���łD7r ��I5�W�,�t\��\IV�Ţ����a:�G�l�*��d���JGn�Q��x㙫.���T1D\�A�P�S�:�1j_�3�z)±�#����[T0�q��d�Q�[]��+�5���Q�`��M���B�Vɶe�������p��5K3���S�0w�h<��W�(��zye��hO?�$0Q9�7y�����7�w�%�����v��F贁����j[u���odv����xnWó��K��f{���21���Fݫ����^A�ܽ�����{nʳ�WVf`ec'c㐘J������ 1�9�K�*�'W����C&H��o���X�J�SI���HS�PeN�/j�λ��N-�I�0� %���hce���N�F�-p"#�����%��0(6�V]���ם�����N2�<��߶��/�~��6PT Y-ȥ\�1r3d��� �b0H3]7�>�3����S�Vߺ|(`�ȅ�;n[�,ѿB�p͏_���Y��y7�@���hec �`��4����,�H�f& ���:�1�ߵV� ��m�_�5�N��7O��vmi,�<o�G�J������`}����,`�o)�W�C/'z��Oh�����!��1jnE��E<�\����!|"�ӻ��߈k ��[�5|�=^}C�T�?���R�&�v�#�~G4�f���C�Ìֵ-�����=u�a0}�B�if��*�(��$-�@���� I������J�\����c&��������>Ht{�����j�D d �s�C��"�_(��]���ɴ��B��{qz���M�]N6���S{���Φ��n��K�D�EN-E dZ�9��4�����˿��K���/��X�}�N�1����]a�My�\⻲�d��&�&_��dȇ)M���x����S��$*.���7�f�u��2B�����R���]�}B� ��8��z�8������?��=�3�&�@����1�~��쳉x�֔e��*F�ߨ��d�P���%����9d��r!:Z#m�#���9~�5oa�"YY8�~�<}�gT��sE ���)w���e�%]zv��{����+���g-�Rxy%��;�i(��3b'��ү4�/����@���v\���]��֩�z�x���������N��ư��NĎ�/g�@�{�m�!^�:��$��g`�z��bE?��qG`��_ ŴH��.a�Y�(]B/�;L����j���w�$���:Y.L�2ʡ{���nb`�������+{�m��!)w�-f ��iw�����32 "�y��OpĘ��� �lF��)�'�բ�+�+4q,O���hQ�� E��ξ����DEw,�2+�k�m�G�3O�L�#\�� esq�ϔ�tLc����Q�Ѳ��k*�h ���!9�ˡ��l~�Hg1Ϧ�507a;#+��!�a���;�+F� �5����Ϥ����6��`�vBd�{SD���=�!�zۚ�P�]',��>mD�HY3M1�O� p��(�s�N�&ݵ6G(P���Sr>Q�x9�3��7.n\�������i2s6 T�[�S?�j�N �#[ގ������A)�e���܃��Etsc��Hʼn�s�$�O���L��D��q�p��5\�����H#���,����Yf�v�����=k��xb����}{)�J�>�Ғ�,zI�ʺƶu��;�e����ƘD���- ��/�*�.��h.I���ĨM��$u�A-Hm�r�l�`����JDl'�*WX�����fV�����x�X\��N�1gv�]2��Uxy�����C�� �ݣ�]PS-Q�k5�$�=���C�>����Y����bHU�)�˺�<. ��qS��#�i��@��eq̦�I�V��Ǯ9;�"!��i�Ҩ2���1��h�� �b�������ar�\�<�Si���0h �������3�Iǭ�it�($�T@�ς�#V�ـ�_���2��ϱ?�<鸬���(���"� (t�uݱ�cFm �����5�k�`M�g��-�50 ��<4ڏ&i�kD�F���G�rk�p���a�s{͆@���A�k�>Χ���+�f�����A��b�L �0�S'��%}s�`(�_����N�Q�ጏ�]G>��{w��RM�@���E;N)�WwF�àSo�� ́S������a�v64Ф�A*�-�<��u/�����讽��p��yDꨄR��:���+J_��5Y�G#� /'�w������H%�5�G�Jȫ��=�w�d�2�ѩ�tT��6���bsTT!�T��I�D ���5��lvZӕ��o7q<ҡOT3�Ϥٰ?\˳��M��E��|�!h��/��\OR�����^�bn����������Ʀ�4CMS�Wk7�G�G[C���Z6"�����#����]ۆ� ��]��7f�h|������p^Y���%�T�z��ʙ�w���R�����p�`���R�yv�[�O��.���=`�!���|�35�H"����M��'Lo9)�^v�{(��2k������g�Ov0�[>=�,�Pv��'5�fpT�+�nB5����;*�����os���>�xR����5�z!�(�z� uD�q�Ef����vl!ޗT� 9�w�q�̪����{�{��j�.��ax��P�M��={�7�����=L�>6P$E'?I���t+O�J���6�E`��!��*hk��@�oO(q��rwf����|얶ntc[V�|��-m�*��y+�>!��7�m�T�KW�P)�/��q��K ��P!%� �v�dNm��O�E%z�*��*<�$nw9Lo�̋�,�3ҫ��%���r�d�����q-��ɴ��.Y�-K,�t��_T]���4�4M��n$S�7)*� ��K)=U�_2�� �g �۬B� :V�Z�v$B���v�W���ȣ���d Ls�sEP�9=�.��J�9�N Ȩ5�&qv�͚[效�4�H��Ё)��Y��z!8�lRzv���K�� ��@�%>?��������G}<���3�� /�3��W�vɪ�Ia�.\��*w�j�[����@��=�/������݆:��-��qń42����@pa�[>�����e�S�'� nt����_��l��v����W�u�ze���f�M�h��߷�0~U���Č��T"yy��V�~ئ9m��BJ���l�a�a�#߿���r�&�e����U�@��Q����'s������W��읗֣��.� ��%��:p���*_���R��d��p�K'lI�|k���d�s{�����Zd���I�$���G�"���ʤyPym2�8�R�ދ�͆�n%�[~K�#Ĺ�?1?�~����j����m�-"t�����%@7�����!1�(�Ď�{���[�}�d�d&B�خ�4�(;�%����iБ�?��� �T��*(���+��`FƝK������j��qt�1w�J����S��8�����ɭ�ixU��C�8�`�H�
Static task
static1
Behavioral task
behavioral1
Sample
4f8c4c304d73e6e2d3d11708c57b158e648bd79132f0a973520dc14f9e3e2e01.exe
Resource
win10v2004-20240709-en
General
-
Target
4f8c4c304d73e6e2d3d11708c57b158e648bd79132f0a973520dc14f9e3e2e01
-
Size
2.4MB
-
MD5
7eac5517949c3ba823c0d05f296bd953
-
SHA1
89d79b84addb51db2bdfeb90c7780dda23fabd2d
-
SHA256
4f8c4c304d73e6e2d3d11708c57b158e648bd79132f0a973520dc14f9e3e2e01
-
SHA512
d7b189e5b24e7c68d57eb9c42b71233463d80b046a8d6b85e40391f477db5fb09348a1a1c0a78ce93320601a238972220dd04ed41b8fa84de69feec575c9ab89
-
SSDEEP
49152:81s8BuadFFjSnGgQWYec225D4JnoSIOXEUMF9+wKm1fMkK:2BP9SnGrfeGh+onOXEdf6m1Ek
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f8c4c304d73e6e2d3d11708c57b158e648bd79132f0a973520dc14f9e3e2e01
Files
-
4f8c4c304d73e6e2d3d11708c57b158e648bd79132f0a973520dc14f9e3e2e01.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE