_��N�lp˺�"�4�,�3��c��tG4~�ҥ���_>T�ͯG����~�&����&?�-�T�Ah m�h�'�`4�O�f��J*}L]9�01_�#�Sn�R6f��)���>�������b(`?���̶�%8�msX�P �+�}���-u�qn'����[D;��������2A�D8���WOJ�awK�($Nw��$-~P֓���X������=��P�%<��49*U�w<kHy\ _yu1L[���¡�da���S�d�+�o\8Z�D�A�a���h��rz8� �N�/���*/%19�JL������{�<җ-_�y���M��~-��9E|�$Xg�8Y9&e�d�4ˣP�����Lt�Ҋ�w[��lR��"���^�����X���jƆ�lȅ0���� �YQ���7�c���ڌ���f}Dz����X�־Q�^^pUn���p��:(@e���d�k�{_���Q�{��%���a���q�B4�.S��N���;Jf����E��5��2d�/�<��`c�����8Y�o�p9�3����z)�PD� aZW_�ؒ���XO.�R��.��d�h~[L������އt��B��#�Mv��Jw�3��>�;������p�]�ռ/&4��p��s�v��j�vL;QȤҨ�"Y���\ �G����t����%7�MV�w �թ/�)�,]}��������v;��C,�x,D��q�>�)_/��S�{Zȿ��4��7&W�~�����T�~ǖ\�u����YEA�.Q�"�^A�Ŵy���T@���u%I� �R*�`�����sy��^3��s.Q�w�J{�r8��)�1�j��= $�L����}��5{�?��AT�V舦�^W��۳DJ s�v|3*H.{���z�_�s0��������qc��2%�Lъd9�x"h!��u����(���{�e�T"uX��$bG�*}VRu��<� �S��Şz9L�bA�{!f�I�+wd���)�:��i_�>���c���/L���`[.жuCW�4GO������;�ɷ�}2�>8V/�r9�������s -����Fᆻ�}�{X˺�O4������)97�*�q�B���B�}w��יQU9�� i:+�7Z��k�*�ـH�D�Q�k�|ҩ�)��c�Q $����*����+��}�6D�q�p2��1C�#�� �Nl�;j!%�M����b������웪o��Y��.(��� �w0���}��:X�JUJ�F{W��ܕ~��0��k��cC�l�-=���ܪ ��� �@���ww&j���7��3�L<�N����[�������L.���>��\J����XL�ө����:BՇ���Z�_5M[^f�#\ާ�؉���yT:�� ���T���֭K����X��{zґ���P!��`j �'CH�2�N_a,��L ]�ޮ/�7ehr�ݾyG[��&�JC!;�ls�r�9�Hd;iYg]��'.?�B���7�wT �A��E�w���ض<�X��t�aGs+I(���etm���_��5�_��~Fy s�%�����r���$�S!w<^j�ի��H yI��t��=��k��x�SD�ط,�=��R"|h�����}$�nÕC�6ND��q�J�R �q�H�8z�U^\�٥�*�w՚�����Oo;�|[o�,Ku� @��պ�(x�ϗ-��ԇc��+y���ʧ�c��㏌��p大�%=A e 7�J@�7 ,A��'�md��!�3�?9��z^�s�< S�#��.�A���]��E�FFN<�Җ^�2Vv=��� � �c�ٚ4�������������%��FPA��(F�6��_���{���:I�!��i,�� d�˒�~t��X?b���I�gՒ�� ���g���e1:��,0��N� GC۵�HG�������'����&�ð�{����4�����F�V�z����n)-CޭPἳ���W�+7צ��OJ���y2`�sx��'�LH��L �_P�aro��kGI��b��R�4X��6�T8������6*W�cIG�E�YInhU\�K�R�cПswr-������и�c[)vJ��I�MT_:X<OrǞ���R�����8����XF6Κ��חv/?:vFq��Y)�����%S���y\/���p=X)F5�����ckŝ�!��m`�X�����Y�����SU.ؘ��q���B j�'II�H����؉İ!,����zAv�?I����}������o��?X�5U��1�|�<��>�Ki��Y�ǓN���"��W=j�ܗl[���!LEu��)/�փe���eݞ����� �\Cd�!�:���:Z��^Pj���j[~� �\���\Q�B\��D�L� �'�^�zy���Qk�p��܃�c�.Jynb�� �P���^�J1��-�uC!N���,����7�R�v�я�1B��R���++Ч�̮�<f�2F��9�XXp�#�ct)e�����;{�|��#`8�ޮ�^Y�sza)����D�n]-��AkJ+4j���$_ ��,e��\���Q�.d��c&f� y�iN���>7�'������J@�W9G)}T$���z�<�y�z���1��š���j04P�������7��)��Or� ����8,��=�J4��Y��Ո�{�3�1�����o5�A�K�gu�� ���h�V�6q#��lщB�5C#�����393- �c��n�RP�<��)�s�?4���hk�ȹ�̫qIa5���_�Z��%/����*��?<@��eNh-4P:A��)̧�g�|�L��ͣ��U�*+��%����ejl�K�&ϗ��Vj�d*�[�S�3��wm#=�,��v��n?F�+���;(Q�����<p���Q��C-=�+뷔������ �"<�^`�i���2�����#Mx���5��d�W9-�[{�����3g��?�I��!6-�(L\G/m���d��:�=�y�;�,���{���T�(:����^��D�f�VQ�����a=�䒌�ܘ06�|�����$���d ckK`*o�`-��3Y��,tջ���A���̛���Fst>�.fm���B�ƹ)����{�Q���'���f�^�VUMR�>Z�Ԉ�q�x?]�ɟ~R���4��n����ɯ�GU:�c{��++�ϧ����,#���������Y�G��k��_���.���E.`��t�,��� ���ɥ�\\�N�wi�(n �&qcY����nцBsf~�d��TN�C��{6�X�AT��m��A�QOI̻�{���틉��W�U��]�<��Ѳ���r�S"��+D��fp�'�8��(N܇I֤E�:,sN�ɨ������S��-��bY��'#��R��� ��?l���M9U�Ϻ��뉲��Mk-������ߍW;��'�>( ��"�!�x���Ü�viU�R�M�W=uG�W��Ŏ�Ϯ�Q�T�Ń����
Static task
static1
Behavioral task
behavioral1
Sample
572ea4ad0dc921c61ca50cc93a92f916b21999cfc27b220e9bae9466898fb24a.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral2
Sample
572ea4ad0dc921c61ca50cc93a92f916b21999cfc27b220e9bae9466898fb24a.exe
Resource
win11-20240709-en
General
-
Target
572ea4ad0dc921c61ca50cc93a92f916b21999cfc27b220e9bae9466898fb24a
-
Size
3.1MB
-
MD5
0794b4c99b4e217967e91cfa0bd8f04b
-
SHA1
711570a7ebcfb5644f27e0a97d02631bcd305319
-
SHA256
572ea4ad0dc921c61ca50cc93a92f916b21999cfc27b220e9bae9466898fb24a
-
SHA512
89330f569d5a344afd18969f1e758c7c4ae228004df8fa168fa7a1ce1fd8eeee8aa9b10b0497efc8e160b2046f64b12436062f9e1066aab86b322b4b90003f93
-
SSDEEP
98304:iG6zWyZLavZ4KpzGj9W1O0gN5t3TX/9dBKlDM:ivcR4WXgDt5bv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 572ea4ad0dc921c61ca50cc93a92f916b21999cfc27b220e9bae9466898fb24a
Files
-
572ea4ad0dc921c61ca50cc93a92f916b21999cfc27b220e9bae9466898fb24a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE