�\d�� �QG�9���I@��ݹQL�ح�P����������ZM5,?W!V���o�2z!�~9�_=���s�����,��YAH[�ч����{T^�����_lI:�+L���ӱP��MZ����2Q��}�E ��D!�������7U��(�ȗt�}l�Y�%����4!������vy1�Do�b���46�����#R ���X�Fmf�y�kRk�b�asU��÷9U��S�qh�c���b4"���V�1-�$�/|��F�&FGz��顁c��|r�,�����e�U����S=�}�,�)�k�b�4t����u0A)\�F^�L�Χ�zJ|��]�ܺQ���=���-~��H��͵��s�ؚpKf�>�&N��{A+N�ԡ�vf^���jyX���Qp# ����J�;�wue�n�5�w��y�ڏy\�f1���ĿPj{���9� <�m��=/L��ɫ��K��d�< ��Q+���a���yu �cd��M����4�B��t�p�5x�瑲�死���ȱ��r�����jݽ(Xh��{��#���l�O�7|x&P}�n8o��B+���|t�:��r��?M"i��b����+�r"cL18_LɈ�>� ���q,��]����%�ܨ�}�Y$��� �.�X�O�fuN��N�|����r0�<�!q�\<�8U�t��6[cj���ǂ���t4{i(��^a1���PfDz�$h��G��j+52�� �(�Sk?;�tv�N��ET��S�)X0�R��i��F&�o�r�"��h+���v �h��fW �m�AZf^�0��율Pi��oʐ��K_͠]=��I�q��\����A;}M�)�٭˯嬠�L��:C �߆Q97'=�������7==��u�L�Hi*Ĺ�@l�OF�E��� �=��f)`L!����0�3.�7Gp�&���^�eF1�����h�J���Ncs咐h���W ��[��b�S&��qjC.g\��2���K���t{-aӉf�@m{����z������}�I�`"\�3 c�z�F�������_HZO?n^|����lu�����&h~/M���@S ��0}܋�c��||0k������;x�r�1H����5i�,�}�u4�w*@蕆����щ&W� Z��M���=O~�\� =]hž�E�{�,��� ��@���ef��Ê�f�: ��bԹԦĴ?�,{ �R]%tJ~�~�Y|��8�u��Ly��;�"�<L�b�����\y*tc���x������7�r��E��y}n�/5���,�$��b�ҮR����B��Ò����3C�m �_����� ��֫�~X� ��5�;�R��6/M����C�W�B�0���`P���x_E��@��(�m{�����{��w�sTc���L93�"�]n�q��0���aF1��D�L�����o�ly�����UE�OZ�1��E"�W���;�G�E~n���>�Ԙ7E����|� ?�y�#�g ��lo�#-n��oڰ�+|ր���G�e� 9���@� ��C��3vs� ��L�vdoL���S5���[��<"+��-�w�;��wT��*�Ce���_Y�H������ʽ;�Y���O�� K6��*h��P�?�s����h���2<�ϧ��,�u��8",N+���ɾ�=��ۻ��_8u��n���Y ��(M���R�d0y�X�g{BG��������!� g�4�$��X�Ղd#�od �%����e�qF��Z�=�?l DC@������=5I^#p�����IW��l�Il>��.`nP�r?���1�>�l�'Q���t�Pfį��i�{щ�@k����M�j��~���F�� ��f*����ET��uӘU�m���6Y��`x�ѧ�U`� ��)��P]M��/U�[���6F �S�w!�BdR%�����P�_�x���zW���~&�ؘM����I�<G��h�=LD��r{<¬y�Y��1���~r ��� ��I�~v$�^~nvDQSv5����Jp�:Ar+ �`�/=#n5L���'3+��Њhd�@���~O��b�� �j�X�v8 ����\�s����_R�#^Ĭ��g � ��88R�+;����=�v�a8Y�����]��=�K��k�J�&y6��g�֨�.����f5w� �)��H�W���\� �A%�Μ��:�jX��_ezl�(�>����]J���"G�(b$�ڠjuo+ܛ�~J��(�90���Բ�Ȑ}�,�E�O��R�SqL�؇ư����\����p�~q�z���ޑ�_z_���R��2E�qF�1���z]�����췾 q5��y��0��݆_w�x�t��%�������<s��Uj�����gM��EH���z�QR�f��"��w�����w�3>6��m$^�'~�f(N^zٱ`�{���H�WeS�Y"ꔂg?!B�jZ��Vd�����_��?7L�(����xt����V�jw�s�;G0*3�Ko�X�)��r����҂)U�n9�J�E�@�k�\&�<"]W�gK+Q��4�������LC2H��Җ�QKq�[(�p��~X����vd<��@��k��%�!@t�s��7��`I�L�Sh�!�*�z^Z��f Lv�����mV��,`"��Uox�Ʒ��49�l����=/6��4k \R:�e�V��.:˧��T��{�Y��&|xӡ[�0�ƙ�;�Cf��Pu��xe���K��`�;���e�����cX�JW�.��5� *yt�_���((�]�u���t*�����`��Ȱ;�O��W~��ѧ<�3A}fq?��!㧖e\H~�ՙ�Ҏ�J.^w�E���j�E���Z����X�4g7U}8�_��LؓPBH��lU�ع��\Wy������̋� ����JX����4��)Z��j<��1���D��=����C�a���v�@}�b�z1X�[�i�8ա;Ϝl/�����άN�L^�87�W������ _� �3O�H���#�H�0�A��c�p{\�B�Z���0F�����4��l��q][�7�i�C�n�V����B�`���f��N���"�g��%�,�&�?k�JЋlp�^�p�o+���wg�j{gC�f��tF�p�qL����� ���t0��#Mʔqf"��(�f��zaX9�`nvf����Z�����o���+�5�ȭ����PQ�݇�xBP��u
Static task
static1
Behavioral task
behavioral1
Sample
ca524612ae2ae7d920fbb7424c4f5280b43686d0cc25e40f7ebb4098712cf243.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
ca524612ae2ae7d920fbb7424c4f5280b43686d0cc25e40f7ebb4098712cf243.exe
Resource
win11-20240802-en
General
-
Target
ca524612ae2ae7d920fbb7424c4f5280b43686d0cc25e40f7ebb4098712cf243
-
Size
3.1MB
-
MD5
6c13293dacb7c25a1b89f7254f8eb114
-
SHA1
205d8a287ea5551d96a694c787c68e6d06aa6e5d
-
SHA256
ca524612ae2ae7d920fbb7424c4f5280b43686d0cc25e40f7ebb4098712cf243
-
SHA512
9ed4b2a04bce0a0922afb3617b4ef7acd30e9a6b8c044f7b911c3fd923a0216f2f40f178dbbf750c63d57bbfded8f33ec0e2445e8e029f031e9e2ba26fe6826d
-
SSDEEP
98304:dp7cJqCBQmGyH2KF25a/1PBrjF+0QKUblxLnt6q:d5cJqTY2KF2I1J3Fmfrt6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca524612ae2ae7d920fbb7424c4f5280b43686d0cc25e40f7ebb4098712cf243
Files
-
ca524612ae2ae7d920fbb7424c4f5280b43686d0cc25e40f7ebb4098712cf243.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE