��;�*��5����H���<��*�1&����X�W�3oƟ�0|Pl��kͰ���Obj���3��|����}k��&�;j�Gx5�O�{�0~/��sY6ޙ(e�'VJ��oz9�J᥊��$滝�@]&{��4uj�3�x���% ��<vi�����l([�����X8���;�ZD6��+��o� �"������e�rih�J�3(�AW#�D�٫iF����hl<�/��UfNW��p�[�-r^}{�����?�d��}!O �L���1�=��J�����Г���?:�fR�7wi��mN�\jȞ���y��{�#�)����_���-�nC��t�q���"��_/`�^ՠP��}/ۛ'�Q(87���z��9���R^Rwp[^ Ȩf��y5�zPx�����|��T�1�S��k�5�?�/0��7���K�|�0��Z�������.�3yV�xs���jknQ]*��S�t��)�Qj�b4@1^�>��\'��(۸2�����bV�zIB�*���[B-%S�]�XM���-�j����� ���HW'��I�7YJ����Ũ�Rն����{T��{������< ����q�2�)�M"%�����&]�[C��F&�;UzԱ���!���}�A����U/��U���bL�w|r����v�P���5%ڽ�.����5S�z\x}#�X�g�ހ�L��ز8 Pc;��<X�r���ȭd�Z��J�Ȁ�N�.���C�0o=���:p-*D]�1����.��F�_B������ŭ9V^�зd��>@�* 2�&�~��$���z��H�kc��S�G@���" �s� �C�(�ͥ�$�5�>���g�����6���Ԝ� ��?vq����a�� 9x|�[�x7H�v��.�VN:tq+�z?]D�_�\���p���l�bY!��ֶiY����$�'/�M*1?�1DB3R۪ �K�Y����a殌b>�1�|�yz\�R�Qfw��H^�9�8�4"�O��QH���U�%⫍5���5����`��P`�vR��9@U]7�/�������L6�D]W�1�.�q�e_��������!��_��s~ W�d�Ɨ�&~���H��'ܴIlw=A:|b����ij���Ҿ��7iV�n+V�1-d��7�d0�^<����/�X�c^r�u���n����o'���6���=1��::�탭KY B���[̫��b���,-�U��{7���z]��a�Gs)��j�� ��Ըx1�� �C�>�d��U��`d��o��y�!�̾��j������7�\�_���h��Q���� ����Ԝ�B���57� ��0bvHAT�m{��Kc�7G����#��2+�؟����I�s�;-Y���Y�X�I��&��K��Z6a$��dJ�D��|ۥ�gC3�N��{(����Ӻ����]D�n�_����Hɛ���$�$+}�ҥ��"�o1�H~J�77҈{K��&��N.���V%3(r-���4�����J�|��A��er�*)\k�a�����u����k:�e�a�yCrȉB B�2�w�6堋'm(�l��+;���t/@C��,��7 ��$#�=0��ʪ������gǠ�" ?����͌����20��!�S0n t�%,���r���:�3�m)��(��F@�� �#J�^ mX�")<�״��G�H�$!���Wf������Gyp�}�֏���أ���#2���]�%�e��Ή����\v~Zź��;�j�<Obݘ�1��o�4`]��훽� C:y�c������q��˵�b����\��,�L�u�Rv]�?Y�}u�K��;�����$�cm��:O�-Kv�ޔh�3�-��5�|�d���& I,s�p�m�x��f�%.PXW��9������Y��v'3��n���_�:l~��H�d,�Ӻf��d��� 8���w(�?I�̛�eOpV�chS���,��o�aױ�YTy�gw<Xe-��6����_�c8vi�|��J�ً\��uD1�i�oQ��"��(�L;e����ש?Z��[������ ���V+fZ <�1L]�mC{�H���m�����r�{H��t��J-h�~\Mz��5:/��h���^bk��"���t��1K�ܐ�W����r��+��)��-ɻ�L]�xOy��Z�G����p𧇩c�a>N�(!k�m�H�R��.�� �:��b0Z�mi�6h�4{pdI��ء5!�ҵ_�S(Y�0]���<H=j���ӝ�y�~����I�q�ٗʚA�̙�E�>��X��W|�~p��T�W�,��L�Z� ��c�w�W���˵�/��Z\̻�H�E���".�U��X��.�܀į\�"����?Zr��2Mq�q���:$,��{71�)y�fb�J�W��Q������1��V=��G�>s���H�ⓐ<vp�ݚ��qb��ns�7$�9F.�]�X���� �V� ���)w��lŊ��eEo�c�M@����x�vZ# ��V&S�$�K/cf๖� ꚸ%F�4��� a�E�]�A�y�eX� k�����Qb:���}3|f�x2����,��āf8�Fg�l��V��lNh�"'�&�(˝:I���̛�-��"�b�iaU�6��Y�=�ʃ�}��nI�KA]qBʜV��v�:v�َ��-��؇�,atKW�}Kjq �V�zu9)T��@SC�WR&�$a�\�q�^1��DUrb]�d���E�n;R���Pn�ge��K~33[Iz��i2��$ �<�W�3O����M�'nHf�Z:��4�ϰTF���@S,ٍ�����"&���ߢ�4�� �r��y������_�����Z��U�D� ����]T��"�b�fw|/��-���M����W��E����(�z�Cl���:�E�������>��;ҦxY`\��`��M�����[6c}�;���?��s�E8v������ �P����a:�MN�)Hkto����<$�@Q�������(|��G�!f�n��|�Y���Vbz��݈ "��bK�2�/ � x����0R��b�!�d #?%,qO{�| *��l*�� IH U�5c �hw�NY���d�7q�0r����?'Ƚy̾{t�Vq��.���ω+L�*�����v�b�])_�Į��՝~�k����,���n�ŐTd� !��6{0��C�����HN�����=4�s��m�T鏍h�~lz���%��hc� .��HM^��h}�`�GW���˧���,�}���m&��D2C��BѦA�4
Static task
static1
Behavioral task
behavioral1
Sample
fb1f36856e3447e5a8848dcebf77a03409230f3f3310b92db2252cb100fe4c77.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
fb1f36856e3447e5a8848dcebf77a03409230f3f3310b92db2252cb100fe4c77.exe
Resource
win11-20240802-en
General
-
Target
fb1f36856e3447e5a8848dcebf77a03409230f3f3310b92db2252cb100fe4c77
-
Size
3.1MB
-
MD5
3e56ee976d1a07d48214a473e25abd1b
-
SHA1
2fd19742ebd26bb344ad5b37a49f84039b929b56
-
SHA256
fb1f36856e3447e5a8848dcebf77a03409230f3f3310b92db2252cb100fe4c77
-
SHA512
d58c672cb086e110b81aa418f9a1d94c8ddf7f4f47f33c60fd4e9aacd26b453ca232951b4d2820962b56cf1094d2f9c8e1a7c1bdda318a48f030a50c501b6f2e
-
SSDEEP
98304:sxnTCl+/uZxTh7iz89XahvA0sOgOPbg/9VEm:UnTk+mZxZI89Kef0bC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb1f36856e3447e5a8848dcebf77a03409230f3f3310b92db2252cb100fe4c77
Files
-
fb1f36856e3447e5a8848dcebf77a03409230f3f3310b92db2252cb100fe4c77.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE