&��5���bQ���i�Dߦ���V�$9z*� `�c�/k�UqP�]p@��~r XNtS��w|_C��|���JԶ�X��Bo��s��,���Q��?M��^����C�t�D<�1U ���C'=qO+�(#�.J~7���: `�2�8�_7��#=�Rs�J�y���n~|k�]b!�1� ��X���'���]_Ґ��;��:���� �����]��j������Rw��@���9��-�bZ��C��g�N\�g9/��o����Y�@����$�):LN����������^v^*9����/o�\����<�)���SI0O�ln<��Иf�`)R����G�@Y*B-�â��+f?cIRH�iB�B����ͯ���^yW_�A3���C/}���E�8����YW;U,��Ƒ�9^�Rtj���l+�A������<��(ܜ{�����r��HP�#�&W�Ե��Jvƶ�E���ݗ|Cz�A�<�H~�/$3'�n�b��jX��U��� >̉��%���\�0���.>�,D��+<�dz��<a'�%X�>�-��4�����2�E��"nS� �(%����c|��2��r3�3�k�*��������vv[n9����f�Fy�4�¹�Ihۓ�G�ej4����Bxj�L�,�8�K�9&�*��l��p9�u�4)`vuΡ��?q���v�bL Sw\��(e�kf�쳸�e�=�n��d�(�{;��,ԃl�!<xpt|N'���W�oO������9s;�m��:C.����E��Roa��Q�9�TG�vV-2�>im.)q���AxQmƅ��H�x��U� ���=d8���C�E�M�AI���.�� [���CAXY,s��~�S�V��̀�"��v����}{/Z��@{TE�u��
Static task
static1
Behavioral task
behavioral1
Sample
179f7c98dab9536a149dbbeee298e9153c3a01fc94a2c48377118231246200ac.exe
Resource
win10v2004-20240704-en
General
-
Target
179f7c98dab9536a149dbbeee298e9153c3a01fc94a2c48377118231246200ac
-
Size
2.4MB
-
MD5
05be2cbe945ebb1f4db5c1fa09a75079
-
SHA1
bda32f10b41780e494da9733b74aaff5ddca342d
-
SHA256
179f7c98dab9536a149dbbeee298e9153c3a01fc94a2c48377118231246200ac
-
SHA512
20447216767e2010afc5d54ba6218c48f8aa6594de53e97ff0a9da180f2021c9916c1dddb059aabe2470454f945eedd1520b6c3f5ba5099b6d48fad9f400cacb
-
SSDEEP
49152:02RGSEB5Y6aSeEmGKvmDzGgvP6H3g0B8ChNd9KrjKZcMXiNSvNc5RWGln:06t6aSeE2+zG6C3nBbSr4jXJvW9l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 179f7c98dab9536a149dbbeee298e9153c3a01fc94a2c48377118231246200ac
Files
-
179f7c98dab9536a149dbbeee298e9153c3a01fc94a2c48377118231246200ac.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE