%Ϥ˸��bZ�$�(>LF����X.p@[\֟m[� <��# ���z��\�*�73�eI~T��-�e:��A���G����U�\(s�^�����B��)�h�З^����.X��ޞ����(�qe�y(f��� J���P4�TǼ���Bu'�=��l��q�����q�д�yP;�����w�&�+闇��;��2���X���i���KL&S?����ڮ�0��'8�]�?�Fx40�˃E�W*�D(�ʍ��!qWG��d��)2V�D:�z�3!t'�է���c։r�����ֱ��͑O5���.��ϏX4;����^|������ °�[|��qħ�$�i�՞͑����^x?��������VyC�r ��R�����W 9�[xd:�&`�l-�SZ�#���i�^p��+.Lrh; �[��5.`y����=�~�w<�b�ܸ���mu}T���XCX ���b��g<����q-K᱉I�[�m�����q%��u����LΫ�v��~�����_O����fހ�Q�F���r��:a1"� $j��II�������Ύ��n�X��^C�ʇU��վB��Ȝ��ͨ��!�^�O�=�/���=3/��Gמ�7*�+eǙ���Ҧtp�����s�Q8uTFA&(k�t����gp|�����=q�fCn����T�|-��ky�6�xpG���_���������NE�a��R7��_L�6��㱝��e�k�ͶT�G��ϊ]�O�,<���"��j|Y7}�M�������{)�Ԣ�&P6�� �Y^��(̽��l��N��I9���L:��Ծo|�`GS��(�(J�w�gF���`-E������e��1+�I�F����3Q�x�i.�`��m?�� �>��f��c�W���c���`�w�[�6 K����BG��5�����oI8�4]Êbb+���/��%�3u���2��+tq,7c�I�+�e�F�R��������76�/$�;��S��q���pjџ�<��{���(y�r������O��܆��G|�h>�3�8ۨ(a�Ͱ������)�]=�� ��&�)g͊ϭ@��MqC�a�{:�Yܳ�����fS�ü����?ͮ-����>��r B5����|S��H��^�x�C����a�b~��"����yR���_d#sD��@Ģ�j������2viBC�i����̻�?m-t�ȸ(�.v��%�Ģ��F�XZ���f��,��Os`y=NN�_'A�_�{�3E�͊:ğ��� [I�\#� �����i�����Ef�#MS�{��y����,�W"�$�5��2)9�7�E�)2���s _�kF� |=SHV���)�7� �t�G�&�c�Mv��Pd��Cb >�(z�^U�v���>9<�p�K��`Y�o�n�VQ��!� 5����ݾ�5�Y����w$�i)q5Tp�<�a��S���4uf����3���'P � �n�&BWnLކO�eM���ˊZe�Htq9Ф��N2$ۆR��-��m5���S:m��[~�T��vҦ� d��R��x^��^�_Oip.�����8˥4�sL-����yF�'j�e_��0��.)k��+��!����Bj0]��9���&XIK��qx�3�ħ�^d���F)u&�$�����!䍍�'ѿ�����9�hߝ�8鲋ٙw�48��y���,TI�d8Id�n��/|X��-pL� ] �q1'�����[���Z�~�G��iS$�L�w�sh��o=]?��de/��:X�S|�@���T��St: '���ff!��� ����}�4gz���-J@�j���q��s;+��:�'a�OaAK��QMU ����n2�7{�OaS�Z(5��e ��,��l���� !\9 �b���Z�Ur�n)�s?{¶�(+49d{< ��h'#p�Q��@��g7�JFn��r\5�t�^�'��v;������OQ5{Pg,��7��d���&�F�8eCj��w'��C��,D�Z"#���=߇߬�8!)��'����n��~T�:B�W����܉���2ᅒ�Yʟ>)W�AnaM��AZ{e���Í�s�Ò�B��X����e}l�-n���ۗ�:65N������8N�CS�f�e$V]1Csya0���K�r�wPJ|��%��i������y�u�}�$ ʓ��u2���W�~@j}B�n�G֜k_��]�y�T<�m�#A�w�A���l��-��b��#�.�̈́.n�ψ��"���w~,i�z�1�B`���������4���E���U �憿%��%ULV�D�jݩ.�@�Q�CG�XeU�.��W�l��ʠ�CC��D[�1��b��o�A6e�^4)�[1��a���t�1qT-]y�}��t`聚()Y���y�\I�������CJ���骲�`"Pi9�#��$�?���L���Lv:Ȍ�yL��J@�ť'�4��Q����MM\�j��$��<8�>÷gӼ³��B�K�qL�UD �������|�&��} ֠���(����kq����nM��rOnf�3?�N�ϊ�C����Ň�c��hC6D�D�n��I=p�2`�6���?��>�Wd��'�el�,z��-�����M�P����< .es��v�vBi|+N�~5� L��ԯ/ͺ�"�06��ƣ3S�}�*��@AR�����I���C+&��9��=\9�k<�8�9IF��+UM�@��;B~�#9=�C���;��P�B ��v6j��z Y�`�d����+x���luR��B������� ق�A�M�o��3�s�-�����~��,����u+��s��8��w��6N�vXH�4�ڴ"�N����`x����K4��dd9E��걱/�_��;��X!���n>ͽb<��<�����.�����:1I�y����Fp�+���A�Mo���dw |L�� 5䙢[K��>Q��%�7$-�X���Y�^��f��k�*�+�I3�e���(�:��Ǡ�E����6�Oy �}Ջ{Ed��C�\5)t!��'͡��D�:; G�O��{h}O|(�F|&㬀i%|��Y;t��X���k0����c��m;Ȫ `U~^I��w�0R��nS��k��9�C)�܊cdY+��,A~y�^_��9�L܋j�Rn�����p�{��J��?��֬y,��:� Bz1 �_w�˿ rS�s<�b��D�k����Va��\���M���=�������7U��hڮU����(O���1�g��v�I�|�\�����,�|����D���yK/�lg3��1 7�:��l���� +�����yú^��3\~6m8�����m��������ML(u�L�.{3&3FR�ώm+L�F�8i������)�X�=���$O�rr��v��������fY��A|�h�;c�)T���EY��e=��ysG��kN�;��f�I���� �%���K�}�x$�a��9
Static task
static1
Behavioral task
behavioral1
Sample
8e237e1819a862b869b00c7976f87bf35b5e8cf3a124a4e2940d5baf29e4bf5e.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral2
Sample
8e237e1819a862b869b00c7976f87bf35b5e8cf3a124a4e2940d5baf29e4bf5e.exe
Resource
win11-20240709-en
General
-
Target
8e237e1819a862b869b00c7976f87bf35b5e8cf3a124a4e2940d5baf29e4bf5e
-
Size
3.1MB
-
MD5
581075f5480dcc0b526c7d2657dbdbfe
-
SHA1
7b1b9b9e4eb77420284a2e4dca25e868ace1d563
-
SHA256
8e237e1819a862b869b00c7976f87bf35b5e8cf3a124a4e2940d5baf29e4bf5e
-
SHA512
c46dca2aaa534bec81e9ae7bee5a5c969da10608d7d973e128874c6228a9ca6ddb0e1ac1b4b6c326b688ed8bf701925fa02ad2f91d8dd8dfbcc08ec575be1665
-
SSDEEP
98304:rVIqrj5r24Ig10gD0IknxR4eaMBXgLdkOlmx:rVIO5i4IUwIknxR45kSfmx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e237e1819a862b869b00c7976f87bf35b5e8cf3a124a4e2940d5baf29e4bf5e
Files
-
8e237e1819a862b869b00c7976f87bf35b5e8cf3a124a4e2940d5baf29e4bf5e.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE