�����ڝl2V�c���u)��A�z]��˂6���v�Pv�z"���/>3\�m��C�P�!^�f�C��yz���$o��g��̑c��,O��~�}9�D=/���&SbO\.5��y6��U���Vx:�E��ݥp�b�4q��Pi�^-�j��AT����,�V^��G�� Fj�I�oΒU�!7����f͘*��[R�Z�)��i� �BJt�EI��Q zA��/�1�)L���JuN�E`!���D!p�K�P�����Kj�aJ6�T��T\/*��+�����B����HS _.}+��'�S�@KJ����R�yDfIU&@+kO���p{߱U�w��ˍ@/��N�����ў��R�`>dW; �!]}�5!�J�b�Ѩz�*te�D�<�Ya��1�ڂ/��#��Jw���Mp�Cx�ٞr�%�/C�"gdxj�^_�㘷��c�Z �[��h3L��i��=W��f,�,x��n]�W39�9&����j1���#<U�:(��ׅ�G'c�z\��*/�?��� :�s��{�3���;��Z�4�٢�.�)�c��@e��}�NNa_3��\�c����&7T��t�\L"ɎCw�l�]t��`�!VL'�!��.�s�4ʬ��+����:>���Th�L��jx���t�b̪ϐ�}����xk�g�ȏ^����r����$�����[\Jխ7*̵>&?HD]�@��j�� �GC�Ow������.|q�"�N3����lz��G������P���@�k���y�B�CP���L�����b*p�����i�4�-./æ)�n�y�WQS]�F��mXү�H?���c����N���u��u-!�I���������T����f﨡�M>:x��c�I�ި�4&����������oH,��8�c`ժ���u���5t4�y9�gj�z���EC���3/GL�5�C9mq����U��I6K��IJ��u��n"m�-�5��ď?�����FMm߃��Q��OgF�Q)o�(��:0��2ν�^���[t�s���ӧDq���u�!��݊�#%s���yʸnP���>>�UDy_�R���lpKI��"9<F�Q��'��:`������� 7z` �ΰ��{Z����d���Ң��v1f\F^z�q���'=%�8��Ř��{_ז#��6!J�&�)�t�64�`Q��P�B�x���CT_����TˇZ��i�w�Kx.�iB�Fd%fx��4��7 ѕ�E�������t�/�:�?c�����|τ��0j)Mw����I�������L��9�`V!k����NH�5d��揹Ɉ$W�y��!M �����TX�O&�l.bE{�︑_K�O��4po(K��F5�J�z��I�#B��H&��$�9fД����=}�2ŗ��s�:�O��u�^�����=��;/E;�̪����_��c���R�xH���Fӯ��վ�Dka]���]������j[`%��k 8p`;,���O" u�qI>���WE�Ev� *���fTg/8$ї��%�le����)�4T�9���#��,�3e-���T��-*��d"��1FuG,zp!�Q�YwW�L���&�E�c��10���!�D�At��-3u5b�.L �h?PM��4�8+��|h�����y��~=�*���[���:/p����6��~ڜZUW��5�dG�.�5�Cg d�a�����Z��0�#��.�>��Vl�F�A1p���"Ǵ��V��5�5^� �Zא�����k����aw��>*`}+�գ:�~���wͅ���X����<��En~���<�f����C`_�ꀧ�ݨ�>���yt�<Р�Y��M~NTM��9���պ��<�/ �&��6 o��iĚ�����E���X�����+{KU��N��Ū頇����m��l|�; c�o �B��W��&�`!<�6)Z��ՔE0s1O� �;Rv��0�G[�%v���I<�Ǽ}�H>�^���r�d#��ҍk�Q��z���� ��1���#_��*�G�Ew0JN�= ���~g��Å��2x��H���ID d]��R���A�B��˓��� T�����ל��:3l�䇈/�ry�@@��Z ++9����ͫ@��N�jy[�z��\�E�+��r�x� ��J���Vب����t�g���C*p��!ө��f�ÛZ���6FN�A/���+��U>r�p�_�F4���DЀ�O��"��ߓ�)_�gq^��Ρ+�1ұh/�"�����k��SFm�ot��Ot�mz�q#g⼄��kYQ>�M���W�>�^��:īZ��4��mP<��^Ȗ������pGă"��/m�� *��k���Vp���8�+sФ�D.c���5��L��M��yb�щ���k�K`�(�O z�l|TH�x,��z:�I��(xYr�Yr� �s| ���]�����p� M5�jx�3��T���7q6 �%��������"������5uV������\u���@8v�����B�̫�@� �H��e�&�?��Z�9�P_Ԅ�Ex� u�匤w�E�d)�R���^�F��ل�� ��/�ML��i����Ùj)[��֠����@g���Sm��f�H���#ׂ>���8a�"��L���*��)�W�g���"zܟ�F����yʷ���ٓk�Tk=`�v���*g|&ݭ�j�9 J������O��l��>rT����_Q��A�y_}#J7����l [��O��)��������.� hJ��>/���Вѳ\_?��[ �"�<���������Ym�lt2[i�!���n���9� l�^&6����Nb�m���`1Ǎ*NU3���*�8��>�-��U+t�,�x��q�m?t=L�@��ro�tW�Ö�Ru)H���h.)��4�p�D1��gp�!r+#vm.K���^o�w֏ᛵ�BR��ԍ(�y�7P,{jîHVc�^ذJ����q�Q�_��W�;3��8�`��O������䈩Sɛ%�cT��.p�간gM��@��T�?��J�2�:HJS'���B���7U"�����9�=�%�z{��`�efЁ8"�����_�������������Ddee��9�M��(:��d�E�RA�w��,�^,��/�R�H��q�pe����}zԮZ�Mx:�x���tS���+ �荜�xp��ـ�*�,]��3�q�-�U���2-�i0�"�6"��*A�}Q�)�wH m�()7b�Uv����l7�&f@�0�E|���A70�t���eP#(e9K�{�E���q5~�J���o�B�d����� ��'�M��c����HDa+i�4�$a�lA%�P�qQA|�QiX���� ~�^���I?)��cy��Ź�����b��4���!v��k@0�[�
Static task
static1
Behavioral task
behavioral1
Sample
43ae6cc21e3a10a5d899880c9874f64b669601919a0cf5ef45afc4277951782c.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
43ae6cc21e3a10a5d899880c9874f64b669601919a0cf5ef45afc4277951782c.exe
Resource
win10v2004-20240709-en
General
-
Target
43ae6cc21e3a10a5d899880c9874f64b669601919a0cf5ef45afc4277951782c
-
Size
3.4MB
-
MD5
93938ff1da672c97069c0f92f6ff5388
-
SHA1
ee5e2b54264a5e02245b5e677ddbc0896b486a3f
-
SHA256
43ae6cc21e3a10a5d899880c9874f64b669601919a0cf5ef45afc4277951782c
-
SHA512
959ef9f4fb6f6d6587d8eeb6bd9b3462717984ca6bfac3d1446a5533fc2ac824ba196c03f4ad02b15c10608798bf0a6133e29bd65402859b7253e52d2700abd6
-
SSDEEP
98304:80+PCMfg9hmVmSMV5ehk9kN0bEgQt77peS:dfhmVmxPeG9+04H77peS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43ae6cc21e3a10a5d899880c9874f64b669601919a0cf5ef45afc4277951782c
Files
-
43ae6cc21e3a10a5d899880c9874f64b669601919a0cf5ef45afc4277951782c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 749KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 50KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 51KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1024B - Virtual size: 8.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE