�x[����/�%T�,ʋ1$� ����=� ^I%��)��F�5�y}ۜr�����}4]��@T�# ��R����;hd0N�\-������#1S��c�|���:�<�*T��)�˘��?g��lF��;61�ħOY�hƮ+�i�V�.)-0�<��V ��8���n@Z��z~���1��Ⱥ���,�}J�<�r��Iߜi�0�#��. &���F]��� �p �y!������>q�(��@�����t�Q��rX�6XO;�>�ϊQo�/��8:��-��n^���~x����zqă���B�ۉ��>��o~�YLb7[��UQ�������=��Rn�#C�,�$+�[�m�.)l�Ýy�ES��Xes#�.���a�F��r�s:����k:.��k���HW��1��Ku�����9s�Y���Hٲ���G����$�?�^�Ş�$�G M��M't��MPE�E�IB��ig�1U�īâ=�Lt�;��8I1�ٲ�T̔̋d� ��`v�r��0���aPq9�p���"p<�b�Â��x���(4��QB�Rhܞ�:[���H#[P�eS@d�Z��g��j�n��7�Yf��Y���k��xwU�����Z��k�� E��cFi[�8����q��:o�z�v[X0������O����P�O ����<ƈ���T'�4�Wܫ�GM�0�3x�(Sc�Yl~���6�=,_�u���in�]S8�j>ţ�r�Aݒ|�֟�yu�S�ݗ=�e�!wȱ ��-L�৴����Lॳ�r�%^�읊���@M��wy�f��I���~���q&��%^�.a�g=�6�p"I�Z0J��)�+נH����Q����m@/����A�>�3�sa�>� (АWg3��G�=稂�W&�`I_����q��'�^���p8��m�YBa����àq-ܥ�\�}����1�8@%�diq�Ġ�V�c�Q� ����5�o�&�jb6��Lu+�7*5q�94����L�~+��n"�xn� ��R���͖ޞ�.5F�E����\�&�a�aY���,*������G���"6İ. � ���&���ߝ�S�Ʊk)B8\���!g?K3N�8�i9����E-J>5 j�U�/��r�H]� <ξ^PkZ�ц�S!� �W�Ui��0eFnC`�_�?� I���Н|��~������%�+��jj`ҎX5>�Hq����Ca�r?;w���m:�[��/������ ����ͽ�:�jx���HWF���:-dȚLƸ���DmL_�v�3{���I����Yq�d����x�D Ҹ�[�>�ؐ �����A����>�������F� (B~oN'W��tx�ґ� /s[v&]$Hh�9���A��|�*E�������-�$��\�B����b��8A6 ���Ǫ���&�Y�Pz�:Bh)�g]��z�� ��bx�@�f����`迟�����?i�'Q��m�0��yx�l�6�P2��Q�Ao�I���B�Ԙ��� ��Ϛ8����Bb�瀺�����>�� �>Y��n����������&Y�c�����H��)����f��7� �ӣk���d���� �[�0�i�l4h!�*&�7���6}�L�\"M���+�9��5�+o��F��i��(��+����¼!lΨ�e �j��êK�]xǩ�0PpLK�Q�g��Kao�D���*$���eQ�~���M��S@�u�ƒE2��ͨ��As���Z����`��*��9a�Bko�C�+T�{ �01�?�,���lb�>�%l��8��h�1@d+�k�FC\��o���_�Zf.]�����W����kOg$OY�`O�v�JS��su��Q�<7�ס����OQ�j[��c��t�,�w��-x�q���`�L.����`n%�6LP=�� ��1��#d�f��$���x"��J�����a�.iр����F�$"�Ds�l�j�&P����H$Z7�<l�@����p�T�DĶq,�j��wH�� �D{x�����Tڷrv@��/#����,AR� ����E+��0Oy'0�����ϲ��r�S�t1U��]JF9 �E���.]JH�+�m�ڛ���i�_���Cc[&�o�6�Ri�*nN�\/;�t��ɨI'峗9>�6k�O�,�v������[�%`����}���o73���7�e��>'��y����\�:l�1-W��A�!�:�{ �0�Iڐ9�'b�|��`��q<�7��@�}�ro2���(�ԧ��՛�/��/�1��i�{x�n�@TQ����Cǃ�τ�Ԙ�4r�E����^f�`ljb� xIP{��.��`h������a����{[�< OMۗ7��5+�<. 6'�Z"}O�E�8�y�j�}O֬ VzGN�eߣ�����7� evxg�B���ن��)JFG&�E_��^J��DBT{�*s���8B�~n�k�a��y��s���P�N�`���� ��?�7k�"�������<���՜��O�[��5.r}[J$-Q<���}���3��%w���D2- ��V�?I�rYד��ol�f� ��VT��тdy<D˶�0܌%�67�V� +:������ ��t\�_e,�xUж����;Ҏjb3��/�G������I˳���g��Lӝ������bA;���͟OY� �"P��òc�ѵ�@C}�t�Q4i�g#���o�~-cpR�x��]pqi�_U�qe&�"F�߱�/��\�+j#"��O���7{�߷�QƑ*7�>\���";���2�9����Bv����L@�x��ʨ��b0���d��V��Z�a�ཅX `�;�U�pLZR":������/ܛ/�hӴåo���S���*BY�q���i�����^�����N��#�(c�n�_E�K�./��G��D2sn���A�Zou�М��E��d x'�O�����x��,�tX���J����kc1��b���y3]���Tw����z��.69η)= �w@�A��g�\R(�g��FǑ�" _���Nd���:�g�\3�M:�?���c���p�)f/�DBvց��oZ��ls���6�W�N����6�:Q<#s[+e�h�f�D�K�Jt%����Σ��C��cD)�����E4�n�͇T�v��Z�"0���v��\s�nѮV\��Y�Y�n���ڔ�VR��rN▆����b?&kc�m�y ���n�;����a���\ަ9��"�怩s��)�2�R�v�I ����nנ�}N||;iiNzs�}���c?hA5kh����Q���]���h�+C� $�i� kW͟�a�VL#��E�k�g�)�RGZ8n�����;��t�����&���>����%�;���,�ZL�S���л��fH � bF�K�)0�I���w@T�gp��ou��M�Uh^tqîU2��,�t/m�^�f�W����m���̴�8,�s
Static task
static1
Behavioral task
behavioral1
Sample
21627d6b0d31817a7fdb22dafd7a925eaf0385ebabcc695b66f4da12d8393e23.exe
Resource
win10v2004-20240709-en
General
-
Target
21627d6b0d31817a7fdb22dafd7a925eaf0385ebabcc695b66f4da12d8393e23
-
Size
2.4MB
-
MD5
2bdd0b9065b9c8acc4ee2008d0765fb8
-
SHA1
22a0c707189f6e15149c29aa7592c9df6e30f31c
-
SHA256
21627d6b0d31817a7fdb22dafd7a925eaf0385ebabcc695b66f4da12d8393e23
-
SHA512
cd6424c71ec9c50d0dfa57d87fd9134c625f3d5a4adc2805392b1b97b96b9b8d8c53188fe3cc933cd9c2f7e9a54e7153e4516474f419f21ec69fe08dcdbe500f
-
SSDEEP
49152:xHrj+qja/Z+qlJt3aZnt5syVEJcNHQQ5GbSwD5JCxMk:9j+qjWZ73aptqBJhQYuwDzCxMk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21627d6b0d31817a7fdb22dafd7a925eaf0385ebabcc695b66f4da12d8393e23
Files
-
21627d6b0d31817a7fdb22dafd7a925eaf0385ebabcc695b66f4da12d8393e23.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE