�Q� �HY&gL'�6!�����-{��ĵ3�����B��L6��3X��E�%�v�o%x`���4U�_H��l�4�J� �ͨ�I3��z� L�M��b����!�n���M��aUz鄦��t����&�ˣ���9�&�� J���#�e�a���O�^U;��_rD��O�}���Ab.M�?Ѓ�/H�l�����s�`k��aʴv]�d�4h��a�����ͅd�_!^�a�7�|� �����ʔ�7éɝ0/]�C�_Z��}�`3Ok:�`�����*.h�W�;Ge������I�&���H9�W��%���DS���u�i<��*���Gi\0�aMi��Ԟ5+=.V���<�m�nQi��|5=�t�Lh�]�{KE���K� �;J��/ ��2P��k�-о�ҁ�܋WUx���9��i�X�$7��|�a3���4$܊l�����ב������d� j�=f�����MM�q�i�LTtXZ�ܳ�?�FWU6�l_k�ى�b�'��;�ͤ�q�:���Gn������� �.��<&�D�v8�B�V�����M���=ɤ�:5���#4�3�� -Aў}q�č+�N-V����Ğ�C�0ۧ�K���5�d��J̾j�*(ݨ)<�MAbۣ;J�ɉ#�k�G[l�i8z�]�";��-�"�O�`���z�,RH�"�y~��A����J0B���.���w�ZuIFb����+c��%Z��V���Y�ƌ�G_>����}�fNH�O"��Į��Q���~���Q���;8q�{^V�?�3 ��a�+��1���+�� ����k�̍����]��楽��X���R� -Ap�������/�HzL��Ӗ�"���=�Aޯ����mjꐻ�a����o�2�n����A��5&iǼ��B<B#?�/`b�xY]2�=�[4�!��4E��1��J� /����H=h$�C�'��&�Q������R֦��PiD@�3vq�<�m�`3�DK�����(��h��)�R��P�G4�[����N��� EYn��Dz�a�� �����s���щ��f�J�d�cM�0��B���+/�S�w���@�x�NN%��<euxL��ߓ㽑����x�!���]���l{�EN���c�Y�7,�8f�ȑ�:���i~�p�䤐z�m��"��|l�P��I߬J�g�N�t|�*Tʌh-a��b��UTU���1Ɨn:^�����^kL��J��RDC�~���,�G���8;z��(Hi�e*��d�����:�%-i�0�hXk�O4�7C�|:[g<\� ���m��d���Jd�Rԇv����1� �_ �)���Jl�� �̐+J�k�G��>�R}�F��0◹���o��3��v��]����S�A��ϗ�M,�g��O��������k^�(S6g~�c[�c�v��O��.r\�y)F�1(�\:��3�XN*�G�ʖd<&U-��X�ul��!�����Xc��l���6�=���8ډIڏ��PDC�e�Oɓ[,79������Jf�q*�XGF�LG]��HWb�����S�w���� �3l ���R�Y7P5�{kFgl ��#�))Q�tK�7��u3KF�jZ���$�`�5��ҟ:�����,n�粪�j1�Ou����W���m���tq�?S�����{*cS��z�?IZ�A&�^Z����Y�rk�?�ڪ���40��{���У�ZI;z"m��i�Q��F�����4��4�ۨp�c���o����#9��tF���^�7Wɽ\(>� ��i^n�bgU2��Xx����#�Q\�3ge0:�̫�q'��:��C����s_���#U�� ���P��"���r�in�Y���'DI�Ω-�s���2>Si��ۍq|�OsRy5?!S��åa�E��ѽ���XU�����G�hYL�Y!��"�yN+��o앺�LC�%��Gg;)�v�F�yY��u]Zt���ϥ�^6& ���9�����(t!P�:_Q��Tۜ)�$lf.sRʙ�v�{�M.O��Uaݏ�7C�FYIŒv���[��A����o�ƞ�+� T������y��ч��kgíi�������y&�:���H���r°g�L)��b�|����+�f�Qw���z�7]���i?����+��f.�_��d���X����k����e��b���6��2��B蹺�g��Iv�H�y}���\tf����o��MQ�6���a���;AH��NL��/���jd���X����3ʺ�|���ን�Az���ذ=J��.U�h���:�h,(F��т��^sq .r��;�j9\?��@k(R7��U*h[���k� E����ޝlY�bd��m<&�*S�{C{nmװV�D��@�n~*�|�M���MMX����r�K>��~Rɑ���Ea�/�R.R��v5�1�}�\��r�;���qtऱ���;���8�6;���bB�)����O��Q2T���|���� u��+*O������P����Pd]��Xߟ z�N���bC���?�&U� ���v���k�.�-ltkH�� �.���d�j��a��T��d3R����㎦����b�zJ�]�̄&��� r�Uw8ʎ���$���-8aN�A" �1ˁ�j.6�]���ᮍ��S����0&�]�0�Z>A���N�-���V� [L�����˪��6.Q� ��}7Ak�����~�+`z^�}����R�O ��?���"8Z��z!�)$��J��;>�*('$̌!%��δ�t����j��#a\��x���N�!מ��>�[{?G���~�@;�t� ;z�,bх&�=��r`���'���$r�ڢ��������[hV;�E��JC&�{���l:Ҭ�Qc�^9x2��C�� ������_/��z!Q�+"q=pBA�WmhM"��䀠���8�����6E�Z�I %W��B��1G�C��X=[�����]cݤ/�d~2X�HUQ�ao�v��rl�|S�hG�����;)ڎ:�!a�[}Ss�<M#����M��ϴ�e����z�8�g��������V�?��}9<���/5��y�?����t��nUk[@D�6M��}�n/����~���3F�TL]�Gm<`�Մŏ�*��k F�3?1�R�*s��%�������t�������"(�� ԻU�Xc��۞���&\ �\��� Bɛ����ů ���d��&rGz1WY�R�<��b��-�l����/j� 0� �=���K*�n}.) t�i��7s���4pD���S\(M��5�yQ�����}m�(<�{EL��w�R�(�����6F+�С*+���+/���"a"��*;?��b_,���{v����^S;�MI���h*Z�io�"�b��0��b� $����i�%x�� ��! ��`���
Static task
static1
Behavioral task
behavioral1
Sample
31c52d27636794c19ebf59542dbda410e87461db574af5f5520619547a9de83b.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
31c52d27636794c19ebf59542dbda410e87461db574af5f5520619547a9de83b.exe
Resource
win10v2004-20240709-en
General
-
Target
31c52d27636794c19ebf59542dbda410e87461db574af5f5520619547a9de83b.exe
-
Size
3.1MB
-
MD5
d0e01d6b0dd18c0d735e7467a0ff25bb
-
SHA1
03616ddc13c051165a07f938a5afd8788716c221
-
SHA256
31c52d27636794c19ebf59542dbda410e87461db574af5f5520619547a9de83b
-
SHA512
4b4818a1b81475464c370d85f17463c9e0f46b82b0c3e66ff120ba3ef5b05d6ba0d9d56b04770c39008260edf1111401685542229c45b5932ded3b79e42d6360
-
SSDEEP
49152:+sXOk4PV7LDILUb1UyG7hAzvb6f+KvZLNO2u8iZJsOHMfci87OFxdVj7ly+MqOol:mcLUGywCTbI+EzgJXsiSc4CjYf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31c52d27636794c19ebf59542dbda410e87461db574af5f5520619547a9de83b.exe
Files
-
31c52d27636794c19ebf59542dbda410e87461db574af5f5520619547a9de83b.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE