�Ե-5��6�� E ��z��_Zѐ߱�N�*m���^��볠��t�Lf}&^��˷L�]��������W������{qW{���b�P�&���ysm�n��%�0���j~��|��!l�I���E��~��'�Xܽip�^n�k0tf�V���W����-ti�K�+5i���\^P Q�� Ў���5���x%��$���#|Lcg�`��<��|��M� #�o��q�y��6� (�x%% ����y�?|��%��ɣa��TJ ̳�c 81��/6wk��F,�� �ډqD��/��j`�FEj0.�ݴH���7�p������Xe�s*�ȅ����q]��Bm]�@�:��s�k`ρ-�W =%�Vc��Aca�&D�u���l�LI�=B�>OQ�kʰ���):�|�?J0��6�I���vAp����Rp�Ͽ�"�C�{a����viz���\��'�N���w:G�\f�+����?*�Q�8��ע�@�6��q3�6HC+��Np�_�;X��G����v��6���b��&�p�L�N�N��IO3֧Y��.\��B_��D��1`�{e�}v�����̠�V������P9��*��|k�-�b��J٪��ъ�������^w^�]2��v��� +���*��y� ����wyN��,�ޞ���ooͤK�{ �c��ƶ���W��A���u��k�^�H_�;�/i�*�i�8���W�8���p�vs�ރs���%S��S��l)G�����fwp����)����`�u�IW���o��OXF���.�!ܽȔY��|�Yտ$m���U�j8��7mB��#C�p~|�o ����y����Kw&��[����B�����E�!�����i���(0k�d���6�haae�#? ���H�9�Y���z�H~|��z oՄ,�t�b����qy��4����P��3�w���p,qK���5r�5P����Pd�|���7{n�ư��%07r^Q���d�*^Z�,P�������G:3��H���N�PGMV����b� L�fR����e�?���� �Y��h ��g-�^�i�'�>��H&�����A}�����wΪ1`���<���[G�)��{:�>9���̂��S9�N���Gc� N����{6W��d������=�*��.������/�iN��e����_�fGd������R��͙��m�bI�����}��ǔ������#�7��� +�����P����ȂR"e,�4�:����WA��M�����F�gx�#)3��8��$�A$;��ۏ��G�֦� s(�y��� ˥/!��=�t��}��^��3�z�4��3z9D["3��Q�v��=2V�췶p}��@���9>4*�O|�wl�Q,Lw�h��݇��`&��˫?�7�"Gٓ����LB-��)��vK�k6���X�8���h�W��u�s<_���U�Q - ��L�5�Ed���Hwb��{��2��%��������h�!0b�C�L��#�~pk\2]�N#f�V�N�`}�(��ь=� ��wj��f�U6���[�e'Ո����Q٥��,��_ �?uPB@��y3�{h{�N֚3�ϴ�Y`�>�^Pg�7�ŋ��:E5���Ҟ�O���`����?h�o��Gېv�V�³]�;qP)~v-�U�.�=�]��+�`�8��{|$���A���#R [ q�Жoy6�2d��]R*��+�������<Ǽz���Y�̈́����E�<�B�T���7=��N�bo�} pZ�xmB&|��o�2����dbj�=���Ɂf������_���13O��a'���.P�p�٤e�.UT(xdelB~9o�^���2w8M<a���9�Kd��}�<6�wH��wp��'�V��6��b�t�2���ف�6eV��0l�C���2#�A7��W^?��1�J�0�2�=$Ҙ���"�~�cD���I��2�T��]�v=�����*H-����]��v�7Ӂ$��v^ιVڻv����;�a�e��^AFJִq��-����?�ZF�c�T�B�{��/ï��5�G�#a����|��Ŝ�2�y�_.U�3I��q�'�m+�G��pi�ę�c'~%�����[��@����-����Xmb�������#彍2"���:ig�$~�?����j�0σ�u��l8l�=�0R�x�2�eW�`H}��;}���N�;���J��_;R�ϧ��Kl�IQ��� د��䓘i5;�J͢O'����x&$�bC�����c=���U���1ԭ�#�1�)� 7�rt�����������'��� W8������b߄�Ϋm@������/}���S�2��E�u����ٓ�4'vFr��P}g�DcyE 3c|��7(D�BL)J�W�U��륝�tM���˽0/$��05�>�i�G����4Q� C��E=@WA$��bYD���cG�e<7�1��p�ǵ��ZE�Iuk��:�{���>�.Z��RC�K�� 6/����Tp�꽿��䶛`B�M�'ἃ n����ߓŹ�=/4�K�bc.���k!�A������ְ�zR��Шᄶ�-�V��s�:;�����Qn)0.aƷ�<y�c�����s��ֵ��;�ѳ�cƲ�Ծp�3��C7�Z��:u�S��6���}�|��|��a��?��3Q�Td���N ����@�,�����F����Q#+��A�sĒ�m� ���O_Υ�q�Xm�?H2�����Ǝ�W"uP���7��%6��3b)�Z(��g��� �tB\?�|�K,0כ߽{�A�=�>��μ*�����}��- ���Ѡ��>��_�ޔ�Q�ʫ��1�\��}��m�}���@eG�s�#�`���ę���V� ������D����A7O�S�/>�i�*!o�_u���܍ģ+��g&��(��Ş:HsjC�� ��>,,5YI��h/�.ɾ'R5V�n>y@2b�0�M�������}�]P��dBC�\�J��I:�vxÀ&��n�L���!�n&A���|�cX�nLNM��Dr'�TSҐ����?��̱���c�� K���]�5�9��t �E!��Mc��y��nKT��������o��� �
Static task
static1
Behavioral task
behavioral1
Sample
677858310f9f4c8f6bac736ea1e0b87e08d58f270c479257b32089d408d4cb7a.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral2
Sample
677858310f9f4c8f6bac736ea1e0b87e08d58f270c479257b32089d408d4cb7a.exe
Resource
win11-20240709-en
General
-
Target
677858310f9f4c8f6bac736ea1e0b87e08d58f270c479257b32089d408d4cb7a
-
Size
3.1MB
-
MD5
8eb8080595c09d49388ba0321720f4ca
-
SHA1
4c7ac7bbc67c3d3663db5d7a3a48288c366d65d9
-
SHA256
677858310f9f4c8f6bac736ea1e0b87e08d58f270c479257b32089d408d4cb7a
-
SHA512
b49c54fc38efce7940bd0b66381017f458f7252927ba07efced7ce619377513c4c5956bbe21781acab18dc76805d0b611fe004a6efba65d103a0c1b060f45e4c
-
SSDEEP
98304:4KDjE3DiICNStg2WCycleCwCpSP07m/j:FYNNgYyOeCtb7m/j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 677858310f9f4c8f6bac736ea1e0b87e08d58f270c479257b32089d408d4cb7a
Files
-
677858310f9f4c8f6bac736ea1e0b87e08d58f270c479257b32089d408d4cb7a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE