����N�AGM'-w7��N_;�bY�ؒ-��Z�W�kHrhS"����8��z���6>L���8�Ĉį�uhW,������*���0Q�S�v�p�aQ"��zbG��gǟ��4.�L�R�8�(I�C4 0�LN�K�� {W������:�|�'��֯��~�A^o��;�+��ҋzG����#��L~���Q-�� �g��A�,�"����0��H�b&#C� 9[�f��M�R��f۔�8��2F.�L�G��і>��1.S2@�������5�x#ky����Ĭ}��%���"'%If�����Q��D�ӡ46|�S�`�ꋐ�%�k� W��*�6�C+��x�Ϻ�N&�w�)T�7��ʋf)�����o`t� G��H��U����h���=��{�^�5�4�=��� ��<�����m:L��>�Z�ء_�J�D���.e���{'��H3K�?�<���4����+y��UlגI-X��.��A���,Ѽ̬��=��%���)�*������\"4m�H�\�|�xr�[:?d�0Kn�.��C@��ЦJ�����-f,?_�jh�(�]?x��b/s����q2�tr��F�|�I����dF<��+������X��}ZeFZ- ���Y*Ё�Mc��{��=�jȴ ��ׂ~P�@�>*Ӻ'��xk_=)+���]�\�q��U⛸ʓ��aE������#�����S�>���v�'�qP� �s��T��'%�F�p��2�_Ժ���rە�������V���L�y6t��s昅�}Ó� �^�ivP�,r�"B��������CzV��h��2Q���isq�O���" �!�GK��p���4���x ���̘����RH�b�EԎ�W�e �s}-2*#�_u�тq�T�����R��C�� w&m[�!T��}uGG�q�ړ��s �S���e����ܖٳ`�b��uf��衚��P�q�2e,�g���n���.c�NK@�Pq|bJ ''�,� +���˖T����N�L�$5�y�������.�CP��T��/�Kh����!��6b�6� �۟��y�2��c6�h�!aڮd' ��Mߏ�CDI���b^%m����3��ER��>�B��?.E�a�@��|�A�krm��� �ܶ�/m�M���a��*��S#}o�P��sysb�����GK ��AH[�U>���\am��7}��a��^A����*cf6�(L�c���#���tRRkɳ�����0۔���곬 �8�j�FtQ�.s�zAأQ���&�Ŏ �,����l<i.�ޛ�<_���T�,F��L �&؆G�����LA���Y-�mݥ��[�]�4�bU�w�����3���{i�*U�_t�vL8^a8|A�?�ٜe�Z.F�1*�(ZXz����(~�P��W�M�� �Wf���'��U'�B ��Rl���PE��b���da��@�j5�5���L�&�����~� �}���]�eQ�R�&��4�1�~�c���]�?���u�=?�n���*������ $�n��A AR K�³ݺv�?D���@~��$�����#�nt��f����'��̤�dWF��?.�ލF*��ĜC3�p`TٜOC��d#6cU�k�²��M��|�H��?Y'�ڕB�Y���|���6丟M�S� aU�2h������紐l%�;���������hŖ,�ݢz�=HG�d}p�U�+�G���c{b'^������3�5DU��5���¥qnh��l+�z#_��v�R�SD�����Ϳ9c5&������SQc�>L��]we��h㲹�#;��3M�5 y����)� ���N��b �=��_ѥ����۞����d9��S�s!u!u���<ZXg��ACe���A��s���`O��dp,J�L�H���C�Ӈ��wxݥ�0������7Ǐb�3�߲RL�����/����撁]r�p2�G6R�Z�>�.[3�.Ty9kX��Q��������Ŭ��z�S����wXW/B��e�q�Z�/�jf\�J��U��*L�w�\��2�~UZz�� ��&k,~c_�b��9��&�qa�Z`|mS���bm;�4��k�a���o��c�e�;~F���o���A_^�a-Y��i��J�X��bo!��bF��ޫ^��x-����.�sh��>������%�a�ZI����X�s����.���0e�+�[� �� 2�t�R�����D�~h��ÿb����"N�VE�tŧk��M>ʌt�vt�$ս�v��Kh@� �g0B�9ybOK��KR�9�R6��x�\_A�fSrk}U�ɢ���W�6H��-��Ӊ�:�ҕ�&lkp��cW�v�;>����@��"a����V�Ss[��Q�=��?��AO:�Y��Y�Jfy�n+�z)�r_;����&�g0��q�:�q��R��������NkS��ی���_F|}1�O�&���ԄYϜ�a�D��Ǽf�J�O�.���%h��;"�Z����~��&@(�B$�)fy������D"+��v���0:O�k1�y�����f%��>]��diNb���S�ͫ?i�3ӹë���K^�&����w[eg�;� 7�+��,tw�v�炧��N3�O��*ٯH��z?(���R�]�ऻ��o���{.���Va^]t�d�&�f��x�u"˖�� o����h�J)�Fk��Z�C���G��c�^�'qT�DckvB���<S+k4���,�-W��w^Û� �YeKH�T�+���b9"K�4;ϸ���$��*�Zk��f8�D�r%�t�i���n ,d��r����;���^M��Y5��[�ZǶ��j���O���l|�j �0m��uM� E���u3n��#��d� ����V��/��r�/�Fз8��0^$n,:���C��+*!TB���xG����^��!����'��՜�����b�_�#�7[��D���GZ뙃���qo'$\�Uv��A�cB�b��P~<�x[��D���}!��W��� j1�+K�Ӛ��J�faB��+J��������ل�8��V��5YHa����k��h%�PA����P�%n
Static task
static1
Behavioral task
behavioral1
Sample
586e9d4887364a0d972bbac398aefc03210907c77785d9c30dffc0d5dcc85f28.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral2
Sample
586e9d4887364a0d972bbac398aefc03210907c77785d9c30dffc0d5dcc85f28.exe
Resource
win11-20240709-en
General
-
Target
586e9d4887364a0d972bbac398aefc03210907c77785d9c30dffc0d5dcc85f28
-
Size
3.1MB
-
MD5
c5309332fef9ea71acdb3dab07c7ad7e
-
SHA1
ebcb751a6c0720a07634dac872533603fb2dd32a
-
SHA256
586e9d4887364a0d972bbac398aefc03210907c77785d9c30dffc0d5dcc85f28
-
SHA512
ef8d9b7292498ff22fadeed1c476ccc895c6709fa150454c718287044e99df095bc09aee6464faa4c2567fd91d8fe556bbe7c5954bdfde7aaa4fca97690f055c
-
SSDEEP
49152:/o6Da7o508h6g/NzICt5woU4dw6uAmoJhmonnUqqujBnDzB8gjTL6f:/3GBxg1xthUd6uAmoAonnUeDzB8g+f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 586e9d4887364a0d972bbac398aefc03210907c77785d9c30dffc0d5dcc85f28
Files
-
586e9d4887364a0d972bbac398aefc03210907c77785d9c30dffc0d5dcc85f28.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE