���H�2�ɠ;�<�z;����^oSm��{t�V}����A�tq�K��mn�h��CX\S!����5C����JMjŶ-���%�]���zm����l۴�Oۯ�v@�L����x��wXgeh�'ּ4�z=�O����������P���9/ M>��sM�-jW4¦7���L�!�wD�D1�)�bi\N\;\r����=M3`���q��~3�!�S(?���'P\�� �a�_���4���H��*Ei.�K�N�����c��fpn����Vª��\�B>�І��8q,Ӳ��~��f�o�����7y�7�o���i ��J�H��M�,�ت�\�$y$�k���U ���T�ԉ�뷽�1~1�0��Ўn^�t[�����j��5�v�h�+�<�F��W������ �� Qk�1��e�6�@�EF�2b���P�����{t�)8���3I�?�nj�+\�˹�*찇�����4��j��{ b�C"��P��T��ĉtxSf'�F�"��_'ΌQ��6�?���h�M9C�в{qkc$��_۵8A���*Ɍ�<bg)5��"�ݩY � {��`kJ�m���z\�N��N�ʈ�a��?ԁ�H�v;��B���9U���<G�Ud�J���|��d�>Xx-N@��+���LJ$܌m��vТd�1�0�-$T�:��rm���},v����Y��9ϲv��uk���C�������3kl�E�a��}�aj� �wh'PԔ�.�mR�ۑ�Y��}���N�Ax��ZVc����ӏ#���˘��M1�V��6��kْ�zU1E���ՋC��=��p�~�������+�g��%��`�<����#,�DIUsg�����$��-�`U@����X�>3��d�sze���� 97�ep=�}�أ����w������ ��Yjl^�`?�T�NoS�iƑW�Z�Թ9Ж9�.s?]L(`��]���PcB���X�ԒL�:�[�1�������t$��-�T��w���W�B���۰џLr�� Л�TY�ܝ�O��ڂ2��V�Eu<�$_q6���!��?\�o��R#� c��4s��S�O���Z� �%CO�C6���v�E��=�(⯼c��� ��HVT~��[ٚ��9{��ɲu��X[IJ�'��3p@������ɯn��0��� ~@@7n�Vp�f������/��(L0�eD{���[�+xAVל�A����O�����`�۟Uv�D��ܯ�u�U�aQ�x܈;e�o�f�lӾ����c��U^M&����2���|��:-=zN�o��v⪑�硍�T���j\u��|��>cМ�\-s�!'��Kw6j�2��f���ؽ"���}�$�I����,.���4ex$�%q������1y�Вgu��"��>�e�f%�h��RS�y�I��t��ӛ��ly�ڴ��#g`?�����<�����L�D��j@ŢƿZ 2ix5,x��Կ�;�-�6��_��TQ��ğVh)E����(���v��`�6I�<{�f�}�S�Ϸ����!�9�(Q� Bt�2�}����ae>����GH��mNĔn@�ռ>J#�4R�!�uIӭ�2��Z{�.�I���?UJ�|�h=q�ƪ!_���,Z��ۼf�̊ �x%�!ī�5�|�l1-oITu3ׯ����Ax������3�Un��� W-)�P=��>��D��H��I}��t��-E��|O1$����*Q�.��1�\!V�i3�%��f��،륲'��]G�w6��$b�:��*$�o��glJ�[u p�����H�T;lH�`l JE�����_�V�����f�Jl�&�+��!gK����� ���xv?/��a���;��1�e�uRw�1����vC,NM+1�� 8���pBu��3����)�$Ͷ���١R�ª~���8���M]e'��[30Os.,\��GT��f��`�\E<���X�yE��w����B/�_� ��)�љ��S�-w%��1�s�2/n��Ҁ��{�Sy�%��J~H��VW����������1��_�O�2�P�k�cզ��_��=)wnC�NH�yєW����"9B1��̨�sau����P9�7.3O�ty���m��i;�����t��9�8vp�I@��������Xn�,�{���B�C���RO0��]�j�t��-Vf�����S��W$]���aY7���荗{�;�ϲX^�l�?��,.���� ¸�|�o3�vzW� '!0�˯n�[�/��'c�j�x���ʂ�L�Q�V��K�<4K�hcDuܹ�:f�+��;����:�R�!UI�`�oa �W�f&��G9�W�� �����V�����g{Ҡ� U�Dgqj7���i{Ш�'����e_��aU�o�ť�W����06��;�4��?~�[q�w�d�V&����ɽAlUW2��2��8�J�/!n�J��1M݊#�&�/]���$A������A6�mٙ�`�,�����$M���Ƴk.�5�ΖWge�L�wϖkFȊ ̻��m�'hEW�*u����_*+Nulk�� 3�U��*���V`������7�6�=,V����·�v"_e�����Fw+:��Z��K��<�t���~3;њ�w���#$����'��m'�&�)D�g#��W��vn�� 4��#�(E���>�7�a�B��������)e��6'�@�����}�����kc!?�N���{�*[�hH�c��?7ˤc�sǷ�u�'�ɨ|�Ī�}�W���!�l��2 ����Ze5 �ە|6�]O0�w����f��E��J�aU-� ^�'Oh������A�ё�2`���õ}��6���=% 4g��K��i�XwGN O���8,<l2e�u2��wF�ϟ����FÑ��fC����`��������� �uM��$NL� ��r��⬆k�xz���Af]4.����e��:cw���O� �"��t�o0������#7�?��+`(!jI�g�"�����xqA� Yw��=�~�j/�����ϸ�n^Q���^�ʺ����*Y�rpx9J�O-υ�EaG,���!z�w���t�� ��< ����T�����#�UJ��荠J�-6�ؔ.����2���=�m�f�*����Д�b��1Oe��3�
Static task
static1
Behavioral task
behavioral1
Sample
af39fb93b0a4c833690a2bcf52407f88d6ab4d04701f936a55c1f73bb8e8109d.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral2
Sample
af39fb93b0a4c833690a2bcf52407f88d6ab4d04701f936a55c1f73bb8e8109d.exe
Resource
win11-20240709-en
General
-
Target
af39fb93b0a4c833690a2bcf52407f88d6ab4d04701f936a55c1f73bb8e8109d
-
Size
3.1MB
-
MD5
1931cce5f703c847c5a0619690535fc5
-
SHA1
c6ee42a5016e0b639f69623e41b613906a2588c6
-
SHA256
af39fb93b0a4c833690a2bcf52407f88d6ab4d04701f936a55c1f73bb8e8109d
-
SHA512
20ae1dc2c10d4dd224edfae6c41472fecfb8177c2f423b07e52d546529e90e916c7751a472266b7b1acf923a86c4a318cd8e661a2369c138a30a99e296d81e9c
-
SSDEEP
49152:c3BflD+OnuUKMrLQx/FlYPu3LPaORw0ITaEjnCKV+KhjBEGJT70GcdOl9:Wn+bMrLANTbaawLTaEjCnKhjJ/cdY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af39fb93b0a4c833690a2bcf52407f88d6ab4d04701f936a55c1f73bb8e8109d
Files
-
af39fb93b0a4c833690a2bcf52407f88d6ab4d04701f936a55c1f73bb8e8109d.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE