paYDR����JOiG_�����I��=�9�1��O�4;C���y���[��+o˓��O�MμD_=p��GNl:1H,ib�1~��x��mx�!�g�N�Y��L���{mΥ!k�l��n�Ҡv���ƉJ�@B���AL,��n/dO��g�y*���6���D 0�9v�ޗ��0�y�N�7s�rv����t���P7�v����x(�ҭZ-}12ϡ�=8h������%g���������)�C�,Ɵ$x��NK$�n6�Ww�6���_bX+��V����m��{�W!G��M\abM��&/���hvm->��ژ�TIo��0�6�8�*�:�;�hU s���u0�9�m ���tN�D� � ������Amڈ���W���d�.���/�E��y���ߝT�C�;܇D���e��J#���.7���߆Fg�d_���L�Ƿ����4?�?`��fi���^�F���g�bRӑ�������[�䠐����X�O�*�2�&�*s�r�+�������^Xt�z�~!W��o�b���i?�=���ͯ�!��:���W��|�=�ј$0>к�0S/n�>����j�e6>S��/�Cs��L]}5��\C�i�ƫ��\|�����-\i;��;$V���_cϯ���[�:�e2 �O �v�� �;zt8�Cr��i���t�(F�M ��ŕz��|�����j*��j�e��v9������ �"ݚ����� 헯1�3qT<�I!���t+E�7/_ɓ�W�E|1�Z� �W��'�|���^�@&��~Ӭ�dr�RwUY��������MQ���!� ���Rs���q>�^\ ��bY�����O�Hi����. ���@�([��УFwX(H�v-ERλuT�J�7�`���6�x�[Z ��.�u�� .%3��5L��n0���/I����JZ ;φHc����V��*i��b� Iiㄥ��ш��~�V�Cz@�;bŘ )@�ɂ����P�o��ë��,r�m���p��u;��8o�ӣ�0R�>�P�{�#u�9}s~4lRZY��W�5�a~>쑟ƽ�V��`q����UP�c����~�P%"������WJ�Iߧe $ˀ"��.V��A���P �c:~ X��x{��|Ze�Ŭ_vj_�8�]�[��4�@�Q�C}A��M���7����_�\D�֞��,%[��=m�#_������u1�ٽ��h�]��{n:F��&��G��s�kH�_7�u2�̵jF.��dg��R�������I��o�Qȯk���L�� ��O�C�w�G�!}U��,nX���5�C�Ix ��c[W���aM�sԨSK_���.�i�1���L+Q�Q��ޓK�vQ�Θ���,dM�m�2���^-��۟�Y��0�AP��>��/<3��(u��0f���mO�ys�j:��A�]�I/N]�I� w# �&����GK�P����F�Fh�u�����}����X)�lV8�/��Y�?V,�l��ʅM�Y`�B�l�0 �&D9��,T �����Eؼ���Ovv���מ��� � ��s�ǂ9;��]�C1�7�@�>�H�wl{>�m�&W+ju ��}�r�;���>�s�z8�$��y�[��|[�.h��f�)�h#h�G�h�����m6d�^l��yXx�7Łl1�6jpf���9Rl����D5X�鶔o Ii)�[pfӝ*�D �;�1&&| ��,<���r�w{-��3JzL*@�e��')uyO�B��� �Ҷ�ڝ���7�Æ��������_gb�I6p}��(�ʶ��7�Aݏr���˄����ں/�Mc�\,��̻kdT��Ŵ����!���.�P�� B��)M������}�����Ϥk@�b3%��:����� �rPTm;�DR�W����Ҁ�����b�ONi��eLŪw���<��۩�4B�6�ܢ�������e-�O!"���gt� � ��鴫�YP_c����^�2�qY���o ��Ȟ�V:����TqM�iI,�(��/��u����>�]siւ�0#����ѿiF|A� �u�Y8��_���J�]�P�[ƒ������a��3�zPvn���4_e" ��pdO�+����� ��8�z��3�>��>_ ����W��σ6�/hN�u@��1�n!��n��v�r^�BM�.���Dy�T���-�鉚DrX�K$>�@��[�A�OR���ZuGiŚ��zpLflΰ��h��0c���q�pw�D�0f���Mv������c)�����x�HǢ�'NJ�YO"���&��Q5NJ�RV����Y�0�.3LQ�ޭ���.k�5�9G�.l����k#b����|O�h������V0�Ͼ1��MU�K��2����9��V�\hV��?_�.�1r>fz����a1�9r��Q��J#�=w1;Z�E����ta��ձ�o���:(%n?`��9n{/p�o2�;?�<���}Ch��=?��f45`3��Q�C�K��-���,�΄��8s�yx�ą<���pH�R׆��i�4��^�!$\��j��o_������]�s��İ�E� ��Ť�` iZe�K��T��K�^���ZXK6:�wE�&�&�������yJ+���L<����Z�����{�j@�wm��� �<Q�LfEe���sfsl���)r<X�NH7F���<Y>�n���#eR4Zf�"y��Q{m^sWԗ%�"�{�^�c#.�V~o$������F��a~CWw�dqаLG0L��B����"Aô��Rj���ۄ@�>.�YLf�����P��Ѫ6�dM 6|�`���[�\WB)�l˂0�6p��hc�#:}J��H{�q��AlYiGr�S'ϛ<����gZˉyyh��TQa= ���lG�٦%���y���i<8)�N��w}fuyD�d4Ce��Y�~�����㣌f C�����.[�r�a��\G/w֜�g��>q�P~����M���^�&i�,v��#���K��Z�����6c��A�zΠ~���s�d�O:^A���m�,�䴝�?4���/ ��z�AL��{�B_h�q4�[6}�˖*�5��3��8�W���g`c���Y?���g�Y�f�\�;�����|4�h���A-f B�/7ɀ�f:��b�hd�I��)�8�a� ��
Static task
static1
Behavioral task
behavioral1
Sample
4744fd227b48cc138175469315a0134073fe8dabe32e6ad735d629ded9be7119.exe
Resource
win10v2004-20240730-en
General
-
Target
4744fd227b48cc138175469315a0134073fe8dabe32e6ad735d629ded9be7119
-
Size
2.3MB
-
MD5
dd0858b8fd91bc9a700b860b8883705e
-
SHA1
e8f747481582a31e55fa2b522027da52d41b985f
-
SHA256
4744fd227b48cc138175469315a0134073fe8dabe32e6ad735d629ded9be7119
-
SHA512
d8f6147eb13706b506b4e9714fd7f366f02a2a69d2d2b6a987304d62180c7683b55facb58d674267430af90e39dbc2f4848053b7ae290a19f24e3c3bef2c2a7b
-
SSDEEP
49152:440/QRWqDil4m4QfzRRRVnP6Z48O1PSTJKUVHWHzYDPELzr61s8ebeOZpdbwVOr:v0IwqO+mf7bR+LOirV2CPEXCOZAE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4744fd227b48cc138175469315a0134073fe8dabe32e6ad735d629ded9be7119
Files
-
4744fd227b48cc138175469315a0134073fe8dabe32e6ad735d629ded9be7119.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 43KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 26KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE