)뺆�!���nb6��/�f> Yp�'��&YYAVsDwx @��H�|y:��*R�>�r�)T��E^�Nch �kh��nF����ۣ/=��$�=��3�oHcl)W/��ɭ$�K���s�àȶ>�5� �������BY���� S�C¯N��W��C� �⥶����z��*5��f��$��R6���i���h��s����XS��T��_/ᚩ؍>����F���us�<4J�<-^D>-���pu���'��]�,-����f�Oj��B� �NE.�OJ=�f�$�K2%<��!�0���SԖ=�\��?�Q.c���#&�!b����>r��%d�{�7[f\ Y�ؕ1�TsH[��#�+���f:8Tӝ�R��s?[洸B��_I��.R�3RB�`�Z��w@PqqLjp� �JW��4��^����p,�����9�y�G�H"��w��A�n� U�M��������kn{��7B�;]�N���5rX�X��Q S �_�v �1����:�ix�q c� ��tp��]N�@�4�4���nN�H�y�T-���b#_`J����n�Ү�h����T�㈳'w'c���OW?[��UȰg���zĽ^2�Npm4��l��4N���@sY���V �|8uH+#�2��'�@���;�������=���EMr���:�����4Kҩ�I>�D��4���N����@D��;���4|\.�3�T�$g1�n�V]��&������y��'�ڙ�C�]��wC+��x�!2#��;�Ӵ��GL�2̿��ܢ�S6E ;�X��Q�s�k�rD��vH �h�tGt �5���k`��N�JZ���f}�d2�T��/��f���1"-��6yN���یKܟ������v��t6�T��P#�X�:Xm}@��|�r�WS���'�xխV���~���G��r"���s1Gx;���e��xa@A+�3�B�h���[-�,�-��|��e1,���l���{�������k�m�o,=�McYb�=Z�r y�b8�F��rK�<�ٵ�T��P����G�l�- ���PbrrQ�;�E�h��C9��*�@��M LR#�� �E]�1�2�Gޒ^ ��e���+^�@��V�Q9AXZ�9NT�N�{u���&��Ph4{?�L�|�g���?oطF�qX��A�ڒ��&�y��fYV��H�������|K���X�ʀ2�k���� ¯G˶�Z*.�<H�C���HI''� P�Nh����b���z���K6�[%ͭ*�����Ӳ֥��=D$0�F�#������8�y�/g�/t&64 �_��:1#uw��V�����wyq�(�R?NR���)�̎wN\5�![��5[�[S� 糣ܨr��>4;q�A�6���?L�u��ͤh��?���lb#�,O5�/����Am�Se�2S���Q���D�2BA�v�w����9.բXB7�)7@�3��_Ϙ��3!������L��m��/J�@���BmH����J=)���m*IA��ۖ�)NuO�Rp�J�����#�Z+�Z��D�sGEɡMscb˛�ܣ�۹Ku���@� ��*�&�le���Z���Wm��**��̚1����|�Wf�>�[�����0�v��<�4�����ޢ��ndA���-یw$n����ȓ�;9����^��j ��ʷ^�[�Bj���R�2�陬[W�u���R�j7D���ShJ����C�� #��9�Td��n&�8r� �8���GZ�y�����[�;΄q@��D�� :�������&�M�l'��x����������4SKD�� ��r�~����l/%p�����p���=�ל.��g�����G����9~�%��R���7�ޅ�cް��2��>˔�<��q��r����tGN��4�?1�<Q;���Er*k{�F��ȿo���8����D�+�����aNE���W���B��aQ�[7(��&��ɿ��ȘE,ov�<ia��J��T2v�M��3�@�·U8���ʆ���7m5��=[�v����nN\}���C0�Uw'x��V �Q�i��C�L����%3y�!�ؙ�_ �H�{4/L5�-LR�`��ZU����χ���]��@�� yԉ��=ā��Tot�E���][���̆���D7^��.��;� �ޜ]��#I�~L�2�����G�:��S�%�VϼSϹ��j����QF Y����ک�A�Ղo�6�/�{C���Iv��O4we D��c6�Jm�j�Oa?�9��TWy�BnG��g����j�7��>����g�J� �O�v�"�@�X=E8�ng�Z��G�Ќ浍��J�}%j���gQ��p!&�^s�hXq ڋՍ���G+̿qt&?�!5�"o���_ʗl$s�h������K���:A-� m�(�/T��g�^�rݢr��4?����[6�������},��@��d� [�>+i�6]�4q� ?�F��x��z�3/KW����O_u(0�@��'��σ;`T��K�,��и���e&��GM�}5*�9���&�tT3�>��/���<lJ,#GW\����-C����'Y�_=Ȇ�ᵽaQ��,`I�رF��@�|Dy���Z�0_#�C��%<�,�M҉�w���%�Q�.�����+�L��p5t�J����驂�F&?@�Tv�.?��������F�H�p&�s'��ur8W�/�^~����M��_!��m����6�36Fi|�T]q{�5͟���<r$��`d��J��=�d)\���{��kW~=6�L a���^��G7�T����%��6����iѡB��`>�������.��h@��ZײD�ٵ���d�V[�h�U�T"�"�܋}؍���Q�&�T�����I�G�Y[���L��z�´x�' ^�����Rl � �-�o�|FJ`�>�i����já.�̲�U�=<��emm�b��}����[�4����[)����^�N�X8��)?�Ch���'4A������_w˺���F��E���n��5%��]I��q����M���6ddWj��U��,·�~v!���m�È�aj�۬��3���O�����������p�C�p�����PuP�g*�_F����DZ�7N���4n�Ⱦ�_�Y�и��! ���X�e�T\-U���㠞2���l?��� E؍�K�F�(F�� ���}q+\p&�H�`������]���ܤ��?����?7�hs�¢^�=��w�o5���:U*��T�;$����$���x����-� >B�� ���4����$�g� �3�m:�'��hOW�����\Ky�z�
Static task
static1
Behavioral task
behavioral1
Sample
28208009410e39c9499394881ee2d2a0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
28208009410e39c9499394881ee2d2a0N.exe
Resource
win10v2004-20240802-en
General
-
Target
28208009410e39c9499394881ee2d2a0N.exe
-
Size
7.2MB
-
MD5
28208009410e39c9499394881ee2d2a0
-
SHA1
3b3d6981e3341eed4199f097712ad89e3256bf58
-
SHA256
5e75ee05936813a2fd4652b54634ef4448cc448c0152fb7e3d2b980ab2c842df
-
SHA512
7efcdc47c913820462359b59dd00a7679161ec7b9ca91737ad53373c61aadc0fff71c547014d9f33043296d5b8ec87e63aecf4fc6235c17d5a8c5f7069786815
-
SSDEEP
196608:Hu4KkqFo/KykNUXt8driqaH2FKBKaLYzoGO:PbqFuXm7gMKBpF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28208009410e39c9499394881ee2d2a0N.exe
Files
-
28208009410e39c9499394881ee2d2a0N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 2.5MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 343KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 23KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 360KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 397KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 501KB - Virtual size: 10.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE