��U���}i��.?,�ii��Ņ���Ω�N�bӧ�U�piyG^y �� �دXL�@�{��8E�(��^i�_P���Β�f2&i� e�zu��4��c��D{�B�j�4mCK7��z�?Vj��7�J|� �n4�5Ө�PTpq���¥���%��n8��M���}�+��mm���ā�ױ�ѐ��u;`u#��F���}7��j�_:��j'�OdOm�͈�� ��G�> �si�����?�"�E�~�X����� ���B;_������X �����z6.=�v�v���͖\!�f��yǧ(l|+�U�{yjj��9��6#���ƀ%E�7��7�f`ap���HL��帞 �ᰆm�4%���܄u2`+9����n땊@��,�� ��!;yp��:�k`�Mj7l�|e>�:= 0���I�OL��DkY�K���յ']�"�K��H� ̽�2y.��+��b�����PG���)��Wa�Po���seWCC�y<p6$N�o��^2�[�����&�I^�q�,��D�3��Se��4_h�R�p}�������p���87��,>vs���u�1(�,��<���B���@�=,����88q��Bhx"���[���yG������0�8��2�G�t�m21y�{��NmExIA��J>f_�ҁt��_ϑ�m�����G�Z����_mGS�Ŀ����1L��:"yY��/Ý��C����ɥ9j�@���vW���&B�� �~��ßk2�n0 i2r@m�I�E�$�y�J9�BpÓ?�9��+�S&��M{Y�w)�^�s{�p�M\��En�,� ���&�Պ���m[֕0���#3k��xĤu���?�l��6�V�=��D�j�tff�J�,o%���;L��=�$�nq}7�w>囻�J2B>��Qu��+p�U���ԟ-�0�n�y�Ts�7��\��kݯN�c �a�L��R�#U�8�<��{w��uJ,�π����J��$�1����۞�4�9����[����}�e�J�d6#r^���ӡo��vm$�xj\�>��f�l�D���_�?����t��s����J��V�|����k�37���lߧ��>�x3��;y�N�,�.���C��0/E +�M�՟g���� �X�S�=J����uɩ��+ӂ����.�C'ٷm�@ZWݩ�y�Mkfη��� �5����@�)3�|��C�5d�[�}'إ�+?9i� ��썯�k`a"������sk���W��}J+=�+��n����fX�y9�:j����x����LX�����S��[���p�-�#=C16>��Fn�E�'O�.�o�e����ܮl�!b���U:��"�� ��f�g�j�͒T���Q(����Ր�W�8��81�:�\�|��5��TNEf����k�?�.o�0�9�q��xz|)���z��Эsm~�G��08����E���6KU .�WK��ҝf�6$�� �Põo,"I����g���U�B�����b�2�_Q�p�>��w�>B)��,R}�.�-�ki��& ZP@���9$Rof�G[�!���Q��h_,q�"�=�J]w� ���!��z���eĕ�<�X�����b)�^تME�Ë4�H��C�3F����/��R4&��XeYy��&K4hG�y��?a �A]g���@�w�3����B�#\�?6μ�U42��\f�/+(�E>�&��h5L���9���/��Q�����9���X���k�P \P�a�D |�0.��N��)B)³�+Qi����H�q��B%rz�k���x�2יg� ���|6�j�8fxJ�l l����VqE(����#��^�4�� �c�V�?}X.�P�UI�8�a�{�"��O�얤a��A�l��Wi �JZ.���.u���w��P�0�������Yv5��xg׆B9����o�O���ش������n�.��y�p��SR%�ժ�ϒB>���mI��8$UH�V����_��m�-�KՃ���5�ycOS��S�m�� �[[��Ԙ-��۴��\��R��fRë�G,���ޯ��fo�>�����i|�R��|��dm\��1�F�F����^ �y�G�t�~�,�K��Cԡ�%h���Nפ��)E>P��J�f��ղ����#g�%�?�xS�`P�1�2X�5ȥZ�؟��U��-�i 7/�U�!lk�>MݿŨ�}1�/|@`v�Ù�Ŵ�j*ť� ��Z�uҭ��یַ���}#�����l��2$�iE��a�_A�����G�s�����z%�=�**��w����Wy? ��*�B�?���R��+�C���Ź��~�?�JW���wg�;�UD��_;/<��Num�!~�?��~�&���8,���N��M�"�uǥ���#�ӄ��>\����"i��q"�\̈́Dǡ�˾i����gE:��S=�w��&zY՜�Dul�J˜|��DоY��dx��'��K����[�6feD2KԱ�ȴ.���Hpi��W>�-�f��[�� ��D�1G���G`ꚃNM9��\[l���xǬ4M��h�LM<�ce���"4.�Ua��xEsh��A�k��ާ�$VpCԱ/g������q$[mI��c�h�T��]�a�g�����~�0�dW~K�HVy۲�u{c���3�-@�5�u�4�ńԺ~�/R�y"���� �Ĵ�r��<).t=������������.���.�ø����Qn�o�W�ta\��$=JPB�5�*��k9�7IP�Dګ�#�]KAJ�e�M��}FQv�q�R�� ���e{螢X�ۤ�h��óF��;���h�����s8��P̨��-��~^m9������`�7u��$����3GԹ�ˁK&��98� � ��l+^�/e���l��ƨ��F�O�c���">�ɭ��,���1?�մ��P�l�0� t��͉Xs�y'�2�οw��EG� J�jޤ���66X���A��\����*�zC�c��}����;��{�b��Y��s��/(��aT�b!Q}DH�t����]�5�uD�V2L�I����p����hS�G��ɽ�}��sy�N�TO[�}�����A��:�W�?��\���-�edA<���j�j���$�O���������j�m�m���Š��t,=�0�c}�f�`�VG��U�U�<�- �<s�܁�7t��9��cu��eC��or2�����S^��Ǩ2�& �/m\�dr5t���]Bf�|� ��<]7�2�!c[n�L��a ԽI����2�JL�ܐ�O�}����>��q�`۬IƆ䬨�ً�����cS�:�xZ���FF�O�&4�1�՞ĭ[X��ʅK `J5��}N˹������>F�E���S��$ ���O���������:�(}�����i h�,���9�Ҥ�k:�m����4�~Χ#@����scY�ϋ��Q� W�ys������O�#����w����W$�=���A�z�Iѐ�����xr�
Static task
static1
Behavioral task
behavioral1
Sample
072de0101830ac91ccc185b9a8ace588c0ab954efb4fa283b73f22b78622993d.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral2
Sample
072de0101830ac91ccc185b9a8ace588c0ab954efb4fa283b73f22b78622993d.exe
Resource
win11-20240729-en
General
-
Target
072de0101830ac91ccc185b9a8ace588c0ab954efb4fa283b73f22b78622993d
-
Size
2.5MB
-
MD5
053a0e31227fe60b257a3b2f93be5a4c
-
SHA1
4bcad3d3bde9de21ff7326a8137129f6773108ab
-
SHA256
072de0101830ac91ccc185b9a8ace588c0ab954efb4fa283b73f22b78622993d
-
SHA512
fdff9c25a0571b9f45b3dfebcf34d42a22868f1f741b6af0b5ba830ed962d24bd0289fe22e918e616943868d8091c0ecf953b5c3d4fbc1bdae1f2e1f1663dbf1
-
SSDEEP
49152:xhyhSy9ufhM88Sm9uxaZCoXZxDC3B1zlKmzD+aBP7fpbj0Spo:xrKmRK9apoXZBCbzXXnPt4S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 072de0101830ac91ccc185b9a8ace588c0ab954efb4fa283b73f22b78622993d
Files
-
072de0101830ac91ccc185b9a8ace588c0ab954efb4fa283b73f22b78622993d.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 144KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 36.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE