��\�e�4�A?��A���E�6]*yCqԄ�o�5tҁ"7�褤���J���"2f�b�WYa5���Ԅ]�CBW_��y�>|�����YaT� ���| \�#����g �{M�#� ���k� ����MO�����{����C:If��g�ono5%��-�`��얬6^�@��`����+�W�ط� �3�����~��L$���'O�WTĔ�k��Hdt�q(�I �Z�NQǦ�Ծ������n���y����B�t|A�u9!ZW!)�o̚��ʆ����疜����$���L�����Fى�0s�#3�N�KCU��ö��_��� ��y���q�;�TP��*�J�M��Uq뜌P|��N����dK=�J���U���6Z�Yu�����ul ��X�&���a�͈OJ��(��,�Dt�O�qe��U�TG:�y�?�cV7>Ы�B|�Zj|��i��I�.�[�J����\�w �E��rT�SP�<�R��Y�y��"rH�xR<�VG8�+ʛ�A(ǩV�k |�wă������^���jt1�ڼ�.�TN��?� �Y���2-e�9}�S��$�s5F3�.�z�"���,��!�M���^�2�"���Li$�C�m���e��Ze(1�C���Ê�,��ߕ�����{\�#���:[4?~�?�/��D�㝎O�)WL7��t��K��E�%�:x��iV� ,�!ˡ7m�៣���D��B0���Wb���[ֆ!���Fu�W��f�����b�$bR�>?"�4�y2 ��q�V��n�u���r}u�Y�aqJ��d"�$����_�J�s(��H�e�|�@)7b)toVũ��i���~vP���H>�߳.�f�:�(.��!M��\�z�`��M 7u����`*�v9���d����V�#FA0�2��[��Ƶ����7�MR�Ve��� A��y^�����<�.��O�Y��w�轙\WcO5��������A�\ ����Y%��Љ���>Q�Ȇ-����Z�*ˈwo���36�-��#qI�k��� 6H(��\D�T �s R��ϴ���T� ,�~�dWA�923 ��x�$��1�~���$,�}�ێ)}Fs0��ٯ�$5:;�ۨ���������x1n���ݤ�9�4]�PX�ƕ�M���Z�ٿ�G߸z �O~�L�;���p�[�a$�/��UZ[��I��x�)L�����G�,�oۍuGx{��[x6���X� �N���[A ��,�����Qn�\_��'�t�d����ҹ�X�Iڥ~���2<����<�y��Z�� ��Ȕ����v}�Y�h[�G0���0}�Ge���Ќ�~�e�%�� g�<cs��5=������������Q�\�CN���f�u���j��jA��D�͎�A��<8��~ɢ��i�������'�����L)�\Hn��t@(�o�eU ���#Ԯ�$�_0�!�P��b[Q��1���_� ���U��2��w�woYP�uP�%뇖����edL�����#���Y�.%º�X��m���fX�3���v���Z�8�^�3d�h���ix;���F���zD}�[���$���|����h�D�|��� f�����t�J����������>)��+Z�d����$,=9Q�;i���¼���f���1�����0!H�0��U���.��qZ]8��1��0�u��N��0's��>кp�OK*ؓ` �� @�('ͪ| �=|(Oa��l���E��JU��Ƶ��b�yWK'ך�����Ч���`3�Q����@�������Ik+��m�x���X���ͫpF���Wo��6j��\��$К$S.��Ʒ��v��� Â�5ZϠ/��y��g~T6/a��խ}r����?қ�� ��`B���4�PÐ^>eGDz����ԭD���ԥ�-�e��<������}" l�Ǿݓ��ͬ���{�b��$V��f;U��L�*ߎ�J��t!lQ�9Z@�f�p8ԙU��s��/w֊qJBB�c��Mu�|]���6n-+��B��&����V��V��+芎a[�X3v���d�Q�I5��K��ngt5��.�`LI���W ����l�/��Ǯ d� �6��e���@*_h�8}j�I��\�YL�}�M��a7� �$��rȚ��j����Q ���ʿ�D])یI*@W;��P*�IZ��|` ����������-7�8w�Ym�X�>%�d������ t�#�bC�El�\U�aR��̺Q��ιWDft��,�� ���_'[�\af��W�=�g �7�[�g����&���^˽�#�L���U;m�Þa�Ĭd�Ǎ 5�E������ߍ�c�a)�|5�E;�\��L��y������J���@��o=_� �g�,�}�������b`�����.]`�65C�M�M�sx���U݉�&�J��Z�2�1-���伹��hVy����v���qD�'dE'uSz/&���l���ѪH �N�2��xڎ1H�x>U��5�c�*����Ոˊ6��h��@:���G� �!X�z�+�3{r��V��]��zs1�r����jA_ϝ��<\�k��Ph� �֪�YS#�(])��rB����b�@����t�z !��Zۮ�%[�q=X�� Ťc�Zrt~м�9���r�l�H3��)��G!��&O1�=��\*�b�T����)�(۠~�SՔ/����P$�� �G�'�C�?�V�M�o���i��o����L� J�m ��==��*�?l�}8�����>���ǼyM�I˻Fj�(�0��ï��M� ��y�|�No�G�E�q�Oq$��6��(��&BE2cSt꒧R�%�f��W��$�t���|��Z�5wǮ���4���a�o��ܑFQjQ8m�x���l��3)Rh�{�G��<�U]��g���QO��+�u��My��j�Ꞅ��V]�2��k)�1��qݎ�0I�cULh/����qN�/!���R;� 0��3ev�_��6�*�O\n��j��-�;?��"F�%w�j�'��ï�+q�yc������5�7����m�z������6�boʈ��i@x&L�FL���>&�otI � #-�4&�˘m�$7���>T �D���y�y�m�5�4���X�*��Wf�9UV��}c�T�����l?�����&��Ɉ9pXJ��68������3�|�63��'(���d��%@A��9����2�m1dU�2+)(|��-$��N��|��
Static task
static1
Behavioral task
behavioral1
Sample
891fd320efe54191f38a67bb1ddfc8c05073b4d1cfcb4aa55bbce02d02904a05.exe
Resource
win10v2004-20240709-en
General
-
Target
891fd320efe54191f38a67bb1ddfc8c05073b4d1cfcb4aa55bbce02d02904a05
-
Size
2.4MB
-
MD5
28cfdb6a1cf09c137b79d901c97594eb
-
SHA1
726675c26cc279b6d5235e50e8ffefcf034cc4cf
-
SHA256
891fd320efe54191f38a67bb1ddfc8c05073b4d1cfcb4aa55bbce02d02904a05
-
SHA512
f7be1449bde261d1424ca9fb17ce246cad63af12653561bba6a4c4d417c81245651adbf114068dae48b9dc102b0834054f93ebc240a56a3cacc15bff612de768
-
SSDEEP
49152:D/tzDd6ky0vxJ18uNdBup4q/NtxVVwCzlZfYc6JesP5If/3AIaNAlzylDUF:D/BDdbCuNdBSr/NbVLQSQ5m3omFyOF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 891fd320efe54191f38a67bb1ddfc8c05073b4d1cfcb4aa55bbce02d02904a05
Files
-
891fd320efe54191f38a67bb1ddfc8c05073b4d1cfcb4aa55bbce02d02904a05.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE