��ƶ���gl���awY�%%lp���A�$���.��h�E���N9��zY�7ձ�Η�~����*� v]�vS��9�Ime�M���u��α���B��g�_�����Snt�GY�O��iws�B �Lƕ��q�X�r6'���o��W 0dF������*B�#�&w���ɲ���`$�0����"�M52��ܕ��� �*iΗ�]�L�W�ˢt*@����@�����gaTO#���x/��'��(���,^l JԜ�qΩ:��0��h'�1l;^���wY:��R�Q<_��$J5^�����m�/��X2B�I�A'¢�ƹ����>�����ҥW��P��WzH,WK��8;��z�A��}��0�\�~�h-���|�MLyB&��/�����š��%D�>�wy:��7V6��0�Q�f�!��n�/��6����t�٤�@��ܸ�EV�sm�e��8iWZ�#^�:��!5��Y��Xt���˙�2(�G������muUSA�?��ު.��u�kTEI���~�?MAk�|:�c���B���h��(�L��X"�%�mE�,i�> `��k}�XG�Ua5zǤ�g�kQ����WN���r��;%?��Rm� ���M�T�2xj-���m�pxֈ烙��[5r�9c���#���.�K����m[�x�� ����ۖǻB��/5JN�1�L�(��C/���C��(ܺ+`�0]�A(�D�}y�6�dk��P��p� ��C�2e�w�O��"��3���{c9l9+�z�.?θx�9!��X;%�^����I<���R,g@Q ��?Y����s3r5��L&��p��&ls�d��)��r7n&��<W�b)��o�r㜫`�n��w���{Q�ɟWj 욱7};������~��]|a_Q|JaD���@F����[f��p\^į���˻^�C��ieS�#���}����;���x���C�����5�eN��i���aE9�Y�#$������+u [H�$8NT�a8�$��xx��Ɖ��9�,�_���"B���@�>�#�Ƈ��%$ -�;6��_��);�����" �+�>��HQ�M}?�+��ʈ�'V��W�?a�D�|���� +�Fc��P;SDG 4��ꨋ�<���~!�����@r��o<>�VCN|$����f�.u���Ё��^l`m�ƌ� �Z���\"�2u�l�����6Ż��Q��ʕͿG?���\��y�[�\B�w%!++���h�����+�v7��j�=����4�j;�]=�����tN/���&����{G�V��E��h��q��E��s�=A��w������n��L0=�h"�z�Y#A��d@��\���L���'a9P(��"|��܇��� `�KS6b�P���9*��\1��[�ܺD�;���i)A`!�=��ߤR/���5b�"G��R;@���w�"_ G��͵��F⼦NMC4)x�9Զ���ހ��!�����eE/� �g1&��E�-�cN����_!�?�0W��zd�/T��NS�� H���Q+ō��g�q٩~u�65��aq'�����s����W���o�G?2�f~���}��}���AIz�Jɤ��l�e/'��yf%=ʘ�"� ������)l�N^�d�)�T�dvl�1.":u�k�oM��A�F�����v��V�m��`i�X�ca`f��={�*յ_S�5�ӡ�̓���T�(�6I�� ��Ǥ�Q>�������EP���[��*Ǻ��c���.��`���UB�P�̎G�<x i�YS���cl�#qIt"X6;76�1�^/NJ?fΘ7�w?�������;�b#�O��A0ݬ�np�/��XcF�����3�f�y� �x�T�Kµ�M��dK�s_[��{��W�$��NCd՛��R�sO���з�����o�o(*&7��֖i�+!��;g�yM�D�{1=�������'"H ���`�"�ɺ�g�ɱ?�WP���>�'�I"dy*#�b .U��R��[�r���~�F���|����H�@Φ�Yq/��+�)�F38:2\ԯ�}���i{U淵� ��ð��Jd/�SohIzPXcag��c�Y�p y�j�e� fE�G��v�30�o�*D8F~�8�(�\���(0^v /W�%S@?g[q��ft߂e1�ftZ��JX}�*�sf�8mF�F`F�<;0Z�?Nz�Bs!�iv��4~�Y��ͦ��l6��\�U�����<�YQq��ovW�>OB��� �� mR�I]��F|1����3cL�fh�i$�H_+�4�� �<��)�[�i�p�Ǡ����B����5V?a�.JL�g�X����ip�&��"\�h��"��el����0���̗�$�(��s�����~xp�X�?u��H�tӼ&�MA��<F�b���%zZ,"f�����H��+d1<o@�R��-k4s��噶�w��ʄt�EҢ��\G��ֵ�}~&U�$J>�`�^�fc2ƾG3�+1�'~� S�r��8X�;�7�$�1��]��.�=%���Ο���`��N���;�#cV#!g�%�\��w�ooFf�*���@���E�U�����ļ�:!_2{��?«�UV���T���ƗK�da���[X1�����y�&�w��E��U��s��|�̚��3B�S���U��1-��*�h���R^"�@����f�a�ҖS�yL�iz����T~w몊�U�n��^�)Tt���h{�Obl��97��G`0u��e:{����.�5�:��:�K'5C�Ŗ�0光b�jcA��Ԇ6��Q.H3W�|��w��D���u�=���o�}2�?~�1�Q�z%��8�p�\�5b��ʙs��52e���3�����tB�����C��O0*H٠Gh��� � B[((ve|Tv����W*��<e��*�Ҷ�� (�|�k��^��7�'�G�Km��f��Չ�"��io�0.{1��q#��ӑ8sPET�qwU&����P�]>ή&�սw�ax����,�h��;�l���,���tܗ���]�C��]A ���b-�Q ��X����dvmO���@<����:�P���2��|Z��1ps�H�v�I�>���Vs������)��/��w`�$#�� 5�<��&���G���<�ʡО>t�>v���Ĵ:8t�������_eKL��'�bG��P=�Eej_6�&<�%&��KS]Q���;2�8�/���yH�{*D����e!vq=�$�T� ����2 ��E������aJ*��ҨLg}��C�NNM9��i�i���8�J=�gB�7�f{ f'5�����9��|9LYaޔ�s
Static task
static1
Behavioral task
behavioral1
Sample
e1d7104dc5235f37a5846151513d4eda60c0a7342a4ebf552934f11a002e52af.exe
Resource
win10v2004-20240730-en
Behavioral task
behavioral2
Sample
e1d7104dc5235f37a5846151513d4eda60c0a7342a4ebf552934f11a002e52af.exe
Resource
win11-20240730-en
General
-
Target
e1d7104dc5235f37a5846151513d4eda60c0a7342a4ebf552934f11a002e52af
-
Size
3.1MB
-
MD5
e63d3588fad55906934efa1fc2349533
-
SHA1
a0ed8b4d72546d04762fc854574f258773a0aec5
-
SHA256
e1d7104dc5235f37a5846151513d4eda60c0a7342a4ebf552934f11a002e52af
-
SHA512
d858e4066a82285a5f0a33246f9a16fe5c7e3b1a200b29a04c87a68d8bd5de2316fce85ef9563490b4335a9aa2da487cebc4b8c08aacb5993de8020f9845ea39
-
SSDEEP
49152:UYohArUi4aKf0oltWLypprQd3mLMlNHq5R2D1sPVQi7dyPCXIM4f+1:UPArUBVQyP0mLMlpxD1Ji7dSM4f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1d7104dc5235f37a5846151513d4eda60c0a7342a4ebf552934f11a002e52af
Files
-
e1d7104dc5235f37a5846151513d4eda60c0a7342a4ebf552934f11a002e52af.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE