�CM��i��v���"���^rq��j�����c�|��X��~`�س��j�˟�+(�"'�>���a��Z�YAͯ�v����_���9�,�:)�.=�l��[����#r��ԉx&!����#V����k�ח,�v|$㶞7Ƞ��l{�[����r�k�Aw)��t���+ø�K����2�:��`^����?�6'��*�h���hG8����7ﻃ���*���IB���|�|���G^[[B�\����_gg]j��=��I��]���d)����������_N�]q51>��5�9,�4e�ʜr'QUhJ7���tI�����f�r��0�!Xc�0J�V�B<�GnU�|�I��ezl�b�M�f���7f����z�9� �@��"������ ��0�j�y�{��0��yAXdŌ��7s\��� N��L���P�� bqD}��N��h?Z��}��jMz`��B+a������N�K^�劳FˑB��0l��H\hƳ@���q5�@� ~슁��6�Ƕ�r:#�� u:m!�gqP@�4�w�q����s� ���:�vr����E��;������V�?6FR�h(&ܵ\"�F otc�f:'c�W���"��eFѣ ,�<�����^b�M�����`�A����"�Y��ߌz2k+�w����Ò�f���gc9����j����f�"�Oמ�:|�l��# ��c�Q� L��%P�i�?�Y����?��k��������/�Ҕ�! ����1!����F�M2�ߛco�<��8�v�溦�C�$�ˋ�ůW6��x��+�븕����T��<���xȗ��U�A��!�3���0��fe����݃6ݾ�K�`��J��m.4j^`< �|��_q�j�*�:��A�_�j�K����Ba�*91��F�����J��q*����x�qb8@c���ZP �ʗ"���^y�ȉc'a�'��$T�K�\l b���QJ��=�y*�%n�<Ċ�tZ��Ѽ���b4�g�α�mu�|�J^z�ǟ\��I�����C�8���U/(�S��?�K�E*��(k'! ^9FW�L�L3��+�C@Br��\�ٗ_�|��2���^R�v�n�Z��q~b��(7�_c��B�9B���S^}�`���OZI^�4�����Lj��D���U�c��ut�����a�Û�k.��̣"�� �>-�X��xJ�! )J�e��a���� 5���)�����e(��F�9K�/S� �#���g��T�1E�������]��q�pl&�,�V�Mu�{��������v%�y�4v���K��dK��.P �+����Q�}z�J��Jĵ:�ѫ��)�ǭ,w ��أt{@� �H�2���.���3FP�^����q�]�.�����o����E���^�.F�隢�s�V�v�����\5�����yp�ਊs��ʖy[�D�N��G���)�.����>� ��I�D�p��[�$��2��Ru��v^��J�t��f��6#CM�ڲs@.�R���$Ð��2�y*.��� �D�7ʡsP�\�dS��@��\| *Sݭ�7�r��a9���������?������ά�ϛj�[s��Yt\,��R=EJ�0L�0�����(�Ã��s�dGg犏�Z@ri�W�;�9~V�:�F�GIvcw�wYd�DE��� ��%� �WY�)��b�n���8�N�P����{�c����nvL���˲�rAٴ+�i��l�gE���#H�����ty�䈒p�.*ʀy��&:��>���g]Y��XZ�+�C������g�p�_�����/�&{C ���E�����tB~Jh�ӷO��+`�B?�jh�{%ix]��y����̿�x��ʺ��5:��z�#F�t�c-ŋӟ۸�odf6�G)[o��`o�5?o�7 uA?.�7$�Hk1<� 狥��C@�(̫��_��a�&��'��[ ͊����e v��9��jvʘ��~�����"]vYVc�J�h�� b��n��J�4#R���=���� ��!R�n� � Ӗ@��~��'�� P�.�����GbyH��Ju�s+�k?\��0o�ɞ��~-�ٰ^�T��?�g�����/���r��m`6��f�?�1�5���%�#��@S_̫���إ�HuC��d�)rJ(� 4�Aʒ)���P�RV 9��z����c5��*z�5-��8��N�[�<�!]��1��${�Rb£��`߫a��]�T�;��w�T��\8���SC�~�e��/��̀C~~v'�S�X��S&���q��/ ��m*�¦�p#�ג�ju?u��������>{Q[��ဢ-��8ϱ�G�����*G�^\���~p ,�<mLl��V,�I��e���v�&q�t��I7 TG�Q�xҀB�����yOQ:ׁ�UI��E�$�y-`.da@�B�E�L���;���h��+����`(�%IK�vh�PRx>��Ñ�v�+t��txn�( �z��6 ���!84ޤ�Y����sS<��DIJ�J��`_��G,�%�f���u�\0*5� L�Ep��!<��}��d?Wɮ�`��L�d%oJIE���* 9jh�������3�����)c� ����W��r���}��m�j�e*k�SN���^�9e`��U�ab�}���B_���3�����ް˗g4jO�c���o��R��F�(��닉���?���xY�f�+�:�%��@4NӸ�ƿNOGx��?|2>��G�r�xT;�����:�p�W7u��&\)���@�?c��i�O�������,z�G�p��ۥ}��|�^��GF���}%��P4�)��R/?R�b��4�)��G��6�{�{�2A��v��F�����m���Io���lD�]�#���r:��>(\�KЙ��罂�n ���{u�0�j�t$�����[m�avz�ڌ�^���[U���v �%�KG��tO�m���Ǘ}|=B�W� �ы��B��2pX%��&g��[۵5��w�~��GyJ /��.Wq0���u����� {s� ���'��]|N��EŒ��!Il��2<@�C��>�|X�+��>N�A�����*���#�K�I�sR�������7|o~����Y�YTDZ"��9;�.ٽȶ�S�tSߧ4��YvW�������������m��T0� '���"p�K��O��7�hT��eT/U��x?���� �2���j�낔Te�[=���:�?S�g4�K}Yhf��/փ��VW���Q){y����ߨ�3�J��]ވ��!U��x�|��G�_��(�d�2��xԔ
Static task
static1
Behavioral task
behavioral1
Sample
2eedec16ce007353f3356588b4fc389fca14a26301be0782db069dab4ef8162f.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2eedec16ce007353f3356588b4fc389fca14a26301be0782db069dab4ef8162f.exe
Resource
win10v2004-20240709-en
General
-
Target
2eedec16ce007353f3356588b4fc389fca14a26301be0782db069dab4ef8162f
-
Size
4.9MB
-
MD5
44b23559592888d2a1647da3d98a7fb5
-
SHA1
cb8e631667a386b40c734571b3cbf723b179d985
-
SHA256
2eedec16ce007353f3356588b4fc389fca14a26301be0782db069dab4ef8162f
-
SHA512
0cbc8d8593180baff4b42fb4fac24310bf5fca5da48afdd58a7e9fea8e2f1b3e29890f7c8797f2c44a7ee07f8d953642939132b859a730452e02e2a80216e80f
-
SSDEEP
49152:C/A911b0PiEF94uyc3ZZOHcJW/d9hmtR5v4zI5gp41pFAGhUqicFIRRR3TFU8cib:C/u1APiEwi3uJ/zAZVdhU8ITLGn4G5A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2eedec16ce007353f3356588b4fc389fca14a26301be0782db069dab4ef8162f
Files
-
2eedec16ce007353f3356588b4fc389fca14a26301be0782db069dab4ef8162f.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 561KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 156KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 728KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 721KB - Virtual size: 724KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 297KB - Virtual size: 12.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE