�����@�ҠfhS�RU���6�uE�Q�_�զ���;��0�7��2��������v���8��ӬB���U2�c!r��D��[�ֻ%��L�+�>��$`��ʔ}�/�q0��0��3�sJh�u�Wrց�S��t�d���c ��������nt1�~썖c���j�mӜ� �0���9a�}O�F�"c��j�/p����u�bی҃�L� �{���w (���ԛ[[L�/je��FE�{�{H�{˖��VT���w�}���r�j�\[�62L��V�������ȭ(�0<�7�Q�$M�¯B�@^'�?j�� $�3����i�� �_�c �ւ���E�p�F� �<B�<7p�0=n���V��;.}o��D~҅K��wbM+5��"���N$�?_:9���Ν��T���[�������f}� ͜���h��<�� �x�4�kآ,ͼ�Z!��Bs���-a��?.���)�1�ܟ�~C\� �0�2Q� �c�]��I����M�ZM���X�n*�� ��J���ni�2��~LS%#:�FΈP�xd�G��|������l�j�p��$֓�P+M"�6e�L�-0U� ��Z�7[ HX��c��Ɋ:�^���v3&c�d��2����S��8"dN�1{�i��l��ތ�ʣ@?�鞿�S���3�f@�&�����m㢨�>v���Wd��a�D$oq���^fmH��j4 N���^�i�Jq n����D��7y.�{���:> ���'̟��9��/�9���W�!�6$x�K�3د� !���}�M��r�q�iVp $���$r|}����9@�`u����O�<&��`�W5�Ԓ��e�����4{�b�=Y!�\�)4��ߌ�������xlP^CZ�n��v����|GA��ZO}�hnuD�ĉ_��K�� �}+L���j'�[���1P�vv�rfX�y0R�����K9��Jz[�!ۧ��/ �����,�CG�(��.���JLH�0�Z�k�8B~:�$���G:i�VLڷ+�����@9�.���l��l�f�{��L����|]{��V��m%eIOC��@n��n'P�����y��O�7�>(�U�%fP��K�CuD�8���i��Zy+|��G{=8�+ӌx���C�T �����lQ��M|j�Z��l��X)3h�\�?�f0�RD���u6��b�T&\�,a�`�ǚA 4��|��-z�`7��6q� �ɪ�2��lKjxy��}������-��R!���x�:[bq�a+�k� ��h�Cտ�p�Rv����@j�����ш�8g���ǫ"�io�i��0ߌ�K��1�I�K�q%Ea�n���?L��f:�=?�O��[@��L�2v�N��l� ��V�C�V�W��i�j������9�>��Qy�x�j�U)����O\����K�����ZSN�ȫSI��#��E�T�#��� ΅�ւ��� SxH���;F�3��� �GSީu�����v��R��l2�W�>��9�����E�@�n�m�u7Ƨ�3�U��+�'F�N�On��/0��E����j�_��Rޓ$�k�=AoƷ}���W8/ܣo6l��EV6�|I����d�AA}��fg��'���r7Y6i��I���*e�·��oGG�������Xx`Μ�G�%�7���|)a���-_|sal&fL�dVZ�r}��JWh�~�C��X��bCn�Y��C�dD ��J��u�_��w�/�@�=Mļ�^'��'��� ю�c9�~OA�3v�} FFd�����:F�1��=�cXb����H\��q}?F�g�<:������,P�<cȃ�PX#oII���� |��*��# ��rwb>�2֔?7����<�DZ�6Q̻�p���<Z��/T��L���M'H�]xnV,�|��b%�� ҥ��q�J�����z�o#�$���Q���'�����|n��;���$"���*�ԅ�{l�3V'�"4��S�o�~hdp��S��Yx��T���F�]�_���Z��N���4���8$��xF���j5��[,�"��S��Q�#��G ����I�&�x�QsH����m��&aR"R/��� ��c���Y�l���*ζ,<��P��?�Z��>��xR+F�ӄ�~5�H�Q��a�����+��lr|q���1#��"A�:�j����ܩ��8eG�el�ugQ��'Å�S�~�!z�C���R�l��䣊\��ި�M9��������CK;m����8_K� q��}��h#l ߨ�~����j�$���w�L�W{����ċәS�OAB��2�m$�E�����::��Cp ���d�}юѹל�sǀ�᮷?K��̡�"�yj��Pl��ot(z�����}@f�ZP�AFZ���AXp�p�IZ5�a� ��8��V���_�q^��T�k��J����_�<eM��#��ݑ�{y���T/��&��[�S��E�]\��89����+�� +o&��O驧=~_ARL�씾�_X&däJePg���;���'C��v�;L��ͳΗ%�����������f$Q`�t�[��{�J�f�2@?����%����x��)��@��DadϢ����^�mکЯ�"<���[�N���7A�7j�u�����H���̸< s���$[+�V=����/�dr��HR����k���T�|�ѿ����� �<���8l�d;��[�Rm�5''p @2w����[�R,���}˟^���g>D� ���-L��m]�)�����h|�+��Q����#�+�23G����H$��Y�j�؛]����D M-�J��rɥ '��,��V�%�}#?/��[�:}���#���������t1q�{=^@����vH |���.��M���Iq���C��u��hZ����ӵ^W (�͜�텇#�2]�zMg����\�.��R:zg��P�He���~�e�R(EU��eEՖ1��?���#��f�E�j��X,���ԕ���&۾�rؤ����5���{(*_�:;��ύ�O{裗o�����.���ֶܷ��z ��Č���Y�7(�*���$�(t5編a������~��`�c�0F����>c��A7L$x���ix�h��?>O 3����k�����"��� ��.�v �8�*5�xQ��9]��N5������0�Қ���-Y1ȱR�mn@w�N����A��3p䢡|e \ �w݆����'�9��4��;`}W�CXī �\�}����� P!��>x�d�Gj4�%珝I�dJ��i������!�|B���':D�ʹF.2�/h'��jp���j�Q�Zj,��� �s%�㵻� ���h*��!1��V�c� ���ѹ���R�`�� :P��H�#����5O���W��{�l��[=A�
Static task
static1
Behavioral task
behavioral1
Sample
673f07b9fa0f6878467bf109987b036cc7211db29ee28e5cd5f749eda621e2d9.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
673f07b9fa0f6878467bf109987b036cc7211db29ee28e5cd5f749eda621e2d9.exe
Resource
win10v2004-20240709-en
General
-
Target
673f07b9fa0f6878467bf109987b036cc7211db29ee28e5cd5f749eda621e2d9.exe
-
Size
3.1MB
-
MD5
fffe440d2acc8cf0dc2993bf84ef24de
-
SHA1
d10f9f9fe5cd92634c7e45825ca7472d79caad45
-
SHA256
673f07b9fa0f6878467bf109987b036cc7211db29ee28e5cd5f749eda621e2d9
-
SHA512
0713098e0fba654b4c3b6bd9b014bfd5ce8dd0224783f9edd80db3bb1d01ddbc45aa6c6ae12ee3912161f5f0589a29112fd2de46b0ed63b1ddab658dbf581134
-
SSDEEP
98304:B5VO+LwUlWKjsFeM0Vm1kjwlebiKAR6AduA:gJUlWZ0bjwAUkyJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 673f07b9fa0f6878467bf109987b036cc7211db29ee28e5cd5f749eda621e2d9.exe
Files
-
673f07b9fa0f6878467bf109987b036cc7211db29ee28e5cd5f749eda621e2d9.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE