��A��(�@��ڞ"�ḑ*��}-��D���g@_Df\sl4Cg2;�:i�+e������"s�U�9��c��D��5T!b��ƀG5�q�`������}�HX�a9��� �������[�9� ���X�{V4��T���C�KKZ�n�P�9��DC����鋠���ez�w��0����<_v��������t݁+�ҍ��aS=�N�'C�=�fv��,�c�E����'e�c�72q�7V��A<�dy��fq���^�l�����A��7Ћb0�q v��6�� �A2 y+�"fF�[ ���%S?�l��=��P��A�z����[ɥ��4���Â�,%ߔT�����~<�����eE��ӴV��2�� F�61�Tu�8��@���%�6�af�_6LS4DT_��f<����Ο�<�Y[�]�5�yf����*x��r:�7�o�2;�u�*^��F�r���y�u� ��{��t[e�h��'X5�Z��@w��N�[���o����mN��n�S������2��}���؆ :qV�����A����`�XF���}�� ��q��c:OWe�rھ�q��C�,O� ���K� J���f�D:�ͅ� ��Ƒ�X�����Q�Md�oۑ}�D��+�+�֜���w׃��`�<^G��a�z -�������q�����;Г��v�����.�o��]ݏ!���ɶf�c�%�\�?3r��F����I6����������E�:�@Y�,�/����Vٶ����@7�YYH��ս �ͱ���A �A��R"2���Zs,����Y�,$��\� �gO�up��GL��hv��A�=��#�0I5fe���p�V����Z���N�"�O!t���tA�^���X<ou �9-��s\c摯�Z�bo����V�]����ӝ=�m_>Qt%�Io-cC5�V����,"PsVސ� �4}�O�<��>pBEt��+hTׁ� ɂ$R���a ܸ��Ʀ�LΩҡM��r�d�hy?j�E�a�sy�:^�Y�#O�M�˂Y`MJG_-�W�n���XP{�t�Cߵm�|D\b�¦gyekks)\`ԸȄ��QL�,Θ��ehQ ��J��0���S�ax����q�p?�����++z{{���G@�k!�����A*�S�?�(�B���O "���L�1��)ӽE+��YGMf����ni֭<J�������-��OH��sm=��`��8��GZDh�������)i0ڕ������/�9�A9�qk4]%�g젲�|E�&AX[�������AORxRD�~��\�ƈ"z� ^��#�}���U�Џ�����D�iv =��Xn�4�N����?$s&#�k��M_"�*fP��M&UC����3��c uQv��#�C��b����w�O|HZ/[kfpX�8xB$T�[ ��c����7�|L �3�y��R6a�p�Ʌ�uA�%�8iiu�F����TO_��D"�3��Q����/�6n��Zm����B�nu��C�aH�;��֟��.4J��A9ֽ�s���x7v�-F̫���$�#1�J8t�S�a[Q�ȵd: n�G�a/�=���}J(�.�!5�j�I~�&�����u�31������V�ȹZ}��Uv���DT��:���P��cʃ>v�C��^.VZ�0�@'��]+]��]l��=I5JE�锓A]�:�Mw���������$XwO4>ͦ}�{�N��^����YwQ��*Q ޥ�7>���N�ض��S8�~="Wl��v���â�8 9YE�����@#��q,6|폘^�_ӵ�bK�Mi� ���W�U폼�������Fj`i�����+�}�é�V 2*��<b�7ۗ�ö+˲�C���,2��,�k"��1�ʦ��mdEXU^ �~��i���V<"*-n�`( .l����W�ggv�u��� ə��o�.��zbs!5e4:L�}��@e0�6��� U�%��L�:�-�C'{����h�̛��:O@��N[��:A0>=:u�AgA��iߊi|��/ ���D�F��T�<t�Y���2�^/ٹ�?!��э����=����mr"���#�C�+V_��7z��0��K:�Rt&�m�h����j�X\`wfH� �d�k����| ��m�*�~���v�NMT���z���0��h.�.b��_��EF���tm����k�ϬP�v>��e�^��@�P����?B�������/0��;&���v��b`Nk�'�{�[�.�3F�}�a�&;.c�^�N�с����� ���u�ʊ�cR��L?�!s;���UmB�ʉ#��sd����68,�pܥb�<��jV2Z����+wy��JF�����,��zǁS��mW�m0JV�����r�.��\�әq��\��DV_���F ��f�J�WDk�ײ�m2�a�CA`�q�w�˥e7��_جo�� ��%(F?�T��ҹ\��jЬHFw��5�b��.�"��t��MFj��A*�u�p#D>�ǹ��kc1�Nb`�! [����r�~��������2��b-= ���!�m��f�q��`����\ʯ����l�X�l\bd"�����/��"% �ȺS�[�(ܒ+T��x��ͬvk�|�nJ/����̟������g'���!�`�70R�����C�RR^�Fcym�a�Q��g�]��֥c! 6��1��#<��� �����QU�`a���B��5�����Z<ρyAc?x�����C�z��X��r H�9�\&�EB��̊������T��O�t�m��^�ލҋ���$���1��o��_�3����$�T�%ߗ�s���m���$8b!,ğ�d:Ռ�^�҉ͧĀ���}fs�� ;�*��/���B����`�[ly����>������Wc-�A)�rk7����|�P�"P50��D��vLTle������_�U_IMZ�JK��~�hk�Hؓ��� ��� �+����$1�� 4U�����jy^Eey,`�<�us������ĩV�֖���|���C��M��$KuT� �H�d��،�#ٚ����紪 ����g�fY��~�/$X[ڸ�~) ��g��w��H�'���`���9�H_�����/.��/'��s:/���h��AXֺ�p�����+\Nd�-HW&���B�`l��C�=����O�(I)�Ɨ��a$z��P�R��&�2�a �㹤8�N������ھ��=���~��y8yԡ�1�A�P6M��}�q�����:��ĭ�2h��N��rՁ�-Cɺy�T�'hWH�9���N9XH7� �v6n}~ O�q����8�MJ1�h���{�@uu-�1���+��`|!E����Y�+���� WY� �����"�O�Ϟ�3����Gl�^��(o��vJ W�6I����r�k���.JF(wOf~����ȷ���O��ug�<� ��U�w2C���h�� ��c"����뿩� iԨs���G�og�g�z_��6��wV�)�����4��}u��Q��#n��d@��ܨȚ����j�7>�Q΄�%FX ��VC��5ܚ�@&c���y�_��<���&����>�>vY�[Q�hu+i��s��CX9��=[��v�S�#Bb���SL�~��5̭̊kQ7�y�Y��:�B�Gni�+�������ߕ,�3����V/zQ�s��A���5W�qR�@��mm�K�=�I˨�K��V�E4 v
Static task
static1
Behavioral task
behavioral1
Sample
3781240686f18f44cfb8397dfe462c164a00f0c4b08177b468129bc8c41a1f22.exe
Resource
win10v2004-20240704-en
General
-
Target
3781240686f18f44cfb8397dfe462c164a00f0c4b08177b468129bc8c41a1f22
-
Size
2.4MB
-
MD5
372c9047c2f9bc0241a64b506054fa0a
-
SHA1
a3dca1dc8b61381c1fca9f6951352aa5f6a2403f
-
SHA256
3781240686f18f44cfb8397dfe462c164a00f0c4b08177b468129bc8c41a1f22
-
SHA512
1ddc4dcc4e77ec0c147afe1606f50a989ae8cc8ecae67cc5fb122cf985b2aec84c4968fc2075ffeb0f666d1ca0669acef855e8e647e681a31dd1d5d70a0f13fa
-
SSDEEP
49152:vUlvV1PH2uIE3Hnj3d6Swz5+8gPNwvHTnUzHuC/yTkRT2VxLvgs:cp3P2xET3d6SwFUwvzCzTELYs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3781240686f18f44cfb8397dfe462c164a00f0c4b08177b468129bc8c41a1f22
Files
-
3781240686f18f44cfb8397dfe462c164a00f0c4b08177b468129bc8c41a1f22.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE