��[�A�L�����~�M,�Ad�/��쮟��d����f������ q�ڏ�Y�U0���q�.����g���5~j��Z��ʤ�y��^ U\B��u=Q�d�4�ކ�Mj� F�"�Q������$ͬ�w��� x[�S�������q��}(ʿ��0M�g�[email protected]S���u˥��>i6*�(���^��z3k�dF�ve�T�*V$64cL)a�]ײ耹5�@pұR��Pmj<�?��x�'8� ���#g_����i6[�"8�˃���b�����L����v�Q4������Ժ�Sٞt�9��=��bijU���rg����� ����h�q�ƴE�$�7��aYe�Pb�T�cE�pt�M�������ctIJ椾�L�1�6?UַZ��3I�eψdh���-����$'�T7+�G�@�E+̋-����-9լ�)�Q��m��ߑ�����S;��&0n�ӭ\�%͓�0���r����ĸ�P�/��pED� ��-bz ʜ��Ɏ��w��]�����߱実���}�I`$�=c�� �쒐.�[<�fk�0ˢ���\��/�K�(GV���If��d�%m�ԈqK���l?�;,�ۂ�=Jv�'Ĺ>\}y�X�Þ��G����Ԑy�5���:Ɛуz8��A�wSt�A��^�=�d<N���;������J]�<�T˸��N�R��I��X�=��b����O!m�����5�M}��ж��|đ�<٭z���̥T �����E/#��M��'�$�A�N`��%t�0Ì.x �,EQ��I�M�hnxӞ���.߸�WceϷ{#Lԟ�.������E7�!�g��l��|��|��iri���['�U<j�٠i �;��D�f�o���\�I�6���ٱ��lP�^:\�!&�@c���ez4:��p� ����3��]m�^U16nC�W5�ARW��)�O���S�� �n�{�vf��=�P��f��/�J�i]w3*�kx8/|�_��-�JHOz��h�g���"���3I��ؗ��^t4P��% �i���<8�~(��E �h�Φ��j����B���0�q���)�{E���xI�����y[�|B�� �r��X��O�)~��I� ॏd+��D��1�q9�� "��'V�[�����<s�Q;S� �]|�(�Dؤ}P��A(ү,�$0�ŋ�m5���s�����V�&#��������H*�$�\����KǾ�? ���'��űMAF:|'1�~����8������F�T��;_������C`�����n��K��Ĩ|��UÚ�V� A���%6= �%tvkEdHY�>��x4�*vvI��^N+�B�y�yc���a��'���������Ӵ�"�8Q��$~��G-���Us�4O����r;�V�v6����Wr��#zoC�y�G��������s,���~ ;��뽿Wou0kmlx�����G�CN̠���4b͉��z����p��qs[���<�MI��N�Iф��e>��q};}dj�a�"��)G��&f� ���&����� ']G�zj��1�B�K]���r�ֽ����� /���<ٍ�zSw�n��,���.��Ҥy�.�;����JUz�|d\s�;�tT?�6�]�rm��%�?.�uP��8��@�6�%a���3��>?a��N_.���"�Өs;)�kv�S�w�$�������+ƅ]�V�<�!���U�B#�F���}D��g!ò�L&3ol��Ζ{mÔ�I��p|~i-���1+� G�(�0�3aI]%�ۍ�?q���ӺX���x��-7xQ�]�]��,�Xbh���MV���%6�o���@�wa���H��߉���@oA�~�<�*�Z�..q�V}I7%�Z��a͂:��o�z�8P��`�Aj�NƦ�DµE{K2vF��AQ�r�V�s�������C#/ +�tL2�z�0��gI�3�� ��s�ԷKSc��ʥ�� lf��l��X)��|�-%������v1��ᓞt�����(E#|K膨כ<� �6]�di������J��ы�v�9F�Eby�f,x�V�b)��J��9�LJ眉���WX�^��ؑ�6�>%��Mw� �-4-�r���@dPf���i`���d�[��w��`��rf�M@#\Rʠ2Fi��>��h�!��*��U�������:�<�gF��"'Y<�� �F���f!֪]�I���p�&oL"K5a@%���p��q��®�����r/^� (���%����C��R�U����OQ� ��+�ȋ q��e���3�P4�h��$ f�S�L��]�B�-hl�?��P?q�s��f�ݏ�-Tk��l��uU�&��£ӫq-����_E��/MH^F�?�L�����;�����B� �\��:`�|�p�ͬT�q�ْ_���RT�8�5U�鈴��;Gy˯⑤y�L�xJۣ��Ua4s\H��G���kr/�oB���B0mUK�m�T�K�ʻ"t�̱��u�Dܗ<eu���{n 0�/�d��S�-��bL`�8'I�m���B��O ��f(�����y���T�p��4 C�Zʞ.�ܜ#;���Y���ޕN�'��Ye�C;���ϟ9�Dݷ�m��s�Q���Ю������ߗJ�&�4���C�h�R����L�w�@Ǜ6Bɒ����O ջ��#n�4u3�Q0�$��K�5O�v�c�c껌���-x2�_?�7��2n)'홐E=����MՔ�J�ZnK�R+��,��V��CD���$�p�-Vr�Լ�������<��|���@����a�N�GwAt�y�N@ 3��u����0� _>�9C�8Kr�M�����O�r��"*_���6l�|���܁��JI.�8�Ջt�A$7OE ~��K~[z\�٘z�D�%N(֑���&��F�������W�熝5��]��F]Q�`�=��cOH�٬4GѰ���C��VM���(�G��o��HDr � գ�OT�G���H��G�j4Z�j��^���L�˟��&{T�@�e\x��kd�-�$����0yL�MУN vZc�nO;���.�F���!v���\K�+P�c���Q����H�섯B5��7N�����ԏ��&hI4�RBW7�����t!����-3��c��/2$'���/����`��1.����O���HUK�Qbw�Y����Ƈj6�F�!)7��V�E|%�a�QЍ}Y#�8��� ��91W�_\���w~��_�q��Wy����� JW[m������f�M�����TY;L|VW��!h�M(�T���dr��to��{�H�n�%�)�9ׇ�%@�w���$�@�1:MR]b5����/g0�6�w�����E���A��p~� �����&-��Ƞ��ۈ��%h��s�#Cp͔q����ޛ�\��$���������s�o?K!9�x���]�'�J��8Ϩ��#ڢY���ح�h����%����g�s����l�����ZR�7/
Static task
static1
Behavioral task
behavioral1
Sample
e2e2333485e29a92aabe79d70ea2d21c27ff13a71f3f0a86fad53e52c48969f6.exe
Resource
win10v2004-20240802-en
General
-
Target
e2e2333485e29a92aabe79d70ea2d21c27ff13a71f3f0a86fad53e52c48969f6
-
Size
2.5MB
-
MD5
8cdbedf7b86a75210b7062b1e3c852c9
-
SHA1
61f1e9c7d57506eadceaca748dfe41da91f62d45
-
SHA256
e2e2333485e29a92aabe79d70ea2d21c27ff13a71f3f0a86fad53e52c48969f6
-
SHA512
363cf22d83bd5428373025aef43782a2494f7c7ea5a37732444428f1084656f7361bbb31254dda5f3a9bd402238a437ee66fdb94979b131afef615e056e0c786
-
SSDEEP
49152:KGPlTwHYcZmEfL/SWuS+8csOF0hR0hjv3pnly4MXIVE:+gEz/SWCsOF0r0hb3pnl3MU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2e2333485e29a92aabe79d70ea2d21c27ff13a71f3f0a86fad53e52c48969f6
Files
-
e2e2333485e29a92aabe79d70ea2d21c27ff13a71f3f0a86fad53e52c48969f6.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 131KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE