=z�\��|�ǖ]"NHx�g�V��o�?�(��9 �Hp*��h$ ��c�&OΦK?�{� }x�����pJ��FP�;c�C��0�.�Y��~�t��;�?jz|�g�ߛ�^煇�JU�.W�r��qT�o-�Q��t��R\3f���-�Dt&F��̌1U�Z(�������]jxX>*̍�0��]� I��ٞ�����(�pH�sPK�*���{��%� �9L'�~0AO�b�.��::���F�HcYw��U�oU�M7�}W��C�kw��������b6�T�^pFA��-���ԁ�5��<�X@��+�9�Б�v��c�ޚ�f�К�U��uA�]��U��"ś>�~��K���8��C�!��%�?6��-0���iY6j���:�<�?�p�H~�-� ��O�7 �ݓ��r���h�_�Ӊyp�~ܒg����s�A��g�x�8q�(��,����B�Q����B�\��u�����.)t���Ty!�uL5'P��yż��E�/�r��HhD��&(N>�̾��0e�}�Nڇ��m������+��z�nUԤ��~���Y��H`Mח��FW��z�:�� *�r��G!˪��܃�.�8�˸��1�Q�$G MQ�*�͘��;�G �Ӿ�/�8��w�����U���1���lבֿ�o����+���{k�i�#�.G� ��A�����Y�Q�. V�=wc��M*bݧ4 �ert��ۼ�U�b�%פ1��]�I����ͅ�b 2��l,+�3<���U��Wi����ܐ|����=&��xj<fA�ʼp��4�m��S�QG`����. �����5u������$�x�������@(���f�"�&�!:��w��'�=F{����`o��0\��W*f0tU� ��~�I�^�9��=��dL��RB�={u�3|�3L ���nG�W��s����Z^�_ ����B�[/�J^u?a�I �7D��863�Ϧ����ԢxU�q�<c�Gp|E�9���K�q1�թj{�F���SR�S�����*w�K�5� =�<�NcQ0��a��?.��w�S��(X��wv���N��.aP���F�gwO)�$o<��4��n�<sʍ+����91��ը&zT�:���E�N"c�B��A�8*�^,��/��E�9�4g�z6 ��qe�r�'߰�"�o�T��C�_��7.�Z��ci o �nƛ�Q����D��_��@���l8�a��ؓ\e��0�j��k#��} ҆��P�g22 g��4���A�o�mB?�a�P���9^�S�6��d����/�� S����7��&�a%�m��#�фl��N%�_���p0��M��'}�<G1���*< x���I��>,�"�{Hc�ҟ;�Y�1(�����@k��"�P' |d���y{wښx��.*)�T�;��P�S��>�8n4o��o�RZ�ˣcd��jQL�\�,�77�qC���L�=��gm�=�4L�v���_�"�}��'� I�#�������^���=1 �f��s@89/7�㎛������|�����?匚�z��b�m���;@� {������],h㨡���Pr�R�x�x������w��9����WM�O҅��I��!�y�&��E4�D8+�_�`!epR�a�����{Z�}�S4��R������s��v��|V��*�Q3����'��|��j�}Љ�ȍd�n[��VD�ףòk�`\�Ԏ%�T�(��DOҭV�uJ���������aX�����PǓ�2Dy�?a�S;t+��N��:�>�4�%��H9[ ��2�ʭ�|ۓ�:�־v)I���E���(}-D%�H���DR���ay�_Q�K�>k��c���y5��KP�s��i�*3M��>�E�^xw��$�����[J�,�qloU�$��_)�E�٤b�Q�Z�3i�ݾQ�Bayj�q��q�A�$Ŭ����JL���u�A� �h\NR�b��a�[Ө�CFN��^�p�L \�'�c �y��" m��JHJW�ߌ�LȕV�&���w���Oڠ)�No[̂�F�-4���u��t�0� 5؊n5��a�`E,��~Rd ��62�Hhy���ق\�}�g�-����CQAܞ��i�amW/���HAP�ZH8r��si`.���l��u�P#)m_�@��ٹ��Ix?=v��m��"�����ƫ�ͩ�0�R�D�FeK{z�"G�o�XO ���y #����W�Z�2��#�OF�P )o[SfqR%�^r/箴���['`�H"���lqa�$����*��'��LN���/#��(�"�S"R1FJeC�݇97���V(O����6�[��Z��Kǭ�wFxSRA���[K��������5�0Kf�;Ï�=�A��ϓ㊯o�pш�Y�������ldn v�g�:�P��eճ�z���/cگ�٧�7���f�<+���i�Vgq�z�S����ʇ��S�� �cT!ý��s�/�{d'��kfU7F� �^o���/�IN�S � ��h�Ot��Z��a P���k�n�4$?7�n�^_����_��zB7a�){\���H�i�짨�"���yC|�i�6��l�k\���l��\�y�>|�������Ny��l�J�k�A:�v�L��pq�uE�O�1���^O_���?���ye����6G/�p��C�Y�X: |�S;ZM�t}p��mƄd�JB�f����4��ˉT�����&u���-����i�lnJYK�^q���h�и#|j�%RG�����B5�W��UG��(���2<�v��a�WS�U���Ϳxmd[] ii@�i�����0�N5k���8b8�m;�]����>"P�Lt`��Ύ��h�� fA��..��_|Us� =#���/���T�E�&���I�����N%�z�� �6������Rɲ�� ��ϧ|qMGV���4g${U�����=L��)t�cV�ˏ���N{_���|������!�&s��ku?a0����ߥ�lkV&p���=<Y,W�#�Qc���l�C�k�G�Q#����d���ѭ�� �R%�����+� �h���m�fK���p��S��l_�GU{�l��� ��(��*-9 14�F���ѣ����ު�lT>��Ԉ��_���dz���ڛD^��2i�w_i>M�:噄^��=#"��Y�G���x>�O��/N���6}W���v���G"����t�a%i����%�ű��kH��+�F�.���=�W(O$ǟ�r3O����Dj����!$����:��sxյNHC*��5+ms+!R��vOJL얏~N|��X9���RJ�I��v��]�M���1`u�Zgn2�͟sݮ�Bja2� ���=��=gn|�H�5�vI�`l�G.bA���c�)�<��0~u�&�Ç.O,�.��ؤ;"Ҁ)P�/�`�I��+�fVz�ρ�kw?�MX��4"����{l��I �.�,�6��� �l*��5*�Z`C00l�K���l@oz���������V�|� -���Pa��RV!��P��~P��۴�� �E��*�Pp���-���+vA���~���n'�Y�3��75�3�,�� O��4���uD�w:�3&C6g��6�g�Y�"�����A��AatUCla.��AAҹ/Y���n�����"t�>�� �)��,�[g:�<�*� �� �=V�����s��3��Z(���q}�;>��&>9` ��ޱ.�cUT^"<������ki�xiL�X2
Static task
static1
Behavioral task
behavioral1
Sample
8c64afc138378f10c8ab211bdfc976e2fcd57278ba354b1a4ec6bde1ccb781bc.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
8c64afc138378f10c8ab211bdfc976e2fcd57278ba354b1a4ec6bde1ccb781bc.exe
Resource
win11-20240802-en
General
-
Target
8c64afc138378f10c8ab211bdfc976e2fcd57278ba354b1a4ec6bde1ccb781bc
-
Size
3.0MB
-
MD5
fa6cd0e900fd1413437cd8bbb8dba2b4
-
SHA1
7e3af15e7033320ee514bbfe4eb23f35fee0a68b
-
SHA256
8c64afc138378f10c8ab211bdfc976e2fcd57278ba354b1a4ec6bde1ccb781bc
-
SHA512
fb8d5a6cbf3d93d0db1b716d05d937208d0925639ac1dce3b893a9082f09f1ea1216676580b1c83665b8b88a5fb7aa85527a0df4a55967a1f54671b35a0d0e12
-
SSDEEP
49152:RdAHbL2OdUsa08cRPtqayQJtvnYQibtAAviGCAvjL6U/F4Y:ReGeLtqgXvYQkt2GCAaU/K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c64afc138378f10c8ab211bdfc976e2fcd57278ba354b1a4ec6bde1ccb781bc
Files
-
8c64afc138378f10c8ab211bdfc976e2fcd57278ba354b1a4ec6bde1ccb781bc.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE