? ���鼃����1���)X��6�t����;K���c���a� ��#Ż��tp�!/��Q>@⬶_�8��E�_�n�2 hYg�Ǩ���\X˕�ˬ��m9Υ�}�����%��^�������a]~��X�AO��eJ�;R ���;)z��exwG�1ixpq���!���)��L�L�s=�^<�nOݨ���濣�hQ�Ë$%'�N��AW@���u&��#dT�S�,N�]�A(.�[ ��̢:{|��kG� �f}e�8��B� Q����5�(���B��ϲ����+B�mh6�A��?З,�3��k�j%'����y��-\���N]&q��rl{ �- =�6�5$�����Զ��x�0�M}�y��j������ `���6A� 1���y�r���֟����� ��Hhz��E^1�T�96N���U������Q�[�GC�k�D���*��ޞt��w���g7���~�|��r���L�a���g���'��I\O|u��VO,�Ej� �����)��ˤ�ߞ��1�B����1~II"�H��x�A�g�7��<'�L��{+�к���.oa_��{A6�(�%sKcQҗqlh�K�k孶�xQ�mMI��S��ۡt�݆��x4�1����ME1�t+i �$��j���y�N��8�o���S���c362B��~.�6�V˒�)z5:��M��5��@>���/��,�V�V�.�hY�]�e�����gɄ{��L���<P�Qwٺ�F��[��`P�YIFl���M������9d}��N�3q�Ȅ^ ����O�Ջ��JS��AWJ�u�xڃ���!��v��x�m|��c�WX�PI�&M����L�&� �:;��{j@4��*�OK�±-��R�<����G`p[s�R˦�3�\�=BX�A&�܂�-�_G �����pwE�J�$�d��+�ˤ�R�Wj������ݜ7'�.HL�����FÁ�^�*��dڸN��&�F�}�� �+ͪ�*Fҍ8��M�غp%SH'��n :%(̂��(2e]h��e�6��^Mg0��c�_sL�Q�ᯈg�%CwR���|���ò�^�Cb��\��yn�����T~�)���;c���� ����K�����V�I^g�%C� �M���-ПI#,�}��`��%� 6�R,����NY�f �R��.� u@�˾�y�8M�������aZ$BT^����}����G����K`Q(�*�M������ZT���+�/oSuT��!O�g��t�1��]�8D�5X��xә2������[�>�Q,����Q���ձ���r�ǘ���=�;�Jq�{cf��f$�j[鸅~��5��m=�?��0 it��8/������h�Aȑ�z���m4oY%�㰧|ņ�R�=i��b|�Ә�V{i#�M��_�.)>�|y��Qf������%!����,��<�:B��:e��y��o��aM|3f�=����������Ϩv[R �&�dJ�7�F]�&H�Xw��m���9�9J?��s�b�}�J�u����c���9 E�~�|��\��s��/���8�5lžT�~�%�����b�u¬��]��b���� Ĭ�|�<bPN�r�r�BD��jFn��F�/��7ag�K4���Ës/MG��7������_ 4|h#2�$$��<?2��|��K���x��Ģ�ԗV����xCa%'���br�I����:���;��{ ��ۗ��\T��ic�2G��ZT?D����Xp��r��`9�;d���`{z�}*��@S8�t�s�A��FV-fɡ��6co�č6��{����G����礈ŰV���a#����ÞD�,/�ޭ�_;�I�TS�4Q{(��qk�����u#Y���;�:H���D%/�l>j�X���^�E��_���ΛIB�*���t��`ѹ�r@0h/��5z�0pW���D�r�E{l6�����KP)��E��/�G=/���ꀼ"T]%�.~~����5]����ha��Bbo�mE��A��d:��#��1��&U�?�Mx�#��q0��!1�{��WW2��1[4"�ߐlu�M)H��;Y�E��M��ZE`◤/��촜�i��QlZ�\4lz��*l�6H�yi&,�,o)��{���!�F:.�G��>��W0 )��Ζ�WЬ<���8�u�J��w�Y�v6?���s�8�*�~�)��F[�ϱ�G��A��b����T���T(�����"pG��M�_@W���W~�z� <�l4w�ecDů�[�2��S'F{h1�n�<���@ԙ~!���zx*wj���)��m��@��;���L��u-�Qn��[�hW��A-��E�:���,�u�Mc�I`�k���]�Z1�'��������o �}��e�K��&&�7�'o�L��-���&¼�R[���z�g�H~�G��{��%,�9�j���y"P3�Vo/����t���p���#`��{�f'Թ��`_�"ikG�~��`Ǎ� ����ה�ip�5FQau��y�֚��h�%����)��=�$�0l��çl�UZ����bl�;ػ��.gm�B�Fr�Ҵ����$���+we��cշv��,y���g&,�`���^�$�L镎?ouB,4��آe��?�(t����;8���W:���qk�w���?�!�Nh��y�$�l4i�3aR�4A�a"�����-��ɞ�p�#dM��f�(�Q���� B���9OK7��X}��N�[z��C���A^9��>��rE�t��QF@%�Q�c���E��0�b.������i������Cm�e82�MTI���ZXͤB;̗���H�^��x�y�$3E��ͨ"M��A��[$���⁺&�+{���mp��[����wr?�j������B��-��ȶTQh�I�� 9��m��<4��c4���7�_�8�hG�{ρ��E<�"/7W�5��KKՕ�w���^�9���jՔ�d�Tu8�����@�"&�1�tP㈭4��L!߷G�4�w!??���p=j�s�݀*r#�㼾�5XE��Q$�Q_\N�� �����+�¿̹WS��0����8��k3B٧1R�8��;.�H�#�%2q^͂����=벝}&
Static task
static1
Behavioral task
behavioral1
Sample
9be8bf8f01c3b2f8ae295f1fc9be5fe5e05596a80be603d0de23e9a6ddbb5a04.exe
Resource
win10v2004-20240704-en
General
-
Target
9be8bf8f01c3b2f8ae295f1fc9be5fe5e05596a80be603d0de23e9a6ddbb5a04
-
Size
2.4MB
-
MD5
20fe4b16d13a547a5d7f4dbf543b595a
-
SHA1
3c59aca1c693efb9923f04c312fdcd47388d24eb
-
SHA256
9be8bf8f01c3b2f8ae295f1fc9be5fe5e05596a80be603d0de23e9a6ddbb5a04
-
SHA512
c502ce3049137646c47898640197641696f2421a66aa67fe20df47b51c99e72db64f2c2a4945dafe16c6cb57871d42397b12759b4d779dbdf85225234296b77e
-
SSDEEP
49152:/rgHud6Pbzi1SlyXODTWdvT5un9ep9mwaCx6Iu7BBk:/uuwPHMSlyeWQw/a06ZB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9be8bf8f01c3b2f8ae295f1fc9be5fe5e05596a80be603d0de23e9a6ddbb5a04
Files
-
9be8bf8f01c3b2f8ae295f1fc9be5fe5e05596a80be603d0de23e9a6ddbb5a04.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE