[(��0�l9�n�r���������U�`�C�ڊ��Fxû�� �e���f�;U������G�.߳(�c$5���z�B?�)w������#l�������I\� ���輫���5Q����z㵤a�%WQ�$��z�/ ���@T��M�D4�������By~�Aj�Tr�r�57��{��W�L�[�Ө.�c���Vb���Ӻ���~���ٙ�KU���+��6���sC��� �J��]���Zf~I� �1��B�R�x�$�g�A�s�33�T��&H*�z��5�D�$4��sEi�>2��_��r!�L�i �U ,���F��Ƽ�S:d9�Ȫ���X��J��}�Vp�,K�*E�(G����'wA5�z��-���C�|S"����u*��Нz�Y�6�$����Fi��{"#�>)�������@��dz�A���2�����k� v�#R� ބ&Ψ���'�.��R�м�+���$`�_K�W�=*<#�^bu���v������݄�A<EV�|s�K͑��W�¡]��� �Ʈ��qг�����l��� �{W��h��%�{?@'^ɉ��yj�G�jă�h#��{'�E�K�Ģ�u�I4J���گz���82n<,�J���]%��'�Ȥy�_[;\Z�J�m����ds���.N��FV&O���)�6��{���s�/1 ��A�Ag蠘~"��B�:�`ٱ�������y9����^U# 4��|�Dm�_���}��&��۔egY�<M:���N�������Y�m�w3 ���$j������^۔>�^�����t��5:�i��E ��z���I��)&j�f�-�� ޢ>�RH1Y����N���Ux0p��H�M\T�n�J�QF����z�>����ڛ�Ó���d�����vp�?|�Ñ�j��p; t[����Ƚ�������.�ùxGe��{��i�b���`�)ت#S�GG:���} ݥ��\��5�5��n�'�1��y� /*{�<P�[n��`]�'�2*�cΤw��i�d��QZ��a���s��=��jD�?�`�@8�c颠�| W7�*>�Y��%l^��z]˞>[I҄|EI�nt�U�w����%��u�0ܴ��[�l͉����i5���T��Āji����0zK_�%:�ꗭ��+����ލ��6|������1�S`�B�rc��ʙ�cr�t��A��̠'�P���֚���3��"� �j^y*]DT� w���*ݒň�]�~�R�����.�����iL�yIf����<_��� ����]�����Qok��ˌ�/�=��m9p����:I�L�|�c�a�u@ %��Y8-�x����6?�����&1�����D�f�4���Eճ1�]�7*B�c�Q���� ��U��3�_�� |}Ip���+۪�:]"GB�O&)����^d>��̤�eD$��/������8������%b��dV-|���z�~�6v�AN�<�(,�*(���Ƹ&�[c�/� ��pU��&�+�э)�9"�����&�}��p�,�A|z�S���>v�a������u�d�M�V~@�v��D8�/k�-�J~I�/8g@�r$B�����9��0����MQ��A�њ@`�$�7"�dH��J��[e(iR�t��:�%���{��gjLe��p���A��c��9;�#J{`-�n�"z���$pƴM,�F%i��y�o0����IJL�b�4$ o�L�#J�Lc��2�U��-�G�u�t��3,8{N�w�"\�^����xs������ V0q�h�)��8�$�ANRB�q��e�����Ȯu@Q�I���m�9!*�� Mbc�vkϓ�ʔ+姧$�)��n`��I�zyp��+�k��BD��2��6Є�����x�s )�?�����l��q*���'>�.!Z�e�̇�G[�S3�������>wN��)���"zY/s1�=�/�C5�B?���ێzY��F?"�����c��>p\KdQ����eAث-EͶ� 2\�5�qU?i�*��EBm����e�4~�����oD����0�o��x�A����kĩa�(���Ѕx�6�h�T��*��ŴApT�e��6�d7fI����1-�.���!�Q��p~K?���vì���RWBB"���o�][dil�L��(���'���J� ��%G��q�uuZ���fo6J����b�Ϧ�Lu�!�E�\/z��b����;n�.�s҆��0{�G�1"�2��E�n�U5���ҋLf�C<-s=碃B��iܙ(��T�cZ��LT/��Mn���k�t�y�"�B��G�9��v�P:���[�<EN��biq7U]�Qup!�'���3�gij[��}��p�HOiS@�z�P8˜Nπ�d[Io ,6e�P�/EӺ�r-c�?���v�q��1�n��2l����a�"������jz��a�vWND52��X|���>Rg�<zKlq��r�����f��Bh��_��������-u ����^��,��(�JW7$�v�k��_�~��� r��Vv���\�Q��:��$hI�c�$� "G��R:�!���:����>�a���K.��$�`|4���-!�Hc@J�i��D �'�R�!,�ʺK�3���B�,{��J��%�"�d�*�qZ���$�8�}3��V����n�-�(M[�aA�Y�� ���F-'�|i`?d'RazX�������ն���^��`�CK ���Q .��>C֠����&�����K@o��Z�ٝKC���9u�v�$����ӍxHm8����M��D��Cٺ)���Hdtӳ"�Vi�� +�o>�!�OѰśdH"��(�Q�"� �����ɐ�`��+0>��(I�336�>2�݈�������@|ȝ�����D��d$jMc���ս��r �GQݧo��c�gJU��ce�l�[�����a/i��\+�J�a�E�[�웎�Ic5ٲ�D�^�C�q ��潻a�m@߾�I�؞}�N?�7I�2sn��Ƶ��Q�`k[�;�G�taQ,�Ӗ~���ˣ e �L6!��E�^������n�s^^���Z.>�5��=��=:��s�+����1���0_� �'a(b�NE<�� ;H�X#c[�����%:JZ�jS�i��up�M��`,��A�1������� � _Թ�dN�x[�P �R��rl��M�mF!����h�1�pg�"+L�K��1�k�<��n= aVݞ�x�0��z~�P� D����a�/l�ޙ��P-�<���Q�9���d��Tϰ�2�{��1|Dn��u4d~@�%��:$�0y�ظ69UI�n�E��MC��g�tk���.����2q"�_@�]L@f$31J��>� x.CΆ�����h�S��7��q�V\����%�|����>1n���.�x�j)?�op�}�%8h�H}}���2��U�α�� ��5ߜ�d�U��)BK��"���uP����:��sf�_MCeoc�J
Static task
static1
Behavioral task
behavioral1
Sample
98a0a04cc6b89535cd0f298dbc4a96e924a32f7c5932b1bb6e94e3b9f8da45e5.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
98a0a04cc6b89535cd0f298dbc4a96e924a32f7c5932b1bb6e94e3b9f8da45e5.exe
Resource
win11-20240802-en
General
-
Target
98a0a04cc6b89535cd0f298dbc4a96e924a32f7c5932b1bb6e94e3b9f8da45e5
-
Size
3.1MB
-
MD5
cc3ebf1d444619883db77fb1aa0b5804
-
SHA1
419b6773ff36a9e5b26e9d5ef80eab97244393d2
-
SHA256
98a0a04cc6b89535cd0f298dbc4a96e924a32f7c5932b1bb6e94e3b9f8da45e5
-
SHA512
004591da59bdc6fa826ced8d59c491aaa0e43ab5481c15eeeda6f5b5baf12df9d1c9abb74dea486a463794fde08b808069917ac7ba52121463ac166e9770ca3d
-
SSDEEP
49152:jIih3RxRzHdrP+ZQA1uNM+9sNKHSCZLT76NfELUGcdN9p4WlARDjAwObT8WUMdAQ:l10qP9scHZZ3kEQGcX4GefAfYW1hRf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 98a0a04cc6b89535cd0f298dbc4a96e924a32f7c5932b1bb6e94e3b9f8da45e5
Files
-
98a0a04cc6b89535cd0f298dbc4a96e924a32f7c5932b1bb6e94e3b9f8da45e5.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE