��Q6>W#� �աO�A~q2����[,�Zł��jC�=���C{w��Ņ����ђ?��V�(y���غ+w�;���c�=Dh�Jn<�����4�;��7��E��P�a]�5̉��X�jԒP�RK)��LV �uYz����o�o�*�U�>rM�nj2����N��ԡH4q����V���&���æ������ɧ�]��WKr$������"� �N�dNlw��Mg#X���K+�<�8�q�ܳf;�5���ߣ�?h��S��b~$N��0�Q�Aވw�H���"J�����Q�<� p�4�Y :ۊDŽ� tjc�Pg?�y���Gi�����7�@�WZ�K����z�[�'Ǹۛ�+�@B��+���#kܘ�u���}����`��!�#�n~��@Θ��'�@8� �yV����g��u�i��X��Μ������ ��uD����2&o�&�=X�XN��%i�Jj?��oQK`�o:���W�I�ew�]*C[��b��q�ȿ����w��5;��Ld-b`,�1�My�s4���/�@T? � KJVL�NEg�;zeO�3S#/Lͫ~;�>Zֺjo�������p�hb��@@�/��{���s%)(�/b��ۥ���b .��.�{�,��簮6��@�kD&7!H����,Ũ�}a ��� �M������v�z͌�pMr@\2z�F�f\�7�~�G_�i�`�>�,&��D9$�D��xb?���l�F�=_2M�Y�U�_�V�#t˫�X|9�lъHi�lD �&�'G����4R��.��z�QkG�D��1w]��}n�bA��&&�L�����|�H�M�d�;{��ʼnm%E�nz�&i";�(��җ�H��%���-=��'@��f"�nUO�w��h�l!5���W�,�8��R��v�ڿ��"Y*;B�e=���V O:� �_���oVܦ����z���7�Z�:��b�`Ӫ�*LK5^,�hګ�au"��+��Tn�%�����ueF��Hs�B������(�(�����6i�a�NX��iz������!��&���NO�5J�ω뿷Rx�4] G��B�McS�ra�}����67�z��U��ɤ��t<bP��?��"��� E/�X���As�R~���[|�>�w�Ig�r3� �&?b�,s`�L`�Q@���lޘ��j9���o�Z�4QF��?f*�5�4���!n��#F+w�Oy̡����PkW�9�ya�4���F�U9|_a�1e,������;fo$x�2��+��q��D�� :�ڡ�����K9ż9f% Oh�о�#�1�1H��n�����3g����3ޝ���>`�dyz��H��,?)0���~�E<?@�PћXO�c"�>6lw�����ׁ�j����GR�7T?>X2�?:�6Ȥ?:�K�,\���[ҵ�A:�*J��Ύ��#��q������{��H�>��R#n��V���e#�\���2.���_�3}��+)��Q3mgݢ&~8�G &a�ܚ�O]�gF� ��N��,S4AT�K�0����C5���{;"��(7�4e��}�bQwh���KU���Yc�Ĉ�ڵ3�IQLQ}�O���׳�N�$�&8�取!W�t2�C��`(��XV�J�q$�~@����x_,{ۀ�'J��`��n\�eT��>�tk��(W�N�F������!�0$r�l��7�es�07?� �j��`@�D{��t1.�(���ܿ�ݶ� r��ҟ����X~.�^�UT��y�m�?�H%A��noIkhbW sgbѩ:2qv~o s���n��k�馂O����Ty��Ie��o*�5�6��e�~sP���qgV/��;�T2�2�~�,�S�-�(�� �v@u��H_,�٠�EA�24�&F|`[- ��&�]�>���̍���������N�X�A��� G��2��l�Bp��H:=->��X�J�pS����J���G�G���[����St���S�k&������ґ*�E�Lx�ϥJ���x�%�S5z��6Q]�G��l� ̎΅,)C��$��uYd}��I���6��ul�9��U}T��� A����%���b7��U�e�0����?����Ӈ`z<�8�<�֓^ �QX=�;5>��}�rQ��O�ӂZ�H�]~�&��F�e0��xx�e��I_}ùp���`�Fq/��G��E(�y�(*S��;;��3�ӏ1���m�.W�װD�$�f۶Vz��@�^��֮�l��r�ȹ��?�t��?��8�k�ږ@KB�Us�@"I� �m|�hL���{l:�����N����d�� ��pV�"Nȯo��X��U�̦���$��cm���)����@��O�s�+��C�rŌ^�2I�K֗��3�qk2��;l��?��ĸɠrI���"��ךl��:�R�("5H9��}�葐2ԅ�����5n�n`S4�kP�N�2��%plwBۉ��P7,��Y��a?6|p����Ҍ���Mg�L,>]i'�����R1����� Fj��O�Z\����"M�%o�c]6����,�����w�S0�ݝ�2�ym���&����.cb.i+2������YvY��8W��(�t�0ʻ���1]P�vx�b��x���Gs�cľ�F�����^� ���/]Е�QW�]8솴R���z�n���(��8����a˫\��y��̭s���NH��瞘=� �t&q�`�^�¦��T�-�Vt�m O��x�ê���ѫE�R����~�Iv"iއp��x�:uJ��㧸�X�NG� )��q�a]Y�<� ]2�_3a�:<�vP�)�jbY���e�i�~�v!��,���-�k�&�<_>���; ���T�������M*�b�����ӥ)lk(r��%J��mmF��o��~8t���5�R伕��x����G�|4�����4������l#Bp=s�}ͨ�D��a�e=�g���sw���5�9gv�7���y#sL���d��ÔXH�b�)���e�#�U^�����O�N3�����r��M��1��(�f��q�i<��8x��2�ZSZ}���
Static task
static1
Behavioral task
behavioral1
Sample
43b3043f2addce2891ef662bbc7168277d22e8a36b828302a9282baf39325425.exe
Resource
win10v2004-20240802-en
General
-
Target
43b3043f2addce2891ef662bbc7168277d22e8a36b828302a9282baf39325425
-
Size
2.5MB
-
MD5
663004e261b5492aa12357c3d9a81658
-
SHA1
f85c73caf27c8069e7253432f531f7f47c3e2db2
-
SHA256
43b3043f2addce2891ef662bbc7168277d22e8a36b828302a9282baf39325425
-
SHA512
d1a955737e4dd4df938341b60ba135a157d6b06d9cf3b92af3188eb42ff53a8bea0c978f80c3e33f9fa79c270dfeb93a3a56f26d5dc1e2b0552d0ab71ed5e0a8
-
SSDEEP
49152:MlFew8swoUWykh4e827212/ymFn1+wJQAiZDgdXwFNTN6qtzQ:MbdxwAfIQkJknOa2JvtzQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43b3043f2addce2891ef662bbc7168277d22e8a36b828302a9282baf39325425
Files
-
43b3043f2addce2891ef662bbc7168277d22e8a36b828302a9282baf39325425.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 131KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE