���ND?Rs &���w$��� R�+�I�xB=�yB��V}m3�w<��v�2�p�0Zg���+8�o�W��4�՛C����1U��ԗӻ|���\�Kp���E�+�Oi��U��DO�)��� ufi|[5�lB-*"\��>�;�עD .�فU���֙I/O�Q�7*�-��W�`�2�mk�緄�W[S/�5���W�(I�w�X�u�~�������"��Z�`���qpCB�qY��?�Z�\��,)�톗4�Sg�^�H�� *c��b�P��}ڄUf��Z��lY�[[�i����jc����V~��'�p,i0��O� v>� Jp��mO3�6������L7#��3Bc��'PN�Qfn��Vȸ�d�G�8�Y)u˕'w \q�3�L�3V�&2�<_On@4�# (�2�۩j^�Z}Kck��*�1~��4@M0F`�>R�j�#(�a1�����`YX����p�d3eTw�lW���(� wi|������6 $�7�W�Ř��*����C�]��[R6P�ȤGIC{Z�Z\�qRa��{�Ֆ��3{_�Qg��x}L�����~-����n�-�<����j�@'s�D��+L���Fo4� ��"N��TH� 0�g}�3��O�z�&�D�~��隑aa�:�;.�;衃�+تd�o��ݛ�G����!@��'�q�"�0��Y�8�g��憆ii/ɓ���ԕ�i�w�5��8ؽ_�"#Gs�6����dh�4+����S +r2��o��^f;6+��z�9��g�Z�bJ�'m���QѢ'�s2U\�1����Q���=��N�-V�� 6V*G꼄�*�-�7��i�犊5��>�қ�Yޙ����F�Dp;�^W�� �"��?� ��a�if���� �\���u!ƠE'����#_ � �`߀�@�;�Q�7!y�k�[�3?�����V�l���v�G�h�3v�B��f�͢�_�c���|��j�VF�k!�\�+"���QT�w8�EQ��E,�����~f��A�Z���PH<v�싛!�rg����zG����do�ZX�YAA��0�.f(/�xE5���;��|�m}�Q�s͇��EUA�w�#���S�m:&ᾝ����`b���� ̻�8�x\Fp��ke<`�z[0.D�x�)[(.2� !�����K�Ro&C� ���詄峜Q��z\���_�Xߒz�}ge\�q4�"�i�4 /HǐR˚��ơ3�O�V#���e�H!��ޒ3�=�<��AJ��� �W��uȇ��S�H���e'��:���{džz��ni�OO&�}��sU<�T�8�snf'���j\&�$q�D�}�,2��5��Xc)<��!��Ƿ��$.��NI�M��p\�ft��l�Q��C����\xF�Z٥ ��=~��UG���Y(߱S���$�'�y�e���@�w� !�4�L�̤gr�3���:"���֥%v��ߪ3$쒵L�!b�:J�^C����i��.1[�H�E�O��L`�y) �O�7v����O6j,:��Dt��'�T�Fn����+%��d�ٓ�~�/�$U���^�������3���ع��{̳�E�V��a�`a�ã��u�;�G�1��k���������^����b�� AqK���L��4X��!��2�ѬE4�F����x\�5 �#?L[�4p�ٮ�ikP�K������u�k����*�����k8^�j�A�����Ċ������GJ�] �E7�bW(DB:��ҍ ��LP�PL#���F#4H�h����w?M�����X`O��k��]*�9T`M�]��� /pi��t���M� �������0����4�=?�TH��� �<k:2|��&�L��sE47���P���BW��,'a�7�d ���{�ZS�m;��Ag ky�9��E Q7,|)7�@��'�_�cc�p�xm�������g��-[�Uy���`SWۓŠ� ��h"��b�v��|>�{�!hV~)��Y��-,&�\����ڐm�s�"~����IN�uƿO� #n��i����ƴp���3�����H���ꊔs��ǟ�b�a��5?��1p ��ӈ;ϩP�Շ�|q-���!�ۚ��ek;:���侧g64�i)�.yo;�����C!�g��������T"������5/�i��CJ�p���}b��㙗��B�K�<��~������vE��JTHz�В���P[Ъ��_9�sА��R,j=����l�1&�,p%�;'������l�E���q��:��_�GYK�Ħ�$m%'3�e+�x!)ٞ����vpS�߄���uz��|���F��}�m�����P�r�9�Yr�l���@Vf�E�"�9�"��zu}H�꽝v�mn;ĴD��PR~r�;k��s���#I���{`��\�[(T� m\2U�YY�ݕ����"��"]�Yǝ�'3c�o4��$�n�.{J��]�� �1�d?�le����H�(�A� ��]^W�E���g�^�*C�ēPp`jUH��"$��DD�ټwq]���me�����C%��eU5����q�Gh�!��� �;.$R%_�0D�:����H�ӵ��p����7���m�uG�p�R]��Я�"���s�f���[t�}{�R���B����K�ͻ;�w3��j�T� ��U݊��k�p����Ly�kp���z�h!D���C�J�:�r�q�(��~������B����+m���s�&AZt4�����w�,v{�u�_������ ��ɇf���(�jrq��>qs6_|�cPK[w�s�8j@|8R���M� Hc�8�Z�ݽWF�t��=(�|����o�_�$�x��v�U�Yk�D��4�9���\�}=�0�q�KD����ՐGLGb�W�SX�L�ҹ泳�d�mnv��� ����H+��2�s��C�Φ�f'%�b��t�����]X��v g����hp�sRT��cJO�e%ʪ,CY���&vpBf���,��/1���r��hZEm��F;RlJ�8����:��Վ�D��vE�������~֝���Z/G�m%�^L[�Eq!$h����7`p���¶g4H7q.��X�����'kt�EO�NsqQ�gpo|���i�:�n���BpN����܉P���n��M��sO�ms�8����.����I7d��r�y���+��u���j���!�^��jw�l��>�V�D��u_�~3)�g4�i����Q;* 6����k���}ksД��d�V{xu]I�c{��.Ѱ��v��q�_=��Bm�\@ A�|����H�v�V�m��M�M��� O�Z���+�߿��ɬKOC�5��I�J2"��Q��2�,%u���T� !�Svǰ��m[��.a\Ӵ�a#�v��BeV���Y�Z�L��|����6�C�ˢ�I�K��=�A'WQ��r���m���hҼ��a)ގ���W�"�:z��m�u*:@~�j+�y��H�xkx �v 0� ;��u���Ŕ~
Static task
static1
Behavioral task
behavioral1
Sample
183340d75a4777a6046e716ce342a1195c8f7643d4d797025999bfa2c0a28022.exe
Resource
win10v2004-20240802-en
General
-
Target
183340d75a4777a6046e716ce342a1195c8f7643d4d797025999bfa2c0a28022
-
Size
2.5MB
-
MD5
a656cec647ab490914ac962dd1bec7d2
-
SHA1
3071252871745871171b753c1b88dc6204dcae2d
-
SHA256
183340d75a4777a6046e716ce342a1195c8f7643d4d797025999bfa2c0a28022
-
SHA512
60f47b963516eb2167a9781f153313f3c6d675980da1c331a19e2d20c7145b43f8d080c18277db1a217e75a0b13dc27f8ec741395235f1312d486ea4d2871597
-
SSDEEP
49152:BfOPGQfv66b96URR/E95tqEKAaM49fpHOpRvIgGcnApvm5Y2G:dDERR/E95wE1adBMRvWcApkLG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 183340d75a4777a6046e716ce342a1195c8f7643d4d797025999bfa2c0a28022
Files
-
183340d75a4777a6046e716ce342a1195c8f7643d4d797025999bfa2c0a28022.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 131KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE