W ��� o���<��m꧘W���.;�%��B����`�L�J~��c�U��1�7ch|������k��z�{Wt���o�ʌ���wR4bZѢn��j{Hå�P�� p>bƦl]^��:9za��C@џ��켝����BECsX\��c4a�O��%?ֱs'�/�����n���v��n=��v��c*g��*���i����Fh��բ������co�a���t��`V�T8\I$�I��=�+����Ћ�E{e�����t�(���:Sc{��%�mյ��@f^t�`�{����aP�����T���Y��Iֲ�Ϗ�V�� {�6�V�/ޣ��)r�*}�M^�h��_�;/������ݜ�X�LQ�mh���� u٘��������o��K�W� ,o�3�_2L���{9�O�'��7�NەoC�c����P�N��He$P�k�Վ���_l_0/������ ��Y?i�����H����p����꼹�iY�-� �|5��W���.�m���Z-����F�A!r&�\S���k͊�̑õ5f����'�q����F_�ֆH�0�i�|���Jg��=��{K˛��j�7C�No�~�l��Aϼ]���c��u1�"��]9�KY�D=j�F8M����,<#�1F�4FUZ�/��b���nk������ ڒ�Wȓ�ho�W�ۺ����V:���Q�)0;�4��p~AA�-'1�O���+[�:JH�*�bvZ1U�]c�d��mk��h�����ݰ��ߋ���2X� ����f��ժT#��k��P��)��.�G뉒��bX$�Y�p�Ͳ��4H���G��<�y����]�/PqV����p��Չ�w�M����߾_�r��(W�����a Y, ���T�����Y�0M���%y�*� n��;;\4�uC�H}�����i6��/����J/�4?N�a�K&�n��,uI݂Sx��&�"�nͮJS)��s�+.�it]\V~6h��>�3!=��C�p��|��ay��أVO��M�1G�a�X����W��Y��,�ͦ ��`k��q��[%<L?b��"^�3ڗ�Vc�X�mx��N������ 2���;j s"��KY?o�@t���X�9��������f �SM3K��H�TFQ��Rl�^5�1��N5[t�/u�l�o�<p��+T��n����)`��y�(f���C��Gwš��L3�Tn��C)��{�g3�8V�@�ʏ`� �����N;сX�8Zpo�"���_.�fO�}0ۘ?h��6��M�ƈd*�����)��Xs����<R�)-g��?�+�Ϛ5rUt�"��3zq!r�)��c�ݙ,Eb ��T4H0���R��K��ty��S$?����1L�(!Ӡ�����~i�;v�iܡ�9�*v�7���B���(@�p�h���Ξj�!��z$P����L��=S�����5/�>�>|�nf��d��z0F��QY����H�ƿ�03��,:�#��*O̙~�$f�J���H�����쉕����l�5���>{Zk�w�E{��L&㲽y��V?��S"�x�)6kQ'|g���)�b��k1�z�&;�h�!���I����I0�!��:�yW�s�3���e���8���*�59��n�s��+m��ۨb�C��`��T�� ]c�$�[�*?*:��K��p�*��X%�����þ:s�Z�a�r!+�G�����i��7)@\���=!�p�/(�f���*��F}/���:/:;��1��"GK��j�>N�/��,)� ���O��r�|����R����3����j��.�3�D]h�a�Ɓ��o��bB��:��@�*�1�ϧ�˥W��+,<����4?�@��o|�1'0�5�(�tω��S`0��j�ں4�QD��r-�c���3����^�M ���<&ŤE�eĀe ,��g!�pyA�~�N���t'e�1?�8Q���*>,�5�����y�7 ��%]�H���,�/�B6x�yO�ف0�K]���/̭%��@��:Y$-')�1��1��W]���B��ALSo��{>��K���g�0�9�Ά�*F�N5D���ƅ��x�v��H�u����ݏyܮ�Uy��)2�_�������N~������xʙ�#-�a���}%D���1�Ka������0b6$�r#&�b"u��_]�G<�S=\:��R��A3M!6�g�[J�w���B?���5D�,�TjF�EG$������7�I����ǔ��n���¯v����+u�[5��ؔL��V��gLؗ�r�^Ő1�ʅ۪����q��]�6bu�g�S槦u��T%�_"�[�@fN��* �#;��>��M�h��.��c� }�1��q�e�DV��v1��k���!���L������5GH��>���ŢSᚣ�9���˳YQQKW@)���cYgFsq��^�ι$G����o�X�糽w)lN��t�C��ǂ���!P�@�{h��=�em��=��ۡYLec'˼GW�E���Y@��^�o��z�d(���DЩh|��U)M)ST��Z���$����q���� �yP}}�έ�ʵp[���C#8�8�P փ'��TWy!F� � ��`!W�1��e�mTB$��dP�G>U)�%��X� >���� ;��}���A�f�Ie�Ŋ�6WH�&ӓQo>n �R֜��ߊ�0t k_$���_o�u�%NvE �y�E�K9�7�i� ���Z:5�X|�$�&�Sp����͈��S�C]�X3e'PU��G��8!%'F�D�A��+{��R�����:���ud�P�w|*�#t�i��9�L���)�$n@cV9��Fv�6P���&|��e���3�$����<6tq�?�UV>?�Qp���Þ��K%(W��f���"�i��:�mE��T��{�0߂Y�̒�s��݆�7p�<�+�ϳtu��z�@?ix����q��9p�_%�fS�,vy����U鏢fCϕ�+a�?��� <uR��2����f 𘐏��*h�F<l5cj��kC�� xH�;�c�YzI�Z]�� ���sD�v�B���-�I�y-��/�~��z�L")�;1�b��K��݆���f������xGD��Y�[Z��i"'q�V�@(|��� <� P4ATA������TX�d�(� d�Qz a#Sq7XA߷ޠr$��Dw^(B>��G$Z�2�U�9���鴢騒{����V9i8;���(��{�E-V�Y��,$/迠�^���A�T|�v�e:�Ls��g2=:8�[��~������v����mȡ���hf�^�+�����/S�?e�umA��0LC�o.��P�����A�8'�`��A+��j�v{� a ������7��s��9K����U`�>;�$�d���vT��S�U2�p�� �����E"EJ���Ig��[��$ ���#�P�R95C]�韍!EU/��*R�N�)�2��+ZΝ�9��<��w����n��|��C��.�l�uW����4���w��϶�=r���F/��^l6K��!�xH@?p�A��D�sS��G\C�$�����Ju�PS��@7;�{�2:c���+�,����G�ȁ�U��~e�u, �L����^�d�����,��-M� ��5�̈́�[�#g0RG��8��7�,�+�?O�]�O=I5�4���]����֏��PVg���O������4��~\�g
Static task
static1
Behavioral task
behavioral1
Sample
98e0d03b5047303dcdae1fb821923b2090465269d72ca857671ed9d3d2277eb6.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
98e0d03b5047303dcdae1fb821923b2090465269d72ca857671ed9d3d2277eb6.exe
Resource
win10v2004-20240709-en
General
-
Target
98e0d03b5047303dcdae1fb821923b2090465269d72ca857671ed9d3d2277eb6
-
Size
3.1MB
-
MD5
955372e04b2b6fd6f0d1b98965b5941f
-
SHA1
090ecf0e34e0a4111555e8b04bb6899fc5f060a1
-
SHA256
98e0d03b5047303dcdae1fb821923b2090465269d72ca857671ed9d3d2277eb6
-
SHA512
92af60e425cd0048905b85aa02827c7d58f9dc39fafa6a469172a39b952f879fc4a9387ef8142d931792ecbbf5d58262b7ead42ac697c957739affed16142287
-
SSDEEP
49152:UOa9/ArXHAsI02/+SuCF4KXRKwmp3nolmkXcsDoroJBhlg1wKght5KaGF6x:UZBALHa02/+S5SgO3nossEKg1wLjKax
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 98e0d03b5047303dcdae1fb821923b2090465269d72ca857671ed9d3d2277eb6
Files
-
98e0d03b5047303dcdae1fb821923b2090465269d72ca857671ed9d3d2277eb6.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 36KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 18KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 272KB - Virtual size: 11.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE