0��020a�n+���E�*���8�����c��'����;��Z0y���;�a�\L����a�.�@���-��.ă�)V�z?��'2r_�SP��Q` X��}��8�k��1�L�S>ZܪST���e�����= ���� H�uV��dk+��<�M���r��h�@6i�� 9��B,�O�ա���~�Z��rP�?��c�+��$[`��邁홄*���X��~���. ~�9ܲ�c���/�B ��p�+o�K�D�ߘ���L��A����85;N��P�1*��r���������9�����d��D�� 2�pW�͕Mg�۟��8{��Ut��]�{������ ��ڕ�����v+̐�����G]��$m�zܭv��ݱ�K[��A.O���ֆ\��8��r��&��_�5���s��%�~Tg���H�D����d�|\��/�Ev��웴��:t�g\��������מ@gy��O2�I��i�[�$S9��>\z�2��y�J�d�:�L!3�z�k�G�/�,�Q�@�ԩ��mˉ6T���-QN���h��;~B�@�0���Ų�ZOzÛ��5�_R�t�?�!Κ��?�.8�X~�h�ú�I���l粱����e�)�ʒ*����'��_�ܽ�p(�g2~���i���,�J��M���l��g⍆���n�v 褛��P���X��J��pnJ������}��k�Tr?Y�-��9��uG�M�(!��'��-O�py�ّu=��-%�)��Q@h����$-���Я �`�����V�o����MxPw_×�#��fz�Ct�DX��J�$i�&���&�I��4"����AA��54��L0tp �)D��r9���;T^�\�Щ�ʵ>��X �f_AL�N�p9��ql?kD�Z�27;W���CV?���m�D�Q�W�6ҵ�bE����0�M "�7�`-�=��̛L���Q�W c�*��4-z�X��F����?��] v��2������J֝s�5�v�R$%R����/�\+ψq�aƮ*��#��=P����(� �fLLfU�Ԥ��t|��0��s|oq�n�{Q�BW��h�n�#y( l6�_F�b��7��$���.5��y�C4 ��XU�f�O���7������G�LcY�'�/3H)�b��=Ly�L�f�j��[T��$�|�2S�R����<w�7��-�D�0�8�,D��L���TPۺEp+�In+��*sd�n�/`��3�����8�+|����l?<\��[��(ӑ}�ɿ��azN�6�����S X;U�xW��Z�B�K��5;R�t�T��3�=O��S�P�X �̜h��˾ 7l�����@�I��L��M���%�[�;\��6G�E�J��=4G���������c�#�A̙sr*o�T3���{U:� w��h�����p�JL����uw t$�����0!�;݈��7�/8W�`��Q�G]Xk�/�#5�3�H��&9��R��n�C����@<(��g����йܾ���G���%�e�j��zפ(v@Fh�js'�A>Ǭ��F��Х�u$�������� ����X6�&'iA׆�:p�5P(��`A.����\�����C �/�23�+C�\0u.1�2�H���0��wt8��J��ٳyeΓ�'��Q�����y�gc?����:0�LDz���MӼy$��A_���� 9{*� ����؉;} ����G�������A���G���̦���������!��p2yPy� v�<���N��������� ]�-A�h��38Я~������[kH`W��hz��s�xI��wĶ[w���ux���V���%�V/C�ۦ���lx�aI�H�Xw��cϢQ�D�cH��H �VLn�nF�)%<�����i�_ӷ����/� �+��g�a)���M5-�Ď�Hږ�c�I�]�F��^�v>6=&���F�"q�����m7m�z�N�]n8S�/~�/��d��յ�>����ϴi �f-�,ⶣ�8��J?�\B� ��\\�%g�ׇ����u��[�b���PB�;0��߄�J���P}�v�Gj?����<&��bZ�j�ks����u�=�^[�ff{���������]�1��˳J��NB_6"�H�q[=�q��; �B�*>��>�x��)��Uʫ,#]���/�T�Ǡb���)��{A��ۤ=�6�V`.ddʑ��g�����,Xz;xg�[ �|?����N��cC����y7eo|�����]��k���(�͏�=�ӱ:W�nt�)��TW�p��˹v��5��� UW�9��h���\l1�<z[�����H��"���)�0��R ���..�#���~�b �h(�ͫ�����[�T�߄/�"C�9���Dx���2��O�t���;͖%��[ԩu�b�BȌ�e��mx_���UL P$�J�����se:�[�H>�����X$Ӊ�8�y�L�d�$��-$M�gn\���1��æ;���a����ʸǵ5�����\��t�NW �~���$Il��dE�z=�p��,qS5}>�0Opt���2�r=@��6�Z��`�� Y�!3�F����á�w�O�Zϝ�t��R�E_<�}v�Ir�!#xO���VVMǿ�;�1��ha������`?E0tqҩ���TS&8T�b�I�T��q����xQs�\eB�I�i�������E�����2�a� pz��(� ���� �4?a�X~�A��ܓgШ~LYB�k�Jޤ� �#��Ëǥ�Z�A~[,G�.7I�;��_�6�۵F8`ˊ-C�p��ªEU��Կ/`_�G�b���⫤6�ό����і��O�3�d�l�:I����� ο���Ss�|<����wQ�J�}2p��������-4�7�&|'��^Ig~M��1�T�$G0G�N���(o�@MV�J�+Фcx���%d8�6�E��6λqXh��I�n����?J�_�v(�=}-K@�r�!��t�JWZP�M"��Sc����p������B��[Ú��Vc�Q�3=P���vSmL��LP����˦Qh6y2�A�BA��[BS�П�P��@Y? H�b*P#�x�<������3�F1�� ����҆�"��z�7b��pY����<T W�(v�n5m�_��t8q�hdt�� ��Pna ��g����|-o��eM�1�q5ۏ!s��.k�;�8�r���`�(���4-�$ ʪ�nL���JI��AxG%�p�hE��X�U֝%���FEt�dȵ���l�_�X��j���O����4��%�T3��q���`�a�?���W�k�f�-ԅAu(�
Static task
static1
Behavioral task
behavioral1
Sample
d58a914adb39845975f22cd5531d0fee143be8803181b834d5ceaed80449c51f.exe
Resource
win10v2004-20240730-en
Behavioral task
behavioral2
Sample
d58a914adb39845975f22cd5531d0fee143be8803181b834d5ceaed80449c51f.exe
Resource
win11-20240730-en
General
-
Target
d58a914adb39845975f22cd5531d0fee143be8803181b834d5ceaed80449c51f
-
Size
3.1MB
-
MD5
e08ec0f5ddd8adb485090eb514dffa1f
-
SHA1
706b4fea23aaf6bd3513f0e38c7714a82e316abe
-
SHA256
d58a914adb39845975f22cd5531d0fee143be8803181b834d5ceaed80449c51f
-
SHA512
3b96483f48dc458c9a856af5f1a92c98c827eae4d8ecc55fd523624e7682e106ef670fdd05349e5d356f221fdbc0776cd4d35c4a69b4e05deaf56aabb3c4dccb
-
SSDEEP
49152:bqFjb/mMPdM3uL8X1LEuPANSGPwcggdAyDK8uVvqqdU40rNud1mTjCg7fVKb:EDLe1LeNdwQdAql406mPCg7U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d58a914adb39845975f22cd5531d0fee143be8803181b834d5ceaed80449c51f
Files
-
d58a914adb39845975f22cd5531d0fee143be8803181b834d5ceaed80449c51f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE