�û?���s?q�X2��Mb�\�I�?]����lU� ���z ��>lœ��9 {�C���ڑ}i��\߸�kDn���2�R�7P��2�tå"i�D�U�iO43�J�R��3��v��_U(�v8<����J���L5]�c�2Te܊a�B�eGD���5����J�"��<��d}>�Ͳ#ϛ��A��;��<8�>w�J"8�_"�fH���ss�<P��HJ#2�U�aF���M�d[�u���t�gv���4X����u2<4�!�=��_��r僜�,��,�E��x9-�zg��,�n�a�o<���@Kۻq8�Xo�=4ڴ�� ��C��D@�6�|P`�]�Ded�>�'tY�~��+��Y�(U���s��^��;̹M�k��ڝ\]���ϤT���f��U�M�qۊ�b I�/$V����k����۫|V�#�?_@I,����o�.i��ә8�)�T"�|�~���K6�u�gW��:�5ɾ��f@ӭ�C�˼`0��ɶZ83h@7�a�l��Q�4"�%k��O.��������B��G���1�aڟ��;x�=2R[mU�WH<�������n��՝K�)-9*�Y:;܆���k{J|R�<��[ ࣻ����NQr�ÇH���\ ,�zZ���p᪃/�i�fY�l&/�����W˥�� 7�����Q�������n�&D�f� ��n��`e�uX�m��)S�V�0��iZS��1�/��}���C�M>�`�闻{�<�տ��� Qh��CT�>$�<�+�x���=�����O����2(�j��n���� Sh74������}���8�^�����*�*�7%��n�M�ь�����GKΓ�B$A���r{��\�LT�7��Me��qE���BX��Ns��oJy���̑5,���Q�O�C��~��r�nƄQ %'�H�eI#u�8E�|��i��#�<u��p��}B�-���D����vQ��#.J�`�Qh�끁�<��>b�p`� ǵC��A�TԹ��`�����n���i�9���K����پ�X��YėN=�[W�ӽ�4f�X�U��E���{D:�K%�.���D�SتH��ʵK�%1�nx�͒�wӳnja��M�b�D7;~M;{�G��I'/�ƻ����E!�G���T�.�s���L3�<(�����M������сi����b�����t�U<����9�%KBjXa2��q� }�����Mۨ��S6����OK)���_���K���`;�����/x��ʲ�i��m�F��zp���jz���p�F�����_M�;+A/�qg?ULB8� ���%+����1<�����C�?�@YH�� ɾ��n�����ab�J K�'�ʠL����hW��:��/.�O�6�g$���|�-��e����pnܐK�U�uH+=����,w�R'sqj�|�y���Y~Ƈ*�묨��:���SӸa#����U�s��фy��9�B�����L������.b��ml���"q���TĆӍ��t��� �oHyߎ��^XC���mEPZ��l��L��1�Y�W*����F���&[C���� ����D3��X�7<�m�Wd��� �[��p�C��s������ܾiq�b^�����#�Kb�c�M3���2���es��l�����l��>'��tR�^d`x���<o)����0�_��>��~4�|������8~V G��� �"�.S��zc�'n{�2c��TX4�蓿�����~�� �,���4�ɔ%��vOw$e Pw'���Z �b�~���S�K)�}o�a��W��Q%9k��i̸5-~W+j��� k�:��fއ����>�� Ym~�^�©u���PsC]#UO7U�p|йF��%\��.�j����ab��rذ�)��1�Y{NLKf��A)�a��ϴS����G�+cO r��DP��X���@�����K����s5e��� ]�UM|��7NZ��{��R��V��Ƅ�4��L�� 3��Ӎn`e�ku��4Ҭ��w������F���NU1����@���?�/�l�� �����Jp�TK�Ӂ�� �e�X�0��m��Lmr.W 0>���6��3�G��w� w�������p��eu�S�%��j`���x62h�"\e=t ��7�E���h�ԌG�t���a��;�n�4�e�9_�ŷe�xIӶ�:�k�D�GIQ<�� gv�R��]��V1b؋��t1iᢒi���x$����s�6��`.qcn��`7`��˥Fu?}OI`�?&x���}��k'�Խ��L2�aڟ�w9-�����aiĤ�df���2ı��tC�eS���ezl M������l����a������q|l5§��%�f���������z�����>�\*9L�qΧ�H����U�N�3�2�e�P�-�Lo����0��c���L��t�'>[Z��~�]��n��0t�5{9��͢I��.��&M���@��|"$0m��U�īz�"���ğnȞ��Ztdե�+�*�XOx��-��<dbb���nB��7���a�~��������[�K- f�A��_'��"ƅÖ���<���u*vU��L�N��5��Q����u��o:�獲2�G�D��[I�;폿�"k J��8�b�J'���{�ۛ?;e�:TѫPKX'��h?��"�QA$�|D���ի���a@�[����A,v`�ʎ���Fל�Xko�3~��Tzf�#])Bc�>�o�x�E����}rD����wւ���Ȱ84F<Y�-�<����F�SA�����+�/�)���觝�e��x%��d D`�uv��H��N,GS���5�2��kb���[R���wJ�dCGkiT `��RX���R5�����Md�r�7�*��`����B���G��d�P{�G��M����̶t0����cʕ �L')94��*Y����ݜ$ ��V_��A��oIZ.JG����Ѕ6���"��nq<x +P��C^*�C�CZ����Db.����l0J�ֺ�l��:��o���Pk
Static task
static1
Behavioral task
behavioral1
Sample
1470f5959ff1b6801ae75991edd3978c2f659345867780fb587abfd6dbf8f498.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
1470f5959ff1b6801ae75991edd3978c2f659345867780fb587abfd6dbf8f498.exe
Resource
win11-20240802-en
General
-
Target
1470f5959ff1b6801ae75991edd3978c2f659345867780fb587abfd6dbf8f498
-
Size
3.1MB
-
MD5
4465053e9cae7a9e004327292237fab1
-
SHA1
3b878550f08c657941c9b9617f2004067e3fa4e9
-
SHA256
1470f5959ff1b6801ae75991edd3978c2f659345867780fb587abfd6dbf8f498
-
SHA512
b35d079f5b4a6477ecb352cf5cf2fe357ded6652e9b0eb971c7a1b8d8ec8c1c2fd3528cc84d75aa729b601671bdf1b40f4e2c072164ebe56e33d222e6a2bde48
-
SSDEEP
98304:8vcwVTS75hRPQsz+3dR7ncJ6z2l4jLiCOw:8vdV+QiCf7cy2l4viC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1470f5959ff1b6801ae75991edd3978c2f659345867780fb587abfd6dbf8f498
Files
-
1470f5959ff1b6801ae75991edd3978c2f659345867780fb587abfd6dbf8f498.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE