F�ޕ��:1����� х���!BG u�*�����}F3l����b�[/�*8f����Y/��Ҭ�q[�a�Xy��)l�)�J2�� ��ú,�r�j{��9�Jw���� ��?�Te3��k��$'��е�E&��*+�˶����-�kc<2g�?!��c6�M��0����PH�RPT�����}fo�|ip���t�f6��Ҡ� �Ɗm:C��n�� ��4�<�6�=t���y݄.��б���4d���>�mDi�d������l.Uo��M!�ts�ɞ���_���� 3z�H����W�ݽ ?U�,����_ 8��#X�� ������w[�^�P�t�\���,�m��f;�;g��nt_�E��K�a:[�'E�B(���$��*>�=L�k�s�:�C8A?�+{�xfOu4_��Gи�^r�"{(UR�xl/��g�������X���Kx��G���+� mȌ�b��g[|���sw!i�W��"�8��T���x��u��T�(������JE���2�i��}pC���=��RJda"3�Zy��E��}½"Y8�t�&�/�Ҵz!, u��\� b��*Cz���HlvȬtf�ZG����ɰ }Sb*�,I�d��se�$� S'L� z����}M*�8��$�v�9Z��n�ūD�a6�5��QN �En�Q�l��9��L��k����9��=:˵#��?����Sȑ��ǟRXs�쉇(A�k6�U�N]�N>r�D��&w�dR���&V4�=��|',r֦{ϳ�?�3���x�Mg���ڿ����u��'w�.�=K֚�l7-,<�yM�Db�o28�]�۶�����I����"�j_�yX �3%���^�Jzt�W���ݠF��M�<з�9�>�C�����w��`���\U]z"F,�aT��X���4j2��iy�����l+ӊ>��kiì {�u��R��:� %();9C��-�)g���jur�ݴ m�4�L32`fR����١S��jD!����zL���:��������6����Q-կ���TJ�� (O�)�i�R������}�螎��(�Ї�i���ǔ5�����j���`���f�@٫�(u���Nw�~4nŹs;D��3�`?�Q�=k�6��&�� ԡs1>5~R�B�Ԧ�Il\~n4(ӝU�݁u"�l��.�q~�x<�F��X\*X�D%������؆R��}�ZY��DZ�����(X��Ѱ��H�}��(%VK��1�N�B[yX*�Ȼ�ݟ���Č>�{@>�2�.q��^N_�������W�$F��Ly��U�P�����^�k�^69<��O��O�@x{#��|39�a��L��*����(��q(C�sSƲ�և�*�?Y�e�:F/�p�:K�N��~��$��&�ܨ����-��{�Fv8 �\pQo�3�ʇ�J�u�(7�q�F �{;V *П�E�R�YAnj����g�5���~ �a@%�:oz_U��{���B+��-������T��EӡL��Z��<>v osڿ"����B�����D��D����j�=�zd������<�!4 .��)^��f���4G��L�k���%��9{�>�|�M�a�4֍|�!eQ6KԳ��t �W�q�x�#�f�i��_�([�,��� aޝ7��|l�5lө�\R�������y�"7j��c���EK�:�s&Pu�`��w�� MBG��]L�ϩJ����B�(�^�1��U~��O!47��O����'���K"s~B�Y�~�nj(/��f��;m�{2(�"����HI�?=P���� R�*�C�W��X�N�-�d���� -?P��B�(��;ѫ��-��0Z���4��C3k!� �C��q�i����e�����'�ǥpk��E����^v�7�Ý�����=�p��<��f��[]?T(��\f�Q0�p.G� ���I_}����i����h*�{m�W�(�'�qZ� x ���>��o��I ���؇u�,�d�P�Xz��n��Z�ש��#GsaCv��c?����U�yCh.�׃CY��bƥ�#�d��8�? �^;J��ܑZ�� �{"�VW��u�D�WKԍ]�!P�2�l�=��3Pv�8�V��#���`BGh~��\o!�җ��q7��ڑ�1�.�9������L�Rن,��H��oE6`O�@�a � V�qTxl$S����U ���*���C���s[S�p��W8� �#�i.G��t����Y�� ��6 �Z�%*>z�9s�1vx(��w<�Q� �i>���:�vF/���@a0�~�T��"49&T�����\їIrg��>�K J��z\�81�+UF����i]�[;���e�S9��k(�(���.^V��Nid�&�ڳ@�z��""�>�2��¢��d��Of�R2(�m��ZuŐ+���;�r|��$�K�N�<(ۖ�I��$%��P��-2�D��kC�i}�|)N'��� �8�� gZ4���3����@q�� �"?���P�a��Voi5�-u��M����\_� �+��DU;�~2���d�ő�]]lT��ސ���{���2~�H��{� �蜣���.��D��4�v�ڃ�B���9���;�F�E ��X��ׯ����PNIIob�m�h$�!��0v}�PK64�a�b�5�E��!�:���:!��@��ٸn&{����d��+���_ _u4"��ۍfg��-�D��� ����7�_|�q 6�T��s�X��@���Ӵ�B�=ˌ��^-�D� ��%SA�3���LN*-M���,-�Dž�f]��<r��n���n- �^w�4�Tc��VѮ-c����%�\��o�1?Z�=؋9?��XZwIz���o�%),%���W�E6��To�0�9��v�o��k�.{W3yxfl�Z��c5�*C����6��h�h�Z/�S'�NU�8˫�;���� ����\������|�Aqc�3��i�� `"�_�B�;��U�p�C��Đ��űbyX@!U���QF"��I��nZ02m���Pa k��[Jr{����w>YM�e,)O�=��+��˝�277an�(�l��#�[���f36�pψ=R�rX?�����0z����^7�pTE���I��.�.�S�G�X���j3;�����*�+J²�3У��I�Y�D���D��"����91�)UgK ��R5�9.1�y��2�e�yO�&�Q��c�7� ��"^��( �8���#}2�E��"�k��*��<qK߽|U1�������e�-�V���o���R�˽WW��dÄs���c,�s(��k��\������[v�/X�l������ ��3�Cxu��e���R������pe�u�g�Nea�RVF��� G[�^.�/�o��3ޚ�)����s=]�")���a�����y襱����_��,����.o�X�6�����'yM� �4[/���<��v�����v��/Q��k�.h<Z�E����I�61�<@��L�pd�8z�k<�,�mZ��۳!X
Static task
static1
Behavioral task
behavioral1
Sample
d5332992fa254dae7b44e58b14d99de0efec86a6d5b233268e188525bcc89bd6.exe
Resource
win10v2004-20240730-en
Behavioral task
behavioral2
Sample
d5332992fa254dae7b44e58b14d99de0efec86a6d5b233268e188525bcc89bd6.exe
Resource
win11-20240730-en
General
-
Target
d5332992fa254dae7b44e58b14d99de0efec86a6d5b233268e188525bcc89bd6
-
Size
3.1MB
-
MD5
d4c54ce93995dbd6e25e0b36bd9f52e1
-
SHA1
e5b24d0ae296e4dbf749f5d27d77d6906f8b7cff
-
SHA256
d5332992fa254dae7b44e58b14d99de0efec86a6d5b233268e188525bcc89bd6
-
SHA512
8fff30ecfcf4317ccd091fa2b6ac3f8792076f47d95843cadbe062a3dfe1b4e5f21d65f1c4b4ac740d78df1c07e0008cf26ccef72b9599b9c66c926d31c1adf0
-
SSDEEP
98304:Uue9ePEhefj0b4j1YYqyQIEV+JJq7VFQOxTdhyJmk:Xe9ePPf31x4/7VFPEv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5332992fa254dae7b44e58b14d99de0efec86a6d5b233268e188525bcc89bd6
Files
-
d5332992fa254dae7b44e58b14d99de0efec86a6d5b233268e188525bcc89bd6.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE