~0��e��Ԩ!?�e��c�����x��S�M�`<�<�p ���E#���:�v%|�������Ƞҵ��v�Bg�*y�ޙ-Y�:>�!x53�>}a9�� �����簗�]([�"XL�/}0i�p��X��B</��r9E3�5�X��)oBC[�y��:Gy#�q*}%6ɉ�xI�q ӏ���H�;����m�B<�^��4k�����8��`\���ϧ_n�N>'ײn���<"� �lq��F�s����A����Y�<�֧�L�p$�G�n���0�k�^c��쌹�����4F�d"20v j�Xrx���[_^�L��|3�ꝇ[>�!u�NNH��/��CE���gSn(�aX���T-yj��+���F��d��m��5�7����1�Q���g;�救"���_��0��B��"���t"�LKy^$���ZH��EF���K4BFg����TҺ�`�?1�).]�f �*�3v�����'SE�u��4+��cc�qE�-���+S�B"��k�U� k5����Ʀ�k�ʹP�B�e��KI��p����A�1*fn��5�O7¿f��� �^���DGwIwK��C�ɿ� �#Jt������<G��#kPG�"!��CC������"����2���Qzϔo S5S��)�4ʍ�E"�>�Hh���qE�9z}����9�� �ȡ��ň�� A����n�;�D�@8Vj�q�F�o��nr@�./�?�۰0�[̶�u)H�1���m��\V�lE�B١K�����2�SA7 ���c9��c[����5���,�L�ܙD7(ѼJPa�P�V��n�Gi����!t�� ;��{}���Lh�D}�?���+T���M�����yS� $;�;,��57="��;щ��pO�*�i��^�]�#���c��tu�Jw���� =D�p?xU�e��@�U�̙���;G3I�j��7�a����-3_��`��Ԩ�2�������#}bY�rA6R�c~~pբ�������^���E�+u�Ld���V>et���t�zz��[�"�� ��Ȣi���I�����d��x��'�x�N���M\P���2s����U B���k�O�X��f��e1~) ���L�Ϊ�����Q�:\�w7��4[�' �}�*4��ps����9苇�[�+���T��oxj�jv{�w.C%��[D�� �)� h"(����ǭ.� YB�'�.{D��O�]�l�Y|����6����'�L�j�EI~� ��"7f�vI�5���I&k9Lɒ����Ysp��<X�Ed��dM!��'ahn����3B��?t���2�bu:��v�������gNI;��Cx¯A��.t>�פ�8˸wP]���CУ �_�����O(�qx*�(B��l/K��W+ ��ti�T/��Pֺ���$�6�hh��%�6?pP�"��,���L�&أ�2���F%���pA��ԑ�����.D^W�����cO�S�n� M�a^V��msF��8q�}�Wz��(��AFQ��M��f�"�J�����P���<�-xO5��(r-/0�����h-~'��[�z������P$3l�� u������B��D�ޡ�$��Ļ�a�J���uq�2)�/d��{5w�%����V?�o/0��aC'B����q�#��K)�rZ3�9�Z�� �v�J1q�����uӓ~�|$�h�*8�x���7R�U�jP�n��Я���m�����*Bs��K�]TAw��>i��|�@������K� ���C�� �s�9w�7îq�� <w��h�;�����5����a��ŝ��n��F ���a�v F��/N����!�mf��ֶ� )UE�_�v�X��a%&V9�k\�VA��eAi�A��D�e��������U�>��ym�R�J�hmd�Xh�ٽHJ:�P`�� t��I궔��vm�:���XX[�J�%�x.P\�S���=�����KݰU��t��W!7r�>����j��p ��x��z3!��Oɵ]�<���'> ̫����8�d �}���^GwE��t��̠�viԾ�n��3(��M4ۇ��٘�^r��C������2��ymL�4��� �������R�*�P|PK~��A��z]7�|��?���ǦL�R�(4�͙N4��D�x.���fa0�<���%WХ�o%�F�!,ׄ�!-�BlY=�L����N����%�cR�����I�n���33G��B���C�Nյ�:�R��/A��O���/��9(G���3�.Ko�Ӻ ����y�rE�R�Df��/'������� �z�J�`p��n��6'�% T/wR��~�CsN_9�:� �hK���\&��VL��h�E��2 u� �݄g�6^V�d!�ػ�ֈ���Y4�.������&O���RU�)�����&֕�e���ƾO�\ 7���D벲e9�6�O0�]_�y㞠m�5H���xH��y��sO ܚMK4��1>��^��c\D#���F�Xr)9��N�P�1�anKs���.���]�b��r�M��Q\�q� *\�,[�`���$�צ̏��^}y��G���ѣ�������]M��y�2Jx�֗���K��Lʞ����|�J� Qٚ���L��%�R�P��0��bz��<v.a�?��i^�˟K�&4��-��L� �2����t!3,R�vYvA���/��&����3"��H%�b3i-�R$��YT�L"�����ęX�iviߊl�{+O`�����b�1���9Ȥ�G�o�+W�����8ް�*� ������3�j{C& �zZ��?�2��C#�+���A|pU�� 130�0畈���G�=���r ��R��V���k5�M�);�+ulJ�-��dtz?{4�n!���*끑�т�=��K�o1�䂑�g���&Z��^�K��O����6�ty��u�z�-�����:�b�~l\��C�%D����W?DR��)�o~DU85+PΘ�8�;�x;Qi�����07�®l�>>���}N8OQ�x0�uɻ/46C-�vc���_�(a�m��a5��(І�=)�a�C?�+�|��G����"�.�;����Ri��s��֝��[�<��w�ߑRȫ\x-x��AW�����-�Y)��F��REk*���@�zF�ݚ� ;dc�W�m�����;��<b4�oL�&V���F~85C�̨���̤����� B�M����vk͈�X����R���y�2%d̨ݜ)�_��_@�|n�����5�m�\�/��Er�^��Q������3p��c�n�r��{�#i����ġs�L�O$l]��_�n���n*�-�n<B��zP�2�`�R�>��� wi���_� �B��¢�^B��p,Ӝe DT㟟j�I�*iB�d����t���-�����nR0��U���oZZ$���L�������5 ����T��-�驉C��|���~*��B���~U;������%C9�n{����$��ӄ��J��a8F=O~���M�k��@ߥǒ����9a������04�-�A���͇�fH_��' �QgE�R��u�����ǘL���Us��Dd~$���f����ZV���dF}2Hzuˮ����q�(�X�V�ql��4�QN�D"Oߛo|�4i?��~�U�RZ�ŵ\��ذ#����)-'���%8����w��ȯt���N$(�����������r
Static task
static1
Behavioral task
behavioral1
Sample
a1eff1aaed6950dd710f372001f4cb1cf4092b0af4c9d9527db0b267624b3f4f.exe
Resource
win10v2004-20240709-en
General
-
Target
a1eff1aaed6950dd710f372001f4cb1cf4092b0af4c9d9527db0b267624b3f4f
-
Size
2.4MB
-
MD5
b26dcc8942a0a048f694c735358ddf33
-
SHA1
1fa45273a085340e7797e9e2a039f9fc9391744c
-
SHA256
a1eff1aaed6950dd710f372001f4cb1cf4092b0af4c9d9527db0b267624b3f4f
-
SHA512
f03c88c854cd4ddb1bfda877e49a86705dbf55095235b632b9f42772f7b6f1bad049d01558a96652b9873f510428d90d8188a43ca14e3381c0fd5f766f49580f
-
SSDEEP
49152:bgZBZajIJYae4a3JWHlBEhCh/bsc2eCIpsAG2ECHUe1R1qpNmIE7gd:U1oie3cFLFyUCAhHUe1R1qpNZr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1eff1aaed6950dd710f372001f4cb1cf4092b0af4c9d9527db0b267624b3f4f
Files
-
a1eff1aaed6950dd710f372001f4cb1cf4092b0af4c9d9527db0b267624b3f4f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE