��u��o)�r ]>�;(�"ߕn#�� �LοM��}q&�*L7���ǍY� l�f���YG�Ey����[p���K�D����Ro�� f�w �\�3YU�9T)ڄZ��ߎ������=�b}����u��w��_l ��V��7��{�OD�����p!ڥ�x��8=������J�Pp���c�G����߿[�l>2ǜ����q�5I�����������\hC���?e�P��uz���x*��VM�NQ�ᄋ�� ��S��I����k���7����4�N�4�|UD;���� �0�aЃ2��=��o�8j_A�o��\�*�(8��衙W �*AM*[.i�E�j�j,Z�����^��M��{��;����G������\ª�l���?@4�/߳�H]=!6m�¥��̗� Lkٍ"�4�{J����# �4�EOo%�B*���T��Ps�iB�毓-�O���%��h�;��q;HO_����*�X��Mz*$�n�(��eEg/WkIO}~̭���=N�L-���L3.R�ؑ���C��o��/�Lj���ӫnZt�y��Ԋ~���{��w�v �E�<��p�J�F7�$ퟑMm3�ዙ���w�zF�j��E���"�y��O?��=���UQ�8�ʗ�5U�ݓʾ��Y�Y��Dx�N�t���=s�͓4�M.(X��;rl��+#Sz���'�t\pن0 �T?~��d��@ZLeYX�B(�O�^�c�̯� kZ�y�T}����ԑGƛ����*:d���?�TR�f�Hx�S�3\�I�/�����= _�߽57��x�)���<90��[w �� y����a._O��b���<��,i�%�S����"{�[�%��qxdɟ�?�rG�C��P��T��\J�ɜ7��Ma�|+�'�i��l�ģ$���#��Re��� �թ��T��L�5�uU�ݑu� �=mc3BKC鍓��L��.B����V�����V�>�VC����ų6S� v�̭[���=ق�p �f�l�-�C���ҙG�fuJEh)5�������U��K�9��;��A�s\ʰ^��+� sDK��W-{��d���T��$[ � AȨ{��x)��s�'���G �(��E��xiƐ/�����o�]xTjU�?�l���iM2¦i0r��I�����ˢY��2�Ҿ�:I���'�#���g@ ϱ`?���a�fֵ��@���� e��3s���(�?>h�<����E*�O��QI#p�A�ӡ���y���B��(j@�� �VqX��(_�w[��+Gb���r� ��?j46�����9�� ��Ɋ�����K��R�6M7�4j��~�:�g����O���+7�� r�ʖڽ�x�R��dh�tW'�q:��;�f7x�ѱ�כR�T��e�?rH[\��*3�iAڴ�o?4zcp�[�6�b�E��5��ɎQ^��Y~���D�F����>�� F�=x��*�zN���Gi'EX�k���c��H��@�����8�>,!U�В������ �(�J7��.��YV=�4vn�M��m�,�Z��=53�l�-g����a�EgJZq���d��!F������_���Cۙ��ò.H�w��� u���X�zBV@��V1v$Ĭ�2���y7�yq���:L�u@'G�A�L���;ĐY��W��C�2W$��;T���l?���|�d���5���_��Գ<l8-:"�V���݂��Q���$}���L���|�-��_ʼn52��'��Zv�r��~-��ø>:ڍ[J�^\��m=�,/R6���ޗ�̄�FKvǼ-H��K��$�����5�W�cO,o�$u��i�CeXw��<�qy�L^?��uH��1vS�Q˹���7��� ���:�����S���P�L5�<��}N�.�'���g1f�*��p��}G;�n������E��y;�|&�s��ZZh�J^xV]�`r�/�Iv/�qQ'�!>��m{� � 1��� �U- �f�\O��}�@�Qc���3)�-v<�}��g@>�^T�vbx�����SZ܈��Y5��)U�8����ۑ��}%g!z"o��#> h�O��}2�_ �I��M����H�^�_��<_���dNQ���e{�:�f��p�:�c{�����_���+�t��e� 3��Y���+�癿���������d���|_��J�2�-$��#nF6!�����ह�����%�$ސ�j�S .7(�!��p�����I+MfK��~��Y�Ww��=�T�����X��G��0���^��If��M�˅�P��B��3�o�DOR?x*����{� �қPTJ�)�p�O��?��\��&Dx?�߰�=-�d���1`'6��i��C'HF����i�=�9������7\�nM��8��ü�c�^kT�:��$Z���\*-��k��x��o���W�9=���5�n`9pjW%��� �� &m�����p�Y�QU��| �ʂ�ٮE���������W�P��%��u�Ź-����]G��(rE�����a���P.r�Aݚ">��3����\-�Pn�E���E)��]���`�N?Y�ڭ����<#�T���t��Ή�W>�� �@��W����k��$�v ��iϏc�a�?:!���&��"m��֞,ɷ���r�<ۤ������=�����9�ҿ��e��7�I���a�UC���ŗ�;9��(zČ�2����P��c������ ��!b��{�I*վN�D���i���[0���Z���ۮ��>����6���%��HqV]Pj���`O���G��ʅ��Dyv�����[D>G�k�jƄ8o�:Ԫs(�����#� OGm�V���WDY�3,q��b�������[�fY��z�:�s�� ��x�����;���K/e_!O�F�M���h�x#"3��d��w��|S���.W�1T�i��S�M|�-U���=N�y�����h��5�K��Q�����>�ثv�R5�|pyW�V��Z����Ϲ7�2�cO(߾�UŽ��\T�z���t��E�*tňm�/���5ؽ���C䥠 ,q,���uY���C�fQ"��2=��/9u���X��w��5 ������A���JOo'RsH��ǀ�BP���$������gs��uyݱ�o{���iY]�Ss�ɇL f��{:9^�XG�MN�է4H��V>�f�/�a2߶�FT�a�c�/SQ']�)t�~�+>˕VҢ��4&�������ܪF�~�(Z�p�,��g�*�=��F�bN�<�8F�P�� -�H�z�
Static task
static1
Behavioral task
behavioral1
Sample
80de5e83a732a84df90503d5f5220701c57221a8c3d6e129bd90c4e0b5f713d2.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
80de5e83a732a84df90503d5f5220701c57221a8c3d6e129bd90c4e0b5f713d2.exe
Resource
win11-20240802-en
General
-
Target
80de5e83a732a84df90503d5f5220701c57221a8c3d6e129bd90c4e0b5f713d2
-
Size
3.1MB
-
MD5
39ff8ae1b96a08681098116bbac479ad
-
SHA1
b61a845bf647e618a5b3314494d709b8e5d3f757
-
SHA256
80de5e83a732a84df90503d5f5220701c57221a8c3d6e129bd90c4e0b5f713d2
-
SHA512
b7361b6a050a6215b34235c4993a0ddbe65a0fd058841ee57e5195589257efa33665da0c1bbcacf0e23e67ef4f251203a2a8872f642e5c7260008350a603c455
-
SSDEEP
98304:XURNdTuy2p19N0yEzbJfcQcZzwfBOh84e:k/T92p1AFbev0fl4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 80de5e83a732a84df90503d5f5220701c57221a8c3d6e129bd90c4e0b5f713d2
Files
-
80de5e83a732a84df90503d5f5220701c57221a8c3d6e129bd90c4e0b5f713d2.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE