� L��Ӥ�YI\B�����!��o-+��v((�z�g\�[���Օ�ZNϻ� �I^�W��֑˱]��ZGb���!7Ndt"��o.ø�Z���LM���Љ�5��Lڪ%3�e���jﮌf@/�u#���#ӥ-Ln))�V� ���Ь���{�j�ˋ��O�ԇ,�"�kc��YTI������d1Jg@���ڨ��6C���Lٷ�u���������� ��%-�4f�Q��J"fn��0[�bK�}3�ѓ��&��#�I�ʒq�%��O�y�(A�ԓ�՟���˖.�"n2sK��N��!�6 �?�Լb�-R�҄eRO�mj�e��{_�Xtl{�,4�(c��2�6Iш+��Ǧ�v����\ZG?,=�xg�A�� ��ӛ&[�^�nv/�I� =�ߞ�P�'N=��wu��~��P#�\bIl�:�J��M�����L� �e/Y���t5�Y N��Ϳ9�s����<����C�.�g���SI���D6�>��ǧ��O��$�j��uAP�D�\5�ܾ��r�|��4&�����yD����9��;"a)�ڝ��=巓D5���!";�ajbd�{G�h���8�h�I�~����w0zB��A���-C���n��i@�.ZC�&�IƆ͇h9{V�?�Z!��ɚZ����b��h�i � E�������nإ8=�����m�VӋO�ʕ� a8�E�jl��3rgH�K��d3�Z�v�ʙjB�r��S 6��:z�i6�f��A4��z^�l�d��ʘ�_08H ۿ�9d~9�@������JEz<���my�L�Y��0ȷDl�j�^��+?�8�~����L���.s�=�T� b2c�6C�̂��pŐ��'��d��0kإ��0��-�U�&�����qi]�$�:#����E٥)Ē%j��f���1�y��0f�/u������Z������Ug��K}Q�&Y��T�X[�����s�m7)���t"�xa��u ��$��kC&��>i7EjEb3�Ў��0�����K��~Ul��2U��Ą�G��%=����Ne�C2ክ5S��G?���E���K�;�����2��R�o���bf��0.�L�L�%k�G40Ɔ��3�)p�)�Z���;'ME8zy|�R�>Pc ��[�����nNL�2�rYg�2@j:1qy 7����Wz�dca�O��V��X3t4��U��w>s6�N�o\nT��H�m'X1N��K��V��i�W�,V7<�p��+ �������}+Wlۡr9�&~�,��E�z��᜵� ���W��x6��b���hۯsv�ܰ�;sc���R�b����N�UИ��g�:?�V���@�5��sS����!���v�D�`�I�o��5%�%� ��j�����y�eؤ>���Cӣ��Y J}{��J��T��M���s�`w��:^8/G�>d.��'W������:�W��p �͆w5����*����+m�q}a��A�qjTkg8���8��8\:t~��GŘ:�X1AnS�1< �P"����nWo��G{D��]���K"j�H�%�����[��(�Y�f�Rx@U�s��Ĕ�e�`P�Y5���i�c��8u.6����MH{\s$�w�U� t&n��t���ؕ���K=5C�Zߗ��X��[\�MjM[.�k��b�[�#[�-�`�a����[%mFuY\�ad��V��+]��*�����Ť�TJ9&�W~B0Tn#gئ,NF����K+�8� X���\+ |J�����zw£�f�P��:��.\�3s|�c��p���~�Cq3W��̼�����#;=���&d|X���[ )�3��Ew_���жa�+��IK߁��H��K�G<i�����j���^�� �O��hi��ua'm�\/��w��D6�����Y�u_ih/5,%���c�:� ������� ��߫�B#��E7c��T,Oxw�$�)��m⯑�R�9T�c���@*Uh����]�r��w�� 5ͪL/��}|@�g�Z�A:�]�WB4Oo6V`�����C��2�U��R �BF���հ�e��2gǗ��0���:�W��-�Ϝ��Q�&�6�)�`9���ʔ��Ì?/X1Α»9N���CW��|J�Ѝ��������ѫz��E���M����6%�V�`q���� :��ď:���[ }��v)�6p��/��E��H�pK��<���Ej\�;;���Sԋ!����܃���r.�����x�q������sN�^�\��������IZ#�娅�j.����Í�g-���%��M��H��=71�������!�`�"�NZ6��b�>OI���M�>��zu���z�m���.\��$������ΩR���8��d^���YP/@vٰ������>�v����5ĝ;��X *�� ���YFl�,�$��ρ���m�EY��l->�0X��pӅ�� ���8M&���u??O�(kovD��<��%��e���D�<,�ہ����B����h���� �wu���E!�&D�L&e@��v�W�,������;$Ԁ��/�2LT-w����i�_B/���n�����Q��n#m�GY�K�����긎����G��..|���k�PAȒr�[6�`��0'qp�nm#�"��P��"B�����{�L.P� ��δnU8חK��"��5al#�e�*"�u���D��6I�j4� )U�][�o-7pZ���q?�'KCz�t��R䆖{��"c��}�c�ԦG�u1���4����J.�����m;��dAr�� &��l��N�a�O�L�*��\��:LnF<�>��!;G(�H�� ���B �g�˭.��$�U���\y��9�:*iз��L��2� ;q3����e��}Q���!�#�q�\`E��eI�K��|�3n�f�w�,�*�JN>IB��������*�؇���������c� 2��>�����v����:j^wC�X���?���D� Yf}(�J��p�$H�!ky#�<KP)a��csb�~�#���=��A�=|�|���X\Ӻ��C.���^L��e�ՎN,<ᴲ~��O��h=��<���8�$�L0m9��:���Z�{���2�!��4�OB}�˞�q`�R�����CEީ6 ��A_3R
Static task
static1
Behavioral task
behavioral1
Sample
0e8c98a581677ccc2a996fefc3036c4579b084989921895b5bf78805c8951f55.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral2
Sample
0e8c98a581677ccc2a996fefc3036c4579b084989921895b5bf78805c8951f55.exe
Resource
win11-20240709-en
General
-
Target
0e8c98a581677ccc2a996fefc3036c4579b084989921895b5bf78805c8951f55
-
Size
3.1MB
-
MD5
bb8b396932810d1bb582972d040f1110
-
SHA1
ad684912c250672a16737bb49e3894835752c9e2
-
SHA256
0e8c98a581677ccc2a996fefc3036c4579b084989921895b5bf78805c8951f55
-
SHA512
0a20d58d08745aed32ab3b84abc3207df2642a95d8a9961a0295289d1c38f930108c8eee6406ec691c86489118e7bfca9793ca78b8722131a61711f864980cbd
-
SSDEEP
98304:+yVRr5LAOeB9zEDpR9rPgjE/tJ7aGL/pYUiNa5:+8ezVjkJe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e8c98a581677ccc2a996fefc3036c4579b084989921895b5bf78805c8951f55
Files
-
0e8c98a581677ccc2a996fefc3036c4579b084989921895b5bf78805c8951f55.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE