�f ���ܕ}���ɾlް���&�C��=F^�eA����w���|<2UX�Dbv%vI��P �_8� pѨS�%w���V�<:ۡcP�,̨�>$O,3SZ�bn����۞ͥp�s�~�����OMFE�;�|��ϓ���#`��_�^q'�>mwjFd��5u �s� �+�j��\I��0r���zj�j,����@`+��&�б��� ��qr9�}v�T:��p��FТ�%rNzg'x�-C0ߥ�K!"����T�{ wC�hv�7�n����l}��ї-��� �A�+U�W���M�f��u�lu�M���-�1����6Hl��e�y2�%UY���|�E�s�?9�ϼ�����$�y�M�B�Y�=�tKo��e}q��a,9�re��Kh*�{����^d��-C ����U�kRu�n��}�ݘ�LY/��^5��C���ւځ��x��H _��vH�|�"[��c�,���e����G���b\�rmX��i�!�lC��Z��6H�x㓻��qw���n�\⁺i�� (B^M��r֓�z�V�o/�)x��p$ؕE�p���T��t�^v��8��h��z,j��*G�6��~@���.QU� ����6�,�'�`���x�T��4Ȭ����U5�|+��Vg�3����R�Nmw���]�ݩ,w>�����gЏ:*��k�w�ڶvۅ��X%��"��+-�l _j���a� �[k?�=����:C���C*o/"<�7��:�$��JtpK7;�����)t͘ÿo}�C��n��7�xO�ws-#�����Tă.Vu߯Q ���ҝ&;E��ԇ����ª7k�����M�)g<�h�#�jC��=W��@���R�� �����p%��T��>}0_.�XcQk������sT�ۦ�#)�dz6�q*!ÍTؤ����BΥFR�(\d��J�����V'���W%c�x���D����{ �O��?����ԑ��&HY�k����R�������N��K�'�:49�Q.��J�����"� F#�]$����e>�`Qf_̳Crd̘.N�����iY���Q[�p��.Z+;������.3���sn�U�;�/��"_��M�4�4�>J*0 ����J,��4y�`�*ћQ���!}����]�oFn2?��� #���4+}�u�|P�@�����A������x��LE�aq����G��-;�� ����CE���>ɘ��������c��MsD��s�R[s�;x�Ч}���R�Ԯ�TQ@� Y0��1���yQ���[��K�sƴ퇡bFF��������5�r=@����`����UÀ�@)r#�s-m��)2d����䑝�\����59CS,���N��.�a��2H�����.pMH�ޱ�����t�]�l<��X��ס5.pc�3]q[�����a��#�h�]S�b�:5/�R=�Y��3�%�������Α�T�8�����i_���T:��_8d-�z�7�Я��u��dԕP���-��4�o(v֢"���}�̱��I�]v�do��z��@�? ��s?)ۦ�V?>��7��;��E+�3=���G���"�<a�N�=QV���p(<�l}�f�e��76`���W]ǒ��-8 �ه3����m���a�����A���M�|�;��o�U@��`Ā�A�߾:�몆�٭��m _����g̖c��y�ø��������s6�M�/"� Z�D�\H8�I�(B��,v�,�ZI.�Oj�~܀��h[�pl��a}�<e0��L]'� ���{�l?ר� ��������I#�C�� X3���cJ/�B�����v��]�L�k�^��F����Ɖ�?��*��x��ٌC�.�����d�E;b��L��*�z�*0����$���i��%P?�{�j ���FS�A*��D\oNz�i��1���5��`���,6R����h�)LV�U��i�O� 6d��)I~�2��(��s���vJ�Ha��{U�b`(9�29�ְ��@���@�ݦiXXп����8c�}ᳺ�����M5�����I�>Ɗ�>���=tѝ� ��mG��Tg�O����1D����vV��րn{��+o�OQ،d�{���vKWX����>�z����������Q��r}�7�W��@�d� �N�ݦ�UZIέ]�*gf�>��x֮z�|�6x���$��\�Qѭm��jP��s}���-�#~�i��E��P�Dl/U=RA��|o�_����]�n�=�zܮ_��Mܗo��cN�(��(�Uml�t>�����m�| ����K�_�������S�[��&2� =By��[��rU�9ϗ��3��B�ڦ�F!unL-�%��:�{������5 ~t��2�C'��c2!](�N��s����N{k@,���-�.~��Gӆ��a��Z�T���bq�f�(U&?�����P3���"^i98}U{p�b�/���dQ_&S�����?3 �:���Ӂ)�����j���̋ȋ�R0���y� ͑���ڥ��:���x�Y�j`����O������+@.el�ZO��=>��SPk(Jr� ��Vj��|�s�5��G?}�&)�RA��6�78�W=�E@UFAy�� �:=�j7ҷ��@����/@����3\�j%�Ml``��+g�]4����S� G�GK��Cc%%�)�Ag���'�߁�����:�7]�^�G�X�ν�p����C��~�<���=����;��TT��6���ަ���;�1��而�NJla����LQ� ��?(iF�}�n����XE`�lI��<m�Hk�$'��Y�:�ϱ�Hk�����|ɚ���(��8�����%1�+�����Ft����W�V�<��~R�n��pT)7��ޱO�pٴ��fҮԩ������<b�����`�Tv����>��)Y[6~�Ѽ��2\c#`���Ef�Ҋ3�|��� J;�8x��B�2ˉjܤ�:םSj>�-�m ��Jp�,͕XgR������SF�|�;�&% �z�,@]Lʒ����ܶX%�����%��+p��nTc�"��Z�&��3�� ��e�� �K~d$|���)z^8Nm%��xV�J6��.�Ή�4IX��"�r���ͲW���0K�U���Rϔ`��-��t���?���Sg���Z���;/>#h� ���=����� �)|jݨX��a=Z�j%T;;��&��U���_�NұI���?��י���&O�����h��g�e�����]��,6}r��M�m���n,��iU������kf��4y$n*܊|}n��ǽ�&ϥLF֜KW��� �R|j�2��>�9���/BV�O�-��φ���a��r����ivߐ"Z��G6����wݹ>˪���YB%��F�w��pdd!X7�/�b��
Static task
static1
Behavioral task
behavioral1
Sample
2e38babcc1e218afe1504dd8571155b0bd870f85f9988b4e232c7d34e4a213fc.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral2
Sample
2e38babcc1e218afe1504dd8571155b0bd870f85f9988b4e232c7d34e4a213fc.exe
Resource
win11-20240709-en
General
-
Target
2e38babcc1e218afe1504dd8571155b0bd870f85f9988b4e232c7d34e4a213fc
-
Size
3.0MB
-
MD5
d37d6f01571e9f510d7ca48126484e14
-
SHA1
32831cc628d5464e425354534808949b48c8f07a
-
SHA256
2e38babcc1e218afe1504dd8571155b0bd870f85f9988b4e232c7d34e4a213fc
-
SHA512
daed5cd1ae0bacc39ce5a00b99ac63208f8c21dd582f353e3745e98fc42e1eb2da911906878f28b23b0efad6e8be139d83b5ca10fe2790bb38d881def2a45e7e
-
SSDEEP
98304:axNTB3vcakT6v0kN4pNeH3DR30kti3daEVJC:axNlcakOhWpwzR30ktQMEV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e38babcc1e218afe1504dd8571155b0bd870f85f9988b4e232c7d34e4a213fc
Files
-
2e38babcc1e218afe1504dd8571155b0bd870f85f9988b4e232c7d34e4a213fc.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE