����DRE�ʆ���y��T�x�~�[��PH����]�gJX�Ρٸ�ù�+���r#j/ �j9 �T��~�KK�){ؽ#�?��`��� E�K+9��|�,i2y�^�(�e��.f�x�S���@j��Dd��H�7d:�u�k�����x�A�mǁޚ�np�B0�۴w��A�P�5]S+]����:��%<ap����^v�El���.�*�hH�&y��EQ���\G9zp���g��֔E6���6���j>a$�������Zr�*�2��;�H�d���Y���=ANfʄ��i�� B��\�%>��Ԥ�I�qa|��a[�E��ј)��w�)����B��j%ئ�i�F�Ĥ2צx2��dnv�LxU5%�@���:��\��}���d�滌.Qy��&6��(�Lh�]���NT�V����:�:0� FYD��s�$#>Z��h��/��v�����al�4��S��A~�aYtT��dI�Epy�a�o_j��m��Y�E�Fb�IЎ�t�( �Ջ��8��������/E(�˦ �:��2P��S��]������(8�f\��Q!#�3�����`6���������,�nb�5Hn��wY���}�xW[8e:�?�ȷiqB�a�2'��d勋I�{�����e�K�ߋV2ZԷ�C��e���V$^�rq,=��'t������r�u�����(�P��>/�s�f�~�X��;��_O�~���� }]��e��%�GNTeT�oG�V��a�7�|�0��Z,� ��B� 顇��R(˦9۪�q���� `q�_4c̫���F�E|=Z��0c|��GO�!��B���7�?����4�KE���X��o\��+����͝Jἇ�Sc���}��:�=lT1�]�z������I��?j��zôU�Ivлl�� ��y�'5�7:�!���[+��`,��D���Ѫ�� �e�E������u���/��_�)Ƅ�x�����k����Hر�u��Z��.�x�i��.͊[z�h$5�" �`�bq������.��x�I�����t�ьN���D��RT�U0J���h�Fo J��# �ER����_r�i�C$�9���0� NG�Hztx��V�i +Ä|i���6�?���y�5ߣ�h_؟pdQ�Q�0���Y�/��ܽ�3m��}V��Ɯ��b�LB����ӆ��rY��w�ox��^Hb|��"���)�M��{�M�ܿ {8aN=sF�dTE�q���΄=�-Axu�%�'�Y��BG��oz�R��5y7�L�W��KeJ��D�X����D������m=�"���.V�f"H8�W��6b�a��IV��i?�A_G�brjj�e�Ҷ�N��$%�����o�� ���^Λϻ�������62��Ft.�C^mvo�g�����qNbP~����ˠ�`k&���[A��"�NV-ɿ�������$,����(fEx� }:$�#Tl���^&��8-�,���CtkG���x�@&k���G ,^�Ya�l��p��� Ո�{�CQA����Z��l�FӨ�Ju�.��!C0n�ٽ&�%B���en_y��[3C�N��i��_����t�u�|q�*���#֒Dݦ��XCB�� �Z �<�r����f� �#B5}�$x�yu=K���\�S~$��ɸ@��P�`��k���^��0��8�{�]��M�)ߗ�Z����"�`���7ZH&i��|X��ʜ³Ud� B��j��W��t8 3^�|�nBcB8��-�6��byF�f��r���ݸ����.|rښ�����&K��7�ۋe\55-V��#���7:��y���>�ZO��Sk���ބ� @?P'�>3{�LR������$403|b���ܱ_j���"�rv�p�4<yr܇/a�� m�)���M��n]���V�lCz�{��X��q&��]���W�gހϡ��`�����-�`z���a�����4�cU �s֠pz2�d��NZ�M�G<i/\�x%����n2��D��9�!H9��*�Qֲ~��D�d�b6�R#&�5Hͬ�S�)�q�(���&|����[�ߪ2�ML����d�;�-��b�N��8�؏F��G����Մi�6� �Zq�A���p����|��\���, �D;N���-���ϛ+� r��c�q�|����A\9=|������`+�f�8�l9e��S����*���D6�;����iۯd�U�=�� 3S��u��4v{QL2��E��f~��̐�5�� <��Å o�BJ�*n(��}m-���Td+ 9�V��,���бp������-_;�a����}E2�;��^�.鑉��W�6x^�tYE�:��+X��Xf�!��\���U_���f�<"�� �ZnM{Gڊ6�pUo��|�꩷ԓ��� T�&�r���"f6�C�ɗ�~=�8U(g�|b%L��`QVKA$t �w��S�|)Z�<���ɬ|d��>/%�KZ���7�d���(��;T���$����%����xv���)�4�::6:L� �U����X�ѯo6���U���b ;\ň�w��_K�������(��U��j�[����RS�5߫:�TI�f���L������P�j�8ʸ�]K��f� ���n����H�=^�~�ߠ��@��+�7�{YG�*r�p;$���Z��xȳ^%�B �/R�¦�q�D��b������'���\�����s��@1��4ԓƚ)�p�ԛ���F�CV���Jkߒe�v7���kB�@4�|�!�k�)i�\�V��;<��z$��e YHD�y�MW��#�]�lHƃ+Br����xF7ۗq_�/�Zbn�f_�{�P�بz�}/�B�h��g�>a.�[��ߚ��ߣ*���lJ4�A(�)�ᦁѐk�@n��q�� {+)�&���)P��?N�s}��������O�b���{�n-H?� ��QE��L�#!�~�9��/﹝=�O+y�}�b������@���0���r�Z*g�l5��\P���N���yN�px<�Gș��2kОq��BG��Z~��f(�
Static task
static1
Behavioral task
behavioral1
Sample
c837ec7d1290ee0adae036fcebcb23c9196631aeb3af661c4dec6a078e687725.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
c837ec7d1290ee0adae036fcebcb23c9196631aeb3af661c4dec6a078e687725.exe
Resource
win11-20240802-en
General
-
Target
c837ec7d1290ee0adae036fcebcb23c9196631aeb3af661c4dec6a078e687725
-
Size
3.1MB
-
MD5
8290934ff224abd1e1fc21c162193d28
-
SHA1
b695196ce5d7bbcaf167c5f47d305965412ef287
-
SHA256
c837ec7d1290ee0adae036fcebcb23c9196631aeb3af661c4dec6a078e687725
-
SHA512
fff4fc212c036947abd6c24652dc45a80ea62e4e85efcad463a3ab371c2bab7656118af27c38663eb9d02031d49bcca40d6db365d632699372e57638051ac4e3
-
SSDEEP
98304:ipDV60O7Q6uP+Ny/hOz+tAZ6px648jRQUxvy6S:ipDnZ6uP+NahOz+tI62tRpS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c837ec7d1290ee0adae036fcebcb23c9196631aeb3af661c4dec6a078e687725
Files
-
c837ec7d1290ee0adae036fcebcb23c9196631aeb3af661c4dec6a078e687725.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE