t�kt�0��r�~Aw�B��yN�6�:$�T@�έ��cZ'�1��$ ^��3�p����3�0=�F-f4��gM�Ј TR(�19�����f�B�[G�ԓ����(������i�'{Z��Эd�J�)E,�p_D��w�㳨1�%Ch���Jf9�V����ü���S�hL��#���4S���y�G�Wì�d��b�G�k)�o�2i]]�h.�;�\�����B��P����m�S�&���m���<8u,�1����kVc�'Z�,.�C��2���Z? s� ��I�{��v��p�US��hT��E�A�Ʒ�Ͷ��?*iq!ȳ���v��ש\~��7s)���,;���l�� l�|��;m�6�zұ�W��L?G�����ý����J�D"�-!喰�д�_���Z��ҫ�.6` �/�u���3���a�/��7�f�c8^����C���s��#!��I��z���Â}���U-��M ����\��}>�o�(���U ����]��V��}��#Lͅ��&�')X12ʽ�CH*x�E^4�WGU_IW�+�)�gw�'vٽ܇90z�#�!D�FO ��L���N�39�W � ��� ��?�5He�k���C�-��鑤��~�l�V��kVe1��-i8(&�01���$�5����%�����Z��¸�5W�G������,�$^G{��5�:6@�߀�Lc����9*;z�Q�EۖͶvD}� ș�M�Ԫ���|��X������WY��M�:�-5HyD���`���_m�L�p�psU��ر��5�����&��M$~Q�J#,���)=�{���j��Ь��f�X���쎔�-@� �}Z'r�$4_�,�)�����"�~�P�ҟ��hK�X������嘉�vWBj[�#̬��E~]n��p_�s�z���'�6��� �-s���tM>a�� @��ӃJ+��4-۸�S�c��$���Oˀ~cXa�"W��m�<���p�#�b\~WC|)���P���h|�g~+ pY��Qp�nV���͋]a��ɦ�~����M�t��Z�W���7�t�z�.�&7�& @�Ȏ١ףLÑ������c&���Wc"i4r������u1b� q�~U]]!(k]�� N��v�ad������CBd�����^`�H�{�;s|%�+���h��T^\��#P������Kqb�r���d��W^�Z�<A*�D��d%l��#�þ2�Lf9д��B�j͋;o )����{�i���c������b<�&ug2%w[|2 �{�1���N7�=r�k�G��<�:&��!��v:�%0}�ͱ�n���r�k1"2����X�T�:�{����'-p�R3c��<�b/3����`�L]�9�d�������a=��T�IVЈ�]2w��pR�7Ϻي������1��S��6N�&�����ś%]+X����ҾJ F�J����ų�S'�Y�y\�^qzؗ�,ϳ<����gr5pn���N�9�>��aK1x�u�H��������\;���X��BƜ7X�Ş�生Tj&_i^��>U ��G�ga�V��cp��"�����#v�A��촿G����ۻ����`�� ��?���C' ��kfP��-~�QaF�n9�f��ɓj��^���9l�ꝙǪ�ϣ���;�o�u��w^<���� �w�Tj1�T"�1�X���)�LN8V�o�)"}M-��L^rrؼ!7ⅸY"Bo��B�����`#/����������=.Km��&b�Χ B�~�J'��j��0NJ���^(��ITZH�L��}�⪷*'��^@/8�@��10���JҺ���@��;���$��l�)ut�7" )�<x�@���TF�?W��L���Ah�=��)tr���n����O����w9FQ��cA��a�,$�.V�2�W{�z�m���K�g\�/����L�_^y��"���I�a�l����=z�x��<��5�L-i�z�������p�$"#��vRi�X���dx �����*�'�QlA���vqXb��>����Wtl�26C��S%�PG���$�85�3�,�� X2��'/»��,0����� 4���)3BR��-U�\۬ⶅ�?��V��G<�ٶ�'\���J�P�C�%��r��#� �#����-!��j?ɯ�I��Ej����Z[UD�Kfz:#��C^˝jȵT��62yQ�._��ZKp�Ӷ*�"�V�z��6HJP_ls�Iu��(����]�d�bg�Ӣ"���Q9�+����S�F��0�!����mqa�����`ty�Z�Y�����"##��> ��V�H˒c�5ѣfE�w:��n�&��Vj��d��˄Ӊ2����I���+_r�Ӫ�������䷌L�a��GIQCL+���t�P��GX�.��.<7�o���/{�Y�Es*-�����6��g��|5�9�����)^�p���?�o TL�� t��;����ګo�B��!*f�;~���w��.����.��Ac��WNa�t�O2���<�� �h�{����S3�{�� �t��`��r� d W!A��C�R�YK�2p�T7[�Wu�r�O����N 85�|P�5�xa>��I��+7�����aޙ���X �=,b� Ř�H����sȄ\�� ]��i�����D#��@�Ҹ���� C��ؤ��h9��%��4���P�F���^�"r)�lޑXɽ�T�.���Z@n�����ȸ������z@'6�c@��w�f�>�*��{��l�q=E�����+�����RX_�sٖ��Q���7�y�[�ژ��^�mX��Hz[�׳LB�N-���a٤��w�[�j�)� ۹&烑�S�y�R;�:/�+�U����1� �% ǻ�Y�8�!iq\�~JD���%.�b�jsF v�@1v:bW�q5� ~1ޱ�a(�8�[ZEl����0���m�Y���3¡�����V�[��������D{����+�z��>���Q�UH���+N��7Xo&���)�M�C�BHm!��,p�O���S���DX���49��xך�׳R3һ��(�Il�WZ����M�ᗳ|��WI{�~��ح�C�ۅ��}$D� c��*c���4����� �ξ��{/�dd���}�n�+��?�h+�I˵��3yɣs_���i^P�6�9Ua�b,�����L��l��lR��b0������S uR��d>Xo���G� `�i�>���ȥGD�\&����0�LE83� sI�KǏ�G$ˋ}�z� \�p�'����#�v1kK�K�� �֭f����� X�ٍ�H���Ikf����l�w�����
Static task
static1
Behavioral task
behavioral1
Sample
ae4e8d06d3e04d271e4cb7d9dacb5dba5e8dc335eeec8caffadc5e7428c508fe.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
ae4e8d06d3e04d271e4cb7d9dacb5dba5e8dc335eeec8caffadc5e7428c508fe.exe
Resource
win11-20240802-en
General
-
Target
ae4e8d06d3e04d271e4cb7d9dacb5dba5e8dc335eeec8caffadc5e7428c508fe
-
Size
3.1MB
-
MD5
67ecba2a62f0a2a9eede84a76e8c4a38
-
SHA1
e0c885628ff6510330e8e06526be3c6d8f80cc34
-
SHA256
ae4e8d06d3e04d271e4cb7d9dacb5dba5e8dc335eeec8caffadc5e7428c508fe
-
SHA512
ca3bf31f26a994575c2587a90500a89a758b98db82c7dd535c3b681839fc2b7b4bb096c21ad0e51cd22d19e1b86cdb3397945984c763dfadfd6bc593ec2e18aa
-
SSDEEP
98304:I7rRpxz/5ji7ZNpTOSvXEOpdo3bAjP6y76n:I7VpxlqLpKeEO0bAjP6y76n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae4e8d06d3e04d271e4cb7d9dacb5dba5e8dc335eeec8caffadc5e7428c508fe
Files
-
ae4e8d06d3e04d271e4cb7d9dacb5dba5e8dc335eeec8caffadc5e7428c508fe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE