ciT3��:NZ�l�7j�#�z�>���������!�һaG�|�\���LM�����1ѹw���jGf �C:�ւ���.Z�Y�����>�MUF<錒��J�����K�7����DC�wRy ���hL�p�7��� s�.=�u2��#6�c?�ʢ� �,�{lzL� xN�r��ݘz���V��)h�xDw�xk�]��2�zNhL�BV-=<�ֆ���զ��R.����7v_- ږ�Uw]2�V���W��i~��@| `�[���4ie;�R2JA�jegBy�On �� ��g��a�#���^U/o�^��e�DH]���.�g�ɔC��a���0X]��vB���b��O���$��6���[p��A�@ņ�x�~���$�*��"��#��D'���Sy)wI�o��0A~�P{���6[Qh�f�x�@7����|�H������rXĀ��������`������X ����I�o�}�*�Ʀy��5��M2j'@�lC%5Qw~�rxX7X^��.�.�'�,����X�b)���Ɨ��9[��YޮH���� Ek Mb��[��O����I>O4%���A�P��W`�4d�XEU�%&�M��R�A�ˈ���j�ovPM�G�����;-�7s{�z�)��q �]�]�܉dR�V4+�2l�G�;r.��ݸϝ���/mθ��W���p�]?zN�x�yp�Z�#��g���}Z(WJ�m��T h�uOo�a ��^����a������L�.#��@ѧдSӐS�w�b��=�� ��4�R5{��c�"��,q���ȫ@�|�}BX�D�U����(L �� ��-�N��'�ޓgn�^u�_�m�u�Ξ�Z�zd7{������D��u�*��T��\� )d�0�T��6�֍N,Yg�����Y�v<��~^Ŗ��^pd:Q��q�#L�f��v?:�a�>|�GB��@G�Y�*��Ie�k%/r-�ws.�Û����uN�4]�ˏbR�'l�>yI�jxE��Θ����{b�o�{5�����3}&�m���!�`�����?��H��7Y�����N Ŗ���j[1���ʹ^�)�5�4:���4F)�=9 �@L$c��Ҟ/�ؙ~�����[ G��5 ��٢��h&���9�x# ~�.�Κ5�h% �#'�.u���Y24�/�D�Y�wmL�68�U)����`o����u[�x9۞��g��w��`)���n<�P⏽̻Kj���N�V L���������K'����2T� ��p�O���~%�_Ri �e�5��������4�(*ɐ��@+JPAu��`�mw�`��%|_',�gi@ ��Ť@[h;��H��Gv�xK�$]a�:��Ƴ�� �������ޕ�ܡI���X�)����d�0���S�C�������C/�-KB*�-��]�����t��o�j#9�)��W�:��-鼕��屚gB��$��L��]/3�6�>�V���_�|oc�ɸ� ����?�þ�Y;0R���I�#�Q��/�J�V�Kfya�Z^�� Gs'H�"�زt&��U�Q��5��e�x���x6�2��"R���+�>[�v�:e��4B b�����+\���%�n�ҏ�E2������Kim����'|����R�S:#@G� ^d�j���!.]�t,���%_��������8�O%'��La�߸�le�v�ئ u�Z��=���54]��C��n�ƶ�[D��o�E+����D�}����(D^\�M�����SY��(�N;Y���p���ׇ!���x�dk������G�h�RP�b�S��9��%9$ܨ�܂w[���#*!�����T��Z���r����ϣҧLBD{`9㒢vA/}]a��u��]�� ����)�ߪ����kN�X��J���hFE���$���yܣ�̸%��!a���YH�K�P�n"ްk�!�?8��`0���K�����>#�}�ڞ����]N�e<On�f&%���5s�-H��9h�[�֬T{\�3�D !f��v!(�b�CnS����=L�n)i h�U��%�����W�R=]�OB��%>����U-C�E�M���@�����ϥ�R�[���k�6W�L�^~z�l{Lޫٌ��� r�_Iz �AW��,�>8�"�/Ԙ;�w�=� ���R�xy�Z�0�N�^W�;E���R�� �jG�>��� x��@!�^Uj6�>�Y�#��uв��1Û�q�Rz�:hϸ�R�Vċ�Q?(S9��R� y:,$�%�����h�Ȓ��\�N�Iƣ�FG��~]�|�����ˆK�BH�kZk��VwͰ�x�{�$��H-����o:��𤫅�_:�m֎w����M�!+�xO���hZ�ڈ�jW�k�!�x뛾�ч*�%u� ���ڏ��? �9RK��Ϯ���sRn�u9$�P���t>�T���ة����G5p�A�l%��(�%�.�y��K,����A(@ Ƈ[e���p��0�E�D���97�F_)b+���툷���d��}�Bk�]Re��Xx�$xt���%�g��~��� ���YC��C<.A�� �M^�#��r��d�ڍxK~�Z���fQ�s��� ö�#ܖ���zgVO�ʮr�'hf��甗<��}ˣ��-G�]��U��\J� ��$m����J��hH��a¾�ޱ�M��`�z�<�]<¿�Kn(�{�r� �;�K����;������-NE�'���|N�[&���#��Iqf|�`�Rg�K��y��_e�{�>�#�P���e��3@)��2�^�F �QD��� ���p1V��rɧ�g��R�>����fD�Z�#m�'�F�����s��II��ʯp�����4K*rY/p�Z@������K3/���M��7���xg�1Ql7maF�L��.����F���G J��!�����Ԩ{W�s,&Q��Dգ�7�@�*Z�_^����)�^��n��K�i�2@���jI6]���n�Ɍ��p&���Ԙ'Hx a��7&*m�����+�òN���R�^%�D% &9��>�� �밢s�L�� ����H��aj��@�4;��Z���ajD��eOb��$�_������8��n�ᩀ�'�X��a�]��֦����@NH�?���+��_��-��� ЋvUe�~�0�gc�mGB��@ �Q��y�q�L8o',��k�X�ю�AҎ�%�s�>\���35 qyw�8�E���gGŎ�I��H%s��XʲK�b�U�P$�-5����B�Ļ/�0���� q~{�W�(Ni/6�r g4t�R� ��9��w>��K��Z�y��h�Hg�/�Eܞ��" ��|�πخ�������L���6)7���>��L��������*u(����j�hO��Ȑ`�C����a��N)���J*}��B��Ӧ_/mS����W���;v�`M�X{�'j����ğ���Q�n�ﱸ�l�6@�!"� Y�zo%C���`���_y�K�IXI��]wBL�V��Y��3Cz�P��~r�3{�4��}�7h:R_� � (����7A�KS��v��c�� -�V��6ea���K������@:��O�莔}�a"���!�?���^-e!�z�b��!��ǗZ��}�*�ҠN3ܦ�P�ȏ��'�ZE�{/}�.��_���k���ԋ_G�Z1�IΙ�`�[ު4�-`�+��v� ލ)h/�@\}4��6��SN�
Static task
static1
Behavioral task
behavioral1
Sample
72366353e11f11dd47f39c93cfd7a6d5f5cfc4522018e8be04e3965300081878.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
72366353e11f11dd47f39c93cfd7a6d5f5cfc4522018e8be04e3965300081878.exe
Resource
win11-20240802-en
General
-
Target
72366353e11f11dd47f39c93cfd7a6d5f5cfc4522018e8be04e3965300081878
-
Size
3.1MB
-
MD5
9b1862aeb850d39308f51989c084637d
-
SHA1
1dd5ed47b1a127acbb969a4d0e3c856155dbd92f
-
SHA256
72366353e11f11dd47f39c93cfd7a6d5f5cfc4522018e8be04e3965300081878
-
SHA512
52fcfcc77377afbbedcba46a3e6150df3243d6f30b2d48c59a3a9984064ce8f210edbe9479f902c5dcdd0c533aa0b951569cf0ee83a1f0f20268adda307256ff
-
SSDEEP
49152:Vrya+Xqzd7SF81UgKpftDDSH/Dla5st/xg1AnZHgrLP6oGFapk7:R+XcdeeIDD+04JgEZgrTiH7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72366353e11f11dd47f39c93cfd7a6d5f5cfc4522018e8be04e3965300081878
Files
-
72366353e11f11dd47f39c93cfd7a6d5f5cfc4522018e8be04e3965300081878.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE