2��84&��SbU\#-��W]A���z��-U�8=�+dF��G�\��ى��h����y��L���$�=�·�Fw}U,�#Ie� V�������۹����>@-Q6˝�fo��&��o��d�G4z8���ys� [ȇ8�a�$�۞w�p�k(yC�>�'���O�I�U)�?]�݀��U>��]���~��`���V�,Ȼg&ʬ��ƿO�dX��<�^SAr`�ЁG��j���!.p[���PIB��d/4iS�����7�����:����� ��,��m�� *�#��zH��ԑ��G^� ��� =*��_,����@��g����m�h(�5Y�}Y��ڃ�7�=�v;��N���RR��"]칱�o=�^Q����C�����*�����vD�F0MN=��8dw��639�EV=���~��C�b���1�@dr���hH�/I��|�cM'&Td��5 ���f��S��8T*>}q3�مtE���9U:h)���j��<u������X����TD��; j �}*藸c��=���L52C�c*�OG�r���, K�F�5m���u��Jr�����3�䚘_X�����G;�r=6�+s���2a�Bq8h��-�9���:�H�6��F�ۡd��@ӵ�����(Г��Me�(��P~�v}IYT��9*aG7�u+�bo��=����I�(P���0�3�V��e�a�O�B"�� �r��n(��Ȅ����T,�����B������^�T3adN��<�4��f�2���¢�⸵1��u�U�����g��\��.���u���� �W����65x��!dž{m����Y���!%�F��{�JA���&m�I`�Z�<� �5c����27��)m!�>2�Y�����䥰�s�\���t!Rq�˯^? G>�l1�f"+hY�d#9 xhߛ�d�l���r>N�?1�#P#��t5��>��3Hm�?�X�3�+i�+�/Vz5�G� ö�30�i�����bX]dn ߳��B�j�:���7���>LӢ&|��J��eGg��S��xS�/�~?�Ջ>RD��L�3�U8���_� �3�+�Z�Cd�s�L��m_�r�?T���7g1�����@���T����.> L�k� ������_�W�y�����ICQ�Q��FI\�_�]x�q�)�)(i�O��vR�-�[�r`�|���Q�r�k���'lvҥ*a0�� �_*o�q&w2~lT�w��+r�h�VnZ�+��� Y�}� �P9f�)�v�K&�v��LcWQԻ��Hɓ�$����t!�s�I���]�� �0F$ �*_���y���!\Pœ�I2�{<J>�#e����v: N����?O��[ɮ�Ss,~?H)��{i��Y�U�4�x�oc�t�ץҤ���T�� �#��IB�X_��4�Dx8�ơ`�sNMd���@/~Ul �ktt�T��7�_�V���U�X*�q�Pc8���?�]єU����� �T~ �1��ʨ5�m�E�v�u�CQM̤�4�Y ����a�{�+�:�re��%\,��öD~�.��ū}�����0h�� 1Ɵ )�VD�e��g��%ܑ� ��x�7&N],��$����ӌ@]��OpNӴ�"Ya� �||��g��Wf��o3���ɽ�I��<X�Y��Pg�tQ�b@u�Y�4�u 3 [���`��?���~���� ����zK���_�)=�#c���>�e�`�-��`:���S��ː��F����b�^����? ���I�QU��d}�<��>Ī��yG8\D~������m�N6�V�/�L]���q\Q�4gf4��Ga��-�R��*!$�����&>c6���Ϻ���0����Uͤ�`$�#5/%Dw��]v.��^>��̓qjH��Uː���1t�{U��{�0�W���A�:s�^B� -d3p��%��4=N���"y��r������ :|r\�'0���� �Pf��h�lM��LW,}��J{j釃� �gz~ ��M�����fW��,Y�;߶��_��� �\��� 8���;��$"�f5�[��U3|O����{�;�d���b=G ����I�:4� (�\���Gv���}@Y�r��84S�a��П��(�M���Ǝ�z�nW�j��l?{��EZ��G3;�s������y�c빻���v���t�ho���]^��,�K�rO?��ty9-�q�����-����c{���F6��M�ڜ� ����n.[��T�5�c����/����n6敇#��6����w�Px%'��bz�@<��q��ɇ�{�� ~K��8m?[��5E~�G�8R�E��ˀ�I]j�Ql�dV��cB����OH��d|��jx�j�f*Ϣ��pƙ"�'�@M�j�^�W�u��N̳u5�Vf�*#��<�<���UgG��S�t*ݵ >�̴��&)���yP�<aL��d7N0~d�75��JՆm���^\���ע,�U7���~�(��~�zN�N������i��,�ƕ�8Y��F}%g��35YKJ8�̊���a��i��Lp���[#����&���):�(�����S���l����� ��q��:D$K�m|��2�Gذ'�o���dp�-w ��1ȔC U6�6͂��� �2\�I��+\q��bU)���&����X�N", {u"u� $�P����e�Oe�����v�w� �H(� 0�6kR�>Hxg�Y��2ٖ�ۆ��gw��0��ܰh�z(��eK#���gόeR��<b8�i�$� cN��t2�R��ar>&�'h�)BR{��k�ӡ�gY`I�X���jq��=�>C����ve^��#��d�� �Q������ңG*��0��EH�F����w�N��Ѩ�Ʌ�P�ٱ& %x=�̎� x-桸��q}V�2��W���0�Y1X�pp7 h�3�#6 uS�%��q A�J@A_-�5|a�T&�cj��-ٝjP��y~�h��1 F$��~ nF���ǁ�g^�0���*X><W�KC�A�ė�y�����;�-�����Ε�6b��P(�]�Я���\��j�@,!ޅ��.����eһBGZ�ZR6q�mlY��]?����a��(B�O�< J�W�W�հnݧ�}�,��#�R�O'����O7�4xè ���U}0 ��#T��XNÂ��A��������|bVgD�K�@O-9����U�b�"���2+�������������aчY�0G�Ec��s�: �� }|j�P� ��`�c��X�G�F�.:E�\@�m��q�rq�.�'�W�8~�T��ҙ^��b�!H��k���i����Kܘc�FQn��x��5�Ƽ�F�Z��%x��qq�}8߃���R�:�Q��+?^�SR/�.�ǥ��H���P^$��������C�֫��=��\��p�!� ܹ�fDwZ薤0Ę +��!�>C���$��3���� ��S7���V� �LMֿ��pOB�!��9��gqKe���1O�d�F���n�5̸6ױ_X3�dD��a��=�{wFu���4F�,�<#��~�0�/��K!Ս���@�='8ES�W��%X%>9+_d���Ix'O+ጙjƊ�� (\M .��F��u�c��?F[�R�����a�H�5 2l�m6��FZ�#
Static task
static1
Behavioral task
behavioral1
Sample
5cb00ed4dbf5bde91ac1a4f30b84713fc7169954d179b5304f893f292e8674a3.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
5cb00ed4dbf5bde91ac1a4f30b84713fc7169954d179b5304f893f292e8674a3.exe
Resource
win11-20240802-en
General
-
Target
5cb00ed4dbf5bde91ac1a4f30b84713fc7169954d179b5304f893f292e8674a3
-
Size
3.1MB
-
MD5
1cefacb92893a044ff7dfcd7fae8a09f
-
SHA1
dc5e35ba32f0c33cd45369e1ac3cc1238c1e8819
-
SHA256
5cb00ed4dbf5bde91ac1a4f30b84713fc7169954d179b5304f893f292e8674a3
-
SHA512
593c010d530204ce6fa40afc111be2b15b6b4b60c00e0431476f9fa948de5d28353043e96dfaefe700cf6ed63f0b68af9e7f78f5bd275e7aac01d5a381a08a91
-
SSDEEP
49152:5bO4ksLgwfj2LMwFFd/ibhxLH/PI2WAE9hJ8lxvLrmnL2I3G4TIEuiafW:5bzl3OMo6bHbP5vMM1rLI2bniau
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5cb00ed4dbf5bde91ac1a4f30b84713fc7169954d179b5304f893f292e8674a3
Files
-
5cb00ed4dbf5bde91ac1a4f30b84713fc7169954d179b5304f893f292e8674a3.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 320KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 317KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE