�-Ux��6\���7�� �L�u���f���z�Ĭ�����u=�1F�ɢ]���F��!z���������<�R���6y��D>$�����F3��qɲ���rN�|hj���-�F���88��"һ��P�UD�ENxTj��y�� e�I������W���cCV?�{[E���#�4�]���R�ED�i�c ܦ!��-��c��暔����8��Qb�ŘW�W2�����G�v���ȟ*7�7���$�^���AD�4&VP2�\~��7�|��z. aͥ�������Yv[Pٔ��ݾ�C�����ǔ�Z���>�e��F�Q)�����1�@t =Ɉ��[T�e��`� ���M�D#�u~������A������7vzii�4U�l'�4�LU8_` ���5s�%���;�!\WE9h\��܋�ص�t��TZ]R�e�^BE��B�fn�Jփ�O�k�5ܤV����/[��S����?���BU_� ��-ʴ�#�f���<P��^�ԯ�C�Q�E�;�%�����J��A�30ߨ�F� �뭕�nm{t#�%� �G�>���}b�%M]7+����<I2]Nۡ"s��3W��]%b|���2J]¦7�hc:��1�R�|����j4�iU1�P�� �Y|>��|� ���j���t ���{Cp�3ZA6�C�y�#M��́Rs=]{�J����!%��S�Cx���n�d���2+l�_@���ƅ �����zk}���,�V�BG�CQ�z��9�@;g�ڏZ�vq�IAe���b�uhR����(���\-zFg������i���Q'��D���9����l��� �o؎�V��� v�z{�ƺ"��� j�Iv���@������| �o�� bm߰[�D����� ����W�G]QjU�ͭg)��@��z��W�3}z���F���Q�3�.]_�eh�*^�ɾ�[si���ش��=x(���7X���akj�[�����xY w��ظ� ��+ɦ�aP)O��zS�Dp��^O˹P5?T�����&mr��*6͞JMNjMȞ��?v,S�w4p�ƮmG�I��S����BzFr;��hx�J����`�ED�DW���u��;���rLO�b�~�v�Mԟ"�P����1�\o[�ѩZzLf�Q�|���m����D�ߞ���P#�?�5��Q�d0��� Gn�}k��� ����%2I�Z������f�)Go`���:��t�[O�]�b��ڥ�#cYsO����8���M����y;���SzI���]��?�F6�t%��ò&(�!|_n~�?���3����뫏 M+����w+��.xj���)Á��'��l������^�Z�LVn.����(�K���t��\\t��ѷ� ۏ��H��MÍq���6aHH�eUy�������O0,� ����=���/�7��r��9�b$��ǃe(`�9�]�����B�HM������cq��� ��Q�Y�"�Κ��{U�, w�x-��g�lw�ЀGY��K�_�<��*��=^�A�<�d:*�tF�6�D{f�RϽ�t}y̆n5:�����v�5�e�a7����c�B/���j��݈zf�<�5$P�W��@�W�K�@��Pa�X��<}��-ަQc��Z1��i�a/V��F�wXPE�.��u�x2��")|�^��?������[�#�4?�G�G��n��[�a<^:'���NWM�4�bS����A�(c��K�#T�!7PP_g�,hp�LPs����8��"/�������T�M: �� ��G(�3zfgF���; ϩNh�s��se�_T��AT�Sy�ߍ��ħ�˗}��9'I N8����H�+�~���)�e� �s�h�����l}�DP���|�]�D��B_��SJU���ڜ+@Gg�zc��5�7�]�ۉ&C#G�j>��(�B���>�0�+O��0O5#���D�sz�EO�Ja�1@���l��l��%Iu�_=(8��!�'A�$r� 7Ԍ5�@_C=��K��P�Q��ǚί���blP��F��w�O-��]������6��BU^x��tg��\y�Ɏ����~�7`)l�������X�} B8֒�n��͜W�� ?G �Lb�eW���W���~��,�����sv��jG%��N�c;k �Ņ�A:��\D�W] �c�>�[�чBӇ�R~ #��������{SW�D]>:���2ά��g��)]8z����Lj�kֽyy�����,��I,1��O�� ����sdg2+@g��f��[�=��i��O�:|S��¶����'������Own�X�=��/�ݖc6�U+���f�D��CFv�^���fӂ����'FEeI��#�c7���}�k���=����E���`-h��{y��ڛ ����qQUZ�yn*�:ݯ�О�$�¯�y�l�?M}�4��ѷP��]����^X��R�������i�~=�T�bn'���~��e�%[�����Pi��ep�{a����b�����(%!��k�ub�ͧ�g�J�Z"���^��v��~����Ա���U����߆� >��ҏ66��b��6��ۊ�E����8Вt���,��0�}����8�-����q��(ԙЦ.�E�/n.C�ݾ%H9%������&���)N�ҕ�� �q�DY�]��=N9P땛KŚ��v�������t�m�,ҡ���a�q��]� �C}�S����hw���z�P��/����0��e}�P���q��,�lU=co% K��(���R7�`S7��`uY%s2 ?�mb?�XB��V�]��$� _ �B�LF��_~��)����s"O�}��ː��R����i�vF=^(��:/�/��]��Zu� �V\�� "E�4��$� /e6+����E����<ߵ���)Jqn�=\���>��~�f�%�4|<�-SM����53��L>���\��]9k�tT@��N��\W[V��x�c��6������Rbe�lْ���ٓ�ow�@��[댂o����9>H���6�̍�O���B��^�� gtM�cm���R"i-�����!��1����C�;��V�B� L��#�,?G#*Cti��`�o�)h���Z�܇<N�g�6�����O#�D��0���n�-ݩ�zX<:۠�%��3� �dlS���.���k4?j������w�I����/��H�� ��X��1@:�h��}�4m��ix�|8i��N�g֪�7:ךë[i~��ߒS ��1*��Ŗ�<���`u���Wޛ�ؿ�c��s��v4��l^�l��K��� z���>�F�+�?!��r]L8d�vvT
Static task
static1
Behavioral task
behavioral1
Sample
10ad94fe940be336a59041b9f2bd2df21c2e13739ea6d3a5f3e2f7e8ea9a9632.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral2
Sample
10ad94fe940be336a59041b9f2bd2df21c2e13739ea6d3a5f3e2f7e8ea9a9632.exe
Resource
win11-20240709-en
General
-
Target
10ad94fe940be336a59041b9f2bd2df21c2e13739ea6d3a5f3e2f7e8ea9a9632
-
Size
3.1MB
-
MD5
ecc82245442e28fe295f5f4960364b20
-
SHA1
00e5c5e558831058824ad9a309e10cd19985a4a2
-
SHA256
10ad94fe940be336a59041b9f2bd2df21c2e13739ea6d3a5f3e2f7e8ea9a9632
-
SHA512
48634575b898c59dd8cba2568a25c1b75664983dc1d9ab36145bf8c285a71507d67bc47491781339a9b234fadd5036d4ec98576c46a586af488dca9d1ada623e
-
SSDEEP
49152:GcpWJ8oIMqc5LUcV5ekQkKG+E9UBBbATRkMyT+ejgog+vIeQ7qirxW8gxqWP:mJ8oInwekTKG+EFN3yTDjgoBwYiroP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10ad94fe940be336a59041b9f2bd2df21c2e13739ea6d3a5f3e2f7e8ea9a9632
Files
-
10ad94fe940be336a59041b9f2bd2df21c2e13739ea6d3a5f3e2f7e8ea9a9632.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE