b�E]��N�bT��Q�֫BGݛ��M/�E�i�]��o�_L�u�^H*�x{�ho�範����Ѝ�CP�O~�K�3�"sj/����t[H8�r��'�%��FD�X����)%�}����Gb��$�+��,�W��ԭ�N&���4]������;:\-^V_k$�j`�у|t]:���ݱK�� ���hJu,�j�_I��7�Ф8�Q|9����n%��>4kh4|կ� ���U��Q����s���Z=-���47�N���-��XUE�:~�?����j�a���遲� ��4�,r��<b�P�9ڣ�ET�i ��b��D�?3GQ��*߽� i�2é�g����G�29\\O��md|���A9�����>�����&/�97\Ȩ��hbe�ԟn �m���b��"������Ŝ�P~����������o�\(a�n�۰���q�~�X$�*OV-��;D����Ò-� 8�,�_0.hG�H ��A���N���+�ڐl�ɠ{Ψy-�>��dU�bi.ϑ�]%T �q�/Z��$A�� ���T���q=�pG#���tU2�t1ε�5ܤdptX\�g�@p�ؠR�m ������0lO��e��m�������Mt�X���mrJ�S��5E{(�BOȭN��R(+���M��� ����|f��ȋ1�� I���txB�n��Foo�;��j�$m #����V8��W;7<�ݑ����Hz���!Jrx�Ch_W0T���C�� o�������;�V�{�Vjť*�=MG������Z�>�8kv�l6���B�U{���}1�9��gQW6���A�;#0)6%ɖWv�5}��By�{����mژ��c�f]����H8��6=�m� ��n�Bn�{V�t�d�BW�K���R���T{Q@Ƥ���DV"/�u��Z�6J0bs�g�u�{?ϣ������ N��Y�Z?o��*�9Ixe�s�-1�@O��@םͤT�G5M��BM����l��|�o;/�1�k�0 ��c���^�g�w�{&��K�@���U���.K��q�EH(Rov$� �h��6�쯶�3W���B ��,L�q2�u���.��fI=$���N���T�wHe=.��U�*vKz"�o���6yc�\Ȣ�+II�Վ���R%aw9\O�`}�j����Dk Eº��!��kA�]e~d�8�(Ny������%���I���X�7��g��p���� a���_f�G'�,fOA$X���" "��@��~[�Bv�w���czkå��aj����̯�*Q��yG����G�{�=%h�ץ�Y��U��)�Y�d��A�@��N۵�>�^�a(/ �����u�e�}ݧt��d�3%^�xLtt�%�,��3xI��}jGA�kk��6�S�I-0O���bM��n��'1�C4a��'���mĶ�!�h%�~��#��*��<n�-�˛'7������6�z�-j�?��:�B�`W�V�ȉl�H��=����!�7o}r�yl���oύ1���O�E3������p C;�}��&��@�5`�=�N�ܮ�,�X��Izm���}z�,���;H�|��#�P[�BM�X�,9�\��*¾�?���v�?�*��j��F�q�f��gy�e uS���l�Q�H��[]���d�hSx�����c�c�=�[��lI�T�%�P��"�4xS��{�u�^̓�qlX0F��$|�v͈�Ќ��@�s������F��.���Mː$B���s:��UxPs�����<��w�� l�[��u, �e�;��;���)��'��f.��f��&��{�����z����8U ۑ���1�5��x��0k�I:#H����P�5\��1�lk��|t� TL��>���dJ���u�}��]�ݗ>����^�>'4��8v�;���s�iM�h���e�܊��>��{Y�Xk��[' zIV�V�+PQv 5a<��A.Ptx)6�����{�Ud"��{b7��Y�����C+-+��)V~/������#����[��NEv׆<���!-�C�ZO�_�'�,�����z3�J��MLd$��̹$�7NգJ_a���tԶ�θ�orϺ������t\�������� �����/��@1"Q��CF� 4�Ta����)o�\O�j2�E6�ɉO��] )�v�z�D����vo'��"����Y�����3>��â8��@��K@'��B��s�}�����.7�]��p��)�`�~f�q�~��PnT�B�R9�I�`� S��^0�P5j^��1.AP$����Z[1��E�G�X���m��uM��o��oD��/a��m����ŎcP���)�/��m���Ȳ�S;�,SJ2�dc�)���D�B��Ɇ �*W?p��Wܢ�c�v���yHL�� ���;ω�,�q�p�t�㠛7����`�����)Jq��ʝml7���?S�*_��Tͳ� t%[��C��1���kGrMhN��M���[P��쑎�V&��DŽ�}����6����J�ux&�%���e#c������}�� �A��3�:�&��N�CĎ�]FL-o}� ������`N�.�/�,����y�i��Zsuݮ�3yE�L�����'gd5��]�M�gu�6�Ÿ>%qB�X]�>��?��iG���-u���K&����(���|��@~����#�C���J�E��|Dj�Z�`�[� ���ҡ�N���x�K�| �[IrYK��q�D���k��YM4,zQ�>��3 �w��H}�zwؐ��C�����}R-`�HKe-Kj����D$�4K3]�#ӊ<)�(=�rb+�!ؠTq"ۖs�M*��m&���փ�ο�|A����K�L-�x�厾X�:NP��F����(x�8�R��٧�� x݄��rRo�L�OI<� )T�m�9����!���}FݯZ�K�> �H�� �"e(2�U(��}{�o���Ȫ��>�r%��v0�",�Gf|=��_�@2��K!K �(�y�0xf�jT<���3�9�F�b���{�1�)@һ%;�� �� ��Z�x�&�M��O ��V��ƫU�=4<݅�����`©�%� �Q6H�ik�jE|��u� ]�
Static task
static1
Behavioral task
behavioral1
Sample
94710d9d29c4d8b13331bee7413c0d6443a2910163144a970c372f153c46489f.exe
Resource
win10v2004-20240730-en
Behavioral task
behavioral2
Sample
94710d9d29c4d8b13331bee7413c0d6443a2910163144a970c372f153c46489f.exe
Resource
win11-20240730-en
General
-
Target
94710d9d29c4d8b13331bee7413c0d6443a2910163144a970c372f153c46489f
-
Size
3.1MB
-
MD5
0cb9a1adfeacaa2f71417be7ad53751e
-
SHA1
0250078401f601e8623774fa03d1dace7a442203
-
SHA256
94710d9d29c4d8b13331bee7413c0d6443a2910163144a970c372f153c46489f
-
SHA512
b0a216f4b43b40dcedf3803f5090307a0fdf47ded19d533458ea26083fe09713b9ed99be3afd64e58030e01c161528bf3f27c0f90cebc27c2f6ff56408001d69
-
SSDEEP
49152:rEx1vBgbWU8RhwCWKVHKpIKclaHJhJoyPL/BDr8DOcXmdodCvowfASQ:rW1vyXCWKVq6lkN/Vr1joFSQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94710d9d29c4d8b13331bee7413c0d6443a2910163144a970c372f153c46489f
Files
-
94710d9d29c4d8b13331bee7413c0d6443a2910163144a970c372f153c46489f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE