�7j�ˋ�������� �ܤ�\����S+s�z��;�0p��x��8��+~�98�WV�;?b��}v�2�������B`�$7��ږ��^ ��=�ӎl��`ȣ�]=Z�!�X3<��s�霪A���P���'qڎL�qn��at/{��S���L�M��%�obD�b� �*3�qL���B�{v���?��� -Z�^D��!�Ru��4�G]��)���Q`.��-dڇ)��ߘJr1���P��Zk.�#%� �x��Wk��H������f�@���U�7yU+ß���j����W�@� ����q�T��X_-�[��<�)�LN�+nT4���)u��u��T��A�� ��3�8+��JM���b�B�zv��B|D��| s:`�R�����2=b`k���p�*���R����u�P�p�̚B�wo�wH�J`�k[������ᥱ����H}V�<�}AF���=:��g���;� _�3h�2���X�J|�:���B�U���c����D���<�2�AuE��,�\�Ṷ�U�N�^j�c���C���l��E�E�f�|�� ����! �b�^�E��epd����ū�#v�� ����a5����E���`�i$5����e��,��ZN?4W�X�D�\��N�l��F%�@z���'3�ae��(��#�����T��d��_��:�O]ץ�@���<c���t=�.� �����v8 ���_�7yǧ�'뱧�0�`�X� ����mA>���K���~��Q���D�ƨ���J��tk���Wc����}g t=�t/ԗ�H'��E|P�Wh�V�8&�He��7t����S���O+� JW�95��wJ�BL-#���O#P��8��Xl_i�~b��n�j�?XԀL��|����h0-YJ�\߈㚟()�� �V�Y�" �4��@+t$1���^��"���[�k��ܾ5��ic�㞜DQRg<1�Y�օ��2�^�8����Ik`8֯�U�� ��I+�gA� y-����|���7S�X:�S�����XM�֝�~]�w/ �^�1�Jho��+4#?����L�O��oR�צ<��w�j����R���.b�Q�����:ӘX9�m$^z�O%*��\hkC((n���Y�r]���"4�O�w����z�B��9h���I��D�ʍ���<�LN�8ym�i�3����f7'�B56���+���MB'�'��b����[W,�f���f���L����4�l�.P��3��Fڧ�*���3�3���bs�{8�i���B�=� ��K!�>�c�]���g⼏Y��i������ƾ<�$�Ù8�c��D����O�9#���8���F����2Z�%M�N��b�>��q2�a$�e?"����z� u�z�X^ .��~���K�S�p��L E���%|?����d�����c��E�}��R��`���c����:��q���Y�k;ޜ��N?�%�w���#L�Hb.���6��>Q���c������d��oeK�H��_$֩��n��aX��%�Ĭ�v��͠�u�*=Z�3翷��2��Z�@��a��˞�] �1' WBU-��Ak� ���>���^���X��Pi�no���\��@�0��7;��s @�� ၟR?��0��{Ĩ���@�Bp���35�i�mS ��u���z>��p�LDsA���ɋ������L�h�!�u�wV��3�і�#f4!����1puT�]VE� �(�7w>F_��O1<g&H(!>�(-z{oDi��J�Yp,���,xI���e��/a�&P�P�A=��(Q�ѻ�l=L=��%�w������2V*�r���A�vmTe3�=|����N >������G�]�V��a� Ѡ�j[����Y��7���NRiH�c��K��媓���k�k�r������V^C�������Yo��8T;�[k}���K_)ë�#�a_��(>�T_ �2 i�㦦�=�f�|l�@���"����� ��9�e�BZ�<S[U.�p�M'b)�~Y>�r�{ rZ�VC_z߷1�H����|-z���7�:���������m��p���,E_��v*�V[;��ه�����b2�O�n;��hH�����T��f�$B%´��9�he�7�3���=���o�X�_���.�n������pWu���^M�c=���-4:��LN���~����w��f'qB��|�BjX⮋�|y�=%���!���9�g�.�7�������������f���ő��9>z]7،_������0�y�,g���˿rz3��8��szத3ڎȯP���/���tE��������k��,@�q�������$�Q((0W%��H��3��F��7�1P4S_����J\�4&��7� $�{b ��[w�y�v�C���32Ϥ�Aʐ����@�>�Rf�f���k��%�����S��0�<�9�������V �'�Ts#+���Ui�=F*$�H��Auq�~Od��)�rL�*�FA���y7Q+�Y��+�7��]�����fM���a�e���iV��<�I��LpB���.�t�9sl�r&��ۄH�����86��I�+��<<�l��Y ��4ɸ7S��Z�Cp��G���b#4B�%hX^�2he�'���,T�@�4��S|��_P2�����~,SK��+�c,U!&�V��cL*~�_b����������]k����I���v����&��xY���DM�YR�rFz'��e���p'���D/ �S�2�e��K'�����{�ABl�WX�LN�v�̩W��\��Z&����b����Զ����~2g���*&v�E��5/am�m����<��Q��BN)<�Wf�fb�J}��^+�\A�!�d�%<��Y��C��߳�ˏ���ϕ*�ws�e���Uy�2�;�{��!��X��^�e��$?C,^X�E�`�1m%� 6^�*/�C[�OV�P��>#���y�Z�]<��a�:�炞��j��ɵ�����l�&��_�:�x�F�/�0Z)����L���\Q��ʾv���bzk�ޏ��-j]��`��dmcW�Mk���Z~8 ��L��n���4 �~�;қ�C�o0��]K7��66�8�6�c��2�]ql��Â��{����P^RLr��k����JGZ)GU�')�? ��P�����5�ێ�bB�"����:o�u�.)U?z�&{��}�f�������,�y{�}� B p�S�P���i�`�y�߯�(�>�[���;�: ���|JR��gŃ\�&JǸ��QTM5T�� ����n@$t�]G�%#|���8+�������-�6Ҙ�D)�u�yIL�S��l.Bb/�TJ��(�ZD>��@��d���w፥y��*`�a�D�꭛�V����m�~k�c�-�=�\O�M̃9A��)�}�U� W�<������C����1�y���X�Hfj�D���K�� �|�����'��L����=~��d��*��{2�F��k
Static task
static1
Behavioral task
behavioral1
Sample
5b356893c1912e17492d2d8b1f17edd8c8188466f6621b2153a22d533b9fd0b5.exe
Resource
win10v2004-20240730-en
General
-
Target
5b356893c1912e17492d2d8b1f17edd8c8188466f6621b2153a22d533b9fd0b5
-
Size
2.5MB
-
MD5
34fb1e1cf87cef65f1f37ee004d726d0
-
SHA1
f2b5efaec1e93dd6cd4bc3323b898379f70a9242
-
SHA256
5b356893c1912e17492d2d8b1f17edd8c8188466f6621b2153a22d533b9fd0b5
-
SHA512
6badaec3537de8eb3c9d1bf6ad9ca03aa184a4338960c8c32695f769568c925c06183eab28e752fbe0ec982c7e788a1fefb703d96d506525a17633590fe4843f
-
SSDEEP
49152:mIGSrW0M7gpR54X7yOqhrolrQKbY/oIiDB9xJBi4H4t0haymx+ts:mbSKTgpBOc0lr9b19ro466a1x+G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b356893c1912e17492d2d8b1f17edd8c8188466f6621b2153a22d533b9fd0b5
Files
-
5b356893c1912e17492d2d8b1f17edd8c8188466f6621b2153a22d533b9fd0b5.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 144KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 36.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE