��Y�,�z���/l�ǎT�o?!��1{4d��i-L��@��n���E7d��]{��\="Qj�����[�v̞*���y'[*r�<;M�6o�阧HŰ����G���r����D��R\�[��ܜ�,;w��х����$��N'^�/�[�;6NC�"��&>A�EF�rj/��-`'�0�eEo� ��(+�wR���O�k���P����ԃ�r���4k������ V�w+0���i�>\� [[$�@ ���αb�aX�-���1��ŗ�_G��/�ELܖ�ۻ>b�;�"'���Տ���A���X�Vc��a�]�����$A��G�b�(�6R/@�,������}I�Y�"�k�{"Nj~MO�>��m���8�ߙۅ��3���~���bj�]*K�'Q��%Uw-�}{kr&v �U�B��$�]�Uנ ;]�cqX7xt����MO�틞���k �i�����P�-�N�K��b������`� ��NK��d���uGB��ΛV��<�(�e�� &�ȅY5�R���h������[�H�T���CS�l�d ���^]"�4� P�N[Ʒ3y�cDJ��+�+ӫ�@�+��'>hj�e�����ĮA�x���]���d��Vҏ�����f! �"��q���N����_h�*��*i��qFNRSg��3 ,s8s·��e�Fp�=�4���"Mଽ��Kj��CѢ�@Аt�-�}��]n�N���Û�-������I�wj?xx�H��u��a&���9��ٞRN_��}m& �����5Pk��C�zZ��������f��Ƌx��?<��Pɗ�ds��٘�ϚE���&����{�m�M!���+#C���H�:X�Ⱥ���� ����W#;ҩ�*q���D��F���a�`R��9?hPb�5\�wJJ*�����5k�ϯm�*��]y9Hl�c�J���� �ԑ�2�D�9 Yg,c�C3����uhҢg*�J]M�j1�L�����{�r��?����K�����(�q���i�s��0�D}�"��p�W1�-�}�ٝ.&{��ŌY�]�<�<+�ԉ�djb��$�~���I�H���$�Y�埡K����0���̚Se�Z��@�W��/�%�mX�W���g�ٝnٛ�ӖRֳ���CQ���hR�a}�!<!��P��q�8$明��(*��JG�T�$���1�~C�Rc�ٱ͎�?�����M1S�,yR�[�V*{���e��^%�����}n#ka�.q)eF�ˀ���$���\��g���Re;�߷N�2�����r~WB$6��EӺ.�+�H_� g��͚!Ld`�|z�uHiɬK).�,�T��%X�8qf��Շ(�����"����,��~q�ɄӉn���<����h��+o�x�%�"MJ��c��,��(R�ճ`��u&��x���R��0(��@���r{��T`�3���% TP��og��������;�ꡄ���7��\6�r"*&"��=h��&��_E�]���e��<��B�@V���&��X8ӂp�m@��5лp}g��T����c�x�$���`�(a�� �e63��@"F7�Zp�W5$�vķ���0'+?m��H|c��C5�eێK��c��D���@�����9 Kݛ�7�>k�����"Mօ���_��й����ε�;>"�PX'��n(0ɫ��"���P�����|���+S=;�"~#�m@��5����w&-�[TUj��H Ik)l����d?�q�n���)���+�HOeE\}�����Er���f��`Q���u�5a��� ����j���O+_E`�Vq�U�v{� ^���DzQaV����1���uZW��>�!o��ʆ�yy�f,��9z��KjcL��yST�nvc6_��+2�P|s�By</!i'۟�M1���� ���� �뾛%xA���=8���⡡2�\��%�1{���n]3 �8���J0����ձ>Ս^���(��zׄ����e����P��#Ӝ5sQ�B,o��h����w14��o�͡�UE���V�]Hٗ�3ކ.�����[[hߠK@B�~�c�)v�$'f�-�詾��ϟ�).�7H��c���W�P9�\��4XX"2��X��.�}l'���:��м���~��Ә��C��,���zBp���L���� IF~$��p�)@s�>���P�����}Y��} ,�A���w�y�Ҁ���0��{���� Q@�������K�<�gxpU��/��������a>�TJύ���U��!-GL��U��/��������գ0�,r���_���j���8B<��� Q�����b���F@�or�M� � )_mv���53�x-�sv�����%d�t�<��n8�3Fy@4+Ҁ�����7�������jc�k�i-!�.���.-�)���B0�J�g��u[?�� �p(0V�2�5p�3� p&,�K/��߸S>���䗑��.��:�&[en1�̑Ds�o��� 6�7���c�����ڬ"N������՝��j�g"���*��xTH�YW�1���]&k�'R6�`~�<�t$u߬�궲�X]f�<|�IV��5O�����j�H����5�&��%�PӴ��/ѽӧX�JQ]�6}~}�{�dqFX������;���-��U�����}Q�e>�tW0��DLg/� �6+u �$I�-6�<����1��8� �uW�(ײS<&X�Ǚ6����ĞL�#^\��s���:�8(�4 �0.#�j$�t80�"�4��V�H��u����눂�V��.�s�}x�3}W���I$-M�S�r��hZV�Xd/���me4��,�f���Z%�bD� �p����!:�T�-,�@]n��.!�)�;�4"�l�����3�K�k�u#~� C�ʢ��ѓټ�B��c�Y7����:U��U�x�>D�gs3,4��y�� �LiMX��Y��=R��1�^�0d&q8�m\�C���u�� �öh.z�+m�*Y��V#�OIt���ꖢ�XA�p�����<�tw.�ђ�ei�n�W��p����hh3$V�CQ�h����@�@a�Q�]��� ��]�r���!{,�U��穟�R��)O�R��f*b��A�TV�~k�tް��;�u�6����,- ������r<AM���r���W������#t8T���'��n��';qί��,�3X�:�hL���Q��m���y�:�<�*A��D����. �R&F�d����U|��~��~���^���r��سU ����W�$>A�P��#{� K;�'�*���w�B�L���0%P��(��p��1�1�x�WF�ጇ�1��?�u&����N"��L*����m� 0i��;߉L��.hU�ܴ�M�@W`�d��n,��d]2Wt��\f��~�c���hW�z�S�������M1Z��� ��UY�%��0J�́�j�>��.`�o�7,,�n�-w�aX������"����*z�0��i1��7ǰ/����>Y�����4_d�4���q�P>]����J�U���n����Iy���w��H��(�̻�n��:���傝1���Q���Qo�@�bS�� p擝y^eF^�J�V �2A�%
Static task
static1
Behavioral task
behavioral1
Sample
aff20c28bd7188b03932a3ca44c307de9df1ec97c69d41ff3c6153e31d077b47.exe
Resource
win10v2004-20240709-en
General
-
Target
aff20c28bd7188b03932a3ca44c307de9df1ec97c69d41ff3c6153e31d077b47
-
Size
2.4MB
-
MD5
57a80d7e7f4ed41e5bb11364220136d5
-
SHA1
d5e6f7bffb60fa6f231bee4763a331ee24b6ff7c
-
SHA256
aff20c28bd7188b03932a3ca44c307de9df1ec97c69d41ff3c6153e31d077b47
-
SHA512
507ff461e0b681f897fda7e689d1c8f8d2b2f8f2d1f0808216768e8be72999eed05142011f5ddfb66dbaec5606d08050531e18672b5b9402c5171b20b934086d
-
SSDEEP
49152:CaPzQMiYR361Fvh0LH+D9xQjgCEMVEMDyOeAZOaONpQ+Z/Pj+EXFqhxYSp3ENE:CaPsrYRKrhAHS9YgCEMVEk9ONyVEXkzZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aff20c28bd7188b03932a3ca44c307de9df1ec97c69d41ff3c6153e31d077b47
Files
-
aff20c28bd7188b03932a3ca44c307de9df1ec97c69d41ff3c6153e31d077b47.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE