���ê�d eG��� Z���L�qRO��1�����nZ��:;�\4+C��"m�K��up��V����MO��w�؝�����RP6�e+u�x#8l`+0^K����=�i��+_}�!��`���.j��p:�2cN�/��Ep9}k�sw���J��~3���^��^�Ɏ��ݲ �1澝3�ͽzh����c����=�C��<���]��m�`N/�CH#Fk���� ip_���)�;m�����_9fy�T�\7�����\R� ���@�M�Xlzɽ�'������f9�~�RH��v6�*z����<C�U�i0�� eN����8����|40��1���Sy�)�)��y���������z3@�-�*�Co:z�6��hJ6����QQ!-]%Z�7�rA_���-P��g�I�V���H�S�ǚ�\��A�A�{�(�,���/�*9�ž{���ah�?���i���r/���d�Q���$�����ˀ�`��A���i��61�:W5�7t�Y��xe������L�Xu���)!�3�����o�������ȭ����Ͽ?���9���x��R� ������6�N�m� �q�㋡ �p�������L��G�y �f�g:&"kQH�{`]�[^��-�`�� �����2:d�8�.o��Y�5Yr3Ό�#]���5�{�0-)�ibt{�����^*i0�MzoP���K,:��/$]��쒞Ae���w�}Z�Uh���߂�*'�`-�ʰs"��j�V �X+%)���b>�����YC!�WC�<�wQ�� <��+ Z�Od��!�PE)�;)���mIT�n�^٢��z@�4���-��W�j�iP��%�rid_ٴwݖ����]� ����s������:��O#� �=<�3(Ƕ�r��C*�Ν:���y�C��=?R�A�ǣf�A}<� �ȇ�=�����`��B�� ��0��QId�Ģ�gB�1�Bm�`璅{��r�Z��4ca��#$r��`j�B!`�*���Ws{��`����@ud�P�I��%�@�+�s���AУ�ZʻlV+�� F���Y7*s2����N�r���!�s��z�ȑ�Yt��rRtĜ�ߘ|��i:ܔ�͖��*?:۱(�x.O'-a�����H%h�=ƙ����E����y-|��L^�Ǣ�6lk���NOP\.�ޟ���ġ��Qh����bǛ�b�� =-�R��#n冖S��f\$��dz[cM�6�����ո��(�2I'Di��ٿ��������)4r�.�]����t��L6J���/P��kuq~$�: a�C"�&���42.��UvP��u��Q;n;�Ŗ$/�<���j��q��̒�wXxv�jI"�mzR74]�Xw� �o9F����` x#�9�J-~�x�kf��,y�X*�:Q��T�)Љ�������8������r�֞�0����Y)>G�&�<ؑ_��83��o�)���F�@ԯa��Ϊ��M ����=�+�ܿ�T�H��kEπǍk��&ͪ3����<�Z*�e��y D��퉥�|�|������ ���W��HsBl��-�w& ���עM�E��������1���T�|G�����6qs�qSS1��!��=�͢Y��Fb8��\� 6 D�&e-����{F���۹��I� uO��{��"�Q���##>�Hw0��SYy��a�U�#"�}� ��<ŕd�U�M�Uz�"�U�0����`;n�BA��M����PR$s�J)�3TuH��j���2��iXe�C ����)��X�X�c)��>u��q��������9��^g�WFsL��AjX����Y �I�dy!����uJ�Ʉ������㍴���`b1���km�������Ѧ��U��V<X�"i�,\�B��B��-/n�t�S L���%��`����@�i�(ˆ���0��;43��e�Gdz��Й��[C��R�bzLW��Pk|%]��/X�����>s<�����X 5��Wz�E�y��~��=(��F��Q �@k�ܔ^��.���b�,��'eUOL���CӡZ��hvqخ���$L�r�� �(� ?F[������Q��vL�x��!=Sd?1����3hS��+�ʕ��4��m.q����xk~]����,qA���#p��f^���nIoT�O����&�7ȡ[��0:���S��oK;M%z��� ��Ȕ����aɥ/}��@#CÑօL��,����PG�f�Cr �¯Е�ѹ6���A�n�:��Nu���%�T�<*]�ڝ8C@�k���2�7=H���Y��B�u�G��t� �Mg�#�uo�'A��!1�B:�>��'Ɯ!�hG����Ow*�W�{[�7.��+��Y�"M�8���PK�.���3���2n�/]�G��}(�Veq��*)8bi����[A(��!� �G����?c�� 7m�i�g�u���[�����z+b ��G ���H�QA�M+��NW�!�vA}CY��6�6��lÙJ��E/Y�[�n�4m�jBӯ|O�p4��~��i)���o@����hF�a��/-�mI�'��1����Ӑ�K$OgfW E�!����#�P�d����W#e�ml�h�q���T"���:�� :�$��y���s^��|���P/��l��˿�&鱦+`�hD<�YȨxs���}r�C�7S<\漆��f��91o��0%� C@6s���2�U�Ҹ���^xf�p�=[���ž�ݶU�� �cXVPg K�����5��~k{���M�[�:b�s&�B ����|�`�5��A �Ԍ{����Jg&4$����*G[�Y�R22x�5;��)�Q��]���d��oM��%Cx��om$W�T�u����X-��4"y�f�-y�h����L��HPT8�GK��x��s�`f7�).��8_̫���:jP۲{�m���I��8�fbfo.�?]�_��W4S?����MIm�ۏI��-uT#83 vآ#�R�h�~М����y]D�w�?���8yvfI�I�f3/D��[�;�P�#Ǐ��`���듮Z��7� ��qTv����4!^Ӑ����~I�{�� �v�r���Q����ߎ ɖ��x� #�y��ƹ�>KJ�C��r�%�n������ĥU�UNZ���n �{��z��=���Lsa�̲��J`�Y-���I��/.Dm���d��+���/A �M�����3Ӌ̌�1Oa�u^@h� �-_<$b�y�1�M|�K������m*n �d�0������)d@w"�K��̕��#��Gf�`o��I�A-玐XDg� �y-����E��Lm��a����1}(S%�`��0B��AԞ�f��v-���sʯ���&,k��ԱHj�����������%��>̋���wkbcY���CM��'��u�x��:�� ������5,��0v�h�X(� �д�F����ϊ����\u��Ծ�MF����by�/�CSP:��p�"dwǢo�r|W�fF~ļE�Ќ9������2��[x����嬣��F����;���ae3�D���B>q��W��$��u��u������(8�����Tml�G����.X��'�:����S\��I� ����e�t���+�Nn��-�i�� �r��v[�T�h٫�edf��6r���b��:�2�� ����"6�FGA۟��I�[ݷ����铞� 2=����ZL�Q��9,~�
Static task
static1
Behavioral task
behavioral1
Sample
f085c6c04bb96f24fdbf974025a25ca0baaf01093996d5b8be8f4b03045892c2.exe
Resource
win10v2004-20240709-en
General
-
Target
f085c6c04bb96f24fdbf974025a25ca0baaf01093996d5b8be8f4b03045892c2
-
Size
2.4MB
-
MD5
f320a471da179c2cdb8f920a58d5a49e
-
SHA1
c0587747ea1f01591f56df772436487759a56cb3
-
SHA256
f085c6c04bb96f24fdbf974025a25ca0baaf01093996d5b8be8f4b03045892c2
-
SHA512
392f7e1c70ef8445b85d08e554b220b25e228939ecaac90cb55f91a12b826b153cc0ffc0f1a1946a2cca878242080c62a6e64d86cba220deff0012cdd765886e
-
SSDEEP
49152:ua+frLou6hg9lGyMJt6ygLSfhJCddlHBf2RwrLfKIlN:efr8hclGS+JkdlHMwnf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f085c6c04bb96f24fdbf974025a25ca0baaf01093996d5b8be8f4b03045892c2
Files
-
f085c6c04bb96f24fdbf974025a25ca0baaf01093996d5b8be8f4b03045892c2.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE