[_�e��}��b]���V-�Q������ B<��S�H��y�@��*\��j���1m��`��ED�*8����Z���XH��ki��9�spz������(s���v[�2����Z�Y��+SR���Zs�懑��@ꓧd=� �y7���$�}� �R%o�!+D�8n���U���/��(�p��� �I ���|�N�Ý&}~�>dr>8��a9f��wnʔ,��:��p�4�!y9�|f�n�5�ȗÃ�!�j���%� [��>��PL�H݀*L[BV��Xs�g��ӥ�Z�}%��N�jQB��ѷ8Y��-�Yt��o�KgUm�j�T�78�]2%��:k����Հ��,�Qq]OnͿ?��� �EJ���lq".�ؓ?:��9Ah\E�vx�.u(c���i�N���<���-k �K^�������o���^�;D�H}�c?��!���旴R����c�"��^�W����������U�m���_t�ؙ�g�o��Л���Q��&.��EGsw�q��GτU�?P��^6�H��ޑ����iU��F�����'�iЯ�r�q�.�O�]��|\������d[+��J� ?~ �'�w����c�)�0�n��WӬ��Y���m�K� ?'� _7u�R.�<�+�En���л��$f���?�)�B�����|����s-8�'�b�U1`[;&�g�;�'1���S4d�?/�y���=T���g�[�]MXDpr �3�v�v�e{8��`�����^<x��ܭЪ:�)��Q{v��L%�`�`/�6��I��*)��Jك6t��k��=liد7Bqk��iSl����� 1$bJ�_h��G�ۀ-["�u�Bl/����ٶ� k���&���d�Tă�����x��D ;C� ����8ZsѰ�����SlG������ S���~d�sݞ;�w��?�2���"K�_�aD!͚���A`� d=ߌӨ�����a ] ma�y���C$\C�ZCt���?En.�蹶>`_�9�P�������Ŋ��є��eT!���/��?$_���"۹w�������Upe�x\L�@&�n}u槨A��b��荮���o����\��fM�wt)��������7%��}k���Q���yH��Tz{d��})�����~���Ll�����o�3 �e+[6z�B�v���N瓩l�*;���`\d�� �!��.���-�&�C�ٷ�z��h���Ř�_�j7���A����E�3����d�vE�&���xy��j��6:w�d'��?Ab.��{�c�eB���E�>D�.:ڴ���ڢ0 iv�)e'x�FgP�!f�>�q���_�"���3?���v�~��*\��o��"1}��78= �U�YEy��S|x�zQD���n�@��~��A���y0��`+t/�Ԟ�� �n�;���� e��1��<�j�ʔu��ᮭ��8D�*j GTM�� a|�FRg�~���ur��T&m&P��q�_��fR>�\b�O$,�tK�v2G����j ���HH2��8�u[�-�(���62TtK��W|�wߤ������%Ek�G��el��4r��,�~xc��L_aU������ ��8�\#�-�GKe��Ϋ�g��hrN�-�_:f�1�'�W.A:k����0CA���|D�s8�|� ��'*u�H�B8e�Ĝ�: i.jE坚I�&<8����=�{SۻA����aG(��_g'�\O[�>̻RG��*h�}(L>� j7�!L*kԇ�9��F�D?u�u}�����)��Z+fJ�\����h��X~����Eg���Rդq����X�fv��/�ȳ�A!Ʈ�辵�/�Yg���m�c�9����Ze���Ϭ�i0b2�"��_G�ڐ���Rڣ����;W�1A9�+2C�,���F���K s�{^�Ѣf1��ɓp.��\��`H�[��T&�=q��e������d��;einI��ǫ�Y�E����� T�uʯjIe����r�/�)I��"��҂r�@����4��wm�K��sx��:����e�р�(9�s�\r����]c%I0�8(:BXN������_�Zʵ�b&�������W����՞�mD�������xC� ;vr�耚rAZ��S`�1.ԊuM�o�{Y�>���5 ʪtU����$jN�AM��e%��_�+�A#pC~$�g���K0���ی�"�5�ʪ��ka���㾆B������> � Wg���7��u�-�5�z����uQG;Z���'U��ŠeXY*�d[ ��?�y%�0�X;��j���1���Y�p�`qF�~��O���շ zʏ��:[��P ���� 푆q�A�v����aL���f����)8&O��E�g=a�FMR��:��Θ:��+�N��|���������t�D{.��2�Ay��s�ǣp�w�8H��8�����Hr_C�"�g{�����n��ͱ��_Cv�'�u<-���:.\N��� K@�0s�?�?���693A�S��}k$��E펐$4�t!�4<��nS�����O}�{�<1����Ǵ7Cfe���~�@S98�Ҳ��H�8 h�[�>502v���֥�.����n�z�c8j��P�n���o)e��iӎ�YYC��0~{@Gΐ^��y�����ym�i�����He����w������B��4Z#?�G�r@��� �z�����^��+c~�0��ž&������?�?�rO�EA����%�<�4���O�17)>Έ�rj�˙�ݛ�1.�>�`$&�B�#���1�m���0H�,�=���ʵV���X���p��L��$�:{7��Rŷ�=R=Ԙ�џ�VddLT��ھ�d���hi�wy��#��C ]����LZx謷�1���i�.�4�ui���H�j�Q���aŠb�2���Q6� 0͢��+�t�x��YB$�%���L�>�;����E�w9tYJc��c����1�� ���>�n�h��f�����J�ł�C�Y/Ai̡hE8K���N���o�j^v>o��[�C4�C���_)�}e;�E�Q�D��?Z(�Z�/�*��o$�qX1X��0�s��� �Ɉ�d#��V��Q+պ���k�d�RYmm:f��������o=�Wj����4V�05ی��� UH5����d�@J�ͧ�c��֤]%��� |P���S�M�J!�*���Ĩ�p����k��30���Tg*�{wmJ>xQpo_;��YB
Static task
static1
Behavioral task
behavioral1
Sample
460bf26fa9c9b59fe9e5bc6a83196e532ff441385f106b322431b0a6dc7787c4.exe
Resource
win10v2004-20240709-en
General
-
Target
460bf26fa9c9b59fe9e5bc6a83196e532ff441385f106b322431b0a6dc7787c4
-
Size
2.4MB
-
MD5
d4032c2f41bf999c6cc958a3ad5ca0d6
-
SHA1
c67b7fcec8e91c49db43a2aa70b9f8e17b0af795
-
SHA256
460bf26fa9c9b59fe9e5bc6a83196e532ff441385f106b322431b0a6dc7787c4
-
SHA512
be567fe979fd04b56eefddb5f09ae6c617d7d43f017e31198287ccf8a14558c0a32cacd370a240d037ca9e06065a490844508b51ebbb277e2b881d129e63b36f
-
SSDEEP
49152:fIBNAZo31Awcr7guABuNs3i+Ipu4fvMVaKcIZ7Qv05dHEfC:fIBNb1Aw0ZpN1+I8a0VbOK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 460bf26fa9c9b59fe9e5bc6a83196e532ff441385f106b322431b0a6dc7787c4
Files
-
460bf26fa9c9b59fe9e5bc6a83196e532ff441385f106b322431b0a6dc7787c4.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE