ڦ�[����vl��C�GV`O�7T�>;����V�Y��X���뀐s�W2�F�G�Px�c>0`Dh��l����m�gl��7-����)��͠x�;������(�_���A�!�F�g=bc��G����� ����D����:t&��ҡ�����m� �����')"U{��).x�_ڃ/M"cT�4��}�8zSl� ʺ�xs�Ug�i c���`9 ǬX��}u��n�5F�s3����$U� E^��5#�ɰ����[ek�r��^7��f#�4Π��o������[�Qq�B���N���t�e���}/5��x��0���X���VM��|h����߽ol�-���H����{T���t/\��� >0"��,a7x�]ݮwMsz�=�K-X��+���&�˽a��س6)�#�@ʕ���VcLn0.%� �l��%Z����z�<���x�>��Cz,TR�@�j�~��Y������ѓ10G�{I���a���2�M���}�9s�1.�sN�����X��o;��L�eE덢`0�����x��W$c�jA��4!�'U\G��\x#i�T��-~�����^&���72J�L�V�C���|���jZ����H;�� e�r��ρXri�p�ӆo��Rb�>x���)�_�;�_6��[���*wX��כxEj�l���|����,���ev;�^Z�OG�l�YVl)�ض�}��44�`�bF{�b�\c����� ���� �?�K�\�Tf[İR4����W�»q�0�� QF�#Gu�;N�Q�/}�bF�Ѿꑟ�����v+�v��I�]��.�W�h��B*U��_� ��<,Ąч���(Z!M��5o���G�v���d`RH1�h�ӈ�b$ؼ���@S-\���EgHu�!3�4sݢ��kV�a=�6�(��Sp>�,]��?��nx��W(���1`6 ��C�v�G�)B��4%=�-W��0��+�uw����-5�e*�-<�Y�Ⱥ��m��Σ$d<�iNh�Q!|}"�awr��S�%I����"������-���@L[ED���BX�<����l)#�ƒj@A|�i>~I�sO�4�+����: 6�O��N���G�����������ܶ����:Ř�*�^l�(!��m�h�joAZ ����Y�@�2���BDd��lY�!+6������Z�]�Ə���� �p�����RO<�L��!5����=�A{��O��dgі;v�!qj�[1��W�۹A��,�"�lҨ2`�v�N��?�tw���,h�l{ 0ƈ)�u2E7��7e�x~����BD�= R�d*`-�z>��E�����[���^����&f�6�I����ġ���Y��� 2��kka~�����É�a����D��2>�P.��Tmiqf1ECs招�ճ��˔��%!�=V��9���ww�2�b�ӿ���������-o0&�c�_��G���8E�{*�7�kG�+;<օ_\044�V1����e�RhO~~��{�~�X��Sj��ӗ~�(+�]t�+t ib��O��������?�5͝��ί t��C���æL�����*�3��4v��89���;����f���ĥ;.�|�-X��eʬ�xM�i볢ض �ZjL�12@�i��F�*�j���{��7+uc7>�u��`�-㼩��$g��E��)' g�]�ry/�@��^��L��q8&i��S�o���g��X�%���|w��d��b�`�[����8��; �¬� �el����k~�G�Dj� �rε���U<xQ}�t+)�ά�&�m���T�9Z5x����xA�����O�q���+��?Xsv#��`�dM��uF~���ȟU0�Oh��?�D2���6�L�{�������s�&DŢ�nj��ݝ� ��8��W�A��n}���R�f���l�y2���9i��T394@/ŏK�C�,Kp���ZG���>�����]D.�I����I��u�^�Gw��]��p���&{��[}���r�욣��A�J$ *w���/dah�E�N:v0�c@��T�|�$0��'W��y�7`�E?�P� �Fۭp@���D����$�Y e��!�'����&��=36j����!X��0�b ;�^r�}w��2E�"��bWW#���� �?���pѳ�ݹ�T��_m��R�"� �+N�c�N��15�`㍥,�l��.�$�a��@��#�ݫ���~����$�e:|K5"ee���Pb����c~�0Bh��\�vi]6\�����0F�$�bZ�Gm=���5�W��x��U�C�8��z��I�b�ʔAi^$8����'�\=�{ax��W��C��&��h�%���o?�z��6Fʤ���O��.���|�x���2-��q �����f�Q[Ry���Hc�N:��jPg,��\c|�N(����NZ���-��|%%�g �M��O��QڮȚN��J��o�7@UJ�*�#ewC� ����,�;���+�����f|���܀ I�{f4��h��IG�M�hzx{цz�yLh ǫz\���Ҋl��h]���!]����+�Q�_C[� ���T�����i4"�V$a���r��Nio�\NE���d����nLJK��sy�EZ��OUL-�������Dc��9��� $W�orB�b�<����?�������%u�5�l�r�0��f��/���Ř?o�&�'�.��^�=PT=J�����Š��B.�x}��~�G=���=�舼%L������ ^��2P'����pC��� +!+-6�S�G�s��p�O�U\�Aک3��*�_�*�/yh8�|T�� [��7���__8 N;Ӧ�ţ��xl=�Z�<���@,Ђ�ڗ��@bI7hQ?�:疽��L�w_�E���%�JG�H�y!���]�]:�xF.��S�� ���c�9c�c�E�tl#��Q�-��&l+�b�G��a�����K-��Gi�u]ET�[��99�<���X�{ ���ͻ��y7���g��!�����o��V���o�W���]��uק� �h`]T+��5��<h��̉��h�3D�{�5e�5}������ޭ��Rw��Ffȩ^�fm�����F��!7|�/[�t� @���l?��'B���پo��F0!�Y`N�Sa���p2� �}�O������'��8]S&pМ�iF��mqcDH]'�]���m���A<o�h�Y�Yf���~.���EUT���H����0��2�� ��\{��xU�I�*$��������8��4VU����R-��e*m�=����<�& N�i���@��N7��>1��I�����(���Y� ���A�|��{�:&�����#��e�� SK��p7h��e��Z�I?�a���Ey�Êw���ar��MFsh�]�"mi\�k!��"7���U�@��� �q�*�J��,Ϟ1����C�;�{�"�^��q=rA6�K���&�Q�DO��ز|3QP�4����������]��mʔr�J�ѧ8�?K��B �N���L���i"'�� V0�pz��=qghYDhU��7Lk WH!���Wm.�;�9w����@����ZE��j��S��j=��˅.�p=�ē�=�t4(�ň��nyf�WmĨho�#Jbh�l�k���ޯ���/��t?.D+R�%?( b����u,�gk��HB+�ߋ��9�F�|� �5�Y��P����vQ�= 6��R:x�!N(��!/��
Static task
static1
Behavioral task
behavioral1
Sample
4cc2d15b439c7c2a012afa11a535d4550eda564b6b81bcc482f8a7e68cd7d03b.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral2
Sample
4cc2d15b439c7c2a012afa11a535d4550eda564b6b81bcc482f8a7e68cd7d03b.exe
Resource
win11-20240709-en
General
-
Target
4cc2d15b439c7c2a012afa11a535d4550eda564b6b81bcc482f8a7e68cd7d03b
-
Size
3.1MB
-
MD5
efcc14743f954468aea51fea0a45da06
-
SHA1
1dc7878d806f5864690c9b033da7e510712518a4
-
SHA256
4cc2d15b439c7c2a012afa11a535d4550eda564b6b81bcc482f8a7e68cd7d03b
-
SHA512
68799bb155b563f0026acefcb595cbbe36b2b1ef9138e2a0848583164c1ebb4bd0c0a9634ac41b01dbd3beace13d54e179fa120bdb29719d389826303d5eeac2
-
SSDEEP
98304:75KYDESodo9KTGrhsOqAq2/2/zzzhbzOJHibKF:75HMCX+2erhbzOhib
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4cc2d15b439c7c2a012afa11a535d4550eda564b6b81bcc482f8a7e68cd7d03b
Files
-
4cc2d15b439c7c2a012afa11a535d4550eda564b6b81bcc482f8a7e68cd7d03b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE