��XZ,s�;�����c[�6̬��-��mfiq����i@*��ޑ���רC/K=ˁ��v��QY�z�8���^e�Q)5��g�KM��p���[���a"H��&,>$x�} T��zy�Sd9���O�_ͮ1�Y��I�n���3"�j�Q������7a�=�Y� 4�1�7�Jg���qY}����_���_�S�F��aj�P<��ċx����{�jd��] $�ٕ����F.�����]�zB8�_�.-2A����������� i�,L����n�����w7]�ج��ɢ�<���f����K����^�@Тޘ|�KS��Z�.��}75��(�]Y�9��d dL>�(�mTMUd>�b�4�ω>���:�V< �h�]���v��e���2���:�p�@�N��1� �KK�-2����S��Nز}��'x7�b�\^7j��Q����c�v><����}!d=wO긚������'����9̌�����z�������GG[��bM�p�܌���0zi�v�>JG�Ӥ�s�%�~�a5`b�i98�g�����N���_�f-�x�&�\҇�������v��b�Q��Ch�E� �#"��R�y7��?�U4Wv�L���`>Q!�.X[��52�AL?�(��������b�S/��M1���E8@c�zSi��xX��B%z6�3=.T-z� k���/�oaOA˕+��D�R?�\��l\�|�����������4�������A*M�L�z<�<fl���FI�q���B�\u�����M�.�1(��zXPe�QܯP�M��=U��+���]� ����O����ૻG�1]��h��>�t:��v[t}�E�;:��njCdS��N����|��a"+%����p�}M<�>��+�p 2�iQ���o��C�8�U������ R|곧vkv�c�&.��Ls8�B�)r�eQi���W���R����[�Ȣ�_����-��s"���D[%a-#|�s*�X�|F�'�^ֳ����L���k�oxc�}�m�T�� �r���7 ��n/;�� �) �n�����=��H����B���u='���7v���9�T�ur'4(�5�d�M�o5�L�gb,��IC�����pG���l�dgh8+�]��$7��6V����+���*p��QX�[i�*���K����ECܩR�jY��� �+�´ߺ`6c^�\1�����'�MH���l��������!��B�l,8P*��6�%��P�Ԗ덮= �J���_���j���CF�PI�j���e�C���� %u���νH�ﰣΘ_kթ����Ex�&4�� Zȋi08E����z��ᚼPoa��-�B��rT{2d��@0�_o�Ɲ���J��6XjD�����s�jx/q�{��K��j�a�� qfK�e��v�����@��%���ڍ����b�t�z��j����)��l����C$Qf?�Iӿ(v����xjɝG]^���:�������R��E�/�j�Ukՙ��c;����@��%/����U���w �@'��mˡ���Cdqϲ���x��Cٞe��;csf�T2T(�P���/{R�=s�2b�L"�����]c��#A>�hD�h��1s���Q����ո6�{���LT���%v{���V��N�Q]{H�:�i�\�(�K�V@AQ���J� r�.P�����~��6ys�8�g�� ����+/7�\�#s8 g;�%�9�X��Y� �0#nAׯj��>k:F��}�l�Z��/�Au+�V��V���x���%Z�٭�2)x��K�]�u�P��YlDh�S���=�����k�;�J�rK7Ä��Mf@�e����s��������&ЖݞXk��u��TD�q�vfاs�5�������*�E"93�m�M+)�y�D��(����j����;JF��A�>�=�V�K䭞��;9C�ͻ�X�:������M���1(7�p�re��f�a0}���.=v��}Z�~�V���ɽ�� �y�ʤښH�"70͏����Lo�G�>�谕���%F(?�'�9H.5Iѐ���Rh��l�0Co~!!���&���5�����9\���5�2�Ac�D(�J(�.�;ɠ����k���H���JGKZ)�>E�V�ظ'uF �\�m���R�C�Q�.n{�����m���z�ż��I!��;2���%r!��nyz;x����� �ߖ���s�3a��Ȼ�B7�c��i%�����g ��QT(E�z��0�TN���f������_�d�rmF{���@�����v�r�e>�&�{%M����YidJi�`c� �=9/��p���i"v�f�P_�x @�8��(�� [K�/Cf�����3 ������`��We��}f�>H^��}�?�k�%6讘���:(�����M��J�Wv�x���A��#�L=����\�L&�Vl�T�8���hx�!�Ƹ��ƫ@�$���ŕg�����Z��D�G�S:�'@}?���Լ�v��E�lUPw\���Q��]1�2�#�YU��CU�A��b!~;��K�-&�Os�3U=�C���,1�ژo��V:5L���������yv;Q���%�����,�J�^ɞ����F�w8��t������勤��Ͽ���P0c`�%��Ļ��Ԩ�JJ=Ugy��]/�\K ���U��:���!��kљ�z�:��h؎4�NO�Od#�m`œK��H�ܫ��M(Fdu2qU��(�\�K1C�:t#D19��y��R��y1S'f�����)����x�g�� V�s�_���3jYi�~��g��M��iQ%���I����7l�$`ػכ8�ع�D�j�V���Ws?G,�!�?�NF�ӥ60(v�%��ɧSsK�P�C��=�m^�+pn������KZ�����"���#ğ1��� �8�Ι���TR�Vj�g�����O�&�MX�xA�c!~�Ь����t|����x���[ti5�~!���Gm~�� ��iV��o+��>Fk��.M��O��Ĺp]߰�Q"�ҳGC��۞���^!�m�H\ѯ2<��wH��~=-ӤY�y���ᖜ�r��x6��� �G��q>�\3=�� +�G�"�| ~���x����c,O_������ꁿ�P^�z��%"����s1!W�H⚄�-�F�Af#���x
Static task
static1
Behavioral task
behavioral1
Sample
c76cc69b3e655742849c548902a100565336fc5ba593aa18733e86ef44b312e5.exe
Resource
win10v2004-20240802-en
General
-
Target
c76cc69b3e655742849c548902a100565336fc5ba593aa18733e86ef44b312e5
-
Size
2.5MB
-
MD5
7d2416a43deeb1df6b6ee2577163ef72
-
SHA1
e37ae009ed68541b5ead41c930f5a58ad01bde63
-
SHA256
c76cc69b3e655742849c548902a100565336fc5ba593aa18733e86ef44b312e5
-
SHA512
31ef818524e88c90a105af416db1faf2a47781bc4821e6f78fcf3efe3abd54a5565b4606c23f26f087b1dc83c00f6ee14551b66cb082f413ef519cd7963e81e2
-
SSDEEP
49152:hk16RLDHlAqebO4D8zBpF1x13ATsnGOR33QXjWO+504KB:C16V+5bdA7jGOR33QXjWOM04K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c76cc69b3e655742849c548902a100565336fc5ba593aa18733e86ef44b312e5
Files
-
c76cc69b3e655742849c548902a100565336fc5ba593aa18733e86ef44b312e5.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 131KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE