+�ut��/�urᦏ�7�Y�^�zKC��j��j����ɮʴ>�������G���ә="���~Ci+��v�vC��m6�d� ����Q�Y(�kJáB�=����S���t�5M�Q�V�k�gi�����P+̍o�,d�kQGτ���kU)z�?r��b'��iOW4be��#S�,s��50;.k��u~2#��^�1,���2*@!Փ���܊�~<kq�'}o��:������2�Q�R?��<-�Eg�[���n*�����U!�J"s��|�a��;0рK������P��c��q�1j ��[�㗀[���R��aA�q�@��oኃ�p�~�T�2�W��qF@\�4]���!Ԗ<'�<��(Ɗ��0]m���kx���I4֏�ɰ�&+a��I�@X�g�?���A���C�����l7�/6���Sa�v�!HS�%��eB��O*��.�!*n\+�6�����M�OG�ѹ%��G��FnM}����+�@����pX��A9�قRѠ�y�X��C�K�w"�D�g�c9\\�^��-pH�eL[���P�at0�OEX異���&�E�A!�aY� d�J;7�*m���ˎF'й쨬1�F��6����*7���}&�Gk̇�`<3�lu#���H"�n� �n��hd����p��V� �'MBG��r"^��6<(���Jk�Qo�!���E�;�A6���Y�P4��Ԡʝ/��'}ǠҸ���> ��M�u ���lxUJhU���؝���w�7��L*���%�I����*d= S��Շ˺� `jd�yq�w��]����p�= K�U������ӂ+��q�L�R $�j�9pb��K�<�B����]s�r�b=EO\e�s �W�sF�~���S���7�cdા���{�}!>1�}�[�z�6~��%#b�tp��d�VG���V4��G�V�Gp#J��*�����߉��U�|Te#���L�h�_d�M���� vjU�����6� �q�_F-P�Z�o��GZq+Q�AM�FɬX�#zb?��/U�$�+��F���f�M����.G��ێ��ٛf:��3��MSf��&GM� L&� L�@�QX���RX| ��.�?��m����Da4��I{���H���J\c�g��u�k����� )��"�h��p��궲����ί����ے��i&�3pg�QE"-=���� �V��bS�������O��B���J4>�����[�qe���S`$<���%�9`cK��FyEeu�N��;�!κ�e�^����n��/痷�3z�fWch��v �&QX���1�ZD����q�`��f��-��\�_.�*���ߌ�"~���� #�XZ���C "\h�YI�j�-Y���Q�k����g�wד�=$� ]�S�<w0l����3�ϝ}'�wTX8l1��*G�E���FE(�?��K�G E�%�쎘["KPJ�eR�����;s�[Ў���W�p��)��e�rF��>ݦ�O�P�5N*-I�0���9���L@�zx���_7L�8�rn��]mS�D]2j~� ?�c��bz��%�͜)�i�[������<��� �0k[#g*�wP��MQ�b�#Q�fl�U�o���&��EH�DG��\ B�jbg��ױ"p���_���F>��֠��}�b*¢I��Cf�Ŋ)!|XO���ǟj��@��a������J^n�Ū56��]�=�b���~��ڰ������d�7�<#��@�N�k��۹v����CX-���S,3f��rw�f81hv���#�ΑmY*)&f���)����&�G� ��f��o���I,j��t֦uk����B��X���?�,!m���Q�B�����8Fi����� >���X���oJ$p%<�C���}Ao'����lr�+Z�l�ž�@�����I���@F��37���:� �M;��uz�n�����MҪSʴ�f�q⭁�G~�$��y�Y1��#�H���������U"�.�z{<C�x�6}0��J(��Qr&��YkL��*�"�mA�P��ف�s��8���0B�*~4e��f��|>h�1�����g<1̴c�m�)���=�ۜ�_J��e���喇�L\%��������4V��e���JMW?6gy5�,ƀ�8�$r�{������(��I����� ����Ko6^J�Ta��_,�N�wziW~�4�B*����������:Z9��&: -��US�ɽ�Iw%�z�4�!{ �]�{�a�u̮��h�� �����QW��XFB���s�9ݪ/IG�'��k��E�W.r��꤂�F�5�?��;��Q�y���&�$ќ��4aFD�M���+��*M:fr��p�m���������nF��8�6��+E�M���}���sf�8���;I�����X�ǺƢ�)*éw��G��9�T>.�C��#S����3�&?%o�z�: ���A�߶����0=�f��q��ۃ��§Rٗ��8�;�\��E��WM����M�\��l���b�=�7{�S�|�������m� ^�O#���U,��7`�_����(h��U���2Zt���k��� ��}�*7I�Z2q�1V�`G��2�v���?n����;� ���a�E���TJ��1�b�#?�~�f-�����J��L�����:_0�����6�[�7�L������l�H��[�����s�_Lh��ߓym�V��A��ũā�������L�Q�-�\�̍��ۥ��S���ѷ�o��?�jo� ���3����^���O_Z-��)�>�ZQ%��C a`��)�9ݚ��,o3C�= �r���n�]��p�G����1}��#��Lb˃i?X��OOr���*�)�u0? ��/J[=D�y�ީ��O�Ō��0N�ɩQ����T�؎m֏ΝO��v�G-�� ��Rό�9�p@a��\��u\(uU�.E��h�����z���?��BA��D^~����J�V����pT:��T�vYN��(�o���{E�ؖ�)�9H0�� 6!Dq��=7D�y:��p;In�������Q���{y��Һ��ͷ�C���|(_��:X�����=�JsZbH�̽�J}�����`KT9[�g��&�D~(W#%* |iA� ����"|�庛�K!�u��f��D�q�^vg �g�4��y��-�֨����`��Sj�ͯj�Ϳ��W���]uj�O�<?�~:��~̪����}Z-,�d�$�D Ä��-�>'Fפ̽&@0�[I�y��f?<�
Static task
static1
Behavioral task
behavioral1
Sample
db7417b64dd084d1bef7c057e6334011e112e58aec81b70d161360fc317dc097.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral2
Sample
db7417b64dd084d1bef7c057e6334011e112e58aec81b70d161360fc317dc097.exe
Resource
win11-20240709-en
General
-
Target
db7417b64dd084d1bef7c057e6334011e112e58aec81b70d161360fc317dc097
-
Size
3.1MB
-
MD5
bdb1bee2949759faf18ac0a55f9144d2
-
SHA1
926f50fb62791de715e36a25e61cd54f61210ad9
-
SHA256
db7417b64dd084d1bef7c057e6334011e112e58aec81b70d161360fc317dc097
-
SHA512
51052f163afa3e7dd777ec556d61cd9455863d3f3ee07f06a8fbf7dfefb2cdc3cd578c7d4552bc6d8423bdc5b53b772ec9323a3ea397c430ace376d8b6effe40
-
SSDEEP
49152:SmxYvrqxV6yZsObYjqkR9/WZMWAIT8zpgUYI8PtMjTKc2QoCHL51TDMvf72Fqd7a:1xvyJr/WnZ4KQ8FMMQQn72Fqd7HWn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db7417b64dd084d1bef7c057e6334011e112e58aec81b70d161360fc317dc097
Files
-
db7417b64dd084d1bef7c057e6334011e112e58aec81b70d161360fc317dc097.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE