�,=��v�<��c)�C�]Y'C�V������� �����`{��R|������)� �LsO�qB8�9d;�fԂ��ܕ,��J�x+_ؽ� � M��V5�q..�M���\Gߊx����݂??�L3�z��vd��+1���[�j^ �$5��]Lv.�G����D�S)�<����!�f�sE�֝����K�C��+ ��"@6��S2f�+�(��8�~��&���T��l�!ތ�����5��:�5�M���T���qe,�5�J�6�]��A����T��������X:؇_2���u1��e��z�m�1�Q�@�`VՋ�z�D7����rX� Y�����bN����t�x 02�?!�4#-��2�i��M�#X��*��1Ƃ6 �4�0�\�J�������>�B!iG�Q�D�'\'��E��2��n/���e+��y�-b�����UT���D�h�֘4H,�[yw�n�t=۔=�Fw����zyE���'��(q�����Ұ��Mr�L��j͌��)���x3R�l���Q[4�Zcl������J;��ϦPқ)�3d~d\̯��"��s<h��]�4U�pF&�m^_�_��*!��E�QW�a�P}0a�$J��E �3���){��E[o�b��y���*^��ex(�!����,��$�=HMY��� G�-@f�S��ݓ0��a�y��*j����Q���Ю�ݮ����Ã�_���'���o t��_�5p<V�v{� 4�.�HB܆u)��n���g���K��q�'Z� ��t ҏ߭zm������ �P�+�ڛ�i�M�A��h��2��$�37�KI����x�A�����F�'(|�e�p����xQ� -E�^AX���R��H��fXqF ���g7g<rC˨nr���yE���+���D�3��r�fL���lH�z�x:�L���rp��[�c֜&�;K�LL�a����åp��dhN�V�FC� �NC\a9�� ubn]�V�2&��XK�׀��3�t�;ǔ�y�D��==�i������uiT��U�Yʄo��6M���wQ�v "8�m���v��x��5�=Qx�� Uk?�Eo��x��Z�d�vI�ʠ�d$��p�]F^8P��l] ����)��D,�y��Bq�,���!c�}FВ��{��" �S��,���V����`��+qP��ȫ<��Gí`k�襉:��һ�vu5\QDDơ��ªn��pݷ;������TL^Mg�3���j���s�P��% b\�\��R�O��ACەNPLT�ğ�����"ۯ��T�����&���Ak>���qT�@=+nj���+�k���R���!�a��۔`}���%�i�J��.�Ϫ��PR�wO�3�X�=�Ki!sv|�`I�A����`IR ���"���!�w�u��e=y�0�2�ɏ��o�n���y�缾X��]�ղvCk^��d��#�tNH)j��W��{q�A&��33DۦڦD�@�E���f�~N��K�g�,�sv�z��8�"%�85�*�V��L�M���q�-)@�G=��k���oW��&J����M�}�� O���X�vU��Ow V¼��=L!�A�J�����>�����*��τڌ�c�gA_��RT ����ے���L E&�M���f��֫�X�i�]]�����e��W��(m��Zp�r+.��YބkAȌ����%���\Dn�.^B���fΜ��x��a�w�hز33���l��X} ���d��:��\0c�3�����!���V�Ǭ�Z2���%$o�������W�&� �΅��~�6U�'�D�T���Jd�W_9�u��;�dd�Su�?�{��g��#;�5��o�d5�[���o������#㜏��ŐR<6�PYX͵�*��Ni��*�J�%0����k�W�#r�t�)���r�3��)V����m�1�ʬŲ],���"ˠ�N�%v��0� dQ:d+v��~˲2�,W2{:��;�+c�v�����!�*�CW('�p%of���3�]�z3�#�9Nzu�Yfؒ�@�r6<S�p����`��[����l��3[���Ǧ���V�0�wE�w����������U?�*��0L\��}�<�?��5��E��D���<R��Ԣ��`�U�M 1h.A�J�>�)a�m�i���ZG�����P�5�Kը�U��\3�|,��1���lJ�k���Stv_�娳H�j*�Y��!J������R4j���H�*���������U)��f�ÇlHi(;��&5�#$����ҿ�z,�Z��>I�0��m���Pfd�qJR,����Vn����7�PZ�҈��I�'�p��1��9\��g���h$�딺�m�ƌ�"R��� ��"( � ��D'����=Ji��,/�ו��663i�߉|��͍�w�J�3�G�(����;)����� �M{b+ߏ�Ѧ��R lv��fѯ�m,͎����⌴�m�����R�H����'��9T&k���VcUa��]�%�.��u�����P�z�h� jQۉ�.I��6&�X��\���bO�Ƈe�������NOӜ8F�Y��^MTZS��b.�H�j����KY��>�R{�W�U���<�ؤ���J� �Fh����� ��r��2s;�ijwB�M��"��jj����8�2)�U0#�Y"�0�Pt<.�`��l0�F^�n���]}{��ْ���:�kJ%��H�{����h|N�"��c�uΪ��7o=�{���t{{z6��l4$OR.t��'�g����6Wy���̌x��zq�cZU�vk�`�rQ��^>��?�<�؋?��+;�� &��m-"de�Նj.�-��som�ܿ���R;���r�&�H�$Ͻ�&�Qz���"�� oA>�ui����`,b8�,#L��^�O���k CNY�j"5�0;D����#-S0 cr�G{mf�a�m��)R0U3����2#����w��ڒ�ّX�TE����� �x����r�/d������h����6h�!wU�*����t�9/5t��6�@Fy�e�A�>��S� Į2`b�|��yBq龴K���$�����Y<#W�$�����Q�;�����m~*�PX��L�=�� I���+.=U����,��������t@�#��o�3`�>��}?9k/K�a���M[�I�ВYuF�30���kZf*�`R��pl���h�Fta��C�Y����2*Wzt�� s�0�/V�@z�WM�J{k�_σl��O������l\��H���MU���<_�@�]�^\om:��!F��+��������z�� ����:>N����o\��l
Static task
static1
Behavioral task
behavioral1
Sample
8725235d633678593c9bc3029e7c80e324889682574da853f35d2ae6b0ce8120.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
8725235d633678593c9bc3029e7c80e324889682574da853f35d2ae6b0ce8120.exe
Resource
win11-20240802-en
General
-
Target
8725235d633678593c9bc3029e7c80e324889682574da853f35d2ae6b0ce8120
-
Size
3.0MB
-
MD5
4254f63e5d150da9071f3c2c1337ebf9
-
SHA1
7fa750f654b61dda3b421f6a850718ea0868bc47
-
SHA256
8725235d633678593c9bc3029e7c80e324889682574da853f35d2ae6b0ce8120
-
SHA512
383945abd40a33a5eec9188cdcd9db28daa4e3f4e725fd222e6c218cf8bf7ee53022bdd383a3bd1553157715f2389dc044458694188989b2f659b4b049a05dd5
-
SSDEEP
49152:FJHrstWSpYTgIe8K2x/1nJOdNhvIuSUniVm06jSyg5Etah5af4l1lLW+PKhhx:nLvrWAuJ4/6WlPvioK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8725235d633678593c9bc3029e7c80e324889682574da853f35d2ae6b0ce8120
Files
-
8725235d633678593c9bc3029e7c80e324889682574da853f35d2ae6b0ce8120.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE