�mK1 m�n�eI��&�]{��g=Է����A'j����c�yG���w�\�kK����K��j ��� �tN ����55����He ��?|ܼ����w���~�ޟ�x�3D���bw�Ӂ�_ٜL��WN�b3�̬8L����к��dm�c�r �~r,y�{���v ��������B;��z �^I��LR�V.)��zƁIa?�u��V�Ԛl?X�'�C�de (�-�`�7ߋ����p�T�������ÔB<~�`���q35l�\hR5��̔u�1�)jM���E����O�+�� �z�3�RhNTc�|�y}Ƅ:��*����#�E1r�@O������G�3�Al�%�sV�++�� �����L����SNI��P�-o<R���j������;Pְ���9JTj��j<��1����ĵ�u����"�5�9�<d��jď�7��EՅߚ'2�ha�� u��A�^ ��Z"r�,R��2��^.������O���D��0E��3f�m�x��ǖŐTٜdz,��L��K��RM����Ƥ�WX�ak��v�$��)��D+�_vBV�^] �����*R�4�*��r�a���LXAƷlz�&���JK�%��jG��~��/K�a�[v��w��������o���AߟO�,-�kI��ݨ*� YU�,yC�;t #�J��S����-�ہԒ�]�N^��$rY �@�eU��M��љ�_��Þj���j��~S���+0�^��l�+�;R�S�|�W���鲼��y0�� sf�R�y�!G۠_Ƨ��̭��Rg���m��t��(���!�>�l:ֽ��P��I&�$�{_���.y���siHa��N����ң^���)[��3�ٖ3�U�k$=lg+L[��:fP�G:���r:���J @�$�Uq��c�Y���?�e�K4sY�F��1Pec���1�G[��G�Z���p�q rd��,�,\n~]�3xj/��po7Y\� �eh�?[��f7�@!�o>E�j�5Y�}��#��C�J�E,N6�m���@0�s�E�^ ;/�1����B�h��hE7*�zG��{��5�g�����Y�em/iS�)4�zjI���je���g�Kj�-2�Q��Q�Ɠk�˨�Ο�Y\�4R� �ڥ��#W#>�]�aN��$C{���������4�-�S7��G�A;��^W�Ȝg��N r�%u������<���U���ׄ��!&�M) ��eA�:�'>uϦ���FyS�!Y\��|B*��{�\�E��:>�Q`�,�p���(b7���sFOS]sɃځ���7L��ƣnX� ��buy_�{���.G��J.O�8��$>���;t�_`�=O3eL;�P�K��cMx�+5�7(v��d���f/�$���Tu}�S�����Q�c���|ξ� Qe *"�_)��;-ԅ|�`]j�����S:���V7R�U��K;�� <���\�]-��u�ϓ�5��A���er3�g���Q�$��Q�@P�k�vX�rz��:N�w& ��=c�:��r��%���e��dO5'��/�t�|o�l�W��Zܐ�#��,��C��;p�̱y�F��O=aN: i��N��+�\#n�����V����<����'�������C���,�0��ozl>EX�����.W.�W���B�s��TDޤZ�(vtĞ�����<Sr���H�������\�����s�1}�>.&��v��LZe�GY��G���D�Y=��I����^w5���p )��+'���Zi1�q+_䛹�cHvb�+Kceb�j�1::Xy2�|��u�ʗ\�ZzQ��F��w��v(w9E:ǃ���MW�2�:��Q��BjAZ��6/Ek�aL8=zy b:)�N|ڮ[�Eh��������+IB-��,�늡�r�F�.�8�J;� X�c<�p���RH���k١�.ɢ&�6��������r�<�1��ԅ��BB7��y�D��7����|H}����aF^J���N�IQ(�Nc�����Cr�}�4S��o��z@5���>%��8�����! ��� .$c�<� �N}�P�A������\D��[��������YC*7��/��3p��]G�kpZZ�/��_B�D�ޘ�&�kӅ`V�y��~qP�����/G!ǒ+W��R�cm$�P���*ֱ��a31��m����H�,�((��<��? ���/&/ۏ�������'��p�ĵ^��A�+vk��T}h� �-d�v�?�ZDc����Ud����{��GfiB���f���#�Qw%4HBE������� ���G����K���χ�I�<U�W��d3\NxVl�)k�����R|���,j)�҅D${K�z�ٙ]$)�B��.�=�W�~4�Ƨ~_�g����~�;O-a{U�!k�����d���݈���GXHd�j��u/n|l���W���l��H��?��~ڼi�,j�|)��/"[��I%��W~�/ѿa� p��83ɱT������y��e�\��%�K|G�*wl�b?�[M����j� �M �t��)����/�ɀ�n��>�R�)���kñ�:rXrqƇay�M'���|� #5��N�]f��%�VC`�>1 yI[�e�]|>s���-����?kS��������|����̞��B�9�h yD+V���� &�)����h�\z���Ԁ8)�P�!��7�_�AX��>��ݗ�K&�h���������L髮k�p)����M4p�s�SC�@���<�r7�U���Q-���y`SW�=����� 9�����瞂k�U�c$�X��rKބ׃q8�k�ԑ�,$������� cHw�����ˎEq�9�p���Ւ���'����/����&X+�#b/�aMe��9�U��4d�!�^_؟p��R!8H��Я�ls-�o�Ǡ�6^uG�'zғ.����E���U��M��OF)}W���L���s�j㰯h�Ph ��{��p6f��]Ԥt5�)r'֢�б4�9eU���4q��� �1� I����|s�B�-!!���MP��_�����XN[9��8h�=�5Q��躧�ɝ����\��O� �Kv�^�Y����F,�0�9⎘��Jú/l��<+@ +��z#�� �rx<&82"��[|��� ����s[/|
Static task
static1
Behavioral task
behavioral1
Sample
5ce0a10fc102892d36697d9a2bdadaacf90e3fd0c002c186fdb0fb6e1b7dea4b.exe
Resource
win10v2004-20240709-en
General
-
Target
5ce0a10fc102892d36697d9a2bdadaacf90e3fd0c002c186fdb0fb6e1b7dea4b
-
Size
2.4MB
-
MD5
e7f215365709f75425d39952435f4326
-
SHA1
70542abff63ab8edec1bb720fa176f896b01ffca
-
SHA256
5ce0a10fc102892d36697d9a2bdadaacf90e3fd0c002c186fdb0fb6e1b7dea4b
-
SHA512
1d7952f85d02b2097eee6c13fdb799a772819650264414789a1d3dbc530a7917d5aaac5beba18c0b442b0fd9b7bca71fabcf8d23754da80d3559555f38af0ba2
-
SSDEEP
49152:JHL9nnyBOjxhEQAWJfm0VzAQ1SBLrbQccnnvbPyx+w0g8:hlnyUDEQAHyzAQ1srbb4cb9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ce0a10fc102892d36697d9a2bdadaacf90e3fd0c002c186fdb0fb6e1b7dea4b
Files
-
5ce0a10fc102892d36697d9a2bdadaacf90e3fd0c002c186fdb0fb6e1b7dea4b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE