��-(�3>/](�NΦ�m����S�~D�VV�9�Ṧ�0��0j���Ix���mo� �ws��c� ���%��&�<fH��Q̐�p/��e �M0<��E��NM������5��reJ�z�]N7�]~��+ߒ���|/, ���ܽ���I�%�M���^��]i�p�yLS:��P܌��#1�����a��T��#|N�z��t���E�x�@��m�w�����NG��"�RZB �хM|��`�tǁ��5�B=��t\��G�>��0u�B����0�[�%q���L�T�Gp����Q�Č~gI��J"K����B�I��95��8��Z �Mo�������EvF�8�Zؙg�Yv����G���A�q������=�d*OR���$6Cv�¸eַ�8�7��O���)��@kz���"W2 �k"ö�bC�씏.}�T��j��������}��@���_g�\�-����Rc�J�(<Ջa������H�\�h������$���j�$y�Yy�I�8$G�,������~=���f|5eڕ�Y�����ӥ�噕{��͛��:~> ������4�HB�?����H�.���kݑ��=E3��o)����T���Old��l>�o��Ord���"�� ��̗&)H��5�>�B�)&���Y����ܦ��ꮃ�� �4M(��X6F�լ@5���%��M:�9�]�9=���P�+���X�|�\�Y������M;?��ߕAxN�8VD�`7�Il�5�m*d�PP��3�C?$�fO�t��,V�� �E� c�+�o�P�����)Cz�|A�M6_�\�%#����rf7��(�f��a��$4��OLJ��7щ�;[�~��丰�Ħ��k�$��V�c{��G��,��FL ��A����� ����Ƭ^��O�Ćכ�\���K!�P���lݍӥ�B?�q�TS� ���ߑ�u�c����>�\[X�(i�x��WP����8�NX{�!�'��\��cc�1t��<���(Wvw�ͧ�٥+�t#^|p9����������@}����"�g�|@9Sz�E��j����������e�UU�ڡ��i���������\B�d����1�)2"�|]�O���V�k�Q_v&Ft���T��o�l��������0�Q�����?��@�w߆��cH/ O��1 뛌�bp��o��>��S��� ���$00.�{�]�0``I��z&�Lwz"FM�T�z�y�a�i[��GG��0Z���W4�I~G뽭���Po � �9����%���c���\I��YU�jUL�Tq3�QWA�Ҟsnt�&s6�����$۳�Heb3��ŵRRpi�ؿwh��"��U�� /E��TC�$�jz��j��JB�3��@��g�_j'� v~�FQ�~ƾ�3����^�yc����Ԭ )�I�.*� ���l�*ن�jRw����[����Y���Qq�;kg3��vR>�`o���Z,��o���I'��tB� f�[� �� �9)����m������U�8]�4K��i�5����k?Ւ$�u:����/�_GL�JWד�݉��@\����l#Y�i3]8?U���4f�Z��:!bsW����v�܍�rS��%�.5����~����[Q%d`���i0:&eEo$ĩ �n#�>��P��YPw�s�-��X���2�S�z�b�1Vڗ+{FN/���{�%(���0��=s,K�N0z�*�hzfBT`��,�����:��.���3~ޥjU���4�Iq.����ޑ��8"R�`�:Ɨϕ����fS���Y�Dk�Q�����o� +����!����G�(_�J� ��� �6U�sB2����m��o9l��~� �< ��_} l�5� :�"-�s�{���a �x��D�\녻��S���?��S�|A��e��*.W/��g����.z�孧C*��"2�}at���~ ���~�:$3+�@��`�����4��x���x��r��0�y�\d�{ޜ��8c� �.�����}Qj�������z�3��+�zsP�O������-h�OB��@�v�w�� 1ț���_���Ա���#� i{�7PA:7���T�Y5����ñ��Q.8G��?YM0=���0� �LE;+�@;0����Z� ��9������(A#�ݖ|�旁��-�@zn�#��2���G0M��~,]��3���|��Χ��_�,�q��mɟ�\��^e�h���tPkMEw�Aד�鈦F|�2���q��K�d���D�,�<nr&�z6��p��dСS`#� g�h\f;+fbH��n���TJA�HSfbz�Mcܩ;w����9��qٯ[R����;���XܕW���3߲��N��y�ma�Ԏe�J�z'�Y�{UTk��]�D���X�|�3�r�h������Ro'p���z�����m��|Nd��7�h�H�����α�^��� }k:!����Q�e]+e}�]}��g���t3~Y[�����ЁH//ʌ����4����(���#Br�>Lg�Ǯ�_%јt�OG���-=v1j i�f���+dz�O�h�p�_��w .c�n)H4������f�kL�-7* 8*4;./��r�S�5JQr~�5���^K�)'��]���%�]ƕ�s��g�BN�������>39��ѣ!e����f�iȩ�Z^��ST��Z1h��n�?U<������M`E~�p3M��6��zGl6(�]pw Z���ř�K����X~���l٪�P�\g��tΝY��Qz;�R"��No��Z��y�w���pŨ��#�����+:�R� �X�/�QZ# �]}�u��[����MP��[,���\0u�u���x�V7��8.�����ƤL�Kc��-�h=du���t�G�����������±�*@Tk�����כ��}C�>�U�9�(^��5�ۃ�ǵI�� D�¼�>Zkd܇�����%�W0�o66�f*�Q��s�6� ����,No�Os��ƽ�o�d��5�/��ԯ�cul ��ɠ:�!^w=��t6��u��<���fi��X��[������z����t��C�t�鱰�섁�\.L �#Ƹ�Q��@!C�_������K�����o���+}�W�v���
Static task
static1
Behavioral task
behavioral1
Sample
81ea6a4a6d36a776a2646e95a27d9d60N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
81ea6a4a6d36a776a2646e95a27d9d60N.exe
Resource
win10v2004-20240709-en
General
-
Target
81ea6a4a6d36a776a2646e95a27d9d60N.exe
-
Size
3.7MB
-
MD5
81ea6a4a6d36a776a2646e95a27d9d60
-
SHA1
d0a1cb3dd77acc0f9654563f8ac801ebb4e9bdad
-
SHA256
85b4e1508799054ba9f95d446c6b26627d9dc978917211640cdda2e02a42d139
-
SHA512
b7e007ab54b3a627389e53e8926594a24bedf1250290af44080191845f35a0d10507d82e4e8357e86ef70ffd2974d7f31ef82a2c2d6cddcbda5df5e910538775
-
SSDEEP
98304:3pe1sblXZnpc+68/hMJ61hAE7G+OM9MssGNb6:50IZnpVjv7KM66e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81ea6a4a6d36a776a2646e95a27d9d60N.exe
Files
-
81ea6a4a6d36a776a2646e95a27d9d60N.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 395KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 269KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 272KB - Virtual size: 11.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE