r��#w�M�3����m���$�E �ϜgR�Q���}�켏 ��������hU�j�J>�~�N������9tMez��y�;�+���UH�,����ʛ?�耱;������؟��2��PEd����IV4�a����j:Ι2�����z�1=6���Kv+֑c?~��נ���otq� ���C�gr��d#�=�)���J� u���K? y����wܫ�|���-V:^��Bjͪ����5���nN4���mُ�x���b*a8�����k����Lκ��i��Hxtj����z�11����U&�]�#w{n��ష���+��__{��U�=՞�[y��=$�m����}S��B��!��Vw�����Dg:�����w����!���n�W ֙�;g�� Y�ʦ���0��ty�"A�:��ɸ��u��˧�*�n�������;sE(S�.��>h)Y���̙J�W���B�����J�Z�}`Q:��n�Y��U�r3(�)������ V;2(1��0���Be�]����y��c�_۰,�Ǩ#J��בo��U�f=d ^��~���H�4�֒��C]�Ô�૭q��2�s�^@������%Er4 .�� N��ώ��� o��M����߆긂X�������q��6m��R�ЏM���I�+C7����z'��r` ݴ��wS����!a�Y;��.��]p����d�E��uT+��=V�]�!p�'c9z��jΉ�ߊ���KI�b�ùW��_6*��S��Qh�K��0���^�@�P����˝g�(4��u{�r�M\�ls�pE�t����Й� N��v�Ƃ�h��b���1>õN1d�o].�@z:/���|� �p;����\�N)/'�*��� ��)�ī��c���j5c<~v�)�|H�F�d������-V�0͟6��[_G�T���1�8�U��>[����R^�ɤ�g���K^��5t70 ���j��ٍ!�cwc��W��? yx��4��b�E��k�f������E�~5&Piq��ق��D N� �lB�mI�����0�`��hu�Lr���˾�r�3ňi�ŵ���s�(r|���t[��b|��>r��#` �մ�d����>�S���_M�vS��86c�)�}�Ó�?5*�\�����6�Xj ���E,�m�"�rkz��������nz��t5 � \/����U�=��؛A�7�� ��^ԇ/F( �rz�J��b�Oz݃�7�+���X|�th��# �A�������Nki�; n�G�e�S&�������}e>�<3��"K���[�/��[隙z�I�:A���쌭$ȹ&]�Kg�6��Պ�}6,�s^G$�j�8|{f���q-��kƴ�Ğ�]B�|8���B��6.��:����@���B7�ӕ�?\n�\����ҍ��nas;�S�8O*˚YQ�eFDR��.xQ��9�!�dO�[-fyk;�I��bW��#��<��v�Z�²0|I�1��>ݷf'���W�Q��Qh�K���C����K��T2*�e���,F���j����w|�<�R�~�]�d�NBT��Z���w��VI��]L[�i�����[�����-r���Z]����$Hau�L�>LJ�|���7:D�҆�J�n�Ͱ:�T��#>�!�6m�d�(������E�:�����/����볩8/�2��W�`���n�? -�� sGV0I�T�Qq��w)u��xm��{mJ1�.OKq���#y�}�b�����%����i�e�=rE *�Y{a�,v��1�����x#���m���lס@)>�m�����N�%�J[�0�5 ��\Kq��, =���Cx1�����P�Q>�ݽ c���s�:#��o �4�{����8�i��e!>�M_��4,�,���+�@{i/���Aq�E���c7p�K���Lڈ���\q��PJ7HU���p��m��L��4WD�G�Jhd/X��A&Z�h�+�?>߉�� ��bT<$��zj6!���ޡ �ڠ�&ܠ 42�T�8��$��xl5@��Y&IP �9����M%`�vc�6�H�Vӱ|YM1����ԆI�Ʈ��*��ս}鳻w�gf�2J�y ݐ� x�O��zzS�{}4���u�����2 �`5)3����=���Iz��Α ������e����Y���a;�����1��]�0o�#ma�V^]�\P]��+p�M�d~S"T�!���F�ikLV�FŻJ��,���w�<�tj ��-=a�.����-��<�m��;]��{hJ�y�\M��o�kfBY��_�@:�H�cǃ�E6|B�%�P���jϨ�0u���R�Q�s�yn?d+���$7�+R8g���&ͥW��я����ke&�� ���z��}�h;S1K��kABi��ؽ��VY��V�3z>��%������D����A� �^���%� 4j{��r]m��M�%4�I(44Ȳ%raN�csU�Ӥ|D��(|�.���=���c���Zf�b�cI ��M���-�{/���2�����U�ۦ��E[�M�jS�79�-��u��o��!������%���� a� �.?S� �� ��ޑ��*_�9#��1P��w�#T@r�}�Nu�H�[�تc�#a7����qP��;�vZ���b �����u�?���^8��`��ۍ�C����ޖ�������>��;�Ag��-Ђ3�!w�29�O��~ �cO&��NXP,_��"�ߞY7����tJ���|��DΗ���5DsPۅ'ˎ����OY�gO֪����U����H[B�Oh���A��2�6�E�R���]�ćM��e>W���AG��o�r,����"Z�a���Q�o2�����z�_X�fS�^s��r�T��@^[�at����p����[9^'�I.�`AB��_~�\��\����K;g'Ri�%�i�Z~ q�q��N1 _qv���}���� 3�!�p*�JҨT���Cr\G�s��@��Z�R�����Y]��BpZ�R�/�g�� �WT��'Jba`����]��I:�q�A��%U����ٌR�=����G��ϴ�6~&e'c)�Ȣo����]�$~��Gw��-���"h��Uw��l)[��]��74i�-x�E^?���f���MzKCumO�Y6l��?�Ć � ��'�R��X�Gh���pK�N�-<ˉFu0< �L���ղ��jz%e�d!�N�p����?h3{D]�bk#��q�ƛ�h�HL5���@�k��.�Q���-M�ֺk�cJ? {��W{ }���������y.I�ώ�pV�4L�� �<��ͼ��q��p� ���Ż��S��pV"�ׇ�B��Ly%���a�p������9��t�_:ǘ��\�s_�C����r4z� �1���7#v�*y���)C�q�k���h�iXU>;���*��/���D^�@� �j(��\�'��Z�z%܈4o�¨������|Ze�`� ���^aG�W���XRE�g�^%
Static task
static1
Behavioral task
behavioral1
Sample
e67aec008120392d6adc1fa1361b82ebdc7dea4724385d8844a45c06ba922121.exe
Resource
win10v2004-20240730-en
Behavioral task
behavioral2
Sample
e67aec008120392d6adc1fa1361b82ebdc7dea4724385d8844a45c06ba922121.exe
Resource
win11-20240729-en
General
-
Target
e67aec008120392d6adc1fa1361b82ebdc7dea4724385d8844a45c06ba922121
-
Size
3.1MB
-
MD5
a5c364de58e2fba1d84e8617ecc799b7
-
SHA1
b1665d0a6c64365b7be449bb350357b34bd01e95
-
SHA256
e67aec008120392d6adc1fa1361b82ebdc7dea4724385d8844a45c06ba922121
-
SHA512
12d033616b2af7c715edfa51cf27907ace9c2005dfb771008bc8058e203a366408a1a32105660b62f30c71ab4c933ea6cca7f4ce52eee4b8b001bbde0eac517e
-
SSDEEP
49152:5Ecbqv5uBAHC0q00JsGFs9Tl4/yEhO40Qo57OeiN5gILGHXdlonViuPQCGJz0XF:5p+vMDY0GVl4tOWoxVQWIkv6EuPQCrV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e67aec008120392d6adc1fa1361b82ebdc7dea4724385d8844a45c06ba922121
Files
-
e67aec008120392d6adc1fa1361b82ebdc7dea4724385d8844a45c06ba922121.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE